This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7jxkATBlNKQL-agXUd91-2xcxsU.roa File: 7jxkATBlNKQL-agXUd91-2xcxsU.roa (raw, json) Hash identifier: Z0e+CZKXcqBe1TYGruYfvnJPtkiXrdtgxV/hG+2KsoI= Subject key identifier: EE:3C:64:01:30:65:34:A4:0B:F9:A8:17:51:DF:75:FB:6C:5C:C6:C5 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A30387BA741CA1C940C648F51D29CA Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7jxkATBlNKQL-agXUd91-2xcxsU.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 193.25.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:03:87:ba:74:1c:a1:c9:40:c6:48:f5:1d:29:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee3c6401306534a40bf9a81751df75fb6c5cc6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:1d:b9:b4:5c:3c:9d:80:e3:cb:31:0e:0f: b6:70:c5:ed:f2:73:36:18:7d:7b:47:41:8e:f6:30: fd:14:ec:96:cb:15:d4:b6:78:49:d0:3a:bc:43:cc: 25:a9:8b:0a:40:f5:01:e4:59:cf:24:8b:66:e7:4d: 29:68:b0:ef:b0:f3:44:b6:b4:41:ba:e5:bb:21:ab: 85:61:95:78:09:88:f6:49:ba:19:66:e3:b7:c8:89: f7:6b:a8:94:fd:28:8b:b9:ce:49:4d:72:8d:a0:bc: 75:1d:1c:84:fd:38:20:a5:91:46:1c:a9:dd:f3:34: ee:e4:96:6b:1c:a9:c3:fe:17:12:94:98:f8:2a:7c: cf:49:92:65:54:e1:60:1d:68:f1:9b:d5:b5:39:38: 70:dc:91:4e:4f:41:aa:47:ce:0c:9d:51:7b:ea:dc: d0:58:8b:df:34:5e:d0:69:20:21:67:26:ee:9e:bd: cb:95:91:cb:73:99:db:98:03:1d:8f:4a:ed:0a:78: f4:df:0b:3b:94:4f:73:51:5c:9a:32:15:7a:67:e5: 8a:65:39:b7:00:28:f2:f1:2a:dc:06:fc:28:1f:f5: 72:f4:ea:d9:3d:38:e7:8c:5e:65:a6:19:f3:ea:fd: d7:69:9c:20:1a:2e:5e:92:23:35:36:83:94:3e:6f: 8d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3C:64:01:30:65:34:A4:0B:F9:A8:17:51:DF:75:FB:6C:5C:C6:C5 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7jxkATBlNKQL-agXUd91-2xcxsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.25.218.0/24 Signature Algorithm: sha256WithRSAEncryption 54:c0:84:11:5b:2d:76:ef:f3:93:1b:c5:fd:e8:4a:c7:de:76: ab:a4:cf:ea:f1:53:02:0f:cb:91:bb:72:83:cf:cf:ec:cd:e8: 86:56:de:02:24:ee:63:0b:34:0c:cb:81:0c:16:5e:33:a1:f4: 01:7f:34:ea:12:70:5c:3a:3b:69:27:e0:cd:71:d9:87:bd:6b: fe:00:65:63:bc:a2:71:a4:ea:42:43:25:f6:4a:8b:f9:cd:6f: 24:8c:a5:e6:b5:68:94:97:69:16:cf:17:4f:35:f3:25:26:18: 2d:f7:86:c1:56:67:d7:5f:93:d7:2c:27:6d:a6:b8:62:62:6b: 39:ec:b3:68:85:f3:b3:97:9d:50:bf:fe:c1:cf:7a:b7:b5:e6: cd:ce:9d:95:e8:ef:5a:a9:c2:e3:df:76:2a:5f:74:cc:83:5a: 8a:f3:bd:7a:99:c5:1c:81:20:03:1c:fc:56:42:16:7f:47:23: b5:54:0a:74:75:41:d1:a5:73:d8:10:44:fc:ed:66:4d:54:ba: d8:64:56:a7:89:6f:db:7e:55:bf:cc:11:1f:40:e8:2d:2e:36: 95:08:ed:a4:d3:f5:7f:1e:dc:7d:82:05:c7:e8:2f:b5:00:ca: 4d:a7:46:c3:eb:0b:dc:a5:0e:ee:07:af:89:89:95:95:67:2a: 97:3b:9a:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4owOHunQcoclAxkj1HSnKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTNjNjQwMTMwNjUzNGE0MGJmOWE4MTc1MWRmNzVmYjZjNWNjNmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7QdubRcPJ2A48sxDg+2cMXt8nM2 GH17R0GO9jD9FOyWyxXUtnhJ0Dq8Q8wlqYsKQPUB5FnPJItm500paLDvsPNEtrRB uuW7IauFYZV4CYj2SboZZuO3yIn3a6iU/SiLuc5JTXKNoLx1HRyE/TggpZFGHKnd 8zTu5JZrHKnD/hcSlJj4KnzPSZJlVOFgHWjxm9W1OThw3JFOT0GqR84MnVF76tzQ WIvfNF7QaSAhZybunr3LlZHLc5nbmAMdj0rtCnj03ws7lE9zUVyaMhV6Z+WKZTm3 ACjy8SrcBvwoH/Vy9OrZPTjnjF5lphnz6v3XaZwgGi5ekiM1NoOUPm+NsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO48ZAEwZTSkC/moF1HfdftsXMbFMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvN2p4a0FUQmxOS1FMLWFnWFVkOTEtMnhjeHNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRnaMA0G CSqGSIb3DQEBCwUAA4IBAQBUwIQRWy127/OTG8X96ErH3narpM/q8VMCD8uRu3KD z8/szeiGVt4CJO5jCzQMy4EMFl4zofQBfzTqEnBcOjtpJ+DNcdmHvWv+AGVjvKJx pOpCQyX2Sov5zW8kjKXmtWiUl2kWzxdPNfMlJhgt94bBVmfXX5PXLCdtprhiYms5 7LNohfOzl51Qv/7Bz3q3tebNzp2V6O9aqcLj33YqX3TMg1qK8716mcUcgSADHPxW QhZ/RyO1VAp0dUHRpXPYEET87WZNVLrYZFaniW/bflW/zBEfQOgtLjaVCO2k0/V/ Htx9ggXH6C+1AMpNp0bD6wvcpQ7uB6+JiZWVZyqXO5qT -----END CERTIFICATE-----Generated at Fri Jan 2 12:05:21 2026 by rpki-client