This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/1-MLQDt3tC5RMoHq_-0vxvd-inFA.roa File: 1-MLQDt3tC5RMoHq_-0vxvd-inFA.roa (raw, json) Hash identifier: 7iHR/c8Xw9tNua31qJ50mcBHoKABG5iHq5JqVIAcm44= Subject key identifier: F8:C2:D0:0E:DD:ED:0B:94:4C:A0:7A:BF:FB:4B:F1:BD:DF:A2:9C:50 Certificate issuer: /CN=bee7b754859f6d3c870d22af784f2344fcbaa630 Certificate serial: 019B043F33F370B24DCACD5854F2113DE685 Authority key identifier: BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/1-MLQDt3tC5RMoHq_-0vxvd-inFA.roa Signing time: Tue 09 Dec 2025 17:53:29 +0000 ROA not before: Tue 09 Dec 2025 17:53:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 195.191.49.0/24 maxlen: 24 195.245.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.mft rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:3f:33:f3:70:b2:4d:ca:cd:58:54:f2:11:3d:e6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bee7b754859f6d3c870d22af784f2344fcbaa630 Validity Not Before: Dec 9 17:53:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8c2d00edded0b944ca07abffb4bf1bddfa29c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:d0:78:a0:f0:1f:e5:62:ee:be:2f:ba:20: 1f:10:eb:14:f3:64:69:50:09:f7:2d:7e:af:48:53: 40:47:c2:15:79:6a:70:21:d6:10:9b:b1:89:48:60: 60:4c:30:e5:9e:0b:f0:56:70:c8:66:41:ff:da:70: 49:dd:75:1b:14:0f:0f:90:73:c7:ad:16:19:e1:02: d7:25:47:42:2b:cf:11:cf:b6:41:95:6b:22:c8:99: 34:e2:2b:da:ec:c7:3f:d8:0e:85:75:49:a1:8c:a7: 92:7c:76:b3:1d:b6:6f:b0:41:fb:4c:7e:dd:db:aa: 90:46:6f:6c:68:b4:28:92:33:e6:31:34:a5:27:12: b6:11:fc:73:85:6b:98:d3:87:ab:ac:c4:75:53:d7: 22:69:65:31:c5:7c:0b:f9:20:12:e8:e4:eb:0d:bc: 13:0e:27:26:0c:22:12:c6:24:8d:6d:61:61:db:02: 17:9a:e5:43:59:65:c7:2e:4a:57:d0:68:a1:bf:1c: cb:b8:d5:b3:33:ba:55:2f:5d:c5:ce:60:d5:9f:28: b5:1e:d7:01:80:cb:aa:32:fe:bf:63:ae:01:72:5e: a6:ff:cc:0b:64:de:d3:72:6b:35:e6:f5:48:4f:61: 3a:04:a7:bc:e3:c9:17:d2:29:49:0a:9e:ca:a2:6c: 41:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C2:D0:0E:DD:ED:0B:94:4C:A0:7A:BF:FB:4B:F1:BD:DF:A2:9C:50 X509v3 Authority Key Identifier: keyid:BE:E7:B7:54:85:9F:6D:3C:87:0D:22:AF:78:4F:23:44:FC:BA:A6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vue3VIWfbTyHDSKveE8jRPy6pjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/1-MLQDt3tC5RMoHq_-0vxvd-inFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/36c386-2f53-4a0e-920d-628765eb1d59/1/vue3VIWfbTyHDSKveE8jRPy6pjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.49.0/24 195.245.198.0/24 Signature Algorithm: sha256WithRSAEncryption 