This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/7OMM7nKZt_he9r9qnYLaR7A9yvE.roa File: 7OMM7nKZt_he9r9qnYLaR7A9yvE.roa (raw, json) Hash identifier: s/s5R2RRwPyGIflp9u/tBPAIhDVamsTdpkVlXald7JE= Subject key identifier: EC:E3:0C:EE:72:99:B7:F8:5E:F6:BF:6A:9D:82:DA:47:B0:3D:CA:F1 Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13 Certificate serial: 019AC110D1AF868F9D7435205B7A1BA2D8DE Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/7OMM7nKZt_he9r9qnYLaR7A9yvE.roa Signing time: Wed 26 Nov 2025 16:48:16 +0000 ROA not before: Wed 26 Nov 2025 16:48:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60821 IP address blocks: 81.85.63.0/24 maxlen: 24 185.22.168.0/22 maxlen: 22 185.22.168.0/24 maxlen: 24 185.22.169.0/24 maxlen: 24 185.22.170.0/24 maxlen: 24 194.46.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:10:d1:af:86:8f:9d:74:35:20:5b:7a:1b:a2:d8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fe040242651353d556b8c4240082190f271d13 Validity Not Before: Nov 26 16:48:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ece30cee7299b7f85ef6bf6a9d82da47b03dcaf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:7c:f1:1d:ee:e4:8c:01:20:78:88:85:85: a7:47:e9:cd:40:43:e5:c3:9b:6c:9c:37:89:94:fd: 30:a7:29:e2:49:67:44:9e:23:90:50:d2:2c:30:84: ee:9e:ce:42:de:29:64:ce:7f:c2:2c:1c:01:d4:30: 63:13:f0:8c:fb:9d:37:8d:02:e0:8e:ee:7c:c7:b3: 6b:cd:10:e7:43:f0:12:16:70:2e:5a:ea:63:35:75: 83:29:77:92:2e:b4:94:25:34:ca:71:0c:df:ae:e4: 5f:87:99:69:ec:a8:2b:23:62:5a:5a:79:59:19:7a: 6f:d7:ff:2d:a4:d2:d0:f2:8c:9c:e0:28:21:92:a4: 30:b4:a0:d5:33:fb:ca:52:f5:ea:36:f5:8b:7a:85: e1:99:b4:fb:a9:6d:5c:67:a7:31:65:f9:82:ad:eb: fa:1e:c8:6b:a6:19:57:a7:3c:5f:c7:9e:31:97:08: c4:28:81:63:97:01:fb:4f:5f:dd:f0:1c:e0:c6:8b: 7b:51:41:1f:ee:3e:64:57:3a:5b:67:33:5a:f4:15: 21:90:66:e5:44:c1:44:6e:75:2b:1f:a0:b6:68:b2: 9d:1c:45:0b:4a:64:c0:cc:b4:ba:58:f8:05:7a:a7: 07:96:7d:94:18:68:1d:65:88:0e:63:0b:21:f9:10: dd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E3:0C:EE:72:99:B7:F8:5E:F6:BF:6A:9D:82:DA:47:B0:3D:CA:F1 X509v3 Authority Key Identifier: keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/7OMM7nKZt_he9r9qnYLaR7A9yvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.85.63.0/24 185.22.168.0/22 194.46.38.0/24 Signature Algorithm: sha256WithRSAEncryption a1:7b:4a:36:97:15:7a:33:c9:f9:8a:8b:9e:df:71:0a:8c:7a: 