This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/7tcWpWZUfFjRAri1J6RRc98qQHs.roa File: 7tcWpWZUfFjRAri1J6RRc98qQHs.roa (raw, json) Hash identifier: UMCFQzzz1Y9tdAH7wk0WZ6bxV8IcxDs3YEnSy4ipSic= Subject key identifier: EE:D7:16:A5:66:54:7C:58:D1:02:B8:B5:27:A4:51:73:DF:2A:40:7B Certificate issuer: /CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Certificate serial: 019ABA4575BC17974D3E17B7AE30DABE0243 Authority key identifier: D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/7tcWpWZUfFjRAri1J6RRc98qQHs.roa Signing time: Tue 25 Nov 2025 09:08:25 +0000 ROA not before: Tue 25 Nov 2025 09:08:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5405 IP address blocks: 5.183.211.0/24 maxlen: 24 45.153.81.0/24 maxlen: 24 45.153.82.0/23 maxlen: 23 81.27.68.0/24 maxlen: 24 94.103.180.0/24 maxlen: 24 185.134.66.0/24 maxlen: 24 185.134.67.0/24 maxlen: 24 2a11:4140::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:45:75:bc:17:97:4d:3e:17:b7:ae:30:da:be:02:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5b6a5ca37ead31fd2a350b0b412d77d95320928 Validity Not Before: Nov 25 09:08:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eed716a566547c58d102b8b527a45173df2a407b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:93:28:80:07:5c:4a:0f:21:39:4f:de:b2: 9c:b0:67:30:24:11:af:8f:00:73:9f:0e:9e:46:67: 9a:bf:18:41:1c:5f:af:b9:6c:da:af:ce:2f:87:d7: b1:c8:40:0a:31:ba:48:47:95:1b:27:fe:49:79:aa: 8e:9b:84:0d:c7:04:ae:c5:5c:b1:59:af:ae:12:31: b1:c8:4f:c6:de:e5:ef:53:04:89:4e:8e:a5:18:48: 37:90:17:49:f4:b6:ad:16:f8:fc:09:2e:82:af:ff: a5:f9:b6:bc:cd:20:b9:1f:17:5b:fe:6d:78:d1:54: 6f:5f:0b:e7:f3:d1:84:48:8c:76:bd:e6:78:80:88: d9:3c:fd:2c:53:bc:39:14:a0:f8:e1:7f:1b:e5:d8: 5a:77:25:1b:12:2a:b8:06:34:92:18:c2:80:e9:f4: ae:1b:3b:79:40:63:1b:62:dd:94:8d:32:95:38:31: b1:39:c2:a4:41:84:d3:b6:2b:0c:38:f9:d4:c7:e9: aa:db:c2:b6:ae:b4:67:ad:9e:45:98:fc:87:a7:82: ad:cc:d6:47:39:1e:a2:14:0e:4d:d3:6e:46:66:2f: 65:1d:fa:a7:92:5d:76:ae:02:1f:12:a5:a3:b9:a7: 07:eb:75:8f:ad:29:4b:84:8e:07:30:f5:d4:fa:5b: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D7:16:A5:66:54:7C:58:D1:02:B8:B5:27:A4:51:73:DF:2A:40:7B X509v3 Authority Key Identifier: keyid:D5:B6:A5:CA:37:EA:D3:1F:D2:A3:50:B0:B4:12:D7:7D:95:32:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1balyjfq0x_So1CwtBLXfZUyCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/7tcWpWZUfFjRAri1J6RRc98qQHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3fa93f-a34f-41cf-8875-d4e882083e4f/1/1balyjfq0x_So1CwtBLXfZUyCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.211.0/24 