This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7YIE99vPIEd0rN_pwaP6EJTnql4.roa File: 7YIE99vPIEd0rN_pwaP6EJTnql4.roa (raw, json) Hash identifier: kHDt86SvFe61LceMxtdqMfYtDZNt8y8bFcgZa60Aeqs= Subject key identifier: ED:82:04:F7:DB:CF:20:47:74:AC:DF:E9:C1:A3:FA:10:94:E7:AA:5E Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019AA133795C175BAA0A14B6495556555A8D Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7YIE99vPIEd0rN_pwaP6EJTnql4.roa Signing time: Thu 20 Nov 2025 12:18:16 +0000 ROA not before: Thu 20 Nov 2025 12:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8473 IP address blocks: 192.71.5.0/24 maxlen: 24 192.121.12.0/24 maxlen: 24 192.121.101.0/24 maxlen: 24 192.165.182.0/24 maxlen: 24 193.181.65.0/24 maxlen: 24 193.183.47.0/24 maxlen: 24 193.183.48.0/24 maxlen: 24 193.183.92.0/24 maxlen: 24 193.183.104.0/24 maxlen: 24 193.183.105.0/24 maxlen: 24 193.234.54.0/24 maxlen: 24 194.71.215.0/24 maxlen: 24 194.103.93.0/24 maxlen: 24 194.132.27.0/24 maxlen: 24 194.132.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:33:79:5c:17:5b:aa:0a:14:b6:49:55:56:55:5a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Nov 20 12:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed8204f7dbcf204774acdfe9c1a3fa1094e7aa5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:5e:e0:ef:30:77:70:46:44:14:19:aa:bf: d0:39:c4:58:1b:1c:a3:07:29:5f:08:ee:95:b8:d8: 66:96:20:34:de:08:bc:cf:f8:b1:4c:94:fe:15:dd: a8:cf:f2:8a:a3:31:a0:b4:87:bd:9b:4f:4a:14:ca: 42:d2:a3:a3:7b:79:eb:8c:6a:54:81:fc:84:13:61: 86:51:c2:48:89:4a:41:09:aa:a6:d2:66:ef:e9:e0: 2a:84:fe:b3:bb:3e:09:96:5d:bc:d9:1c:ba:03:a2: 58:2b:c9:28:81:5b:40:4f:e2:2f:b1:8f:a1:21:6e: b6:7c:0f:03:64:e1:8d:40:c9:4d:26:7f:dc:70:69: 82:de:bc:f2:55:b0:ea:50:a0:58:3d:04:2f:48:6a: 3c:64:ca:d7:50:96:6c:56:f1:4a:f3:fa:dd:84:0d: 43:d1:af:94:3a:06:c7:43:82:3f:c5:22:67:9f:1a: 0e:4c:b5:b2:fa:e0:82:84:39:3a:7d:0c:b8:65:15: e8:7b:d8:0c:43:f7:26:8c:99:b5:78:e8:df:6a:c9: 70:57:f0:6a:e5:dc:5e:c0:d1:a9:2c:7e:3c:f0:c4: 59:d2:c3:f7:d4:83:35:d7:3f:28:0e:d4:87:0b:ab: b5:27:57:ea:ef:b5:d5:cc:b0:54:9f:69:9a:a6:76: 91:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:82:04:F7:DB:CF:20:47:74:AC:DF:E9:C1:A3:FA:10:94:E7:AA:5E X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7YIE99vPIEd0rN_pwaP6EJTnql4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.5.0/24 192.121.12.0/24 192.121.101.0/24 192.165.182.0/24 193.181.65.0/24 193.183.47.0-193.183.48.255 193.183.92.0/24 193.183.104.0/23 193.234.54.0/24 194.71.215.0/24 194.103.93.0/24 194.132.27.0/24 194.132.162.