This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7aZRVzdPmkae_uH3g_MWobRsSVM.roa File: 7aZRVzdPmkae_uH3g_MWobRsSVM.roa (raw, json) Hash identifier: 3S/FmiKqV6ApcKBBNaqzLpwGD6Gp76kl0Hd1u46q/4w= Subject key identifier: ED:A6:51:57:37:4F:9A:46:9E:FE:E1:F7:83:F3:16:A1:B4:6C:49:53 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019A9CD15C628945379CECEE4639FB1997E7 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7aZRVzdPmkae_uH3g_MWobRsSVM.roa Signing time: Wed 19 Nov 2025 15:52:37 +0000 ROA not before: Wed 19 Nov 2025 15:52:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 5.181.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 09:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:d1:5c:62:89:45:37:9c:ec:ee:46:39:fb:19:97:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Nov 19 15:52:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eda65157374f9a469efee1f783f316a1b46c4953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:49:84:8c:4c:9b:73:f2:95:ac:33:34:a6:40: 76:e3:06:7d:38:ac:c5:b5:26:c4:cf:e8:d4:00:e0: 2e:58:7d:aa:49:6e:d8:9c:3a:4d:71:9e:17:37:d8: c0:84:26:5c:a4:b2:f3:43:07:10:f4:6d:37:d8:4c: b0:81:1a:77:3f:77:1b:a3:d2:d8:86:27:8c:bb:8b: 40:d6:d1:04:c8:b3:2e:01:62:72:e2:92:7f:0c:0f: b2:85:8a:5d:b4:11:cb:b1:3d:3a:84:c2:b2:ec:af: 79:b8:0f:27:8d:c1:9c:0d:3a:61:ac:3d:3d:7e:71: d1:d5:0a:3c:08:be:73:fb:a6:d2:d9:10:4d:27:10: e8:14:b9:3e:c1:b4:34:84:4f:d8:4b:9b:da:4f:0d: f7:90:d8:d6:31:8d:2c:5e:e4:6c:a8:fe:ef:db:c9: c7:1e:6b:de:ae:0f:68:34:85:05:e6:95:80:56:8c: d8:0a:16:1e:f4:a6:b7:2b:68:d7:0b:d2:81:43:0f: e5:c1:e0:a9:19:b6:c6:f2:a4:41:f8:c1:46:30:12: c7:39:fa:cc:64:54:e1:c1:da:c7:52:95:66:dc:b4: bc:46:0a:72:ed:60:ff:13:5c:52:01:b5:74:24:d8: 9f:54:fe:19:77:89:15:e9:e6:0d:44:f5:da:a6:76: 26:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A6:51:57:37:4F:9A:46:9E:FE:E1:F7:83:F3:16:A1:B4:6C:49:53 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/7aZRVzdPmkae_uH3g_MWobRsSVM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.84.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:9a:29:52:1e:15:14:e4:69:11:ff:14:54:20:f6:de:d2:31: 63:44:4f:dd:48:50:42:e7:64:25:7a:fd:74:72:6e:f3:03:86: 1b:bb:e6:f6:11:80:eb:06:f8:d2:2e:be:c8:e9:1b:cc:15:a3: a8:e0:8b:e5:ea:7b:22:ec:46:d4:d9:fd:78:28:a3:46:08:ae: b5:e6:3b:e8:d7:02:3a:ce:a2:b9:67:b2:9a:0f:da:6d:3f:ee: 36:99:b8:86:4e:7d:d1:3a:81:23:e9:77:a2:b4:26:c1:1c:a3: 1b:08:ac:e6:9e:31:a7:61:97:86:79:c4:43:58:aa:e6:56:34: fc:d1:f3:7d:e5:7c:89:01:ad:35:9f:77:f0:61:54:da:4d:97: 24:85:ae:a8:8f:39:0c:23:8d:5c:6c:fe:91:76:ab:3b:cb:e1: 3a:fe:03:8a:9c:60:76:9a:53:63:3c:be:a0:16:48:81:b9:7e: 4a:c4:41:c3:d7:6c:5d:3f:26:0e:b8:4e:bb:7b:5d:50:ba:e4: 66:53:ad:b8:e0:d2:f5:7a:25:16:9c:d8:24:74:fc:23:2b:be: 0e:76:34:2f:4f:d0:1b:32:b0:bf:88:6b:f9:6a:7e:e8:1e:b3: 9c:dd:ce:ff:df:f9:99:79:cc:a3:d7:4e:f3:9d:a9:6e:45:38: e9:7f:55:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqc0VxiiUU3nOzuRjn7GZfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMTE5MTU1MjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGE2NTE1NzM3NGY5YTQ2OWVmZWUxZjc4M2YzMTZhMWI0NmM0OTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kmEjEybc/KVrDM0pkB24wZ9OKzF tSbEz+jUAOAuWH2qSW7YnDpNcZ4XN9jAhCZcpLLzQwcQ9G032EywgRp3P3cbo9LY hieMu4tA1tEEyLMuAWJy4pJ/DA+yhYpdtBHLsT06hMKy7K95uA8njcGcDTphrD09 fnHR1Qo8CL5z+6bS2RBNJxDoFLk+wbQ0hE/YS5vaTw33kNjWMY0sXuRsqP7v28nH Hmverg9oNIUF5pWAVozYChYe9Ka3K2jXC9KBQw/lweCpGbbG8qRB+MFGMBLHOfrM ZFThwdrHUpVm3LS8Rgpy7WD/E1xSAbV0JNifVP4Zd4kV6eYNRPXapnYm8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2mUVc3T5pGnv7h94PzFqG0bElTMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvN2FaUlZ6ZFBta2FlX3VIM2dfTVdvYlJzU1ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbVUMA0G CSqGSIb3DQEBCwUAA4IBAQBbmilSHhUU5GkR/xRUIPbe0jFjRE/dSFBC52Qlev10 cm7zA4Ybu+b2EYDrBvjSLr7I6RvMFaOo4Ivl6nsi7EbU2f14KKNGCK615jvo1wI6 zqK5Z7KaD9ptP+42mbiGTn3ROoEj6XeitCbBHKMbCKzmnjGnYZeGecRDWKrmVjT8 0fN95XyJAa01n3fwYVTaTZckha6ojzkMI41cbP6Rdqs7y+E6/gOKnGB2mlNjPL6g FkiBuX5KxEHD12xdPyYOuE67e11QuuRmU6244NL1eiUWnNgkdPwjK74OdjQvT9Ab MrC/iGv5an7oHrOc3c7/3/mZecyj107znaluRTjpf1Xo -----END CERTIFICATE-----Generated at Fri Nov 21 18:56:17 2025 by rpki-client