This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa File: 7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa (raw, json) Hash identifier: 2hfPMHbWihqBZrYe5pg+hp4U1d6XfZrolVYNzjr0Hc4= Subject key identifier: EE:72:4F:F4:CD:0F:8E:18:A1:D2:83:0A:40:5C:47:3F:B2:CE:79:51 Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Certificate serial: 019AE5341D4E899B90F37E99C31111E4B11B Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa Signing time: Wed 03 Dec 2025 17:13:09 +0000 ROA not before: Wed 03 Dec 2025 17:13:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 680 IP address blocks: 192.108.23.0/24 maxlen: 24 192.108.24.0/23 maxlen: 23 192.108.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:34:1d:4e:89:9b:90:f3:7e:99:c3:11:11:e4:b1:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Validity Not Before: Dec 3 17:13:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee724ff4cd0f8e18a1d2830a405c473fb2ce7951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:3f:4b:b1:a6:c8:96:d8:b0:8c:d8:6a:51: fd:74:ee:3c:40:a7:a9:1c:96:1e:b7:ae:fc:ea:fc: 30:4b:78:9b:9d:cd:2b:4f:28:f9:2c:b7:81:df:e1: bd:9b:16:eb:8d:b9:19:cf:be:c8:31:f6:fc:5f:aa: c0:b4:a6:3c:19:f5:f9:b5:54:4e:ae:c2:1a:3e:13: 68:a8:9c:43:13:6b:f7:e9:b6:72:0f:5d:85:3e:d2: d5:0d:ca:a2:54:ca:b6:c7:11:76:a4:2c:f7:9f:97: 7f:b9:6b:7f:a5:5f:98:9f:f9:92:9c:24:df:f7:79: 47:81:ec:db:7a:63:8c:a3:7f:dc:7a:52:24:e9:c4: d4:22:40:54:57:c7:f4:8b:20:cd:00:4b:b8:43:64: f7:8e:ed:a8:54:c7:6c:a7:e5:fc:21:f4:68:3c:28: 65:ea:d2:b3:ed:53:f7:b9:2d:77:fa:55:d7:11:a9: 71:46:64:9b:0a:77:73:58:68:8d:fa:29:eb:06:a2: d9:f4:e7:9b:ee:6e:c2:d2:d7:71:d2:d4:a6:b2:b2: 94:c0:15:45:52:cf:fa:6b:2e:76:99:2d:c8:f3:45: 7e:21:aa:af:f4:0f:1c:eb:03:c9:1f:6c:4b:02:ae: 53:23:8c:0d:eb:ef:3a:b3:46:d4:c1:01:a3:97:12: 84:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:72:4F:F4:CD:0F:8E:18:A1:D2:83:0A:40:5C:47:3F:B2:CE:79:51 X509v3 Authority Key Identifier: keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/7nJP9M0Pjhih0oMKQFxHP7LOeVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.23.0-192.108.26.255 Signature Algorithm: sha256WithRSAEncryption 0b:e0:3f:28:5e:29:02:71:46:44:bb:db:04:d2:98:53:a5:7e: 8b:94:5c:b4:ef:62:69:56:93:71:8c:ee:a6:8b:2d:70:c2:54: 53:0c:48:58:11:19:d8:0e:43:6e:d5:80:b9:8e:91:68:33:8d: 3a:38:93:8e:92:4f:5c:4e:69:da:cf:2b:b7:25:90:74:ce:f1: cb:1c:48:b9:82:22:d9:2a:f5:e5:a1:70:18:86:30:7d:c1:cf: af:77:f3:6b:20:96:41:fa:6d:ae:2f:ed:2e:dd:30:79:b6:c4: 57:19:fa:fa:38:bb:b0:a7:4d:86:0b:d4:9f:96:ef:0f:36:fb: 8b:71:7f:f6:00:d1:1b:ca:f3:2d:72:1e:97:f0:4a:d3:5e:36: 95:35:d5:aa:51:87:7b:e1:df:c4:26:15:b6:87:2c:ab:05:e5: 1a:6c:f1:0d:3d:4f:79:c7:08:f8:65:28:b7:fb:41:30:70:1b: 7e:ef:6c:cd:05:0b:84:88:24:15:a4:0c:8c:67:93:d9:1a:fd: 6a:81:30:ce:99:24:92:67:79:5f:05:f6:9d:a4:71:fb:99:10: 9e:d2:8c:1c:b3:06:27:d5:33:b2:e3:d6:83:d9:81:97:ec:25: 1a:fe:10:7c:2d:dc:0b:ca:7d:5e:80:a0:4e:c9:ca:fb:20:18: ab:20:76:26 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrlNB1OiZuQ836ZwxER5LEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw MDAzYjAwHhcNMjUxMjAzMTcxMzA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTcyNGZmNGNkMGY4ZTE4YTFkMjgzMGE0MDVjNDczZmIyY2U3OTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmk/S7GmyJbYsIzYalH9dO48QKep HJYet6786vwwS3ibnc0rTyj5LLeB3+G9mxbrjbkZz77IMfb8X6rAtKY8GfX5tVRO rsIaPhNoqJxDE2v36bZyD12FPtLVDcqiVMq2xxF2pCz3n5d/uWt/pV+Yn/mSnCTf 93lHgezbemOMo3/celIk6cTUIkBUV8f0iyDNAEu4Q2T3ju2oVMdsp+X8IfRoPChl 6tKz7VP3uS13+lXXEalxRmSbCndzWGiN+inrBqLZ9Oeb7m7C0tdx0tSmsrKUwBVF Us/6ay52mS3I80V+Iaqv9A8c6wPJH2xLAq5TI4wN6+86s0bUwQGjlxKEQQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFO5yT/TND44YodKDCkBcRz+yznlRMB8GA1UdIwQY MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt Y2VlOTNjMjVlNjM5LzEvN25KUDlNMFBqaGloMG9NS1FGeEhQN0xPZVZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5 LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAbBcD BADAbBowDQYJKoZIhvcNAQELBQADggEBAAvgPyheKQJxRkS72wTSmFOlfouUXLTv YmlWk3GM7qaLLXDCVFMMSFgRGdgOQ27VgLmOkWgzjTo4k46ST1xOadrPK7clkHTO 8cscSLmCItkq9eWhcBiGMH3Bz69382sglkH6ba4v7S7dMHm2xFcZ+vo4u7CnTYYL 1J+W7w82+4txf/YA0RvK8y1yHpfwStNeNpU11apRh3vh38QmFbaHLKsF5Rps8Q09 T3nHCPhlKLf7QTBwG37vbM0FC4SIJBWkDIxnk9ka/WqBMM6ZJJJneV8F9p2kcfuZ EJ7SjByzBifVM7Lj1oPZgZfsJRr+EHwt3AvKfV6AoE7JyvsgGKsgdiY= -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:27 2025 by rpki-client