This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/T7O3Z1WP9thDTzCeJHteCUXacTY.roa File: T7O3Z1WP9thDTzCeJHteCUXacTY.roa (raw, json) Hash identifier: 1rbpS3EmVk0MVGZVQ9c+JDHyhZJ4vKKQF720dlMGqb0= Subject key identifier: 4F:B3:B7:67:55:8F:F6:D8:43:4F:30:9E:24:7B:5E:09:45:DA:71:36 Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b Certificate serial: 019B0C3097BCEC05110960CA5E22851DE930 Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/T7O3Z1WP9thDTzCeJHteCUXacTY.roa Signing time: Thu 11 Dec 2025 06:54:29 +0000 ROA not before: Thu 11 Dec 2025 06:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9009 IP address blocks: 89.19.56.0/24 maxlen: 24 89.19.57.0/24 maxlen: 24 89.19.58.0/24 maxlen: 24 89.19.59.0/24 maxlen: 24 185.68.245.0/24 maxlen: 24 185.81.174.0/23 maxlen: 24 185.81.184.0/23 maxlen: 23 185.81.186.0/23 maxlen: 23 185.89.104.0/22 maxlen: 22 185.89.108.0/22 maxlen: 22 185.96.38.0/24 maxlen: 24 185.96.81.0/24 maxlen: 24 185.96.132.0/24 maxlen: 24 185.97.0.0/22 maxlen: 24 185.101.203.0/24 maxlen: 24 185.175.224.0/23 maxlen: 24 213.170.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:30:97:bc:ec:05:11:09:60:ca:5e:22:85:1d:e9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b Validity Not Before: Dec 11 06:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fb3b767558ff6d8434f309e247b5e0945da7136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:82:af:96:08:23:d8:6a:d7:ec:7e:81:96: 2f:02:fb:52:e7:2a:43:58:3f:c5:0f:1e:d1:80:48: d4:67:75:00:4c:2c:32:02:f8:78:36:fe:c9:e4:ed: d4:93:83:4b:2e:ea:40:98:1e:ea:0c:13:74:43:e1: 39:ca:90:c8:72:f2:7e:fd:ac:c8:69:cc:01:17:71: 42:bf:0b:c3:d0:1c:c3:cc:84:c0:a1:6c:47:f2:0c: f3:2c:45:14:2a:c6:ce:11:80:6e:b9:1d:20:cc:a0: 56:ad:21:8f:0e:cb:d1:e2:98:85:4a:9d:a6:3f:ac: 07:e5:59:ab:22:56:f5:e1:e3:68:55:9b:4a:3a:83: 63:2d:e7:a6:1a:e4:1f:13:4e:62:14:6e:3f:05:26: 2d:36:a6:37:b0:3f:d1:a4:74:99:07:0d:08:e7:91: f6:7d:6c:01:49:59:b4:a3:e5:eb:e5:d5:85:cd:f1: 71:9d:33:21:b8:cc:44:76:c1:21:8f:c8:bd:3c:f7: 90:50:aa:f3:95:02:43:66:c8:b2:b1:3d:41:e0:16: 07:6d:82:cb:4c:72:fd:de:5a:82:6f:68:dc:d7:34: 9e:74:21:f2:71:7b:37:ad:d9:ed:ee:ec:eb:c7:25: 18:f3:a2:6b:34:30:8c:69:77:04:b5:e7:83:d9:bd: e8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B3:B7:67:55:8F:F6:D8:43:4F:30:9E:24:7B:5E:09:45:DA:71:36 X509v3 Authority Key Identifier: keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/T7O3Z1WP9thDTzCeJHteCUXacTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.19.56.0/22 185.68.245.0/24 185.81.174.0/23 185.81.184.0/22 185.89.104.0/21 185.96.38.0/24 185.96.81.0/24 185.96.132.0/24 