This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/axrFWPShOGY50i9Rx1fdCudf6lc.roa File: axrFWPShOGY50i9Rx1fdCudf6lc.roa (raw, json) Hash identifier: qKcKWvVWyVodx20m2YAIsBMk92j34NybplcREa7AmtQ= Subject key identifier: 6B:1A:C5:58:F4:A1:38:66:39:D2:2F:51:C7:57:DD:0A:E7:5F:EA:57 Certificate issuer: /CN=c98b825f36e9cc330315c940de800cbabce3397b Certificate serial: 019B2C580C6C8DC670C3669CC803EE7CC144 Authority key identifier: C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/axrFWPShOGY50i9Rx1fdCudf6lc.roa Signing time: Wed 17 Dec 2025 12:45:26 +0000 ROA not before: Wed 17 Dec 2025 12:45:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49097 IP address blocks: 80.70.167.0/24 maxlen: 24 185.55.232.0/22 maxlen: 24 185.170.24.0/22 maxlen: 24 188.95.0.0/21 maxlen: 24 193.28.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.mft rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:58:0c:6c:8d:c6:70:c3:66:9c:c8:03:ee:7c:c1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c98b825f36e9cc330315c940de800cbabce3397b Validity Not Before: Dec 17 12:45:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6b1ac558f4a1386639d22f51c757dd0ae75fea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:d7:e4:72:16:9b:eb:79:28:fa:67:66:fa: 1f:6c:c8:66:8c:f0:28:ae:7f:62:db:73:43:4f:92: 5e:28:0d:e2:68:27:7e:f4:ee:4d:53:ac:04:ec:6a: ac:5d:0f:1b:ec:41:3f:01:c0:81:b5:b5:8f:68:0c: 3a:de:45:23:3a:ba:34:bb:0c:6f:dc:6d:a3:dc:a9: c4:ab:34:4e:98:f5:db:36:90:a8:35:de:17:bb:42: 22:47:22:f0:c7:7d:c1:23:2b:75:0b:6a:e2:83:5f: e1:a2:04:08:f0:98:73:e5:ae:d9:ca:ac:21:e3:e3: 36:d8:70:52:f4:ac:e1:4e:50:f7:f2:24:46:81:f6: 04:33:81:19:4b:14:0d:d3:2c:74:fe:62:eb:4e:a2: a5:e0:e0:cf:84:25:66:42:29:2d:4d:e7:dd:e0:7c: 08:31:54:1d:18:3d:f3:05:fc:ee:ee:96:44:22:0a: 14:08:e7:13:c6:c6:37:89:4a:11:20:b4:91:79:cc: fb:4b:73:8f:8f:af:2f:1b:32:9d:a2:d9:3d:0f:13: 33:fd:9a:e2:45:fe:71:1d:7b:07:6c:f8:72:82:02: 35:4f:f8:ad:34:d9:88:bc:51:8a:94:fa:90:4a:48: 90:b9:4c:b6:07:85:64:90:d6:b8:01:1e:cc:d5:aa: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1A:C5:58:F4:A1:38:66:39:D2:2F:51:C7:57:DD:0A:E7:5F:EA:57 X509v3 Authority Key Identifier: keyid:C9:8B:82:5F:36:E9:CC:33:03:15:C9:40:DE:80:0C:BA:BC:E3:39:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYuCXzbpzDMDFclA3oAMurzjOXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/axrFWPShOGY50i9Rx1fdCudf6lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ea3614-f090-4a2b-9355-b89a511c3bbd/1/yYuCXzbpzDMDFclA3oAMurzjOXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.70.167.0/24 