This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/z7_le-_Pv4aO1HMJCPyW0cp8Ipg.roa File: z7_le-_Pv4aO1HMJCPyW0cp8Ipg.roa (raw, json) Hash identifier: puM9Q5Q/7MRIbJGAP4I3Va5Cr7OobK3lRhK3cCFDj24= Subject key identifier: CF:BF:E5:7B:EF:CF:BF:86:8E:D4:73:09:08:FC:96:D1:CA:7C:22:98 Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B41764AC5C84EAA6A613377F08E1A0E87 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/z7_le-_Pv4aO1HMJCPyW0cp8Ipg.roa Signing time: Sun 21 Dec 2025 15:10:29 +0000 ROA not before: Sun 21 Dec 2025 15:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 144.56.23.0/24 maxlen: 24 144.56.36.0/24 maxlen: 24 144.56.38.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.98.0/24 maxlen: 24 144.56.99.0/24 maxlen: 24 144.56.106.0/24 maxlen: 24 144.56.108.0/24 maxlen: 24 144.56.114.0/24 maxlen: 24 144.56.117.0/24 maxlen: 24 144.56.118.0/24 maxlen: 24 144.56.119.0/24 maxlen: 24 144.56.124.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.126.0/24 maxlen: 24 144.56.127.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:76:4a:c5:c8:4e:aa:6a:61:33:77:f0:8e:1a:0e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 21 15:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cfbfe57befcfbf868ed4730908fc96d1ca7c2298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4e:14:bd:82:69:3a:4d:3f:07:55:59:43:d2: 06:4d:06:ae:b5:39:5c:45:4c:c4:47:66:37:18:cb: 4b:d6:62:5f:47:f0:7e:f9:0e:83:59:6d:d6:ea:a8: 3e:b3:61:82:b7:7c:b7:f3:01:d4:f3:28:10:e7:25: 74:85:9e:75:29:9a:25:b1:04:33:54:24:37:9c:75: 89:85:20:ae:63:43:ff:68:70:ed:ea:63:26:f5:11: ca:f4:05:8b:08:f0:9b:75:cc:2e:5d:e4:f3:c5:81: 64:81:5b:1e:cd:7b:24:88:fd:4d:ea:87:60:9c:15: e8:f0:b1:52:3d:41:3b:96:18:82:35:ca:51:75:04: 51:69:58:58:68:f8:e0:83:fb:ec:11:32:9b:f9:92: 12:4d:ed:be:30:12:62:25:48:54:7f:69:00:00:3a: 6b:b1:89:73:9b:f5:27:c7:54:fd:72:40:f7:e1:e7: 91:60:2d:86:26:42:89:3d:08:ad:c8:b5:bc:15:02: cf:1c:96:ae:4f:db:5d:0e:66:16:9a:27:c0:70:c8: f8:f8:a3:4c:24:07:06:29:30:41:83:86:2a:f5:cd: 92:9f:31:89:98:e6:28:4a:d1:5c:37:ee:60:65:10: 44:87:90:f5:b6:72:61:3c:96:fc:c1:dc:3e:66:27: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:BF:E5:7B:EF:CF:BF:86:8E:D4:73:09:08:FC:96:D1:CA:7C:22:98 X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/z7_le-_Pv4aO1HMJCPyW0cp8Ipg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.23.0/24 144.56.36.0/24 144.56.38.0/24 144.56.95.0/24 