This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t7EXR7iPpgLnNZPGWKg3jFvfJ2A.roa File: t7EXR7iPpgLnNZPGWKg3jFvfJ2A.roa (raw, json) Hash identifier: nnXncLKqBOHz+DNanW1YrRMpz6Q0coz+oGF5nCl5Nko= Subject key identifier: B7:B1:17:47:B8:8F:A6:02:E7:35:93:C6:58:A8:37:8C:5B:DF:27:60 Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Certificate serial: 019AB632870A4E5330D20587522A5C840324 Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t7EXR7iPpgLnNZPGWKg3jFvfJ2A.roa Signing time: Mon 24 Nov 2025 14:09:15 +0000 ROA not before: Mon 24 Nov 2025 14:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395374 IP address blocks: 163.5.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:32:87:0a:4e:53:30:d2:05:87:52:2a:5c:84:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb Validity Not Before: Nov 24 14:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7b11747b88fa602e73593c658a8378c5bdf2760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:a7:c6:58:b8:ef:d1:59:d4:11:6e:bf:b1: 1b:70:50:e5:2f:72:52:a1:47:4f:4d:d7:00:73:79: 07:8c:80:43:64:fd:8b:23:3f:e4:ce:d9:3d:c1:f5: cd:a8:93:09:b3:4c:ce:d2:4a:d9:1a:4f:b1:e6:f3: d6:31:32:20:56:ea:ce:49:e3:aa:fa:36:f4:d3:50: 63:dc:a6:cf:e7:a0:19:02:10:31:9b:76:7a:dc:00: 5e:0d:23:95:94:54:03:9f:38:07:47:b5:d6:c3:69: 1b:07:13:bf:34:fc:ba:7a:46:37:30:0e:6e:36:7d: 45:d0:40:85:ba:7b:89:05:00:f8:30:d8:4b:65:f3: f7:6c:80:66:49:b0:c9:6d:8a:9d:b2:ea:0f:6d:76: 24:f9:ee:1b:a5:40:43:f7:24:62:e3:a4:69:5b:b4: 3e:f3:0d:62:63:22:3f:68:63:c7:e8:b5:f2:4a:b1: c0:6c:8a:04:5d:d5:04:81:81:93:4e:df:ba:bb:ce: e1:68:45:15:fc:7c:17:5f:7c:39:82:5c:bb:74:3c: b1:ae:80:2f:3d:1b:16:5f:1b:ae:d3:2f:a3:04:89: e2:6f:42:0c:00:d8:d0:04:93:b6:69:10:35:3b:fa: f3:97:7a:0c:12:8e:12:fd:48:31:8f:0c:d0:d4:4b: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B1:17:47:B8:8F:A6:02:E7:35:93:C6:58:A8:37:8C:5B:DF:27:60 X509v3 Authority Key Identifier: keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t7EXR7iPpgLnNZPGWKg3jFvfJ2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.5.104.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:02:6f:24:bb:3a:22:7a:c9:66:37:f5:b1:34:8c:28:ef:50: 75:b3:02:ee:03:8f:1e:3f:e7:6d:d2:f8:7c:53:04:3d:81:85: a1:2b:31:14:36:bc:01:81:4c:4c:a1:02:4a:ec:91:93:9b:52: 70:e4:3e:97:13:10:14:35:70:4b:9a:82:a6:b4:b7:67:8e:02: 1a:af:65:5c:a4:13:b4:14:98:bc:c2:a6:15:61:7b:d0:31:08: 91:a2:46:1a:eb:f8:f6:be:61:6c:02:63:e1:29:1b:83:7d:66: c0:7a:bf:c9:08:c1:96:9e:99:ca:60:73:66:c1:0a:f4:0c:98: cb:2a:ce:42:69:96:16:c0:37:d8:b9:32:ee:81:7f:74:05:ba: 61:fe:c1:29:89:7a:dc:45:47:a2:ec:96:b0:56:6c:15:95:94: 45:57:50:8a:aa:e2:fc:76:9d:93:be:07:8d:64:87:15:f9:62: ac:0d:ca:97:9a:87:be:40:7a:50:2f:a3:03:66:0a:ff:db:2b: 3c:31:0b:db:c1:94:6c:82:9b:7a:a2:53:7a:df:9c:04:e4:fd: 2b:9a:04:02:ab:b9:57:25:a6:c7:81:0a:a2:0a:90:1a:8b:d6: e7:3d:51:c9:c7:ff:b8:af:35:2c:a3:b5:a2:80:b7:cd:b9:8a: eb:31:09:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq2MocKTlMw0gWHUipchAMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2 MjRiY2IwHhcNMjUxMTI0MTQwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2IxMTc0N2I4OGZhNjAyZTczNTkzYzY1OGE4Mzc4YzViZGYyNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmCnxli479FZ1BFuv7EbcFDlL3JS oUdPTdcAc3kHjIBDZP2LIz/kztk9wfXNqJMJs0zO0krZGk+x5vPWMTIgVurOSeOq +jb001Bj3KbP56AZAhAxm3Z63ABeDSOVlFQDnzgHR7XWw2kbBxO/NPy6ekY3MA5u Nn1F0ECFunuJBQD4MNhLZfP3bIBmSbDJbYqdsuoPbXYk+e4bpUBD9yRi46RpW7Q+ 8w1iYyI/aGPH6LXySrHAbIoEXdUEgYGTTt+6u87haEUV/HwXX3w5gly7dDyxroAv PRsWXxuu0y+jBInib0IMANjQBJO2aRA1O/rzl3oMEo4S/UgxjwzQ1Es9KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLexF0e4j6YC5zWTxlioN4xb3ydgMB8GA1UdIwQY MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt OWZlOTQxMDhmZjAxLzEvdDdFWFI3aVBwZ0xuTlpQR1dLZzNqRnZmSjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVoMA0G CSqGSIb3DQEBCwUAA4IBAQAbAm8kuzoieslmN/WxNIwo71B1swLuA48eP+dt0vh8 UwQ9gYWhKzEUNrwBgUxMoQJK7JGTm1Jw5D6XExAUNXBLmoKmtLdnjgIar2VcpBO0 FJi8wqYVYXvQMQiRokYa6/j2vmFsAmPhKRuDfWbAer/JCMGWnpnKYHNmwQr0DJjL Ks5CaZYWwDfYuTLugX90Bbph/sEpiXrcRUei7JawVmwVlZRFV1CKquL8dp2TvgeN ZIcV+WKsDcqXmoe+QHpQL6MDZgr/2ys8MQvbwZRsgpt6olN635wE5P0rmgQCq7lX JabHgQqiCpAai9bnPVHJx/+4rzUso7WigLfNuYrrMQmL -----END CERTIFICATE-----Generated at Fri Dec 5 13:58:07 2025 by rpki-client