45.153.81.0-45.153.83.255 81.27.68.0/24 94.103.180.0/24 185.134.66.0/23 IPv6: 2a11:4140::/29 Signature Algorithm: sha256WithRSAEncryption 4a:27:2f:5e:37:c0:56:96:4e:78:8b:89:db:4c:70:18:91:cd: fb:04:ed:ba:2e:29:82:04:d0:b3:01:10:c2:39:5e:32:74:10: 23:c8:06:f1:3c:3b:aa:33:36:34:4a:65:66:6e:c1:96:7d:a7: 78:f3:fa:28:6b:d5:77:13:1a:00:eb:8f:58:81:64:d0:01:b0: 29:bf:7f:96:e7:58:62:6c:8f:10:0f:f9:19:ae:2f:d5:61:d1: 9d:cc:e9:a0:3e:18:22:17:3c:6c:db:59:c1:6f:b3:3f:f8:00: 66:3e:05:bb:cf:cd:50:9c:14:8a:de:70:36:3d:a4:34:29:c3: 45:9b:77:25:06:62:0c:d5:52:2f:a3:7c:55:36:31:ef:6b:c7: b1:9b:b8:58:f7:68:45:76:5e:67:43:13:e7:73:9d:1a:6d:fe: 26:84:32:59:23:62:2d:27:74:e4:ce:1f:e6:9c:49:e6:ae:ef: f8:d8:ce:bc:b1:71:1d:7b:01:86:92:0c:59:5c:63:dc:5d:83: 88:32:92:f5:5c:0e:5e:75:6f:0c:26:18:17:79:50:e4:29:bd: 69:ac:d8:35:07:f6:fa:87:39:58:c0:f1:51:a0:c3:cc:cc:53: 69:21:f8:1c:d0:ff:13:67:95:43:b6:46:ab:0b:fa:55:99:66: 1f:06:d8:37 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZq6RXW8F5dNPhe3rjDavgJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YjZhNWNhMzdlYWQzMWZkMmEzNTBiMGI0MTJkNzdkOTUz MjA5MjgwHhcNMjUxMTI1MDkwODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWQ3MTZhNTY2NTQ3YzU4ZDEwMmI4YjUyN2E0NTE3M2RmMmE0MDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAiTKIAHXEoPITlP3rKcsGcwJBGv jwBznw6eRmeavxhBHF+vuWzar84vh9exyEAKMbpIR5UbJ/5JeaqOm4QNxwSuxVyx Wa+uEjGxyE/G3uXvUwSJTo6lGEg3kBdJ9LatFvj8CS6Cr/+l+ba8zSC5Hxdb/m14 0VRvXwvn89GESIx2veZ4gIjZPP0sU7w5FKD44X8b5dhadyUbEiq4BjSSGMKA6fSu Gzt5QGMbYt2UjTKVODGxOcKkQYTTtisMOPnUx+mq28K2rrRnrZ5FmPyHp4KtzNZH OR6iFA5N025GZi9lHfqnkl12rgIfEqWjuacH63WPrSlLhI4HMPXU+ltAKQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFO7XFqVmVHxY0QK4tSekUXPfKkB7MB8GA1UdIwQY MBaAFNW2pco36tMf0qNQsLQS132VMgkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUt ZDRlODgyMDgzZTRmLzEvN3RjV3BXWlVmRmpSQXJpMUo2UlJjOThxUUhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zZmE5M2YtYTM0Zi00MWNmLTg4NzUtZDRlODgyMDgzZTRm LzEvMWJhbHlqZnEweF9TbzFDd3RCTFhmWlV5Q1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQABbfTMAwD BAAtmVEDBAItmVADBABRG0QDBABeZ7QDBAG5hkIwDQQCAAIwBwMFAyoRQUAwDQYJ KoZIhvcNAQELBQADggEBAEonL143wFaWTniLidtMcBiRzfsE7bouKYIE0LMBEMI5 XjJ0ECPIBvE8O6ozNjRKZWZuwZZ9p3jz+ihr1XcTGgDrj1iBZNABsCm/f5bnWGJs jxAP+RmuL9Vh0Z3M6aA+GCIXPGzbWcFvsz/4AGY+BbvPzVCcFIrecDY9pDQpw0Wb dyUGYgzVUi+jfFU2Me9rx7GbuFj3aEV2XmdDE+dznRpt/iaEMlkjYi0ndOTOH+ac Seau7/jYzryxcR17AYaSDFlcY9xdg4gykvVcDl51bwwmGBd5UOQpvWms2DUH9vqH OVjA8VGgw8zMU2kh+BzQ/xNnlUO2RqsL+lWZZh8G2Dc= -----END CERTIFICATE-----Generated at Sun Dec 14 08:19:51 2025 by rpki-client