This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7XpLKrMCI1roTh2muI_CGOM6A6Y.roa File: 7XpLKrMCI1roTh2muI_CGOM6A6Y.roa (raw, json) Hash identifier: qTbQn5JEDEKpV27VNdnwqGMClDOIprEi/FBnGGZ5l00= Subject key identifier: ED:7A:4B:2A:B3:02:23:5A:E8:4E:1D:A6:B8:8F:C2:18:E3:3A:03:A6 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019ABAEB04242ADB211E13DB8ACAE03DAE7B Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7XpLKrMCI1roTh2muI_CGOM6A6Y.roa Signing time: Tue 25 Nov 2025 12:09:15 +0000 ROA not before: Tue 25 Nov 2025 12:09:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201813 IP address blocks: 195.178.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 22:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:eb:04:24:2a:db:21:1e:13:db:8a:ca:e0:3d:ae:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Nov 25 12:09:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed7a4b2ab302235ae84e1da6b88fc218e33a03a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:86:a9:21:30:69:92:d9:91:7a:f9:64:f2: 86:be:c8:ab:d6:0b:92:23:41:a7:7c:ea:95:c1:4c: 2f:2f:d1:7a:66:ab:b8:a2:2d:e9:49:32:a2:57:3c: 7a:9e:03:43:6e:93:48:b0:e8:ae:4c:38:e0:2c:ae: 56:9f:4a:8a:ca:d4:51:4c:8c:c2:1a:39:1f:5f:8a: 47:23:76:72:70:35:48:23:7f:d1:3a:03:61:70:5e: a4:6b:dc:a2:b8:f0:d9:d8:87:a4:20:f0:0a:0e:32: e1:a2:30:bf:48:dd:9f:11:11:b0:0e:53:12:d0:2d: f2:3c:74:1f:48:af:ab:c2:01:16:c9:4f:9a:62:41: 4d:8c:4e:cc:46:3d:d1:a8:84:8c:a9:80:e9:46:97: 1a:31:97:bc:95:22:06:b0:6d:36:e1:c3:80:90:e9: a3:41:f2:15:61:4e:2b:5f:28:a6:83:7a:b0:1e:18: 7e:26:7f:db:e6:37:01:a0:5c:44:d6:89:8d:67:76: 5b:35:18:58:d2:ba:ae:51:93:8a:59:9b:83:d2:de: e7:1a:dc:75:f5:83:a9:55:8d:83:c4:21:e3:8e:b8: 98:27:7d:75:cb:b6:e0:8a:cf:c2:23:90:96:4e:7f: 69:7d:8f:ac:15:53:5f:6c:00:7f:4e:b8:5c:ce:0e: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:4B:2A:B3:02:23:5A:E8:4E:1D:A6:B8:8F:C2:18:E3:3A:03:A6 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/7XpLKrMCI1roTh2muI_CGOM6A6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.146.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:4f:cd:4c:b8:0e:c2:84:65:2a:0a:03:8c:13:60:2b:63:3c: 97:65:80:28:3f:73:54:00:cf:e8:e7:11:a3:7c:f4:0c:13:43: ec:17:33:e2:d0:32:15:87:37:99:b2:e3:e9:eb:f0:9a:2a:77: d7:17:10:f9:d7:61:60:cf:a9:25:c5:57:b2:6d:e6:13:ff:95: 5a:0c:4b:0b:76:84:7e:95:59:16:c8:a8:79:87:c7:b0:9f:a2: d8:bf:7f:62:b4:18:84:f8:69:d7:9d:7d:f3:38:69:71:e1:8a: 0f:2a:cc:91:c7:52:b5:0e:80:97:ad:8c:74:04:1a:4d:ad:c9: aa:c7:56:34:ac:87:f3:21:cb:21:c5:1f:1b:ca:6f:1b:ca:7f: 74:d4:fd:18:59:aa:a2:c7:d2:8e:15:bf:46:9d:86:d7:56:df: e7:ce:aa:8b:cb:cd:be:4e:c4:7b:46:cc:c5:62:0b:a1:eb:df: 7d:03:12:c9:66:b5:80:b0:6e:1a:25:96:28:c3:a7:1b:d9:44: f1:6b:d5:1a:94:2e:e4:34:92:15:05:fb:4d:2e:bf:46:ee:20: 94:29:12:22:aa:7f:56:03:19:e5:70:31:7e:5b:61:67:81:e7: da:4e:82:33:8d:98:6e:79:d4:2d:c3:94:91:38:49:77:70:d0: fa:43:cb:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq66wQkKtshHhPbisrgPa57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjUxMTI1MTIwOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDdhNGIyYWIzMDIyMzVhZTg0ZTFkYTZiODhmYzIxOGUzM2EwM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJGGqSEwaZLZkXr5ZPKGvsir1guS I0GnfOqVwUwvL9F6Zqu4oi3pSTKiVzx6ngNDbpNIsOiuTDjgLK5Wn0qKytRRTIzC GjkfX4pHI3ZycDVII3/ROgNhcF6ka9yiuPDZ2IekIPAKDjLhojC/SN2fERGwDlMS 0C3yPHQfSK+rwgEWyU+aYkFNjE7MRj3RqISMqYDpRpcaMZe8lSIGsG024cOAkOmj QfIVYU4rXyimg3qwHhh+Jn/b5jcBoFxE1omNZ3ZbNRhY0rquUZOKWZuD0t7nGtx1 9YOpVY2DxCHjjriYJ311y7bgis/CI5CWTn9pfY+sFVNfbAB/Trhczg4qDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO16SyqzAiNa6E4dpriPwhjjOgOmMB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvN1hwTEtyTUNJMXJvVGgybXVJX0NHT002QTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KSMA0G CSqGSIb3DQEBCwUAA4IBAQCKT81MuA7ChGUqCgOME2ArYzyXZYAoP3NUAM/o5xGj fPQME0PsFzPi0DIVhzeZsuPp6/CaKnfXFxD512Fgz6klxVeybeYT/5VaDEsLdoR+ lVkWyKh5h8ewn6LYv39itBiE+GnXnX3zOGlx4YoPKsyRx1K1DoCXrYx0BBpNrcmq x1Y0rIfzIcshxR8bym8byn901P0YWaqix9KOFb9GnYbXVt/nzqqLy82+TsR7RszF Yguh6999AxLJZrWAsG4aJZYow6cb2UTxa9UalC7kNJIVBftNLr9G7iCUKRIiqn9W AxnlcDF+W2FngefaToIzjZhuedQtw5SROEl3cND6Q8uT -----END CERTIFICATE-----Generated at Thu Nov 27 04:01:10 2025 by rpki-client