This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/t7PSfdErEBZCWM-R2rXNgkYdYIg.roa File: t7PSfdErEBZCWM-R2rXNgkYdYIg.roa (raw, json) Hash identifier: zvCQg1Hd9vCoV9Ja1vaVrFfLISVdneop8BgWP+hZ9nM= Subject key identifier: B7:B3:D2:7D:D1:2B:10:16:42:58:CF:91:DA:B5:CD:82:46:1D:60:88 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019AC12A72C6A9C78BE244F411B1E76B6412 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/t7PSfdErEBZCWM-R2rXNgkYdYIg.roa Signing time: Wed 26 Nov 2025 17:16:15 +0000 ROA not before: Wed 26 Nov 2025 17:16:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 144.56.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c1:2a:72:c6:a9:c7:8b:e2:44:f4:11:b1:e7:6b:64:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Nov 26 17:16:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b7b3d27dd12b10164258cf91dab5cd82461d6088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:c4:17:9f:14:f8:f8:99:a0:86:1b:a0:b2: 4a:86:31:c8:7d:75:9f:36:4b:4f:1b:b3:54:08:c7: b0:ec:b9:ba:d1:d3:75:43:5f:38:2a:f5:1f:d7:a4: fe:2d:c9:7d:01:98:43:35:6c:87:f4:f3:7f:b0:77: 78:8b:b0:13:cc:57:44:d8:4f:8f:a2:89:f8:88:aa: 23:1e:75:41:3d:74:05:f6:3a:a6:ce:c3:01:38:d3: 9b:ef:d3:03:ca:ea:3c:d8:64:76:33:ee:a2:e7:a2: d3:89:54:9c:4a:61:cd:8b:24:42:4f:4a:0e:2a:93: 04:34:a6:b8:9e:58:bd:f7:35:40:f0:02:cf:48:61: 57:08:f8:f1:4c:26:34:79:3e:8d:fa:af:42:20:56: 7f:bc:67:a0:2e:80:18:d3:c9:3f:f6:72:0c:67:ab: c3:5b:8d:27:6e:12:9f:eb:12:1d:b0:83:11:ac:ea: 6b:65:6e:c6:f1:58:4c:18:b8:88:f1:f4:de:ae:c2: 70:1f:66:c9:4f:43:ca:7d:45:1f:c1:0f:c4:18:89: da:a2:59:65:b7:05:76:72:30:25:70:62:83:2d:0e: f2:f3:a6:06:c3:22:ab:e4:83:a0:d8:01:87:06:2e: 5d:ea:24:66:33:27:fc:6f:44:b7:f2:02:a0:56:b9: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:B3:D2:7D:D1:2B:10:16:42:58:CF:91:DA:B5:CD:82:46:1D:60:88 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/t7PSfdErEBZCWM-R2rXNgkYdYIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.20.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:77:35:af:3c:39:32:dc:54:17:9a:6c:2a:5d:6f:41:bb:46: 88:d7:33:e9:fb:db:0d:af:f4:41:c8:0f:b3:1b:e2:35:2e:d8: 5f:8c:c3:77:36:68:39:cd:95:9b:22:ab:82:14:4a:48:12:6f: 86:68:fe:5c:3a:e7:f3:3e:06:0f:78:cc:f7:6b:99:4b:b6:d2: 9a:c6:00:5f:36:b4:07:57:b9:14:ad:0b:d6:4f:2b:56:84:9e: c6:21:08:85:f2:4f:11:ef:c8:fe:9c:41:d9:26:08:f5:b5:1f: 38:c5:4d:51:81:4b:60:12:6b:42:f2:ad:10:4b:86:2b:e4:ba: f9:01:f9:6d:73:69:c0:29:38:be:ce:77:5c:4d:39:0a:e7:b9: 04:b9:4a:27:d4:08:7c:e7:15:9b:98:95:53:f8:33:d0:3e:09: cb:28:08:33:35:3f:80:8b:f4:3c:8f:15:8d:17:4c:6a:14:9f: 60:46:c4:fe:d0:fe:94:56:7f:2b:62:d1:07:1f:4d:92:61:f3: c8:ba:d1:d3:54:9d:af:1a:95:0d:06:8d:34:a6:81:fe:4b:84: 18:55:99:66:1e:2d:70:19:14:fd:18:ca:a9:8b:76:b6:46:29: 08:f7:e1:b5:14:49:2f:98:d5:b8:2a:d0:d5:15:50:30:ef:c3: 46:8d:80:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrBKnLGqceL4kT0EbHna2QSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMTI2MTcxNjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2IzZDI3ZGQxMmIxMDE2NDI1OGNmOTFkYWI1Y2Q4MjQ2MWQ2MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluPEF58U+PiZoIYboLJKhjHIfXWf NktPG7NUCMew7Lm60dN1Q184KvUf16T+Lcl9AZhDNWyH9PN/sHd4i7ATzFdE2E+P oon4iKojHnVBPXQF9jqmzsMBONOb79MDyuo82GR2M+6i56LTiVScSmHNiyRCT0oO KpMENKa4nli99zVA8ALPSGFXCPjxTCY0eT6N+q9CIFZ/vGegLoAY08k/9nIMZ6vD W40nbhKf6xIdsIMRrOprZW7G8VhMGLiI8fTersJwH2bJT0PKfUUfwQ/EGInaolll twV2cjAlcGKDLQ7y86YGwyKr5IOg2AGHBi5d6iRmMyf8b0S38gKgVrlNwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLez0n3RKxAWQljPkdq1zYJGHWCIMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvdDdQU2ZkRXJFQlpDV00tUjJyWE5na1lkWUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgUMA0G CSqGSIb3DQEBCwUAA4IBAQBddzWvPDky3FQXmmwqXW9Bu0aI1zPp+9sNr/RByA+z G+I1LthfjMN3Nmg5zZWbIquCFEpIEm+GaP5cOufzPgYPeMz3a5lLttKaxgBfNrQH V7kUrQvWTytWhJ7GIQiF8k8R78j+nEHZJgj1tR84xU1RgUtgEmtC8q0QS4Yr5Lr5 Afltc2nAKTi+zndcTTkK57kEuUon1Ah85xWbmJVT+DPQPgnLKAgzNT+Ai/Q8jxWN F0xqFJ9gRsT+0P6UVn8rYtEHH02SYfPIutHTVJ2vGpUNBo00poH+S4QYVZlmHi1w GRT9GMqpi3a2RikI9+G1FEkvmNW4KtDVFVAw78NGjYDI -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:34 2025 by rpki-client