This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7jZX17Md9peum7-cPDqe_OuX_u8.roa File: 7jZX17Md9peum7-cPDqe_OuX_u8.roa (raw, json) Hash identifier: 4yZFBi0fdLM09ggNCUe21Nk0t1T4fk5maAulVQgjhXY= Subject key identifier: EE:36:57:D7:B3:1D:F6:97:AE:9B:BF:9C:3C:3A:9E:FC:EB:97:FE:EF Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B3BA68E95EB8E6441EBF52C62069FFC3D Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7jZX17Md9peum7-cPDqe_OuX_u8.roa Signing time: Sat 20 Dec 2025 12:05:29 +0000 ROA not before: Sat 20 Dec 2025 12:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47981 IP address blocks: 194.225.184.0/21 maxlen: 21 194.225.184.0/22 maxlen: 22 194.225.184.0/23 maxlen: 23 194.225.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a6:8e:95:eb:8e:64:41:eb:f5:2c:62:06:9f:fc:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Dec 20 12:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee3657d7b31df697ae9bbf9c3c3a9efceb97feef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:08:a8:f9:9f:be:d1:e9:76:f6:18:a3:b1: 63:3b:4c:d0:b5:cb:fd:bf:84:40:ab:a3:65:e7:b4: 58:9e:97:d1:e1:2d:51:69:19:78:79:5e:c0:2a:73: 99:bb:3e:5f:58:8d:de:b6:6a:42:57:26:e6:b6:13: db:21:63:12:ae:1f:58:ff:0e:78:0a:1a:33:e9:69: 29:26:63:d5:03:f2:73:db:be:db:f8:55:fe:b9:fc: 90:37:45:13:b8:7e:f1:73:1b:0d:f6:1c:d5:09:ef: dc:51:2b:85:b9:d7:54:77:5f:7b:40:e1:90:53:80: c4:d5:04:a0:8f:a2:85:59:d4:86:40:28:57:ab:c3: 0a:2e:9a:72:04:6a:eb:a4:7e:1a:c6:61:f7:6c:cc: 2a:d4:ca:94:0e:9c:3e:6b:06:bb:b0:3c:4e:15:6b: 51:9c:9e:52:f6:80:ea:05:74:d2:25:99:bc:12:ed: d7:e3:24:08:c6:6f:c2:30:e9:4b:01:08:71:b0:9e: a7:ab:a4:a2:f5:41:83:0b:3f:ea:2c:f1:c5:01:ec: d2:cb:ef:ff:af:e5:60:58:0f:4e:ad:a5:4c:1a:42: cc:a0:73:13:3f:de:9b:28:68:f5:32:63:cc:12:d0: 65:bd:93:6e:68:2d:d5:a3:5d:74:8b:ed:3b:0a:06: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:36:57:D7:B3:1D:F6:97:AE:9B:BF:9C:3C:3A:9E:FC:EB:97:FE:EF X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/7jZX17Md9peum7-cPDqe_OuX_u8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.184.0/21 Signature Algorithm: sha256WithRSAEncryption b6:f3:3c:7b:fd:bb:cc:9c:c3:78:57:b2:d5:bb:c9:f5:c9:0a: cb:de:46:f7:dc:e1:ed:21:80:ff:8a:db:84:67:4d:c1:35:d6: cf:ec:39:e6:c2:92:18:05:c5:b3:9b:31:3c:8c:71:42:fe:f9: 74:87:b5:c7:83:3c:b8:62:d3:bc:3e:0e:9d:35:28:de:ce:25: fb:95:94:36:ad:e0:1d:15:16:bc:24:bb:55:2a:66:12:9b:c9: 73:94:83:6d:9e:17:9a:d0:92:32:5b:e2:08:57:c0:8c:f4:fc: 09:63:4b:e2:2d:94:d9:57:95:34:db:f4:ae:6a:56:65:60:86: 98:49:3d:7b:32:1b:e6:38:bf:98:ce:78:fe:3d:27:d7:ed:09: 65:26:d5:7b:53:52:2e:77:80:cd:fd:c2:41:e0:4e:58:cc:da: b2:fb:62:c9:9b:bd:be:6c:ed:ad:78:c9:4f:35:55:62:4a:bb: 7b:95:5d:01:50:a6:03:bb:de:75:97:6d:66:e4:bf:16:2f:af: 35:0d:09:53:14:0f:88:2b:20:df:ff:9c:70:94:71:15:4c:08: 1e:d5:f4:81:78:dd:3e:62:aa:6b:b4:87:ba:c0:f2:85:78:66: 86:ce:79:3b:b6:fe:3a:d0:4a:66:a7:54:7b:af:7d:f3:70:ee: 68:8f:b2:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs7po6V645kQev1LGIGn/w9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjUxMjIwMTIwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTM2NTdkN2IzMWRmNjk3YWU5YmJmOWMzYzNhOWVmY2ViOTdmZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAUIqPmfvtHpdvYYo7FjO0zQtcv9 v4RAq6Nl57RYnpfR4S1RaRl4eV7AKnOZuz5fWI3etmpCVybmthPbIWMSrh9Y/w54 Choz6WkpJmPVA/Jz277b+FX+ufyQN0UTuH7xcxsN9hzVCe/cUSuFuddUd197QOGQ U4DE1QSgj6KFWdSGQChXq8MKLppyBGrrpH4axmH3bMwq1MqUDpw+awa7sDxOFWtR nJ5S9oDqBXTSJZm8Eu3X4yQIxm/CMOlLAQhxsJ6nq6Si9UGDCz/qLPHFAezSy+// r+VgWA9OraVMGkLMoHMTP96bKGj1MmPMEtBlvZNuaC3Vo110i+07CgbCTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO42V9ezHfaXrpu/nDw6nvzrl/7vMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvN2paWDE3TWQ5cGV1bTctY1BEcWVfT3VYX3U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwuG4MA0G CSqGSIb3DQEBCwUAA4IBAQC28zx7/bvMnMN4V7LVu8n1yQrL3kb33OHtIYD/ituE Z03BNdbP7DnmwpIYBcWzmzE8jHFC/vl0h7XHgzy4YtO8Pg6dNSjeziX7lZQ2reAd FRa8JLtVKmYSm8lzlINtnhea0JIyW+IIV8CM9PwJY0viLZTZV5U02/SualZlYIaY ST17MhvmOL+Yznj+PSfX7QllJtV7U1Iud4DN/cJB4E5YzNqy+2LJm72+bO2teMlP NVViSrt7lV0BUKYDu951l21m5L8WL681DQlTFA+IKyDf/5xwlHEVTAge1fSBeN0+ YqprtIe6wPKFeGaGznk7tv460Epmp1R7r33zcO5oj7Jv -----END CERTIFICATE-----Generated at Sun Dec 21 11:54:23 2025 by rpki-client