This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7nAkhSMk3SnJm41fs8xML9t6f94.roa File: 7nAkhSMk3SnJm41fs8xML9t6f94.roa (raw, json) Hash identifier: vxLmVZzn3I4ZJnE2s78SVY+sbd5hsesw/jDIdBGbbyo= Subject key identifier: EE:70:24:85:23:24:DD:29:C9:9B:8D:5F:B3:CC:4C:2F:DB:7A:7F:DE Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B323F040764D2343031C0663E525A6E97 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7nAkhSMk3SnJm41fs8xML9t6f94.roa Signing time: Thu 18 Dec 2025 16:15:49 +0000 ROA not before: Thu 18 Dec 2025 16:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212477 IP address blocks: 89.125.187.0/24 maxlen: 24 89.125.209.0/24 maxlen: 24 103.245.231.0/24 maxlen: 24 185.198.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:3f:04:07:64:d2:34:30:31:c0:66:3e:52:5a:6e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Dec 18 16:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee7024852324dd29c99b8d5fb3cc4c2fdb7a7fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b0:8f:56:65:0d:c3:8b:66:82:19:c6:a7:49: 9c:ba:dd:fd:21:24:da:af:fc:d1:29:71:c8:0e:98: 4c:3d:37:37:92:45:52:5e:a4:43:ac:72:24:81:82: e0:40:5e:bb:6d:ce:e2:d6:cd:3d:5b:5d:e1:55:85: ee:ea:89:8f:f5:06:c4:c1:7a:27:7e:8a:75:a1:a5: 6f:db:e7:42:3f:a6:a1:43:f2:1e:59:2d:bd:d6:e3: 50:a6:d2:f3:5d:2b:9d:b8:b1:b1:a3:79:42:ab:8c: 5b:f4:e8:55:40:ae:2f:8d:fd:9a:c0:ba:ec:fe:a8: 30:26:b0:f7:c6:23:16:21:46:18:01:85:bf:3f:b1: 7c:d3:4a:67:8f:1a:bb:e2:15:6f:24:cf:50:11:81: 20:d1:05:e8:7b:ec:35:f7:99:4e:76:c1:1a:6b:25: f3:5e:56:eb:ed:5e:e6:be:a6:e7:35:c9:3a:4d:a0: 32:8e:6b:6d:13:c3:d3:43:d3:ff:0b:4a:af:b0:a6: 0e:0d:30:d4:6b:4c:ab:cf:0e:11:27:61:0c:73:c9: 65:cc:1b:cf:10:6f:db:1f:a6:84:48:54:fa:da:82: 2a:cb:89:42:8d:3a:30:11:92:15:d8:5c:47:8b:b4: 10:70:74:ac:63:20:21:6d:fa:f3:fc:d2:3a:02:9d: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:70:24:85:23:24:DD:29:C9:9B:8D:5F:B3:CC:4C:2F:DB:7A:7F:DE X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7nAkhSMk3SnJm41fs8xML9t6f94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.187.0/24 89.125.209.0/24 103.245.231.0/24 185.198.234.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:b0:1c:f8:d0:16:d6:39:f3:9f:3d:56:31:e3:09:85:dc:3f: e7:3f:64:26:8e:29:78:04:4c:d8:97:0d:c0:d3:4b:bb:1b:b3: 26:64:f2:ca:df:fa:31:91:a5:34:ea:9d:2a:da:20:23:51:42: 1d:1b:6e:48:b1:74:5b:c0:ce:24:39:ce:b9:43:92:f8:61:22: 69:1c:dc:10:b6:46:91:27:05:18:7e:af:33:48:b8:28:20:a5: 89:70:95:d0:d4:fa:f4:e9:14:2e:19:5e:c1:16:36:15:ea:78: c8:4a:d8:80:13:1f:f3:d1:dc:6c:15:33:dc:51:20:17:4a:6e: 2a:af:aa:4a:02:68:48:17:91:c4:df:88:8a:39:44:c3:e5:51: 6b:1d:80:d6:36:cb:67:2d:06:c4:6c:b2:cb:60:15:43:ef:d6: 37:1d:b4:25:1d:6a:89:d4:1e:84:d1:ea:3f:fe:b2:d4:0e:cc: 5f:a6:21:f9:44:df:95:39:49:d3:bb:74:e3:c4:b4:ab:8a:ae: 94:37:1a:28:9d:33:8a:63:62:c3:89:e2:17:92:01:b1:8b:4b: 8c:54:ad:d0:d2:e6:85:7a:5c:8d:d2:e3:2e:d7:24:69:5e:7d: db:9c:3e:10:e5:6b:de:9b:e3:47:e2:7f:1a:aa:d5:5e:57:7c: b6:1f:21:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsyPwQHZNI0MDHAZj5SWm6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjUxMjE4MTYxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTcwMjQ4NTIzMjRkZDI5Yzk5YjhkNWZiM2NjNGMyZmRiN2E3ZmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+rCPVmUNw4tmghnGp0mcut39ISTa r/zRKXHIDphMPTc3kkVSXqRDrHIkgYLgQF67bc7i1s09W13hVYXu6omP9QbEwXon fop1oaVv2+dCP6ahQ/IeWS291uNQptLzXSuduLGxo3lCq4xb9OhVQK4vjf2awLrs /qgwJrD3xiMWIUYYAYW/P7F800pnjxq74hVvJM9QEYEg0QXoe+w195lOdsEaayXz Xlbr7V7mvqbnNck6TaAyjmttE8PTQ9P/C0qvsKYODTDUa0yrzw4RJ2EMc8llzBvP EG/bH6aESFT62oIqy4lCjTowEZIV2FxHi7QQcHSsYyAhbfrz/NI6Ap3B6wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO5wJIUjJN0pyZuNX7PMTC/ben/eMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvN25Ba2hTTWszU25KbTQxZnM4eE1MOXQ2Zjk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWX27AwQA WX3RAwQAZ/XnAwQAucbqMA0GCSqGSIb3DQEBCwUAA4IBAQAasBz40BbWOfOfPVYx 4wmF3D/nP2Qmjil4BEzYlw3A00u7G7MmZPLK3/oxkaU06p0q2iAjUUIdG25IsXRb wM4kOc65Q5L4YSJpHNwQtkaRJwUYfq8zSLgoIKWJcJXQ1Pr06RQuGV7BFjYV6njI StiAEx/z0dxsFTPcUSAXSm4qr6pKAmhIF5HE34iKOUTD5VFrHYDWNstnLQbEbLLL YBVD79Y3HbQlHWqJ1B6E0eo//rLUDsxfpiH5RN+VOUnTu3TjxLSriq6UNxoonTOK Y2LDieIXkgGxi0uMVK3Q0uaFelyN0uMu1yRpXn3bnD4Q5Wvem+NH4n8aqtVeV3y2 HyGr -----END CERTIFICATE-----Generated at Sat Dec 20 09:33:00 2025 by rpki-client