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:02:0d:73:11:2d:da:28:47:63:a2:ff:e7:1e:b8:f3:97:67: 5d:50:90:ff:f0:59:1f:5b:e3:46:28:8e:31:d2:e7:21:1b:5f: 15:00:84:a7:d3:b5:84:2e:51:ed:29:4b:af:93:7d:29:d3:fb: 61:bd:85:06:c9:ae:27:5f:eb:ee:e1:34:9f:9b:27:cf:69:96: 54:e2:2d:b8:4c:9b:cd:92:4d:ca:38:af:a1:e1:b0:44:e1:8e: 65:ed:6a:a8:36:d8:b6:d6:d1:0f:ac:56:f0:8c:e0:cc:f1:f9: a2:e9:90:4d:35:c0:db:32:79:62:89:5f:09:74:00:c1:6b:94: f1:e1:cb:bb:56:6a:e3:21:6f:28:5d:10:41:f4:2f:57:c0:b1: 75:59:0a:7c:53:e5:48:39:c4:21:a4:4b:ac:57:6d:90:f4:c2: 6a:a8:7f:54:22:bc:34:d6:d6:49:0f:67:18:ff:ff:a2:5f:2a: 8c:18:d9:c6:74:63:d7:4f:5a:a5:c7:1c:4f:94:31:8e:ec:f4: 78:6e:cf:e4:b6:21:e0:d3:41:55:db:b7:4e:e4:be:4a:e5:76: 76:a3:65:b6:eb:b4:7a:93:93:b3:e0:94:17:d3:f4:72:87:d2: 2f:c4:95:bf:17:bf:f0:ed:f9:fe:d0:24:e5:dd:1d:75:c2:37: 99:30:b8:2a -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZqhM3lcF1uqChS2SVVWVVqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjUxMTIwMTIxODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDgyMDRmN2RiY2YyMDQ3NzRhY2RmZTljMWEzZmExMDk0ZTdhYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA5e4O8wd3BGRBQZqr/QOcRYGxyj BylfCO6VuNhmliA03gi8z/ixTJT+Fd2oz/KKozGgtIe9m09KFMpC0qOje3nrjGpU gfyEE2GGUcJIiUpBCaqm0mbv6eAqhP6zuz4Jll282Ry6A6JYK8kogVtAT+IvsY+h IW62fA8DZOGNQMlNJn/ccGmC3rzyVbDqUKBYPQQvSGo8ZMrXUJZsVvFK8/rdhA1D 0a+UOgbHQ4I/xSJnnxoOTLWy+uCChDk6fQy4ZRXoe9gMQ/cmjJm1eOjfaslwV/Bq 5dxewNGpLH488MRZ0sP31IM11z8oDtSHC6u1J1fq77XVzLBUn2mapnaR4QIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFO2CBPfbzyBHdKzf6cGj+hCU56peMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvN1lJRTk5dlBJRWQwck5fcHdhUDZFSlRucWw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAwEcFAwQA wHkMAwQAwHllAwQAwKW2AwQAwbVBMAwDBADBty8DBADBtzADBADBt1wDBAHBt2gD BADB6jYDBADCR9cDBADCZ10DBADChBsDBADChKIwDQYJKoZIhvcNAQELBQADggEB AG8CDXMRLdooR2Oi/+ceuPOXZ11QkP/wWR9b40YojjHS5yEbXxUAhKfTtYQuUe0p S6+TfSnT+2G9hQbJridf6+7hNJ+bJ89pllTiLbhMm82STco4r6HhsEThjmXtaqg2 2LbW0Q+sVvCM4Mzx+aLpkE01wNsyeWKJXwl0AMFrlPHhy7tWauMhbyhdEEH0L1fA sXVZCnxT5Ug5xCGkS6xXbZD0wmqof1QivDTW1kkPZxj//6JfKowY2cZ0Y9dPWqXH HE+UMY7s9Hhuz+S2IeDTQVXbt07kvkrldnajZbbrtHqTk7PglBfT9HKH0i/Elb8X v/Dt+f7QJOXdHXXCN5kwuCo= -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client