This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/evXOwnPAPcU53ESDUxfGcXYV4bE.roa File: evXOwnPAPcU53ESDUxfGcXYV4bE.roa (raw, json) Hash identifier: s9Tp5AsELJ78K6fbyXVqS9RVN8O8h9o66Y/WtGLLHQw= Subject key identifier: 7A:F5:CE:C2:73:C0:3D:C5:39:DC:44:83:53:17:C6:71:76:15:E1:B1 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B172A6260F8ADDD70A03B7C68371A39 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/evXOwnPAPcU53ESDUxfGcXYV4bE.roa Signing time: Wed 19 Nov 2025 07:49:37 +0000 ROA not before: Wed 19 Nov 2025 07:49:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62282 IP address blocks: 193.34.233.0/24 maxlen: 24 2a0f:7b80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:2a:62:60:f8:ad:dd:70:a0:3b:7c:68:37:1a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7af5cec273c03dc539dc44835317c6717615e1b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:0b:ac:6a:38:34:65:c0:a6:3d:f5:62:25: 82:55:b5:69:67:9f:d1:d6:7d:15:68:97:19:ee:e0: 65:1e:fc:4c:cb:64:c6:3d:33:5f:21:30:ac:9d:55: 17:19:e1:53:f2:1d:74:cb:88:fa:78:0d:89:46:6c: 5d:b0:e0:e2:67:e7:88:d7:f4:96:3d:8e:a3:ae:04: 6e:31:be:df:7b:e4:e6:0f:cc:5b:80:8b:5b:b5:d0: e6:14:b8:fa:e5:00:22:d8:1c:8b:d8:25:90:30:86: fd:f5:7a:19:83:df:a1:fc:e2:26:12:20:67:49:cf: 56:bc:96:60:5c:ef:36:0f:4b:5a:cf:18:3d:a5:90: 47:87:c7:bd:46:94:e3:55:9e:95:66:bb:fe:af:07: 7c:2b:eb:ed:3a:03:e3:bd:48:6a:32:40:83:78:29: 02:14:0b:29:83:55:b3:01:73:a6:4b:71:3b:95:e1: 59:96:b1:27:49:49:c8:e4:5f:af:6c:36:20:49:88: 1e:3e:bf:e4:98:b6:28:ea:ad:9b:4a:38:aa:46:d8: 9c:a6:77:e1:02:ce:39:93:79:2f:d7:8d:50:5a:6b: 99:a6:bd:0c:88:36:48:5f:a1:6f:07:51:d0:c7:8f: 2e:c0:81:c3:80:41:c1:92:7b:45:32:90:a2:5b:91: 68:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:CE:C2:73:C0:3D:C5:39:DC:44:83:53:17:C6:71:76:15:E1:B1 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/evXOwnPAPcU53ESDUxfGcXYV4bE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.233.0/24 IPv6: 2a0f:7b80::/48 Signature Algorithm: sha256WithRSAEncryption 48:fc:ad:a4:80:e4:19:1b:a3:a2:25:83:15:52:a0:53:b0:02: f7:fa:93:c4:7b:53:c4:6e:60:cd:87:07:5d:d7:4a:6c:06:17: 43:56:8f:2c:e7:49:3a:39:4b:88:8b:ea:ad:ea:ca:62:67:cf: 42:5c:f2:d0:5d:f5:66:24:c4:21:3d:3a:bf:a4:71:6a:71:c8: 11:48:53:46:46:c8:79:c0:f3:83:28:3d:b3:53:8c:6d:e7:02: 75:8f:79:fc:dd:8c:7b:4e:4f:cd:0a:7b:ab:b5:80:5c:32:44: 40:90:bf:df:84:02:1e:95:e6:e5:14:62:8e:ab:59:be:51:b9: 72:73:49:16:f7:79:15:77:32:f9:bf:60:3d:b2:3c:ac:99:34: 67:2e:e8:46:26:65:ec:51:27:c6:77:d3:7f:62:a9:76:d8:9f: 6f:ab:3d:17:f5:96:64:e1:45:13:65:a2:2b:ab:b7:6f:0b:a5: f2:9c:df:62:cc:e2:7e:86:bf:a4:61:6e:ac:95:7b:1f:c3:db: fe:97:00:63:2d:1b:0f:60:35:8b:65:a8:18:18:24:e9:19:e6: 4c:ba:12:79:52:36:a0:0b:0e:b3:05:4c:17:f8:61:d7:2f:ed: 89:0f:e5:23:03:f4:ab:da:b3:7d:57:88:b5:77:1a:d1:b8:89: 3b:b1:9e:cf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZqbFypiYPit3XCgO3xoNxo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWY1Y2VjMjczYzAzZGM1MzlkYzQ0ODM1MzE3YzY3MTc2MTVlMWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty0LrGo4NGXApj31YiWCVbVpZ5/R 1n0VaJcZ7uBlHvxMy2TGPTNfITCsnVUXGeFT8h10y4j6eA2JRmxdsODiZ+eI1/SW PY6jrgRuMb7fe+TmD8xbgItbtdDmFLj65QAi2ByL2CWQMIb99XoZg9+h/OImEiBn Sc9WvJZgXO82D0tazxg9pZBHh8e9RpTjVZ6VZrv+rwd8K+vtOgPjvUhqMkCDeCkC FAspg1WzAXOmS3E7leFZlrEnSUnI5F+vbDYgSYgePr/kmLYo6q2bSjiqRticpnfh As45k3kv141QWmuZpr0MiDZIX6FvB1HQx48uwIHDgEHBkntFMpCiW5FojwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHr1zsJzwD3FOdxEg1MXxnF2FeGxMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvZXZYT3duUEFQY1U1M0VTRFV4ZkdjWFlWNGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwSLpMA8E AgACMAkDBwAqD3uAAAAwDQYJKoZIhvcNAQELBQADggEBAEj8raSA5Bkbo6IlgxVS oFOwAvf6k8R7U8RuYM2HB13XSmwGF0NWjyznSTo5S4iL6q3qymJnz0Jc8tBd9WYk xCE9Or+kcWpxyBFIU0ZGyHnA84MoPbNTjG3nAnWPefzdjHtOT80Ke6u1gFwyRECQ v9+EAh6V5uUUYo6rWb5RuXJzSRb3eRV3Mvm/YD2yPKyZNGcu6EYmZexRJ8Z3039i qXbYn2+rPRf1lmThRRNloiurt28LpfKc32LM4n6Gv6RhbqyVex/D2/6XAGMtGw9g NYtlqBgYJOkZ5ky6EnlSNqALDrMFTBf4Ydcv7YkP5SMD9Kvas31XiLV3GtG4iTux ns8= -----END CERTIFICATE-----Generated at Fri Dec 5 21:32:25 2025 by rpki-client