This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/k7Uo3u2MzNohX_u6sT_OxVy2xnM.roa File: k7Uo3u2MzNohX_u6sT_OxVy2xnM.roa (raw, json) Hash identifier: QBE+EeYaOsV6QXl/drSvoTjp9qL1wi5Vvv2BO8PtTiM= Subject key identifier: 93:B5:28:DE:ED:8C:CC:DA:21:5F:FB:BA:B1:3F:CE:C5:5C:B6:C6:73 Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Certificate serial: 019B0D023FE342E0865A96D6D236A6C3C18A Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/k7Uo3u2MzNohX_u6sT_OxVy2xnM.roa Signing time: Thu 11 Dec 2025 10:43:29 +0000 ROA not before: Thu 11 Dec 2025 10:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 80.174.113.0/24 maxlen: 24 80.174.117.0/24 maxlen: 24 80.174.122.0/24 maxlen: 24 80.174.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:02:3f:e3:42:e0:86:5a:96:d6:d2:36:a6:c3:c1:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe Validity Not Before: Dec 11 10:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=93b528deed8cccda215ffbbab13fcec55cb6c673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:7c:c3:81:79:26:c4:43:83:8b:18:76:64: d2:ae:35:7e:3c:8f:ee:da:68:6a:53:bd:c2:9c:b9: 8b:29:48:5f:14:cf:2b:a4:5f:bc:40:50:00:d2:b6: b3:22:9e:59:b0:3d:c6:dc:48:6a:34:69:36:86:7e: 90:8b:0d:bc:45:37:98:8a:10:c5:b8:da:e6:58:94: c1:f5:a4:21:6b:2b:27:63:83:f5:cf:d1:81:97:49: e9:d5:be:21:10:b1:59:82:c3:54:77:72:42:80:f3: 27:86:d4:be:ed:a1:c3:5b:8c:ec:d2:15:e8:04:29: f8:f5:93:1e:64:36:08:14:03:ec:15:83:b5:9d:73: c9:d0:ba:0b:d1:3e:da:4b:e7:88:3f:cd:7f:60:86: 24:ec:83:5e:e4:08:cd:05:5c:45:b8:fe:05:b2:7e: e8:13:56:bf:a0:26:f6:e0:4e:76:43:07:a8:14:79: 9a:79:22:12:94:c2:06:9c:e1:e7:18:0e:42:4b:0e: f9:69:77:33:c6:fc:e9:51:86:8f:ad:4c:53:a9:6f: 45:85:f3:88:0e:ed:7a:a1:3b:bc:c1:13:b5:48:a2: 99:15:77:d4:7e:b4:a2:51:a0:dc:4f:f8:97:6d:21: c3:c5:bb:50:24:78:2b:b2:0a:2e:38:91:a9:52:e8: 6b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B5:28:DE:ED:8C:CC:DA:21:5F:FB:BA:B1:3F:CE:C5:5C:B6:C6:73 X509v3 Authority Key Identifier: keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/k7Uo3u2MzNohX_u6sT_OxVy2xnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.174.113.0/24 80.174.117.0/24 80.174.122.0/24 80.174.127.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:89:a4:e5:f6:dd:96:e7:cc:64:dc:83:b6:2f:26:5f:fe:1d: fc:07:26:56:75:45:61:36:84:e3:bd:32:cb:af:a3:d6:bd:e4: 3e:fc:fe:bc:8e:d1:41:ee:a9:f1:46:26:dd:f5:69:f8:c6:51: b8:6d:62:82:09:2e:aa:86:a1:52:28:8d:1c:da:8a:90:a2:64: bb:89:b0:c1:01:87:b0:55:aa:64:96:09:98:2e:f1:14:87:1d: 9b:01:6d:c4:24:85:7d:8e:4b:42:33:5e:61:2e:d4:6d:4b:06: 9b:91:6a:e5:26:6e:ea:b7:bd:a7:85:35:ab:b0:26:39:f0:0a: cb:aa:e0:18:f7:7d:10:67:de:d9:70:c5:cc:d4:0d:f6:df:b7: 8e:06:9a:95:22:c8:7b:08:9a:af:14:8d:7c:df:83:e8:98:9e: 91:b4:07:72:e2:6d:4d:54:1f:db:16:09:b9:ce:21:46:34:1b: 1d:a5:31:49:92:ae:e5:33:8c:5b:39:4f:de:37:c5:aa:57:a7: 16:35:26:85:9a:da:89:5b:7d:8a:99:75:f7:96:01:27:a2:16: b9:cf:15:e9:6d:bf:64:e3:8e:07:bc:87:44:4b:aa:24:eb:e2: 7a:f4:0c:58:30:8b:71:a7:a2:70:fb:45:65:08:a7:b3:7e:4a: f4:4c:6e:bf -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsNAj/jQuCGWpbW0jamw8GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj MDZiYmUwHhcNMjUxMjExMTA0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5M2I1MjhkZWVkOGNjY2RhMjE1ZmZiYmFiMTNmY2VjNTVjYjZjNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyX18w4F5JsRDg4sYdmTSrjV+PI/u 2mhqU73CnLmLKUhfFM8rpF+8QFAA0razIp5ZsD3G3EhqNGk2hn6Qiw28RTeYihDF uNrmWJTB9aQhaysnY4P1z9GBl0np1b4hELFZgsNUd3JCgPMnhtS+7aHDW4zs0hXo BCn49ZMeZDYIFAPsFYO1nXPJ0LoL0T7aS+eIP81/YIYk7INe5AjNBVxFuP4Fsn7o E1a/oCb24E52QweoFHmaeSISlMIGnOHnGA5CSw75aXczxvzpUYaPrUxTqW9FhfOI Du16oTu8wRO1SKKZFXfUfrSiUaDcT/iXbSHDxbtQJHgrsgouOJGpUuhrHwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJO1KN7tjMzaIV/7urE/zsVctsZzMB8GA1UdIwQY MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt NzM0MjhmOWM3YmZmLzEvazdVbzN1Mk16Tm9oWF91NnNUX094VnkyeG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUK5xAwQA UK51AwQAUK56AwQAUK5/MA0GCSqGSIb3DQEBCwUAA4IBAQCaiaTl9t2W58xk3IO2 LyZf/h38ByZWdUVhNoTjvTLLr6PWveQ+/P68jtFB7qnxRibd9Wn4xlG4bWKCCS6q hqFSKI0c2oqQomS7ibDBAYewVapklgmYLvEUhx2bAW3EJIV9jktCM15hLtRtSwab kWrlJm7qt72nhTWrsCY58ArLquAY930QZ97ZcMXM1A3237eOBpqVIsh7CJqvFI18 34PomJ6RtAdy4m1NVB/bFgm5ziFGNBsdpTFJkq7lM4xbOU/eN8WqV6cWNSaFmtqJ W32KmXX3lgEnoha5zxXpbb9k444HvIdES6ok6+J69AxYMItxp6Jw+0VlCKezfkr0 TG6/ -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:05 2025 by rpki-client