This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/c7AbeDnubEdSzki1kwWbICvIk8E.roa File: c7AbeDnubEdSzki1kwWbICvIk8E.roa (raw, json) Hash identifier: fcaXTow20RRwggzf+hnsUA2yEMqaH1V5vdraV6mEYMA= Subject key identifier: 73:B0:1B:78:39:EE:6C:47:52:CE:48:B5:93:05:9B:20:2B:C8:93:C1 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019B313C8A4B902F77023B84279433CC280D Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/c7AbeDnubEdSzki1kwWbICvIk8E.roa Signing time: Thu 18 Dec 2025 11:33:29 +0000 ROA not before: Thu 18 Dec 2025 11:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34984 IP address blocks: 131.222.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:3c:8a:4b:90:2f:77:02:3b:84:27:94:33:cc:28:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Dec 18 11:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=73b01b7839ee6c4752ce48b593059b202bc893c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:e5:4c:4d:98:f9:5e:75:7e:4c:be:ac:21: 83:d7:10:bd:98:bc:28:06:a7:1e:76:a3:de:a9:f8: 27:30:c7:69:71:2c:8c:b1:d1:17:ef:7e:20:62:e5: a9:3e:c3:06:d2:7c:32:f3:46:85:96:fc:eb:d6:17: 81:fb:f9:9c:b2:cb:67:48:70:56:7e:92:ca:e5:8c: 85:18:e7:0a:2d:73:f0:c8:88:77:49:99:31:4a:ea: e6:76:23:28:5f:92:8a:0b:9c:f1:ae:e6:96:89:10: 1f:fd:67:8a:19:85:22:d6:d3:5a:09:4b:71:da:2e: f6:ce:03:69:ab:f0:ae:34:38:89:87:7a:ec:57:8e: 28:7a:83:4e:d6:81:18:5f:71:d4:26:c7:64:9e:0f: 5e:4a:19:91:49:26:28:d5:bb:8b:c4:2c:5e:4b:fb: 01:17:e7:b2:54:59:ab:a8:82:53:55:e0:db:bd:e6: 71:d9:b8:9e:ff:20:06:d1:96:f9:38:47:03:86:e9: e7:2e:2e:1a:f7:55:42:04:50:4f:b2:b6:2d:ae:8c: 09:69:02:69:62:22:9c:40:61:79:c6:a0:c4:ba:fd: 82:7e:9e:36:55:b3:00:d9:ab:79:18:73:27:4c:b5: 58:44:8d:12:45:8e:2b:52:19:d6:8a:98:a1:8c:d7: b2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B0:1B:78:39:EE:6C:47:52:CE:48:B5:93:05:9B:20:2B:C8:93:C1 X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/c7AbeDnubEdSzki1kwWbICvIk8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.222.128.0/17 Signature Algorithm: sha256WithRSAEncryption 64:95:ef:45:e0:c2:23:b6:58:ce:00:9e:18:47:0c:88:70:3d: 25:58:19:58:ee:0d:6c:5b:e2:06:21:1e:eb:c6:a8:7b:27:63: 26:06:44:bd:0e:1c:7f:17:6c:76:c6:39:6b:1f:c4:ac:39:4f: 56:85:f2:ed:31:52:38:c4:8e:18:74:a7:51:d0:5e:c9:9e:90: 67:86:47:2b:77:46:03:24:db:7e:71:8d:a3:7b:f5:50:1a:dd: 66:49:42:25:5a:eb:53:65:60:8e:39:63:3e:2c:41:d7:29:ab: 3f:08:11:1a:d6:e1:50:24:7e:4b:d2:3c:29:74:f9:48:8b:09: 1b:32:1c:e2:18:a5:39:2d:74:e6:b9:69:07:3b:2b:89:0d:eb: 8d:d7:60:a3:55:7c:3a:94:9a:b3:f0:d0:83:69:01:d7:35:fc: 3e:6d:bc:7c:e0:90:e3:24:99:2d:00:84:7a:bf:a9:40:73:26: 5e:20:f0:1f:ad:a3:d4:15:14:0f:c6:03:ff:96:76:1b:10:e2: 01:af:32:78:cd:74:4a:9e:e0:ee:af:33:9f:4a:d7:a3:ea:a0: 78:74:4f:be:e2:57:30:bc:01:6e:9f:16:56:fb:f3:b9:5c:82: d2:07:b9:8b:2e:c5:dd:3c:51:f2:60:f0:3d:98:94:6b:7e:88: 47:b4:51:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsxPIpLkC93AjuEJ5QzzCgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjUxMjE4MTEzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3M2IwMWI3ODM5ZWU2YzQ3NTJjZTQ4YjU5MzA1OWIyMDJiYzg5M2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLHlTE2Y+V51fky+rCGD1xC9mLwo BqcedqPeqfgnMMdpcSyMsdEX734gYuWpPsMG0nwy80aFlvzr1heB+/mcsstnSHBW fpLK5YyFGOcKLXPwyIh3SZkxSurmdiMoX5KKC5zxruaWiRAf/WeKGYUi1tNaCUtx 2i72zgNpq/CuNDiJh3rsV44oeoNO1oEYX3HUJsdkng9eShmRSSYo1buLxCxeS/sB F+eyVFmrqIJTVeDbveZx2bie/yAG0Zb5OEcDhunnLi4a91VCBFBPsrYtrowJaQJp YiKcQGF5xqDEuv2Cfp42VbMA2at5GHMnTLVYRI0SRY4rUhnWipihjNeyfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOwG3g57mxHUs5ItZMFmyAryJPBMB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvYzdBYmVEbnViRWRTemtpMWt3V2JJQ3ZJazhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHg96AMA0G CSqGSIb3DQEBCwUAA4IBAQBkle9F4MIjtljOAJ4YRwyIcD0lWBlY7g1sW+IGIR7r xqh7J2MmBkS9Dhx/F2x2xjlrH8SsOU9WhfLtMVI4xI4YdKdR0F7JnpBnhkcrd0YD JNt+cY2je/VQGt1mSUIlWutTZWCOOWM+LEHXKas/CBEa1uFQJH5L0jwpdPlIiwkb MhziGKU5LXTmuWkHOyuJDeuN12CjVXw6lJqz8NCDaQHXNfw+bbx84JDjJJktAIR6 v6lAcyZeIPAfraPUFRQPxgP/lnYbEOIBrzJ4zXRKnuDurzOfStej6qB4dE++4lcw vAFunxZW+/O5XILSB7mLLsXdPFHyYPA9mJRrfohHtFGn -----END CERTIFICATE-----Generated at Sat Dec 20 12:54:21 2025 by rpki-client