This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/R24mqQHNUjq7_Kn2gm9-w4hGPdA.roa File: R24mqQHNUjq7_Kn2gm9-w4hGPdA.roa (raw, json) Hash identifier: S6qdx3rNwuFJf5Eug9pguS9TdH8X/hG/PtUDluCZHpM= Subject key identifier: 47:6E:26:A9:01:CD:52:3A:BB:FC:A9:F6:82:6F:7E:C3:88:46:3D:D0 Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Certificate serial: 019A827A8156BD694277441F3DB62D17DDA8 Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/R24mqQHNUjq7_Kn2gm9-w4hGPdA.roa Signing time: Fri 14 Nov 2025 13:07:37 +0000 ROA not before: Fri 14 Nov 2025 13:07:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39505 IP address blocks: 78.40.136.0/24 maxlen: 24 78.40.137.0/24 maxlen: 24 78.40.138.0/24 maxlen: 24 87.247.248.0/24 maxlen: 24 87.247.249.0/24 maxlen: 24 87.247.250.0/24 maxlen: 24 87.247.252.0/24 maxlen: 24 87.247.254.0/24 maxlen: 24 87.247.255.0/24 maxlen: 24 93.93.8.0/24 maxlen: 24 93.93.9.0/24 maxlen: 24 93.93.12.0/24 maxlen: 24 93.93.13.0/24 maxlen: 24 178.249.170.0/24 maxlen: 24 2a00:6580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.mft rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:7a:81:56:bd:69:42:77:44:1f:3d:b6:2d:17:dd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5 Validity Not Before: Nov 14 13:07:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=476e26a901cd523abbfca9f6826f7ec388463dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:3b:bb:d5:91:b8:5c:41:43:de:73:66:4f: 0f:90:be:ca:ac:63:a5:42:b1:f8:26:79:10:ce:3f: 4d:61:51:b7:eb:6a:04:5d:b6:be:5b:fd:53:bb:fc: 88:6a:cd:ab:ce:16:9e:a0:8c:9b:51:ee:63:32:47: 11:b4:fa:70:f9:b1:31:82:a4:d3:c0:a0:65:65:38: e4:33:63:d4:4a:bc:51:a3:f2:74:8c:4a:1a:c5:07: 93:90:34:ed:2c:e7:33:ea:44:67:8c:29:0c:62:18: e1:f1:98:01:ac:29:d9:d8:76:77:f1:d7:48:53:e3: 5e:c8:34:f8:3c:04:76:88:2b:c8:00:fa:9c:29:00: c8:0a:a0:51:1b:ab:94:65:ad:f0:fc:e2:dd:98:f4: 93:ee:e1:f5:81:e0:1f:5b:92:ab:7e:31:e7:47:9f: 20:5e:20:96:a7:f7:ac:86:91:07:14:d0:dd:f4:0d: ea:8f:9d:81:60:ad:a2:99:f8:92:62:11:b4:0d:ce: c4:d0:26:23:fd:74:8a:b9:88:ad:8f:93:89:2c:d3: ca:af:4f:4b:bc:bd:e0:fa:dd:8e:c8:d2:0d:d3:e9: 79:e6:9e:30:d8:fd:b0:04:65:75:18:d6:8b:9e:ed: 90:06:ee:d1:1f:58:38:fa:f2:43:16:d5:4b:be:17: c0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6E:26:A9:01:CD:52:3A:BB:FC:A9:F6:82:6F:7E:C3:88:46:3D:D0 X509v3 Authority Key Identifier: keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/R24mqQHNUjq7_Kn2gm9-w4hGPdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.136.0-78.40.138.255 87.247.248.0-87.247.250.255 87.247.252.0/24 87.247.254.0/23 93.93.8.0/23 