144.56.97.0-144.56.99.255 144.56.106.0/24 144.56.108.0/24 144.56.114.0/24 144.56.117.0-144.56.119.255 144.56.124.0/22 144.56.129.0/24 Signature Algorithm: sha256WithRSAEncryption 58:ca:71:50:d1:41:f1:fd:ea:cf:a3:06:4c:6b:36:c0:2b:fd: c4:29:c9:18:52:fe:e7:10:f4:b8:20:a5:cb:0f:93:c4:97:12: 33:77:3b:1b:93:79:0f:a5:b5:b1:e3:78:7e:2a:c0:89:4c:f9: 82:1b:53:00:b8:23:08:48:35:b9:9a:77:b6:57:bc:5a:72:b3: 7f:4d:a9:16:54:7d:64:aa:e2:fb:66:59:fa:54:74:bc:da:da: b2:d4:24:39:ef:bf:7a:b0:c5:5d:24:20:2f:36:c7:dc:55:e6: 3c:ec:f4:09:dc:82:e0:ca:6d:d1:64:41:80:6e:3d:ae:c3:d8: 4e:2c:ee:9e:55:07:2b:8c:57:c1:d5:c8:1c:3e:49:09:85:54: b8:1b:e8:dd:f6:07:1e:dd:59:59:fc:4e:3d:be:ba:e8:b5:8c: 2b:6b:ff:f3:ea:5f:a0:10:52:96:21:aa:a5:54:15:62:5f:b8: a4:ed:a7:4d:34:1a:4c:0e:2e:4b:88:07:6d:18:14:5b:22:b7: 59:f4:77:68:e9:81:9b:9b:9f:8c:39:1d:8b:8e:4d:24:d7:73: 56:8b:c1:92:3e:10:21:9a:eb:bb:27:66:e5:a1:33:28:e3:a7: 0c:f1:04:9e:eb:17:76:61:d3:b1:bc:94:05:01:24:b1:f0:c4: 30:02:18:d7 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZtBdkrFyE6qamEzd/COGg6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjIxMTUxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmJmZTU3YmVmY2ZiZjg2OGVkNDczMDkwOGZjOTZkMWNhN2MyMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E4UvYJpOk0/B1VZQ9IGTQautTlc RUzER2Y3GMtL1mJfR/B++Q6DWW3W6qg+s2GCt3y38wHU8ygQ5yV0hZ51KZolsQQz VCQ3nHWJhSCuY0P/aHDt6mMm9RHK9AWLCPCbdcwuXeTzxYFkgVsezXskiP1N6odg nBXo8LFSPUE7lhiCNcpRdQRRaVhYaPjgg/vsETKb+ZISTe2+MBJiJUhUf2kAADpr sYlzm/Unx1T9ckD34eeRYC2GJkKJPQityLW8FQLPHJauT9tdDmYWmifAcMj4+KNM JAcGKTBBg4Yq9c2SnzGJmOYoStFcN+5gZRBEh5D1tnJhPJb8wdw+Zicx5wIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFM+/5Xvvz7+GjtRzCQj8ltHKfCKYMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvejdfbGUtX1B2NGFPMUhNSkNQeVcwY3A4SXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAkDgXAwQA kDgkAwQAkDgmAwQAkDhfMAwDBACQOGEDBAKQOGADBACQOGoDBACQOGwDBACQOHIw DAMEAJA4dQMEA5A4cAMEApA4fAMEAJA4gTANBgkqhkiG9w0BAQsFAAOCAQEAWMpx UNFB8f3qz6MGTGs2wCv9xCnJGFL+5xD0uCClyw+TxJcSM3c7G5N5D6W1seN4firA iUz5ghtTALgjCEg1uZp3tle8WnKzf02pFlR9ZKri+2ZZ+lR0vNrastQkOe+/erDF XSQgLzbH3FXmPOz0CdyC4Mpt0WRBgG49rsPYTizunlUHK4xXwdXIHD5JCYVUuBvo 3fYHHt1ZWfxOPb666LWMK2v/8+pfoBBSliGqpVQVYl+4pO2nTTQaTA4uS4gHbRgU WyK3WfR3aOmBm5ufjDkdi45NJNdzVovBkj4QIZrruydm5aEzKOOnDPEEnusXdmHT sbyUBQEksfDEMAIY1w== -----END CERTIFICATE-----Generated at Mon Dec 22 08:45:54 2025 by rpki-client