This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7FGhWK2nJtbiPMuFTFyEF0ZjvTs.roa File: 7FGhWK2nJtbiPMuFTFyEF0ZjvTs.roa (raw, json) Hash identifier: COMkCRdGGRFjTwCVhnDYltEOIGSRMFIjdqTES1F/7Yo= Subject key identifier: EC:51:A1:58:AD:A7:26:D6:E2:3C:CB:85:4C:5C:84:17:46:63:BD:3B Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019AD0D7B50807FFE7BBE69F6925DB1FB4BA Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7FGhWK2nJtbiPMuFTFyEF0ZjvTs.roa Signing time: Sat 29 Nov 2025 18:19:48 +0000 ROA not before: Sat 29 Nov 2025 18:19:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210537 IP address blocks: 5.83.148.0/24 maxlen: 24 5.175.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d0:d7:b5:08:07:ff:e7:bb:e6:9f:69:25:db:1f:b4:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 29 18:19:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec51a158ada726d6e23ccb854c5c84174663bd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:10:70:42:7c:07:6c:05:f0:43:ed:7d:31: 75:56:41:f6:a6:4a:2a:67:64:42:ed:43:37:8a:0a: a9:be:80:e0:fe:42:04:dd:fa:ad:a1:3b:84:a3:aa: 48:37:a3:03:17:61:06:76:25:1d:3a:3d:96:1a:bd: 79:67:16:b8:79:ff:e4:76:17:e5:b7:7f:f5:90:5b: 14:e4:cc:92:08:a9:e6:4e:f8:a5:6b:c6:73:ba:1f: 7a:5f:d6:95:7c:ec:53:a7:5c:d8:27:5e:b6:9e:f2: 68:00:75:b8:fb:07:72:67:6a:4b:13:a9:9b:28:8f: 41:7d:61:6b:c2:1f:66:ed:94:bd:69:8b:cc:dc:47: 83:94:e3:05:7f:08:05:98:88:2f:2d:70:2a:de:76: b8:8c:8c:a9:a3:9d:df:34:c0:52:47:c1:3b:65:f0: e9:65:2e:9c:00:55:d9:e3:a1:ce:77:60:09:9d:8a: 8f:9c:21:a2:51:be:8b:00:b6:f9:fd:74:be:0f:84: 41:1f:f3:8f:51:56:18:cf:c1:47:72:10:30:96:fb: 59:63:7e:95:1e:21:0d:f0:23:74:5e:44:c5:74:3c: c3:58:cc:ef:88:30:26:4a:25:9e:1c:76:c9:d6:44: 0d:1e:4d:1e:ff:25:0e:34:f5:d8:d4:c5:88:90:13: 9e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:A1:58:AD:A7:26:D6:E2:3C:CB:85:4C:5C:84:17:46:63:BD:3B X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/7FGhWK2nJtbiPMuFTFyEF0ZjvTs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.148.0/24 5.175.210.0/24 Signature Algorithm: sha256WithRSAEncryption df:8d:80:31:48:f7:b4:73:d4:1a:1a:21:81:fb:c4:47:a5:2c: ba:ed:e7:22:e2:da:8a:a4:9b:58:65:62:2d:39:45:a0:57:fb: 1f:5f:57:51:1d:dc:cc:01:e8:55:88:1b:31:80:ad:47:38:fc: 8b:2e:6a:9d:2d:c1:08:8d:a8:8d:e8:cf:0b:d4:00:6b:8c:f3: 28:eb:2a:78:a5:50:b1:df:0f:5b:bf:4a:09:20:06:fc:af:b6: 38:76:4f:95:c0:3e:03:e8:bb:06:18:e3:be:3e:4b:af:3b:22: cf:ed:e6:28:8f:41:da:dc:77:3c:cd:eb:d5:2e:26:05:ae:af: aa:3c:34:02:e1:ee:ea:b2:80:4b:6a:79:82:bc:99:4b:a4:73: d5:a0:2c:c8:36:ff:49:a5:9e:81:c7:44:f4:1f:98:a5:ad:b6: 2e:6f:a4:74:51:ae:22:26:7c:97:b6:b4:8f:c3:0a:8b:7d:ac: c9:18:d7:d2:38:70:06:90:b8:ae:73:ac:8f:aa:f0:18:54:bb: 1b:42:41:c5:b2:07:d1:62:a2:c5:4b:67:97:e3:cc:ba:69:17: 5f:24:c6:64:39:43:8c:46:3e:cf:7d:ba:bd:a4:f7:5c:df:6d: e4:a6:73:3c:a3:5f:ab:7a:1d:a0:7d:56:4c:26:ba:67:86:2e: c9:ec:09:e6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrQ17UIB//nu+afaSXbH7S6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI5MTgxOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzUxYTE1OGFkYTcyNmQ2ZTIzY2NiODU0YzVjODQxNzQ2NjNiZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz4QcEJ8B2wF8EPtfTF1VkH2pkoq Z2RC7UM3igqpvoDg/kIE3fqtoTuEo6pIN6MDF2EGdiUdOj2WGr15Zxa4ef/kdhfl t3/1kFsU5MySCKnmTvila8Zzuh96X9aVfOxTp1zYJ162nvJoAHW4+wdyZ2pLE6mb KI9BfWFrwh9m7ZS9aYvM3EeDlOMFfwgFmIgvLXAq3na4jIypo53fNMBSR8E7ZfDp ZS6cAFXZ46HOd2AJnYqPnCGiUb6LALb5/XS+D4RBH/OPUVYYz8FHchAwlvtZY36V HiEN8CN0XkTFdDzDWMzviDAmSiWeHHbJ1kQNHk0e/yUONPXY1MWIkBOeqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOxRoVitpybW4jzLhUxchBdGY707MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvN0ZHaFdLMm5KdGJpUE11RlRGeUVGMFpqdlRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOUAwQA Ba/SMA0GCSqGSIb3DQEBCwUAA4IBAQDfjYAxSPe0c9QaGiGB+8RHpSy67eci4tqK pJtYZWItOUWgV/sfX1dRHdzMAehViBsxgK1HOPyLLmqdLcEIjaiN6M8L1ABrjPMo 6yp4pVCx3w9bv0oJIAb8r7Y4dk+VwD4D6LsGGOO+PkuvOyLP7eYoj0Ha3Hc8zevV LiYFrq+qPDQC4e7qsoBLanmCvJlLpHPVoCzINv9JpZ6Bx0T0H5ilrbYub6R0Ua4i JnyXtrSPwwqLfazJGNfSOHAGkLiuc6yPqvAYVLsbQkHFsgfRYqLFS2eX48y6aRdf JMZkOUOMRj7Pfbq9pPdc323kpnM8o1+reh2gfVZMJrpnhi7J7Anm -----END CERTIFICATE-----Generated at Fri Dec 5 17:03:51 2025 by rpki-client