93.93.12.0/23 178.249.170.0/24 IPv6: 2a00:6580::/32 Signature Algorithm: sha256WithRSAEncryption 48:f1:e9:b5:fb:a2:8a:46:80:a1:f8:b9:6d:9b:ab:79:94:57: bb:ce:52:a6:c9:14:04:7f:d7:d8:61:b5:ae:aa:98:13:ce:06: a5:5e:1c:7c:cc:0a:a1:96:68:7b:35:f0:10:84:8b:09:fd:71: cd:c5:b1:6a:44:d7:a8:93:4d:5d:44:bd:24:f5:3a:dc:2f:5d: 18:87:ed:b4:82:9a:3e:23:ab:a6:72:dc:99:d7:94:cd:e8:20: bc:e4:a5:34:6d:2a:e3:89:32:f3:92:c5:0c:72:79:8d:9e:63: b3:a2:92:59:93:70:b2:b9:34:ff:b3:6c:34:af:df:ac:13:ec: ed:d2:b0:fa:ce:96:ac:4a:40:4f:0d:37:8e:01:63:83:df:35: e6:2d:df:06:6a:f9:1e:cb:92:3a:f9:09:9d:3d:5f:61:a0:b8: a1:3e:48:18:95:e7:df:26:60:a1:13:3c:ab:35:29:59:11:5f: 54:59:0e:ae:9a:e1:b5:7b:9a:e3:39:b3:d3:a9:b5:bb:30:4c: ff:fc:21:43:66:0c:86:aa:86:62:30:e3:b1:2b:be:4c:e5:fc: 1b:71:15:24:09:b6:c4:b2:26:ad:eb:02:6e:2e:2e:f4:f7:5f: 21:e4:3c:7d:c2:f5:3c:4e:80:2b:b0:01:2f:de:4e:63:60:f1: d9:8b:eb:6a -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZqCeoFWvWlCd0QfPbYtF92oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlY2M0Y2YzNzI0MWNlZDE0NjdjOTE4YWEyNzZkMzg4YjBh ODJlZDUwHhcNMjUxMTE0MTMwNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzZlMjZhOTAxY2Q1MjNhYmJmY2E5ZjY4MjZmN2VjMzg4NDYzZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjw7u9WRuFxBQ95zZk8PkL7KrGOl QrH4JnkQzj9NYVG362oEXba+W/1Tu/yIas2rzhaeoIybUe5jMkcRtPpw+bExgqTT wKBlZTjkM2PUSrxRo/J0jEoaxQeTkDTtLOcz6kRnjCkMYhjh8ZgBrCnZ2HZ38ddI U+NeyDT4PAR2iCvIAPqcKQDICqBRG6uUZa3w/OLdmPST7uH1geAfW5KrfjHnR58g XiCWp/eshpEHFNDd9A3qj52BYK2imfiSYhG0Dc7E0CYj/XSKuYitj5OJLNPKr09L vL3g+t2OyNIN0+l55p4w2P2wBGV1GNaLnu2QBu7RH1g4+vJDFtVLvhfAbwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFEduJqkBzVI6u/yp9oJvfsOIRj3QMB8GA1UdIwQY MBaAFO7MTPNyQc7RRnyRiqJ204iwqC7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYt NWEzN2FmNDM5MDRjLzEvUjI0bXFRSE5VanE3X0tuMmdtOS13NGhHUGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9jZjdkOTMtYTA3Ni00OWZmLTliYWYtNWEzN2FmNDM5MDRj LzEvN3N4TTgzSkJ6dEZHZkpHS29uYlRpTENvTHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6MAwDBANOKIgD BABOKIowDAMEA1f3+AMEAFf3+gMEAFf3/AMEAVf3/gMEAV1dCAMEAV1dDAMEALL5 qjANBAIAAjAHAwUAKgBlgDANBgkqhkiG9w0BAQsFAAOCAQEASPHptfuiikaAofi5 bZureZRXu85SpskUBH/X2GG1rqqYE84GpV4cfMwKoZZoezXwEISLCf1xzcWxakTX qJNNXUS9JPU63C9dGIfttIKaPiOrpnLcmdeUzeggvOSlNG0q44ky85LFDHJ5jZ5j s6KSWZNwsrk0/7NsNK/frBPs7dKw+s6WrEpATw03jgFjg9815i3fBmr5HsuSOvkJ nT1fYaC4oT5IGJXn3yZgoRM8qzUpWRFfVFkOrprhtXua4zmz06m1uzBM//whQ2YM hqqGYjDjsSu+TOX8G3EVJAm2xLImresCbi4u9PdfIeQ8fcL1PE6AK7ABL95OY2Dx 2Yvrag== -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:46 2025 by rpki-client