185.97.0.0/22 185.101.203.0/24 185.175.224.0/23 213.170.223.0/24 Signature Algorithm: sha256WithRSAEncryption 37:60:bd:79:7e:20:1f:06:c6:55:0e:bb:9f:d1:e7:50:47:ff: 44:c0:5d:f2:3a:03:02:11:0d:8d:fc:74:18:4b:be:82:49:f0: 03:3d:63:11:b7:7c:b3:e0:59:b1:b4:5e:c0:c7:d9:ef:fb:0c: a4:4f:7e:e1:6f:f4:67:ef:2a:49:c1:73:80:77:03:fa:91:9a: 82:eb:a8:9a:51:86:86:e1:b1:f2:c2:1e:41:0d:e9:35:94:51: 66:46:00:14:e5:f7:06:a0:f4:d9:7c:d8:3b:fd:80:73:a0:6d: b9:d1:e2:61:58:00:b3:af:d9:b1:db:14:6a:0f:e9:14:c7:aa: 65:b6:f8:de:be:67:b5:bd:f6:7f:a1:58:01:28:57:c9:2f:75: 62:33:eb:81:93:7a:67:28:bc:8a:78:62:f1:72:93:46:5e:39: b2:81:5d:98:b1:8c:c2:af:a5:fb:a0:2c:93:ff:80:e2:18:26: ee:39:89:ae:48:a9:81:11:20:90:ba:0a:7c:5b:f8:9b:27:11: af:5f:5a:10:6e:8a:08:93:aa:51:28:a2:0b:69:d7:d6:cb:66: 1e:3d:0b:06:93:62:07:41:4c:01:b6:92:44:8e:4d:b3:c2:fa: 97:a0:5d:ba:96:72:cf:62:41:a6:49:3b:e2:cd:ae:b0:ff:9f: d6:c6:a0:53 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZsMMJe87AURCWDKXiKFHekwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZWUxNWMzM2RlMzU4OTM4ZDY5MDBhMWIzYzE0NDgwYTM4 OWU4NWIwHhcNMjUxMjExMDY1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmIzYjc2NzU1OGZmNmQ4NDM0ZjMwOWUyNDdiNWUwOTQ1ZGE3MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDeCr5YII9hq1+x+gZYvAvtS5ypD WD/FDx7RgEjUZ3UATCwyAvh4Nv7J5O3Uk4NLLupAmB7qDBN0Q+E5ypDIcvJ+/azI acwBF3FCvwvD0BzDzITAoWxH8gzzLEUUKsbOEYBuuR0gzKBWrSGPDsvR4piFSp2m P6wH5VmrIlb14eNoVZtKOoNjLeemGuQfE05iFG4/BSYtNqY3sD/RpHSZBw0I55H2 fWwBSVm0o+Xr5dWFzfFxnTMhuMxEdsEhj8i9PPeQUKrzlQJDZsiysT1B4BYHbYLL THL93lqCb2jc1zSedCHycXs3rdnt7uzrxyUY86JrNDCMaXcEteeD2b3ogQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE+zt2dVj/bYQ08wniR7XglF2nE2MB8GA1UdIwQY MBaAFJruFcM941iTjWkAobPBRICjiehbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjIt NmVlNTM0ZDkyZTUyLzEvVDdPM1oxV1A5dGhEVHpDZUpIdGVDVVhhY1RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS83MmY3N2YtNzZhYi00ZTc5LWEwNjItNmVlNTM0ZDkyZTUy LzEvbXU0Vnd6M2pXSk9OYVFDaHM4RkVnS09KNkZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCWRM4AwQA uUT1AwQBuVGuAwQCuVG4AwQDuVloAwQAuWAmAwQAuWBRAwQAuWCEAwQCuWEAAwQA uWXLAwQBua/gAwQA1arfMA0GCSqGSIb3DQEBCwUAA4IBAQA3YL15fiAfBsZVDruf 0edQR/9EwF3yOgMCEQ2N/HQYS76CSfADPWMRt3yz4FmxtF7Ax9nv+wykT37hb/Rn 7ypJwXOAdwP6kZqC66iaUYaG4bHywh5BDek1lFFmRgAU5fcGoPTZfNg7/YBzoG25 0eJhWACzr9mx2xRqD+kUx6pltvjevme1vfZ/oVgBKFfJL3ViM+uBk3pnKLyKeGLx cpNGXjmygV2YsYzCr6X7oCyT/4DiGCbuOYmuSKmBESCQugp8W/ibJxGvX1oQbooI k6pRKKILadfWy2YePQsGk2IHQUwBtpJEjk2zwvqXoF26lnLPYkGmSTviza6w/5/W xqBT -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:10 2025 by rpki-client