This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/7eIKY9Ns0L09w5kNzh8lsSD-qX4.roa File: 7eIKY9Ns0L09w5kNzh8lsSD-qX4.roa (raw, json) Hash identifier: y3hJhXF+j9m5PtpyF4jbGxtnUIPaOdhFtO4SCic0Agc= Subject key identifier: ED:E2:0A:63:D3:6C:D0:BD:3D:C3:99:0D:CE:1F:25:B1:20:FE:A9:7E Certificate issuer: /CN=e67100679f07282cd48cb5107bf97af7af3889c9 Certificate serial: 019B054336D00A245A1EE4E2ED67BF377FC2 Authority key identifier: E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/7eIKY9Ns0L09w5kNzh8lsSD-qX4.roa Signing time: Tue 09 Dec 2025 22:37:29 +0000 ROA not before: Tue 09 Dec 2025 22:37:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204220 IP address blocks: 217.14.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.mft rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:43:36:d0:0a:24:5a:1e:e4:e2:ed:67:bf:37:7f:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e67100679f07282cd48cb5107bf97af7af3889c9 Validity Not Before: Dec 9 22:37:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ede20a63d36cd0bd3dc3990dce1f25b120fea97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ba:4a:bd:14:98:33:84:11:19:d3:8c:41:03: d3:7a:18:61:95:19:dd:31:98:27:b8:81:ab:d3:59: 10:df:aa:47:fa:27:62:97:2c:3a:ca:fa:97:cc:bc: 07:e9:5e:56:9e:62:ba:c7:d3:84:ac:0c:d3:49:fe: 58:c0:51:2d:31:2d:70:29:d0:76:b4:50:04:5f:f5: f8:6e:0c:a6:fa:cc:74:08:6e:de:3a:34:20:14:44: 33:fd:4b:b3:8f:d5:86:65:5d:48:94:a7:64:f6:be: 25:76:82:bc:f1:f9:b5:fa:9c:dc:be:c8:0c:c5:a9: 47:b1:55:df:cc:cb:e4:b8:c3:45:94:58:8c:38:e8: 36:41:14:23:9e:ef:e7:29:b1:e2:c6:17:ec:2a:37: ae:2d:9d:fb:25:82:92:00:9a:01:7b:f5:20:46:15: a9:f6:74:1c:d6:21:a3:53:3b:69:e0:74:2c:51:af: 43:06:62:2d:52:10:df:bd:13:8c:3c:68:57:a5:ba: fb:85:08:4a:3a:c0:4c:29:d0:71:73:9d:b6:e2:ed: 29:e9:e7:c2:92:f5:b0:ac:5a:21:18:10:0b:54:d9: be:a3:ce:95:c5:3a:bb:50:fb:71:79:a6:f8:eb:43: 23:82:d5:4a:c5:b0:fb:ef:f3:19:40:c2:d8:4a:42: a6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E2:0A:63:D3:6C:D0:BD:3D:C3:99:0D:CE:1F:25:B1:20:FE:A9:7E X509v3 Authority Key Identifier: keyid:E6:71:00:67:9F:07:28:2C:D4:8C:B5:10:7B:F9:7A:F7:AF:38:89:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nEAZ58HKCzUjLUQe_l69684ick.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/7eIKY9Ns0L09w5kNzh8lsSD-qX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/5c265e-4187-4a74-996e-ae8c5830cc20/1/5nEAZ58HKCzUjLUQe_l69684ick.