This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7ztevyJzmk-_ai_otwF47yXXVlI.roa File: 7ztevyJzmk-_ai_otwF47yXXVlI.roa (raw, json) Hash identifier: rBJrEh1OfqZRz4Zt/WmfC0rxLu5bUznXAhsjzL35yTE= Subject key identifier: EF:3B:5E:BF:22:73:9A:4F:BF:6A:2F:E8:B7:01:78:EF:25:D7:56:52 Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Certificate serial: 019A5340701457BB07DCB576141B40306FEE Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7ztevyJzmk-_ai_otwF47yXXVlI.roa Signing time: Wed 05 Nov 2025 09:02:03 +0000 ROA not before: Wed 05 Nov 2025 09:02:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 93.88.158.0/24 maxlen: 24 95.155.128.0/24 maxlen: 24 95.155.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:40:70:14:57:bb:07:dc:b5:76:14:1b:40:30:6f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94 Validity Not Before: Nov 5 09:02:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef3b5ebf22739a4fbf6a2fe8b70178ef25d75652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:3e:9d:33:9a:2f:7a:48:e7:67:dd:c7:45: 9f:5f:3a:c2:4a:25:f7:10:c7:7b:1f:99:55:87:c4: 32:a1:7a:1e:ac:b2:05:8f:16:49:45:12:50:ab:d2: f7:a2:21:e5:bc:23:4d:59:25:c5:6f:5b:59:ef:f4: c9:ce:0b:11:58:72:01:ff:80:cf:ce:d1:e6:30:77: 0b:a5:83:8d:2e:4b:ba:71:d5:b5:54:81:14:92:11: f7:d9:d2:41:70:da:5b:07:ad:cd:c0:ac:df:1f:85: af:df:d0:52:74:27:61:eb:77:fc:ad:e8:92:a9:aa: 5f:e3:e9:65:14:5d:35:75:d7:af:15:a4:a5:f2:37: 25:0d:55:21:df:e4:b7:ba:97:07:96:23:52:71:2f: 46:1e:4c:96:d9:00:f9:6f:50:fb:16:2a:9f:08:80: 7d:79:11:e9:11:09:ba:71:5c:13:99:2e:90:03:c2: 93:fb:8c:dd:92:f6:9d:bf:1c:e1:fc:82:c8:8e:74: f3:5e:fa:9d:f8:3d:f5:bb:72:39:7d:f8:48:8d:26: 63:77:ca:94:26:15:50:86:01:c1:10:ba:30:fd:ec: 0f:53:51:fd:f0:50:ca:55:7c:37:0d:0c:fc:7d:bd: bf:09:06:11:61:90:65:58:3e:d4:49:8c:40:c1:a7: 63:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3B:5E:BF:22:73:9A:4F:BF:6A:2F:E8:B7:01:78:EF:25:D7:56:52 X509v3 Authority Key Identifier: keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/7ztevyJzmk-_ai_otwF47yXXVlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.158.0/24 95.155.128.0/24 95.155.148.0/24 Signature Algorithm: sha256WithRSAEncryption 76:f3:70:d8:d1:fc:39:95:c0:c6:99:0c:74:dc:9a:4d:b0:e3: 0a:e8:fd:ec:92:87:44:bb:48:49:13:36:bb:32:30:40:4e:0e: 78:60:14:5d:30:bc:c9:96:63:bf:44:6a:e2:1b:c5:c2:6f:f8: 12:d0:70:af:9d:4e:85:ea:67:1f:96:76:83:a8:01:af:36:0f: 6a:92:60:23:83:5c:1b:9d:ea:64:d2:00:7c:1e:c4:ab:ea:f7: d2:55:f9:26:a4:2d:2c:6e:5e:8f:0a:0f:9a:24:3e:a3:39:f8: 45:c4:bf:e8:e0:b4:24:8f:22:fd:da:06:56:ba:b5:5e:1d:62: 82:25:ad:2a:ab:3b:5b:33:b5:f6:bb:1d:4a:fb:89:bd:71:d1: e4:c7:06:2b:28:42:9c:57:f7:b2:08:7e:77:2a:73:bc:88:9b: a1:58:be:f4:52:72:41:dd:af:b0:3f:06:e8:09:47:a0:ad:34: 10:57:9f:52:a6:02:28:44:f8:ca:e9:1f:97:a2:df:2f:f6:7c: 4e:f9:01:6d:0c:64:db:12:ba:f2:5e:99:6f:c2:6e:1e:67:44: 3d:52:35:12:ff:67:ae:90:d8:8f:2d:37:ea:fc:9d:5b:0e:42: 64:c7:57:2f:dc:d6:d4:a5:ba:b4:41:fa:2b:8c:4e:9a:20:cd: bd:ef:b1:cf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZpTQHAUV7sH3LV2FBtAMG/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2YTI0OWEwZWFjZDhhYmNiZWEwZDgyZWY3MTAxNmQzODZl OGVmOTQwHhcNMjUxMTA1MDkwMjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjNiNWViZjIyNzM5YTRmYmY2YTJmZThiNzAxNzhlZjI1ZDc1NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyA+nTOaL3pI52fdx0WfXzrCSiX3 EMd7H5lVh8QyoXoerLIFjxZJRRJQq9L3oiHlvCNNWSXFb1tZ7/TJzgsRWHIB/4DP ztHmMHcLpYONLku6cdW1VIEUkhH32dJBcNpbB63NwKzfH4Wv39BSdCdh63f8reiS qapf4+llFF01ddevFaSl8jclDVUh3+S3upcHliNScS9GHkyW2QD5b1D7FiqfCIB9 eRHpEQm6cVwTmS6QA8KT+4zdkvadvxzh/ILIjnTzXvqd+D31u3I5ffhIjSZjd8qU JhVQhgHBELow/ewPU1H98FDKVXw3DQz8fb2/CQYRYZBlWD7USYxAwadj5QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO87Xr8ic5pPv2ov6LcBeO8l11ZSMB8GA1UdIwQY MBaAFMaiSaDqzYq8vqDYLvcQFtOG6O+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2Ut MjEwNTdkMjI4ZDA1LzEvN3p0ZXZ5Snptay1fYWlfb3R3RjQ3eVhYVmxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8zMGYxODYtOTBlMi00Y2E2LTkxN2UtMjEwNTdkMjI4ZDA1 LzEveHFKSm9Pck5pcnktb05ndTl4QVcwNGJvNzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXVieAwQA X5uAAwQAX5uUMA0GCSqGSIb3DQEBCwUAA4IBAQB283DY0fw5lcDGmQx03JpNsOMK 6P3skodEu0hJEza7MjBATg54YBRdMLzJlmO/RGriG8XCb/gS0HCvnU6F6mcflnaD qAGvNg9qkmAjg1wbnepk0gB8HsSr6vfSVfkmpC0sbl6PCg+aJD6jOfhFxL/o4LQk jyL92gZWurVeHWKCJa0qqztbM7X2ux1K+4m9cdHkxwYrKEKcV/eyCH53KnO8iJuh WL70UnJB3a+wPwboCUegrTQQV59SpgIoRPjK6R+Xot8v9nxO+QFtDGTbErryXplv wm4eZ0Q9UjUS/2eukNiPLTfq/J1bDkJkx1cv3NbUpbq0QforjE6aIM2977HP -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:10 2025 by rpki-client