This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-7TkZ6909sRoj-nhufwkehg_v-c.roa File: 1-7TkZ6909sRoj-nhufwkehg_v-c.roa (raw, json) Hash identifier: Z0NPByl6H4BTVjcrkPxlX20rLXoOWeehycpMB17PNjA= Subject key identifier: FB:B4:E4:67:AF:74:F6:C4:68:8F:E9:E1:B9:FC:24:7A:18:3F:BF:E7 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019A822F6E5373DAE184093B91B6978A41DD Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-7TkZ6909sRoj-nhufwkehg_v-c.roa Signing time: Fri 14 Nov 2025 11:45:37 +0000 ROA not before: Fri 14 Nov 2025 11:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213137 IP address blocks: 195.178.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 15:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:2f:6e:53:73:da:e1:84:09:3b:91:b6:97:8a:41:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Nov 14 11:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbb4e467af74f6c4688fe9e1b9fc247a183fbfe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:75:60:fe:00:de:9f:6e:02:25:ca:2c:e8:53: 6e:d7:c3:c7:c6:dd:d4:ee:9b:88:d1:b6:44:6e:dd: ab:4f:4f:d2:0e:87:55:50:3e:c5:5d:66:8e:82:cb: 51:34:03:0a:ef:74:c2:aa:4b:77:64:18:be:f2:03: 56:e2:64:19:89:5a:b9:57:78:7c:c2:78:4e:2b:23: 05:7d:58:e7:4f:da:92:e5:92:e6:ac:8e:8c:eb:68: f3:d5:9c:af:2f:7b:c8:b7:de:a1:07:20:d0:cd:81: 5f:3a:c5:93:92:8b:2c:47:bd:a3:72:79:dd:a5:f0: de:8b:26:27:80:10:7c:76:71:44:68:e6:df:7e:b3: 72:67:57:ae:b4:15:f6:bf:36:ab:b2:86:b2:12:62: d8:2f:bd:fd:0e:18:7c:90:3d:1e:f7:45:3d:f6:ed: b7:14:07:81:39:83:d6:e4:e2:4f:65:3a:91:a7:cd: bc:ab:ae:e1:3e:59:be:a8:38:b3:91:0f:1f:d2:de: ef:43:80:d4:9a:7a:01:b9:f3:9e:85:51:2f:33:d7: c0:c2:d4:eb:51:06:cd:b1:8e:bf:b7:8f:dd:1e:a5: 50:81:22:1c:ef:52:f4:b3:8a:8e:5f:79:99:07:6b: 1f:fe:55:b4:91:82:34:0e:b6:ab:47:84:86:83:ec: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B4:E4:67:AF:74:F6:C4:68:8F:E9:E1:B9:FC:24:7A:18:3F:BF:E7 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/1-7TkZ6909sRoj-nhufwkehg_v-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.136.0/24 Signature Algorithm: sha256WithRSAEncryption 06:23:6e:c9:4f:b8:26:c0:5d:bf:d2:4b:d3:e7:bb:88:ac:69: 1a:4f:60:e8:f6:dd:b1:6f:0b:dc:92:d1:1f:e0:91:44:a7:19: 9a:45:da:e9:c6:d7:77:93:fb:b6:73:4c:a1:47:f2:09:06:aa: c5:2b:9f:b5:d9:be:56:69:26:66:17:54:38:83:01:38:d6:d1: 3b:fc:73:ad:ac:e9:d8:92:33:b7:be:ef:66:0a:c7:c2:ca:89: 7e:26:58:9a:e4:0d:26:1b:df:39:7b:0e:86:ef:fc:01:18:e6: dd:26:4c:ce:71:39:2f:11:d6:88:bc:2b:7e:7d:4f:a5:09:55: 56:80:91:10:f7:8c:f5:33:d4:18:2b:d1:d2:ff:29:2c:fa:d2: a9:a1:57:5f:4f:c6:a0:4e:f2:23:ae:fe:1d:57:6b:a7:63:06: 3b:d4:94:5c:a7:9d:a2:e1:b4:6e:06:12:22:cb:75:04:a9:83: a9:05:25:2d:3a:d7:0d:24:00:f3:88:ea:8a:0d:3d:67:a8:35: 9f:90:fb:a9:4a:6c:c5:89:03:03:4d:87:0f:87:fa:6b:6e:00: bd:40:de:90:79:e8:d2:7f:88:53:db:35:21:26:a8:b8:99:c8: 07:4e:fa:3a:22:b1:2f:78:2e:52:19:ff:0c:ca:41:f2:9a:d3: bb:2d:b8:b5 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZqCL25Tc9rhhAk7kbaXikHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMTE0MTE0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmI0ZTQ2N2FmNzRmNmM0Njg4ZmU5ZTFiOWZjMjQ3YTE4M2ZiZmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXVg/gDen24CJcos6FNu18PHxt3U 7puI0bZEbt2rT0/SDodVUD7FXWaOgstRNAMK73TCqkt3ZBi+8gNW4mQZiVq5V3h8 wnhOKyMFfVjnT9qS5ZLmrI6M62jz1ZyvL3vIt96hByDQzYFfOsWTkossR72jcnnd pfDeiyYngBB8dnFEaObffrNyZ1eutBX2vzarsoayEmLYL739Dhh8kD0e90U99u23 FAeBOYPW5OJPZTqRp828q67hPlm+qDizkQ8f0t7vQ4DUmnoBufOehVEvM9fAwtTr UQbNsY6/t4/dHqVQgSIc71L0s4qOX3mZB2sf/lW0kYI0DrarR4SGg+w9EwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPu05GevdPbEaI/p4bn8JHoYP7/nMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvMS03VGtaNjkwOXNSb2otbmh1ZndrZWhnX3YtYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTEvOGI2ZmIwLWE4NzUtNDk0Ny04YWU0LTAzZjRjNzExM2Mz NC8xL0dVSmpKYXk0em1DYWFHLW1WYkJZbG9nSnMwWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOyiDAN BgkqhkiG9w0BAQsFAAOCAQEABiNuyU+4JsBdv9JL0+e7iKxpGk9g6PbdsW8L3JLR H+CRRKcZmkXa6cbXd5P7tnNMoUfyCQaqxSuftdm+VmkmZhdUOIMBONbRO/xzrazp 2JIzt77vZgrHwsqJfiZYmuQNJhvfOXsOhu/8ARjm3SZMznE5LxHWiLwrfn1PpQlV VoCREPeM9TPUGCvR0v8pLPrSqaFXX0/GoE7yI67+HVdrp2MGO9SUXKedouG0bgYS Ist1BKmDqQUlLTrXDSQA84jqig09Z6g1n5D7qUpsxYkDA02HD4f6a24AvUDekHno 0n+IU9s1ISaouJnIB076OiKxL3guUhn/DMpB8prTuy24tQ== -----END CERTIFICATE-----Generated at Thu Nov 20 00:42:44 2025 by rpki-client