82:bb:a3:cf:7a:04:1a:8d:ac:1c:cc:50:d9:44:62:3e:56:ca: 27:95:f8:73:c0:32:23:79:24:3b:2d:e6:e4:fe:0e:69:8b:4e: be:6b:2a:3e:9c:5d:db:36:0c:f8:06:04:64:11:7a:3f:e5:ec: f1:69:87:e8:4a:60:6f:a2:92:49:24:12:ce:7e:44:25:ce:26: 12:07:3d:b8:15:0a:ef:a4:0c:71:66:36:f2:17:62:97:b8:35: 66:bc:3b:16:4e:6c:83:7c:4a:47:0e:c4:14:d7:b7:d6:fc:3c: 8c:76:54:3b:50:0b:5c:49:51:2d:2b:5f:ff:be:2a:74:ae:5c: 0d:5f:33:58:b5:c7:30:0e:1e:24:7f:35:f9:2a:23:be:73:27: cc:e7:c5:a3:e5:7e:5c:be:2d:e5:f4:7f:2c:70:08:ca:1f:53: 2e:31:2b:69:60:41:13:5e:4e:7d:2c:07:2d:08:62:d6:8d:84: 0c:29:b1:f9:2c:3d:df:92:3d:56:cb:e9:c1:50:db:12:3a:63: 06:2e:b0:1d:a9:cb:86:d5:f1:2a:ff:3c:76:0b:6d:58:ab:9a: 54:d2:bf:bc:6e:d5:6f:78:1e:a8:2f:16:66:4c:f8:a0:29:de: c1:99:17:b1:5a:42:d6:9d:3f:41:1c:25:63:20:f6:11:c9:df: 34:82:88:43 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZsEPzPzcLJNys1YVPIRPeaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZTdiNzU0ODU5ZjZkM2M4NzBkMjJhZjc4NGYyMzQ0ZmNi YWE2MzAwHhcNMjUxMjA5MTc1MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGMyZDAwZWRkZWQwYjk0NGNhMDdhYmZmYjRiZjFiZGRmYTI5YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0HQeKDwH+Vi7r4vuiAfEOsU82Rp UAn3LX6vSFNAR8IVeWpwIdYQm7GJSGBgTDDlngvwVnDIZkH/2nBJ3XUbFA8PkHPH rRYZ4QLXJUdCK88Rz7ZBlWsiyJk04iva7Mc/2A6FdUmhjKeSfHazHbZvsEH7TH7d 26qQRm9saLQokjPmMTSlJxK2EfxzhWuY04errMR1U9ciaWUxxXwL+SAS6OTrDbwT DicmDCISxiSNbWFh2wIXmuVDWWXHLkpX0GihvxzLuNWzM7pVL13FzmDVnyi1HtcB gMuqMv6/Y64Bcl6m/8wLZN7Tcms15vVIT2E6BKe848kX0ilJCp7KomxBkQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPjC0A7d7QuUTKB6v/tL8b3fopxQMB8GA1UdIwQY MBaAFL7nt1SFn208hw0ir3hPI0T8uqYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnVlM1ZJV2ZiVHlIRFNLdmVFOGpSUHk2cGpBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zNmMzODYtMmY1My00YTBlLTkyMGQt NjI4NzY1ZWIxZDU5LzEvMS1NTFFEdDN0QzVSTW9IcV8tMHZ4dmQtaW5GQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzcvMzZjMzg2LTJmNTMtNGEwZS05MjBkLTYyODc2NWViMWQ1 OS8xL3Z1ZTNWSVdmYlR5SERTS3ZlRThqUlB5NnBqQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAMO/MQME AMP1xjANBgkqhkiG9w0BAQsFAAOCAQEAgrujz3oEGo2sHMxQ2URiPlbKJ5X4c8Ay I3kkOy3m5P4OaYtOvmsqPpxd2zYM+AYEZBF6P+Xs8WmH6Epgb6KSSSQSzn5EJc4m Egc9uBUK76QMcWY28hdil7g1Zrw7Fk5sg3xKRw7EFNe31vw8jHZUO1ALXElRLStf /74qdK5cDV8zWLXHMA4eJH81+SojvnMnzOfFo+V+XL4t5fR/LHAIyh9TLjEraWBB E15OfSwHLQhi1o2EDCmx+Sw935I9VsvpwVDbEjpjBi6wHanLhtXxKv88dgttWKua VNK/vG7Vb3geqC8WZkz4oCnewZkXsVpC1p0/QRwlYyD2EcnfNIKIQw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:10:21 2025 by rpki-client