185.55.232.0/22 185.170.24.0/22 188.95.0.0/21 193.28.96.0/21 Signature Algorithm: sha256WithRSAEncryption 7c:7f:34:9f:59:32:95:7d:ac:28:11:6c:f2:1f:e0:cd:4e:a3: 63:45:f5:28:15:8d:3f:a2:f6:32:9a:c3:2c:6d:e6:98:e7:27: 61:e3:56:04:92:e7:a4:54:fe:15:73:2b:13:13:ed:a9:4a:76: 00:a2:06:14:d3:a3:4a:be:c8:54:45:42:b7:ab:fd:ec:7c:0f: 84:8e:f9:64:12:5d:f4:f2:2e:49:d0:c6:37:e1:a5:a5:6f:1c: 28:97:8f:42:0e:bb:8f:ac:e7:33:0e:d4:48:65:37:74:fb:9a: 6d:c3:e2:44:9f:db:26:0e:3d:0e:f5:8a:80:29:bc:fa:24:c6: 1f:23:b4:e2:22:5c:6f:6f:48:81:8b:e4:a9:95:53:81:59:58: dd:be:dd:ce:75:65:82:3d:5e:18:eb:e3:9b:db:81:8f:9f:93: 6c:1f:a4:e8:f1:ad:c8:09:cb:be:04:52:7b:86:55:88:c5:d2: 95:36:64:ce:8f:29:9c:65:04:f2:d7:8f:1f:10:82:d5:d3:d1: 51:15:2e:d4:33:0f:e3:22:51:de:1c:6f:5e:63:f3:76:c8:06: 84:2c:51:dd:b2:df:9b:94:04:0e:75:c4:e0:4c:d5:7f:73:64: 43:9d:4a:39:18:f7:5e:50:44:02:31:cd:e9:07:12:17:01:6f: 38:22:f5:c7 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZssWAxsjcZww2acyAPufMFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5OGI4MjVmMzZlOWNjMzMwMzE1Yzk0MGRlODAwY2JhYmNl MzM5N2IwHhcNMjUxMjE3MTI0NTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjFhYzU1OGY0YTEzODY2MzlkMjJmNTFjNzU3ZGQwYWU3NWZlYTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BTX5HIWm+t5KPpnZvofbMhmjPAo rn9i23NDT5JeKA3iaCd+9O5NU6wE7GqsXQ8b7EE/AcCBtbWPaAw63kUjOro0uwxv 3G2j3KnEqzROmPXbNpCoNd4Xu0IiRyLwx33BIyt1C2rig1/hogQI8Jhz5a7Zyqwh 4+M22HBS9KzhTlD38iRGgfYEM4EZSxQN0yx0/mLrTqKl4ODPhCVmQiktTefd4HwI MVQdGD3zBfzu7pZEIgoUCOcTxsY3iUoRILSRecz7S3OPj68vGzKdotk9DxMz/Zri Rf5xHXsHbPhyggI1T/itNNmIvFGKlPqQSkiQuUy2B4VkkNa4AR7M1artrwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGsaxVj0oThmOdIvUcdX3QrnX+pXMB8GA1UdIwQY MBaAFMmLgl826cwzAxXJQN6ADLq84zl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUt Yjg5YTUxMWMzYmJkLzEvYXhyRldQU2hPR1k1MGk5UngxZmRDdWRmNmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9lYTM2MTQtZjA5MC00YTJiLTkzNTUtYjg5YTUxMWMzYmJk LzEveVl1Q1h6YnB6RE1ERmNsQTNvQU11cnpqT1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAUEanAwQC uTfoAwQCuaoYAwQDvF8AAwQDwRxgMA0GCSqGSIb3DQEBCwUAA4IBAQB8fzSfWTKV fawoEWzyH+DNTqNjRfUoFY0/ovYymsMsbeaY5ydh41YEkuekVP4VcysTE+2pSnYA ogYU06NKvshURUK3q/3sfA+EjvlkEl308i5J0MY34aWlbxwol49CDruPrOczDtRI ZTd0+5ptw+JEn9smDj0O9YqAKbz6JMYfI7TiIlxvb0iBi+SplVOBWVjdvt3OdWWC PV4Y6+Ob24GPn5NsH6To8a3ICcu+BFJ7hlWIxdKVNmTOjymcZQTy148fEILV09FR FS7UMw/jIlHeHG9eY/N2yAaELFHdst+blAQOdcTgTNV/c2RDnUo5GPdeUEQCMc3p BxIXAW84IvXH -----END CERTIFICATE-----Generated at Fri Dec 19 06:26:56 2025 by rpki-client