This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7P0xN1XPPXfzuJjXef42Iaxs40A.roa File: 7P0xN1XPPXfzuJjXef42Iaxs40A.roa (raw, json) Hash identifier: Szxnfn72VKymEKCytT1IJvnAxzM6hc3FKMvWmYVD1F0= Subject key identifier: EC:FD:31:37:55:CF:3D:77:F3:B8:98:D7:79:FE:36:21:AC:6C:E3:40 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019A75474A948EB709CEB417E2E1784F8277 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7P0xN1XPPXfzuJjXef42Iaxs40A.roa Signing time: Tue 11 Nov 2025 23:36:37 +0000 ROA not before: Tue 11 Nov 2025 23:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 212.116.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:75:47:4a:94:8e:b7:09:ce:b4:17:e2:e1:78:4f:82:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Nov 11 23:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ecfd313755cf3d77f3b898d779fe3621ac6ce340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8d:5c:0e:07:a0:ab:d1:f8:7c:96:c9:44:55: 7d:59:fc:00:d4:76:4e:4b:6d:10:69:7c:37:93:a7: 56:06:88:6b:25:18:0a:48:9b:a1:8f:95:f4:3d:ac: 07:10:cf:9b:58:8b:0b:ee:06:d2:f6:ea:cf:b8:59: 20:1e:c8:65:90:3e:04:13:d3:96:d4:cc:01:fa:e9: 36:7b:4d:65:29:d4:94:39:70:1f:17:68:23:36:de: 94:8f:a6:f1:d8:77:b2:e0:d5:0b:cb:94:ca:68:4d: a6:8c:2d:0e:f0:4c:fe:a1:7a:52:38:31:86:c6:84: 3c:2b:7f:8b:0b:60:27:3a:77:66:1a:1f:65:1c:c6: 49:df:72:50:00:2f:6e:3b:a7:40:09:8b:22:08:83: 57:d7:8c:31:b6:8f:11:1a:f1:81:f9:83:13:a3:7c: 3f:f0:d8:5a:ae:b7:f0:da:76:bf:58:8c:57:f8:ca: 7a:06:af:a7:84:ce:c1:8d:3a:5c:85:2d:60:d1:09: c8:81:f3:ab:9f:99:75:07:9d:32:08:07:31:95:97: 8a:b5:2b:7e:39:55:81:68:bd:46:f8:af:bd:6b:ea: 84:81:83:1c:27:d8:e5:57:09:f5:5b:a4:93:0a:ef: b7:71:db:84:f2:e2:18:38:e7:02:ff:86:d4:be:d4: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FD:31:37:55:CF:3D:77:F3:B8:98:D7:79:FE:36:21:AC:6C:E3:40 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7P0xN1XPPXfzuJjXef42Iaxs40A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.252.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:95:f0:1d:d2:dc:b5:b9:a3:ac:a2:38:ac:39:aa:93:90:41: d4:8f:0c:b4:1e:8f:6e:d3:9c:ab:5f:9e:43:74:dc:2f:51:7b: 72:d4:c5:6b:bf:40:8d:8f:4b:99:3c:ca:97:1b:6f:6b:3e:18: 44:fa:d6:2e:c8:88:fa:58:33:58:16:0e:e5:b0:51:7d:7a:a0: 6a:f0:03:b8:36:12:a6:5c:58:b4:f9:a1:0b:b5:7e:a0:69:19: b1:a8:21:4d:18:0f:a4:69:c8:a5:08:f8:b7:6d:2a:33:75:24: bb:8a:b9:17:37:d5:e5:39:df:a7:5b:56:3c:9b:bc:a5:c1:19: 09:d4:ef:a7:e7:66:78:1b:23:e9:d9:57:95:00:a7:c6:e3:b3: 9d:de:8b:ba:ba:37:84:10:7b:bb:cb:79:52:61:22:e4:69:9d: 60:bd:c3:65:0d:d3:16:a5:60:7b:ab:2a:74:f8:6e:df:ea:6e: f7:2e:f1:1c:45:37:d1:fc:df:12:19:0b:81:bb:ec:6c:c9:62: dc:3f:3d:23:2e:ea:c8:53:71:51:74:68:bf:c8:1f:dc:fd:4c: 98:c2:18:36:68:3b:9f:f0:86:d3:b7:14:59:45:1e:08:41:27: d3:bc:98:88:9d:3d:c0:02:6a:6c:e0:31:92:2a:52:30:67:bc: 9d:01:0c:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp1R0qUjrcJzrQX4uF4T4J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMTExMjMzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2ZkMzEzNzU1Y2YzZDc3ZjNiODk4ZDc3OWZlMzYyMWFjNmNlMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo1cDgegq9H4fJbJRFV9WfwA1HZO S20QaXw3k6dWBohrJRgKSJuhj5X0PawHEM+bWIsL7gbS9urPuFkgHshlkD4EE9OW 1MwB+uk2e01lKdSUOXAfF2gjNt6Uj6bx2Hey4NULy5TKaE2mjC0O8Ez+oXpSODGG xoQ8K3+LC2AnOndmGh9lHMZJ33JQAC9uO6dACYsiCINX14wxto8RGvGB+YMTo3w/ 8Nharrfw2na/WIxX+Mp6Bq+nhM7BjTpchS1g0QnIgfOrn5l1B50yCAcxlZeKtSt+ OVWBaL1G+K+9a+qEgYMcJ9jlVwn1W6STCu+3cduE8uIYOOcC/4bUvtRYNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOz9MTdVzz1387iY13n+NiGsbONAMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvN1AweE4xWFBQWGZ6dUpqWGVmNDJJYXhzNDBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1HT8MA0G CSqGSIb3DQEBCwUAA4IBAQA+lfAd0ty1uaOsojisOaqTkEHUjwy0Ho9u05yrX55D dNwvUXty1MVrv0CNj0uZPMqXG29rPhhE+tYuyIj6WDNYFg7lsFF9eqBq8AO4NhKm XFi0+aELtX6gaRmxqCFNGA+kacilCPi3bSozdSS7irkXN9XlOd+nW1Y8m7ylwRkJ 1O+n52Z4GyPp2VeVAKfG47Od3ou6ujeEEHu7y3lSYSLkaZ1gvcNlDdMWpWB7qyp0 +G7f6m73LvEcRTfR/N8SGQuBu+xsyWLcPz0jLurIU3FRdGi/yB/c/UyYwhg2aDuf 8IbTtxRZRR4IQSfTvJiInT3AAmps4DGSKlIwZ7ydAQxF -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:25 2025 by rpki-client