This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/7FQ7FKfWo_Tb1Konsde71NaWUYE.roa File: 7FQ7FKfWo_Tb1Konsde71NaWUYE.roa (raw, json) Hash identifier: VcN3Rl1AyDvm/1pAAvrRfPzGvpEOIAEiWbfpS8wSK9k= Subject key identifier: EC:54:3B:14:A7:D6:A3:F4:DB:D4:AA:27:B1:D7:BB:D4:D6:96:51:81 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B3C9F943203DFCABE218E961065488123 Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/7FQ7FKfWo_Tb1Konsde71NaWUYE.roa Signing time: Sat 20 Dec 2025 16:37:29 +0000 ROA not before: Sat 20 Dec 2025 16:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208328 IP address blocks: 45.133.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:9f:94:32:03:df:ca:be:21:8e:96:10:65:48:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Dec 20 16:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec543b14a7d6a3f4dbd4aa27b1d7bbd4d6965181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d0:a2:75:00:d2:be:d5:9d:7b:86:e4:1c:91: 2d:db:04:5c:d6:80:58:3e:af:76:4a:8e:76:97:d9: cc:7b:4c:42:58:58:91:f5:b8:ab:c0:f7:3b:24:35: 2b:9b:6d:fc:69:b7:f9:e7:ca:5e:ba:3c:9e:db:c1: 3f:07:72:ba:c7:ce:c6:7c:3c:62:e0:da:70:73:27: 85:e0:54:5d:7a:a1:07:b6:fd:84:fb:7c:f3:ae:80: 53:bd:10:4a:4a:d4:0b:b3:c0:84:ad:fe:a5:ea:e6: e9:e0:ab:69:3b:62:ee:54:d0:90:0b:aa:09:61:40: 75:4d:f2:0e:a2:ad:16:80:94:16:7c:c8:de:0c:9c: 43:bf:1a:25:3d:a9:15:9f:cd:12:0e:a4:27:88:45: d1:6e:58:b8:fb:4e:6a:8c:4f:da:bd:27:40:0c:de: 02:6a:f6:5e:62:26:d6:38:f4:95:67:1e:86:bc:d5: be:12:fd:68:65:d0:ff:41:55:69:6b:7e:c8:2b:ba: 25:56:c7:78:58:e9:94:1c:3f:b4:0b:73:03:68:d5: a3:7b:9c:ff:f9:35:46:a1:fe:4a:cc:5d:7e:03:4b: 9e:24:0c:81:04:60:0f:c6:48:4f:23:44:2b:1e:f8: 43:51:0d:3d:96:88:39:47:34:11:f8:ae:45:7b:9d: 00:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:54:3B:14:A7:D6:A3:F4:DB:D4:AA:27:B1:D7:BB:D4:D6:96:51:81 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/7FQ7FKfWo_Tb1Konsde71NaWUYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:e6:3a:c9:e2:35:ac:5a:32:26:76:f4:05:2c:7a:c7:fe:37: 85:68:30:30:cb:1d:ef:e4:9c:e6:ca:f9:a3:e6:37:04:7c:dc: 01:63:57:e1:a9:79:24:13:f6:76:c9:ce:d4:fd:66:23:d9:a1: 22:ae:cb:59:63:54:58:a8:c6:3a:2d:0a:8c:a4:92:36:be:e7: e7:18:d5:b2:03:12:1f:48:a1:74:3b:a7:f3:5d:de:17:9f:88: eb:66:aa:9e:43:38:e3:4e:56:8c:d4:8d:1d:8a:25:e2:d0:d8: e4:65:50:1e:f1:3f:6e:0a:78:98:03:8f:25:c8:d8:fd:9a:61: 02:23:89:a3:04:2b:4f:a4:e6:fc:d5:2a:68:3e:0c:d4:eb:39: 0d:41:09:2e:0c:94:65:9a:58:91:cf:58:31:5e:46:ee:83:98: ac:76:80:3e:c0:88:04:5c:06:e8:62:6d:1a:8a:3f:98:bb:0e: 8c:97:f2:0d:dd:30:87:f9:54:b2:a9:49:66:d4:e2:c3:8b:4c: b4:a2:41:97:50:c1:c5:07:0f:75:77:8a:e4:01:9a:55:5a:d1: de:f6:48:04:a8:1e:78:c1:9e:df:b8:09:4a:06:9e:90:8f:6d: 2f:25:5c:d3:a3:0e:f3:89:94:b7:fd:33:06:15:02:c9:cd:eb: 27:ad:6e:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs8n5QyA9/KviGOlhBlSIEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjUxMjIwMTYzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzU0M2IxNGE3ZDZhM2Y0ZGJkNGFhMjdiMWQ3YmJkNGQ2OTY1MTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59CidQDSvtWde4bkHJEt2wRc1oBY Pq92So52l9nMe0xCWFiR9birwPc7JDUrm238abf558peujye28E/B3K6x87GfDxi 4NpwcyeF4FRdeqEHtv2E+3zzroBTvRBKStQLs8CErf6l6ubp4KtpO2LuVNCQC6oJ YUB1TfIOoq0WgJQWfMjeDJxDvxolPakVn80SDqQniEXRbli4+05qjE/avSdADN4C avZeYibWOPSVZx6GvNW+Ev1oZdD/QVVpa37IK7olVsd4WOmUHD+0C3MDaNWje5z/ +TVGof5KzF1+A0ueJAyBBGAPxkhPI0QrHvhDUQ09log5RzQR+K5Fe50AaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOxUOxSn1qP029SqJ7HXu9TWllGBMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvN0ZRN0ZLZldvX1RiMUtvbnNkZTcxTmFXVVlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV3MA0G CSqGSIb3DQEBCwUAA4IBAQA65jrJ4jWsWjImdvQFLHrH/jeFaDAwyx3v5Jzmyvmj 5jcEfNwBY1fhqXkkE/Z2yc7U/WYj2aEirstZY1RYqMY6LQqMpJI2vufnGNWyAxIf SKF0O6fzXd4Xn4jrZqqeQzjjTlaM1I0diiXi0NjkZVAe8T9uCniYA48lyNj9mmEC I4mjBCtPpOb81SpoPgzU6zkNQQkuDJRlmliRz1gxXkbug5isdoA+wIgEXAboYm0a ij+Yuw6Ml/IN3TCH+VSyqUlm1OLDi0y0okGXUMHFBw91d4rkAZpVWtHe9kgEqB54 wZ7fuAlKBp6Qj20vJVzTow7ziZS3/TMGFQLJzesnrW45 -----END CERTIFICATE-----Generated at Sat Dec 20 22:18:19 2025 by rpki-client