8c:78:c7:a4:0e:96:21:98:89:be:58:db:4f:b4:07:1e:d1:d5: 93:ef:bb:43:1d:9c:c2:8d:cd:a5:7a:69:db:a6:25:91:f6:ec: fb:7b:58:e1:d5:7c:cd:40:d4:c6:d2:1a:1d:3a:70:a8:ea:01: 92:13:b0:1b:45:a8:f8:20:30:7b:36:1c:f8:63:9d:dc:d6:b4: 8f:1d:8b:d3:23:69:5e:31:7c:ad:e5:89:31:f8:44:dd:83:a8: 36:85:9c:7b:3e:22:54:81:a1:11:f5:f0:be:01:4f:32:f0:7d: f0:1e:89:5c:b2:11:2a:ff:44:62:3c:c6:b5:d8:6f:05:10:4d: 4a:2b:c7:9d:5e:43:5e:28:70:71:b2:0a:6f:62:3b:e9:8c:c3: 3c:8a:12:ae:38:15:ad:1b:fb:d6:f0:d8:95:b3:42:19:7a:8d: d2:e3:10:fe:42:69:ea:9d:69:0c:3d:86:f1:94:4c:18:a9:df: 90:22:e9:e9:4e:89:48:9d:ee:bd:09:dc:8f:a0:e5:85:cc:6b: f9:25:ca:88:fd:fa:a6:23:16:15:4d:f6:7a:e5:4c:4b:b9:01: 5f:2e:a1:5c:1a:75:a8:e8:fe:20:1e:2e:78:c2:4c:66:e1:be: 3f:2f:8e:35 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZrBENGvho+ddDUgW3obotjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmUwNDAyNDI2NTEzNTNkNTU2YjhjNDI0MDA4MjE5MGYy NzFkMTMwHhcNMjUxMTI2MTY0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2UzMGNlZTcyOTliN2Y4NWVmNmJmNmE5ZDgyZGE0N2IwM2RjYWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlN88R3u5IwBIHiIhYWnR+nNQEPl w5tsnDeJlP0wpyniSWdEniOQUNIsMITuns5C3ilkzn/CLBwB1DBjE/CM+503jQLg ju58x7NrzRDnQ/ASFnAuWupjNXWDKXeSLrSUJTTKcQzfruRfh5lp7KgrI2JaWnlZ GXpv1/8tpNLQ8oyc4CghkqQwtKDVM/vKUvXqNvWLeoXhmbT7qW1cZ6cxZfmCrev6 HshrphlXpzxfx54xlwjEKIFjlwH7T1/d8Bzgxot7UUEf7j5kVzpbZzNa9BUhkGbl RMFEbnUrH6C2aLKdHEULSmTAzLS6WPgFeqcHln2UGGgdZYgOYwsh+RDdAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOzjDO5ymbf4Xva/ap2C2kewPcrxMB8GA1UdIwQY MBaAFAj+BAJCZRNT1Va4xCQAghkPJx0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWIt ZGVjNDgwN2NkN2U2LzEvN09NTTduS1p0X2hlOXI5cW5ZTGFSN0E5eXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80ZWJjMzMtZWU1NC00MzdjLThhMWItZGVjNDgwN2NkN2U2 LzEvQ1A0RUFrSmxFMVBWVnJqRUpBQ0NHUThuSFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUVU/AwQC uRaoAwQAwi4mMA0GCSqGSIb3DQEBCwUAA4IBAQChe0o2lxV6M8n5ioue33EKjHqM eMekDpYhmIm+WNtPtAce0dWT77tDHZzCjc2lemnbpiWR9uz7e1jh1XzNQNTG0hod OnCo6gGSE7AbRaj4IDB7Nhz4Y53c1rSPHYvTI2leMXyt5Ykx+ETdg6g2hZx7PiJU gaER9fC+AU8y8H3wHolcshEq/0RiPMa12G8FEE1KK8edXkNeKHBxsgpvYjvpjMM8 ihKuOBWtG/vW8NiVs0IZeo3S4xD+QmnqnWkMPYbxlEwYqd+QIunpTolIne69CdyP oOWFzGv5JcqI/fqmIxYVTfZ65UxLuQFfLqFcGnWo6P4gHi54wkxm4b4/L441 -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:19 2025 by rpki-client