This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7t_DBi7rvDWnaJfK8uCa5LRmY78.roa File: 7t_DBi7rvDWnaJfK8uCa5LRmY78.roa (raw, json) Hash identifier: 7TgZemqGxNTXfSYaQtKBuZaayYpndfag3pdDKsqeVt0= Subject key identifier: EE:DF:C3:06:2E:EB:BC:35:A7:68:97:CA:F2:E0:9A:E4:B4:66:63:BF Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B4035DB65F50AF58FCE750B032C8B75DA Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7t_DBi7rvDWnaJfK8uCa5LRmY78.roa Signing time: Sun 21 Dec 2025 09:20:29 +0000 ROA not before: Sun 21 Dec 2025 09:20:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 144.56.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:35:db:65:f5:0a:f5:8f:ce:75:0b:03:2c:8b:75:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 21 09:20:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eedfc3062eebbc35a76897caf2e09ae4b46663bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:52:1f:a7:30:b9:82:ac:b2:0f:6e:6b:71: e3:64:57:41:fe:8a:91:8b:f5:b9:ea:24:cb:2b:2f: f2:96:34:fe:44:7e:7a:41:a9:0d:a3:a7:36:00:86: f7:6d:f8:3d:ca:5e:a7:3e:9d:47:bd:04:a1:f5:28: 8c:8c:3e:91:05:73:e0:f5:4c:f8:d0:f2:b0:1b:5e: d9:73:df:af:30:38:93:03:d3:fe:11:a5:c7:ef:cb: 47:f2:bb:1d:25:e7:0d:61:47:44:74:20:37:66:64: 1e:af:46:80:44:f5:47:59:9b:bd:7d:c0:87:b6:3e: 32:4d:36:e8:28:b1:24:81:63:71:b4:9c:8a:af:8c: e8:ea:fd:66:88:98:5c:7e:ff:f4:56:c5:26:d6:48: 93:49:f7:c6:6d:e4:9e:9d:f6:13:1d:1e:67:03:44: c5:39:fb:14:39:f1:bd:6e:2a:c2:31:14:22:ab:49: 31:72:72:b0:a0:d4:19:56:ab:08:1b:cc:60:6a:d4: a2:c4:8d:b4:ae:11:73:26:8b:7e:63:8f:f2:d1:7c: 79:1b:0a:70:e6:ba:f4:4d:39:64:77:04:19:b4:38: 0f:64:70:33:4c:92:2d:40:9f:e0:c0:7d:73:10:0e: 12:9f:ad:4e:77:82:ae:89:3c:b0:3a:fb:ad:b6:bd: 85:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:C3:06:2E:EB:BC:35:A7:68:97:CA:F2:E0:9A:E4:B4:66:63:BF X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7t_DBi7rvDWnaJfK8uCa5LRmY78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.12.0/24 Signature Algorithm: sha256WithRSAEncryption 82:bd:5a:9c:d8:8d:75:44:57:c1:86:eb:7a:06:a1:d7:84:31: 50:01:f7:ab:f2:ad:2d:99:9c:36:67:71:af:89:e0:01:01:d6: 60:f7:cd:ed:14:05:43:8b:8e:7f:a6:0e:d3:01:6e:f7:b5:87: 72:96:71:82:a0:82:c7:52:8a:4c:45:af:01:9e:ce:b3:d3:cb: 61:a1:b3:b6:05:12:f8:83:16:0d:42:71:be:41:43:4c:b0:46: 76:90:d4:97:d7:b8:b7:db:5e:bc:0c:9a:04:61:9a:16:04:35: d2:af:40:41:18:46:5c:bf:94:41:0d:48:0a:e5:59:a6:8f:f3: cf:d5:65:47:9d:a1:b7:d2:28:cc:20:28:cf:14:97:59:c4:c5: 06:87:93:03:55:a8:41:00:7d:5c:31:41:85:13:71:9a:ed:d9: 6c:07:b6:47:85:18:24:5a:9a:c3:1d:61:e2:6e:64:a1:28:d0: ad:41:7f:da:ec:5c:ea:e8:bd:0c:ce:a5:b1:ad:75:0d:fa:8b: 92:9a:77:e6:88:c7:07:8e:e3:48:02:80:cd:4a:5d:89:1d:8e: 6e:5e:4d:34:27:5b:e5:bf:76:a3:ac:0a:82:24:2c:7a:fb:85: c6:1f:46:b9:74:23:0d:d9:68:6b:27:75:6a:f8:5b:cd:33:84: 83:4d:56:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtANdtl9Qr1j851CwMsi3XaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjIxMDkyMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWRmYzMwNjJlZWJiYzM1YTc2ODk3Y2FmMmUwOWFlNGI0NjY2M2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVBSH6cwuYKssg9ua3HjZFdB/oqR i/W56iTLKy/yljT+RH56QakNo6c2AIb3bfg9yl6nPp1HvQSh9SiMjD6RBXPg9Uz4 0PKwG17Zc9+vMDiTA9P+EaXH78tH8rsdJecNYUdEdCA3ZmQer0aARPVHWZu9fcCH tj4yTTboKLEkgWNxtJyKr4zo6v1miJhcfv/0VsUm1kiTSffGbeSenfYTHR5nA0TF OfsUOfG9birCMRQiq0kxcnKwoNQZVqsIG8xgatSixI20rhFzJot+Y4/y0Xx5Gwpw 5rr0TTlkdwQZtDgPZHAzTJItQJ/gwH1zEA4Sn61Od4KuiTywOvuttr2FrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO7fwwYu67w1p2iXyvLgmuS0ZmO/MB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvN3RfREJpN3J2RFduYUpmSzh1Q2E1TFJtWTc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgMMA0G CSqGSIb3DQEBCwUAA4IBAQCCvVqc2I11RFfBhut6BqHXhDFQAfer8q0tmZw2Z3Gv ieABAdZg983tFAVDi45/pg7TAW73tYdylnGCoILHUopMRa8Bns6z08thobO2BRL4 gxYNQnG+QUNMsEZ2kNSX17i32168DJoEYZoWBDXSr0BBGEZcv5RBDUgK5Vmmj/PP 1WVHnaG30ijMICjPFJdZxMUGh5MDVahBAH1cMUGFE3Ga7dlsB7ZHhRgkWprDHWHi bmShKNCtQX/a7Fzq6L0MzqWxrXUN+ouSmnfmiMcHjuNIAoDNSl2JHY5uXk00J1vl v3ajrAqCJCx6+4XGH0a5dCMN2WhrJ3Vq+FvNM4SDTVZY -----END CERTIFICATE-----Generated at Mon Dec 22 08:45:54 2025 by rpki-client