This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7F3KZYH48ZOSWiUo7Sn14P-9HYw.roa File: 7F3KZYH48ZOSWiUo7Sn14P-9HYw.roa (raw, json) Hash identifier: QVCy0MMXDakq7BY4yIBoIhJjadSNr5fh1xS7JmuXpxo= Subject key identifier: EC:5D:CA:65:81:F8:F1:93:92:5A:25:28:ED:29:F5:E0:FF:BD:1D:8C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019ABED49DAEE57D899E6C49F40E13D9FEBA Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7F3KZYH48ZOSWiUo7Sn14P-9HYw.roa Signing time: Wed 26 Nov 2025 06:23:16 +0000 ROA not before: Wed 26 Nov 2025 06:23:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 87.120.68.0/23 maxlen: 24 87.120.68.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.61.0/24 maxlen: 24 93.123.74.0/23 maxlen: 24 94.156.253.0/24 maxlen: 24 185.252.160.0/23 maxlen: 24 193.148.253.0/24 maxlen: 24 212.87.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 08:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:be:d4:9d:ae:e5:7d:89:9e:6c:49:f4:0e:13:d9:fe:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 26 06:23:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec5dca6581f8f193925a2528ed29f5e0ffbd1d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:46:2c:b7:57:9d:15:42:dc:f1:4a:d0:1f: ea:81:1e:96:c3:9a:c2:0e:95:9b:4e:3b:43:99:aa: e9:af:20:57:d3:7b:d3:28:9f:fb:d9:7b:0e:f3:4f: 3d:4f:71:a8:11:75:8d:d7:fb:f3:43:7c:35:c3:ce: 80:07:0f:97:11:c4:8f:96:92:f4:43:f3:13:c6:85: a1:ca:20:06:53:50:8a:f6:7d:92:21:e5:48:91:ca: cf:f5:62:a1:0d:a9:d0:ce:e6:93:dd:8d:0f:13:53: 73:6a:57:29:03:8a:4a:bb:45:52:96:f4:ca:d4:90: ab:96:f9:dd:42:4e:ad:b4:ba:53:ed:c8:73:7a:3b: cd:9f:a1:ac:fb:cc:4b:5b:37:d8:19:ed:e7:f7:5a: b6:db:d0:e4:c4:ed:ab:97:e3:b6:c1:91:4b:e8:53: 89:bb:9d:ac:53:b8:ef:3b:88:ac:70:7d:38:16:c9: db:03:fd:ca:1f:a5:fe:55:c2:3e:c3:54:6e:64:c9: 13:6a:6d:d5:0c:4d:f9:aa:8d:55:00:e1:3a:0e:17: 59:7f:78:d8:80:1d:11:ef:3a:e9:b7:ec:82:e4:ce: a7:d7:5d:e9:0a:4e:63:7d:6f:6e:f3:bd:bf:fa:1e: 09:84:a9:82:33:16:bd:1a:9b:bc:59:3f:02:db:8e: db:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5D:CA:65:81:F8:F1:93:92:5A:25:28:ED:29:F5:E0:FF:BD:1D:8C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7F3KZYH48ZOSWiUo7Sn14P-9HYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.120.68.0/23 87.121.60.0/23 93.123.74.0/23 94.156.253.0/24 185.252.160.0/23 193.148.253.0/24 212.87.204.0/24 Signature Algorithm: sha256WithRSAEncryption 63:e1:03:55:1e:d9:db:97:5e:17:0c:a6:65:a9:22:ad:0f:7e: a5:94:44:1d:4a:86:04:61:2c:13:d8:ea:a2:19:5b:0d:b1:32: 6a:7f:c9:95:34:e5:a3:6b:4e:c0:81:d9:84:ee:3b:b3:5b:f0: d2:ae:11:9c:01:78:b2:34:de:88:9f:79:9d:3a:26:66:fe:be: 81:8d:db:b2:02:78:41:02:4f:c6:d4:9f:cc:2b:b7:db:b5:e2: b9:b2:da:f9:ec:f7:f3:27:e9:44:17:e9:7f:5a:82:8f:97:86: 73:d6:99:27:57:bb:c6:71:93:ae:d4:bf:ea:e2:03:bd:1a:2a: 50:8c:9a:af:56:01:c1:77:7a:09:5f:3d:b0:35:28:92:3e:a4: ca:d9:a7:3b:65:07:81:51:11:13:38:e5:ca:4f:53:27:50:4d: df:64:1b:5c:73:c1:52:57:af:93:12:2f:63:96:4d:82:32:ed: 9d:c2:2b:8e:e3:c0:3c:61:f0:af:8d:e9:e2:55:03:cf:48:9d: 23:bc:f2:9e:0e:a0:c8:a7:d4:34:7d:fa:b1:6a:05:c2:90:f1: 54:a4:29:6c:ba:84:66:e4:13:d7:54:58:9b:2e:18:92:5e:a5: b4:7a:0c:b2:a6:a7:42:8a:4c:9e:c4:1d:5f:03:5d:c5:68:1e: 66:ea:17:fa -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZq+1J2u5X2JnmxJ9A4T2f66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTI2MDYyMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzVkY2E2NTgxZjhmMTkzOTI1YTI1MjhlZDI5ZjVlMGZmYmQxZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH5GLLdXnRVC3PFK0B/qgR6Ww5rC DpWbTjtDmarpryBX03vTKJ/72XsO8089T3GoEXWN1/vzQ3w1w86ABw+XEcSPlpL0 Q/MTxoWhyiAGU1CK9n2SIeVIkcrP9WKhDanQzuaT3Y0PE1NzalcpA4pKu0VSlvTK 1JCrlvndQk6ttLpT7chzejvNn6Gs+8xLWzfYGe3n91q229DkxO2rl+O2wZFL6FOJ u52sU7jvO4iscH04FsnbA/3KH6X+VcI+w1RuZMkTam3VDE35qo1VAOE6DhdZf3jY gB0R7zrpt+yC5M6n113pCk5jfW9u872/+h4JhKmCMxa9Gpu8WT8C247blwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFOxdymWB+PGTklolKO0p9eD/vR2MMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvN0YzS1pZSDQ4Wk9TV2lVbzdTbjE0UC05SFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBV3hEAwQB V3k8AwQBXXtKAwQAXpz9AwQBufygAwQAwZT9AwQA1FfMMA0GCSqGSIb3DQEBCwUA A4IBAQBj4QNVHtnbl14XDKZlqSKtD36llEQdSoYEYSwT2OqiGVsNsTJqf8mVNOWj a07AgdmE7juzW/DSrhGcAXiyNN6In3mdOiZm/r6BjduyAnhBAk/G1J/MK7fbteK5 str57PfzJ+lEF+l/WoKPl4Zz1pknV7vGcZOu1L/q4gO9GipQjJqvVgHBd3oJXz2w NSiSPqTK2ac7ZQeBURETOOXKT1MnUE3fZBtcc8FSV6+TEi9jlk2CMu2dwiuO48A8 YfCvjeniVQPPSJ0jvPKeDqDIp9Q0ffqxagXCkPFUpClsuoRm5BPXVFibLhiSXqW0 egyypqdCikyexB1fA13FaB5m6hf6 -----END CERTIFICATE-----Generated at Wed Nov 26 17:36:24 2025 by rpki-client