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.14.138.0/24 Signature Algorithm: sha256WithRSAEncryption 74:74:f9:c6:a1:f4:b9:b0:25:0c:14:1f:a4:be:7a:71:87:3a: 7c:79:af:6f:f7:c4:88:59:7c:fc:e5:20:1e:ee:b3:10:f9:9d: 0d:c5:65:17:cf:00:77:48:7c:f3:6d:79:8f:49:a3:10:cd:22: 68:e3:d0:93:12:2b:f3:db:79:a6:a8:0b:36:70:73:45:6a:33: 6d:2f:aa:c2:41:4a:f7:a7:40:d3:c8:d3:9f:2a:9c:b4:b8:1e: 47:03:bf:01:2c:49:77:7e:a6:3a:35:9f:de:63:64:a3:ea:58: f8:d6:1f:22:3f:1d:be:83:22:03:36:b8:1d:a3:a7:a7:6f:be: c8:61:a7:02:f2:17:4d:93:21:41:71:5a:a6:a3:dc:3d:46:40: 29:e6:86:ce:d5:1e:4c:62:08:1e:fd:39:22:81:35:90:be:6e: 1e:12:e9:be:61:30:9d:cd:15:11:d5:e4:21:07:ee:fd:f8:61: 5d:26:50:f6:b5:f0:21:03:09:e6:cf:73:f5:26:1a:17:5c:5a: 4c:40:e1:1d:0f:54:f9:bf:b7:d9:55:b4:1c:25:79:18:8a:19: 1b:b7:f9:98:70:99:f0:42:73:bd:58:4b:8b:5c:d2:46:ca:79: 33:12:a0:fa:20:6f:7c:b4:51:fc:2d:5b:32:8b:92:0d:36:27: c5:7e:5e:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsFQzbQCiRaHuTi7We/N3/CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2NzEwMDY3OWYwNzI4MmNkNDhjYjUxMDdiZjk3YWY3YWYz ODg5YzkwHhcNMjUxMjA5MjIzNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGUyMGE2M2QzNmNkMGJkM2RjMzk5MGRjZTFmMjViMTIwZmVhOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07pKvRSYM4QRGdOMQQPTehhhlRnd MZgnuIGr01kQ36pH+idilyw6yvqXzLwH6V5WnmK6x9OErAzTSf5YwFEtMS1wKdB2 tFAEX/X4bgym+sx0CG7eOjQgFEQz/Uuzj9WGZV1IlKdk9r4ldoK88fm1+pzcvsgM xalHsVXfzMvkuMNFlFiMOOg2QRQjnu/nKbHixhfsKjeuLZ37JYKSAJoBe/UgRhWp 9nQc1iGjUztp4HQsUa9DBmItUhDfvROMPGhXpbr7hQhKOsBMKdBxc5224u0p6efC kvWwrFohGBALVNm+o86VxTq7UPtxeab460MjgtVKxbD77/MZQMLYSkKmGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3iCmPTbNC9PcOZDc4fJbEg/ql+MB8GA1UdIwQY MBaAFOZxAGefBygs1Iy1EHv5evevOInJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUt YWU4YzU4MzBjYzIwLzEvN2VJS1k5TnMwTDA5dzVrTnpoOGxzU0QtcVg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81YzI2NWUtNDE4Ny00YTc0LTk5NmUtYWU4YzU4MzBjYzIw LzEvNW5FQVo1OEhLQ3pVakxVUWVfbDY5Njg0aWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Q6KMA0G CSqGSIb3DQEBCwUAA4IBAQB0dPnGofS5sCUMFB+kvnpxhzp8ea9v98SIWXz85SAe 7rMQ+Z0NxWUXzwB3SHzzbXmPSaMQzSJo49CTEivz23mmqAs2cHNFajNtL6rCQUr3 p0DTyNOfKpy0uB5HA78BLEl3fqY6NZ/eY2Sj6lj41h8iPx2+gyIDNrgdo6enb77I YacC8hdNkyFBcVqmo9w9RkAp5obO1R5MYgge/TkigTWQvm4eEum+YTCdzRUR1eQh B+79+GFdJlD2tfAhAwnmz3P1JhoXXFpMQOEdD1T5v7fZVbQcJXkYihkbt/mYcJnw QnO9WEuLXNJGynkzEqD6IG98tFH8LVsyi5INNifFfl4m -----END CERTIFICATE-----Generated at Fri Dec 26 17:36:51 2025 by rpki-client