This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7e0UU0nYzBAnM1PGOT4FTfKZZOo.roa File: 7e0UU0nYzBAnM1PGOT4FTfKZZOo.roa (raw, json) Hash identifier: rwrJOoBBGyGc3blIvWReV9Abiw/CiUZ9xszFNVpf3i8= Subject key identifier: ED:ED:14:53:49:D8:CC:10:27:33:53:C6:39:3E:05:4D:F2:99:64:EA Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019AD9552D6077B0F916798B0B3C81DFE241 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7e0UU0nYzBAnM1PGOT4FTfKZZOo.roa Signing time: Mon 01 Dec 2025 09:53:49 +0000 ROA not before: Mon 01 Dec 2025 09:53:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14618 IP address blocks: 82.152.174.0/23 maxlen: 23 82.153.208.0/22 maxlen: 22 89.213.58.0/24 maxlen: 24 89.213.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:55:2d:60:77:b0:f9:16:79:8b:0b:3c:81:df:e2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 1 09:53:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eded145349d8cc10273353c6393e054df29964ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:90:0b:39:c0:0c:b2:03:65:ec:9a:eb:d4: 88:ec:09:aa:6d:08:e1:83:fc:65:03:bf:6e:38:1f: a6:4e:6d:2c:55:dd:3f:18:f8:d6:61:ac:00:2b:40: df:1c:f0:28:5b:fc:06:bb:78:db:08:bb:ee:10:61: 93:7b:0e:a1:c7:ab:61:a6:39:56:4b:26:c4:37:42: e9:d8:8a:90:e6:79:35:05:ef:c6:31:7e:6b:4d:d8: fd:3c:fc:aa:55:d9:72:59:9d:47:db:48:d0:af:cd: e3:f8:2c:97:06:32:70:f1:bf:03:19:03:fc:f8:fa: 86:ed:3a:74:fb:51:46:2b:db:d5:56:a8:3f:5f:c1: e6:c0:4f:dc:81:d3:1e:47:5b:70:cf:70:4b:79:fb: 41:4b:37:f6:1e:4a:79:98:97:88:5c:e6:ea:07:2e: 7b:fd:bd:10:5e:5d:f6:ff:cc:d2:62:fb:0e:95:ff: ee:95:09:7b:cd:8d:b7:17:66:af:23:f2:90:e7:c8: 1b:76:a6:03:fd:0a:89:ff:92:eb:60:e0:5c:e7:2f: fd:31:e0:4d:ad:67:5e:a6:b6:6a:2c:cc:5a:c5:4d: 34:eb:f9:60:6b:e7:c2:41:fd:c7:27:bc:5f:04:5d: db:d5:0c:b0:fb:de:e4:10:14:eb:53:97:0a:18:5f: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:ED:14:53:49:D8:CC:10:27:33:53:C6:39:3E:05:4D:F2:99:64:EA X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7e0UU0nYzBAnM1PGOT4FTfKZZOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.174.0/23 82.153.208.0/22 89.213.58.0/24 89.213.228.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:74:c5:31:fd:ad:88:4b:50:5c:d0:52:ed:f0:a5:4f:18:d7: 9b:96:0f:ec:f1:d6:d5:41:ef:38:c8:a8:ec:6e:00:0b:ec:51: fc:c2:b5:61:9c:62:30:fc:0b:94:9f:c8:25:a7:85:eb:2e:ee: 7b:1a:d7:d3:df:78:72:47:6e:d4:a7:41:d2:fd:83:9a:a8:18: ff:0b:61:d8:29:b9:42:6b:8d:6a:da:fc:34:90:b6:2b:a9:6f: 2d:7b:25:07:ea:e5:e2:50:10:d4:09:7b:5d:e7:ef:cd:f0:e2: 54:66:ad:89:31:cb:8a:73:97:a4:db:27:b9:40:3d:ef:bc:08: c1:0a:9c:fd:0e:ae:12:a1:6d:64:b1:1e:3d:9e:7c:44:fd:99: 54:83:a4:d2:61:14:d5:5d:bb:db:f7:b9:9e:d8:b2:d5:2f:16: 85:3c:40:92:40:13:d9:76:86:47:ff:9d:d8:21:3e:85:de:53: 49:39:d3:9f:66:22:1a:26:c0:74:fa:d8:a3:8d:41:bd:cf:22: 6f:10:dd:f8:97:12:db:92:d2:55:81:82:d3:02:16:31:7f:e7: df:c5:25:37:76:c3:5a:f8:e4:7e:98:4a:93:63:6e:e3:e2:e6: e0:59:c9:ba:0b:e0:1b:6f:8b:53:e5:b5:55:5b:c4:c4:91:bd: 57:49:9f:f7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrZVS1gd7D5FnmLCzyB3+JBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjAxMDk1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGVkMTQ1MzQ5ZDhjYzEwMjczMzUzYzYzOTNlMDU0ZGYyOTk2NGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBOQCznADLIDZeya69SI7AmqbQjh g/xlA79uOB+mTm0sVd0/GPjWYawAK0DfHPAoW/wGu3jbCLvuEGGTew6hx6thpjlW SybEN0Lp2IqQ5nk1Be/GMX5rTdj9PPyqVdlyWZ1H20jQr83j+CyXBjJw8b8DGQP8 +PqG7Tp0+1FGK9vVVqg/X8HmwE/cgdMeR1twz3BLeftBSzf2Hkp5mJeIXObqBy57 /b0QXl32/8zSYvsOlf/ulQl7zY23F2avI/KQ58gbdqYD/QqJ/5LrYOBc5y/9MeBN rWdeprZqLMxaxU006/lga+fCQf3HJ7xfBF3b1Qyw+97kEBTrU5cKGF/Q8wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO3tFFNJ2MwQJzNTxjk+BU3ymWTqMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvN2UwVVUwbll6QkFuTTFQR09UNEZUZktaWk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBUpiuAwQC UpnQAwQAWdU6AwQAWdXkMA0GCSqGSIb3DQEBCwUAA4IBAQAedMUx/a2IS1Bc0FLt 8KVPGNeblg/s8dbVQe84yKjsbgAL7FH8wrVhnGIw/AuUn8glp4XrLu57GtfT33hy R27Up0HS/YOaqBj/C2HYKblCa41q2vw0kLYrqW8teyUH6uXiUBDUCXtd5+/N8OJU Zq2JMcuKc5ek2ye5QD3vvAjBCpz9Dq4SoW1ksR49nnxE/ZlUg6TSYRTVXbvb97me 2LLVLxaFPECSQBPZdoZH/53YIT6F3lNJOdOfZiIaJsB0+tijjUG9zyJvEN34lxLb ktJVgYLTAhYxf+ffxSU3dsNa+OR+mEqTY27j4ubgWcm6C+Abb4tT5bVVW8TEkb1X SZ/3 -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:42 2025 by rpki-client