This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/7iDgMFYJeqfOty-EbplS6nmhqag.roa File: 7iDgMFYJeqfOty-EbplS6nmhqag.roa (raw, json) Hash identifier: lnzwDP7bYMBLvvlnlvzGX+PogfIf3OGZE5FGc501AfQ= Subject key identifier: EE:20:E0:30:56:09:7A:A7:CE:B7:2F:84:6E:99:52:EA:79:A1:A9:A8 Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019B2B16BEECCA071E47A24A00D11843AE4C Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/7iDgMFYJeqfOty-EbplS6nmhqag.roa Signing time: Wed 17 Dec 2025 06:54:29 +0000 ROA not before: Wed 17 Dec 2025 06:54:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 194.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:16:be:ec:ca:07:1e:47:a2:4a:00:d1:18:43:ae:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Dec 17 06:54:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ee20e03056097aa7ceb72f846e9952ea79a1a9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:de:27:03:e3:1f:35:95:51:a2:0b:f4:30:e3: 9b:de:2a:90:b5:48:a1:5b:4f:65:42:cd:2e:07:89: 7d:33:45:02:be:f3:14:ca:2a:bb:40:b8:84:86:b1: 2c:50:40:0f:50:64:6c:16:c8:f6:81:9c:f0:86:49: 57:ea:b7:77:e4:10:10:7b:35:e7:fb:7c:fc:71:a2: 02:b4:3b:9f:60:9e:c1:ca:1f:4e:e6:28:9d:82:77: ff:cb:91:b5:ad:83:47:7e:78:06:d2:55:6f:29:d8: 50:22:bb:09:6e:00:cc:f7:11:c6:77:b4:d0:4d:ea: 0e:53:0b:d5:b6:82:64:37:35:7b:99:b6:ca:4c:d3: 81:12:7d:a0:9d:17:39:ec:6a:4b:2b:b2:a6:f6:c9: 4e:50:26:56:91:08:75:d4:05:82:60:98:ea:8f:4e: a3:bc:1a:00:0a:bc:3c:83:5b:13:fa:ea:0e:fa:ef: 99:f7:4b:d4:de:16:d5:36:90:17:f8:21:50:c6:fb: 23:da:bb:6d:e0:75:d7:e1:31:e8:5e:e3:1c:7b:e8: d4:46:2f:66:70:a8:7e:f7:fc:15:e1:f8:e6:4e:33: 05:d0:24:b7:f9:8c:b5:6d:5d:4c:9a:1a:0e:74:91: 2e:ed:1a:42:b1:1a:ff:eb:d2:64:ac:92:26:8d:68: 5c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:20:E0:30:56:09:7A:A7:CE:B7:2F:84:6E:99:52:EA:79:A1:A9:A8 X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/7iDgMFYJeqfOty-EbplS6nmhqag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.138.0/24 Signature Algorithm: sha256WithRSAEncryption 19:4c:aa:07:66:3e:76:04:8a:93:f9:2f:35:54:fb:91:2d:7a: b5:ce:98:58:b0:7e:a5:a1:91:8e:bb:18:73:06:de:7f:74:d8: 8a:0d:4e:fa:6e:dd:cd:4c:c7:a1:40:26:cf:05:5a:0e:0f:2e: 46:93:48:c2:2d:b4:7b:c3:77:d2:ca:01:ec:8d:66:1c:a7:1a: b6:df:c6:a5:58:a6:9c:f1:29:bd:d4:a8:bf:e7:03:79:60:f9: 69:d0:ac:af:d2:86:b2:3b:94:dc:6d:f7:45:c5:78:ca:10:f2: 6f:d9:a1:65:f4:92:5a:6c:60:5d:e4:4a:5a:90:28:95:de:9d: 88:1f:fb:9f:23:c0:15:e5:51:59:c5:91:a8:b3:60:25:40:28: 5c:57:5f:a3:45:29:63:63:9f:94:62:e2:71:8e:7a:86:ca:b9: f1:6e:02:94:87:ff:6c:cd:39:50:5c:c5:b2:31:09:70:3b:72: ae:94:43:75:28:de:d7:97:d7:25:50:cd:77:a1:8a:cb:f7:eb: 55:7a:50:e7:16:c6:e8:96:c3:15:23:ef:32:80:64:bd:38:5a: fc:6e:4b:5a:af:87:54:00:2b:e0:2b:aa:fd:50:41:fc:27:00: d7:a0:1e:27:fa:02:13:f4:20:e4:78:90:60:99:d9:e7:a1:cd: 8e:9e:11:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsrFr7sygceR6JKANEYQ65MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjUxMjE3MDY1NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTIwZTAzMDU2MDk3YWE3Y2ViNzJmODQ2ZTk5NTJlYTc5YTFhOWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd4nA+MfNZVRogv0MOOb3iqQtUih W09lQs0uB4l9M0UCvvMUyiq7QLiEhrEsUEAPUGRsFsj2gZzwhklX6rd35BAQezXn +3z8caICtDufYJ7Byh9O5iidgnf/y5G1rYNHfngG0lVvKdhQIrsJbgDM9xHGd7TQ TeoOUwvVtoJkNzV7mbbKTNOBEn2gnRc57GpLK7Km9slOUCZWkQh11AWCYJjqj06j vBoACrw8g1sT+uoO+u+Z90vU3hbVNpAX+CFQxvsj2rtt4HXX4THoXuMce+jURi9m cKh+9/wV4fjmTjMF0CS3+Yy1bV1MmhoOdJEu7RpCsRr/69JkrJImjWhc/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO4g4DBWCXqnzrcvhG6ZUup5oamoMB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvN2lEZ01GWUplcWZPdHktRWJwbFM2bm1ocWFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmiKMA0G CSqGSIb3DQEBCwUAA4IBAQAZTKoHZj52BIqT+S81VPuRLXq1zphYsH6loZGOuxhz Bt5/dNiKDU76bt3NTMehQCbPBVoODy5Gk0jCLbR7w3fSygHsjWYcpxq238alWKac 8Sm91Ki/5wN5YPlp0Kyv0oayO5TcbfdFxXjKEPJv2aFl9JJabGBd5EpakCiV3p2I H/ufI8AV5VFZxZGos2AlQChcV1+jRSljY5+UYuJxjnqGyrnxbgKUh/9szTlQXMWy MQlwO3KulEN1KN7Xl9clUM13oYrL9+tVelDnFsbolsMVI+8ygGS9OFr8bktar4dU ACvgK6r9UEH8JwDXoB4n+gIT9CDkeJBgmdnnoc2OnhEN -----END CERTIFICATE-----Generated at Fri Dec 19 21:21:23 2025 by rpki-client