This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/F3n7HQ_-5hfLUMnSJPT42-5gS1s.roa File: F3n7HQ_-5hfLUMnSJPT42-5gS1s.roa (raw, json) Hash identifier: V9Afb9v9TKReNuPLsv7d0FzqJjRsqmOIEMHbm43eIR4= Subject key identifier: 17:79:FB:1D:0F:FE:E6:17:CB:50:C9:D2:24:F4:F8:DB:EE:60:4B:5B Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019ADB0F5C4671ADDD3A91BE926393E7C70C Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/F3n7HQ_-5hfLUMnSJPT42-5gS1s.roa Signing time: Mon 01 Dec 2025 17:56:48 +0000 ROA not before: Mon 01 Dec 2025 17:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34119 IP address blocks: 138.226.208.0/22 maxlen: 22 158.120.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:db:0f:5c:46:71:ad:dd:3a:91:be:92:63:93:e7:c7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Dec 1 17:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1779fb1d0ffee617cb50c9d224f4f8dbee604b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:7e:75:83:13:70:73:b2:86:74:77:6f:6c: f0:9c:7b:d9:26:0d:9b:e1:68:7d:b8:47:79:48:01: 3d:ad:75:47:0f:2b:55:bd:f9:a0:d9:87:b8:52:82: e7:8a:d5:1b:c2:1d:71:ca:b0:a6:1c:7a:b5:5e:d9: 88:53:cb:8c:cd:85:ee:56:48:3d:f4:64:ea:c9:60: 69:df:11:27:4b:e7:6b:05:8e:42:69:31:72:a8:23: d6:56:b8:0a:54:05:a1:f9:87:2e:ed:54:60:9f:3d: 80:b4:56:ab:44:da:93:23:87:5f:36:06:87:2f:a8: dc:35:3c:a8:25:11:d0:be:ec:5b:29:83:79:86:9c: 7c:4a:35:50:d0:af:ed:0a:8f:d2:c4:aa:7a:57:1d: 2d:4e:e7:54:6c:77:95:cc:93:26:4c:d4:7c:59:ef: c4:21:c8:e5:e4:81:47:09:bf:47:2f:68:8b:3e:99: 8d:6b:09:20:0b:8d:93:35:d9:11:2a:51:d2:7a:1f: 2e:40:b0:51:81:fd:24:f2:9f:d8:76:38:d0:fa:54: 06:db:81:ed:a2:3f:60:02:0b:ca:55:4a:33:59:e6: a6:6c:e2:80:7a:17:55:49:05:cb:99:5d:41:6f:ab: 29:30:c9:36:19:57:01:84:3b:e2:f1:fa:2d:9c:0d: 4c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:79:FB:1D:0F:FE:E6:17:CB:50:C9:D2:24:F4:F8:DB:EE:60:4B:5B X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/F3n7HQ_-5hfLUMnSJPT42-5gS1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.226.208.0/22 158.120.72.0/23 Signature Algorithm: sha256WithRSAEncryption 02:b7:03:0a:35:19:31:37:cf:76:5a:40:1a:c4:6a:4a:b3:00: e2:93:e4:64:f6:7e:fe:7c:43:6d:ac:c5:11:8c:2b:51:4a:82: de:6a:42:c3:dd:43:94:75:95:b7:38:53:2a:ad:59:0b:9c:e7: 7b:19:42:9a:7f:e4:87:a6:d1:3a:09:80:43:7a:46:23:04:b4: cb:74:b7:47:2e:51:3f:2e:ab:13:4c:5b:d7:96:29:ee:6b:ca: 1e:59:9c:7e:d6:db:14:2e:48:3a:37:a0:19:37:ac:08:f9:67: 55:ac:65:6d:e6:1c:fa:bc:e2:a8:da:01:e3:09:6c:14:7f:3a: 52:97:a3:bc:d6:a6:5b:9b:f7:73:5f:f4:b7:a6:62:94:11:32: 35:5f:72:df:60:46:6e:6e:58:76:8e:fb:b1:97:d1:33:95:9b: a1:0b:a1:fa:a6:1b:d2:62:a0:b9:ce:01:e2:61:7f:90:34:ac: 7c:08:6b:65:e2:1a:2c:92:9f:89:b1:8c:c1:d5:14:91:e1:db: dc:09:0f:4a:b6:6f:0b:72:09:cc:82:84:93:a2:92:49:55:b2: ab:0d:67:73:0f:2e:16:35:8d:ce:e6:b3:80:77:ca:1f:91:12: be:b1:16:c2:08:cd:27:23:3f:8d:d0:01:2a:c3:09:af:99:87: 2d:b1:ea:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrbD1xGca3dOpG+kmOT58cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjUxMjAxMTc1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzc5ZmIxZDBmZmVlNjE3Y2I1MGM5ZDIyNGY0ZjhkYmVlNjA0YjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Np+dYMTcHOyhnR3b2zwnHvZJg2b 4Wh9uEd5SAE9rXVHDytVvfmg2Ye4UoLnitUbwh1xyrCmHHq1XtmIU8uMzYXuVkg9 9GTqyWBp3xEnS+drBY5CaTFyqCPWVrgKVAWh+Ycu7VRgnz2AtFarRNqTI4dfNgaH L6jcNTyoJRHQvuxbKYN5hpx8SjVQ0K/tCo/SxKp6Vx0tTudUbHeVzJMmTNR8We/E Icjl5IFHCb9HL2iLPpmNawkgC42TNdkRKlHSeh8uQLBRgf0k8p/YdjjQ+lQG24Ht oj9gAgvKVUozWeambOKAehdVSQXLmV1Bb6spMMk2GVcBhDvi8fotnA1M6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBd5+x0P/uYXy1DJ0iT0+NvuYEtbMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvRjNuN0hRXy01aGZMVU1uU0pQVDQyLTVnUzFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiuLQAwQB nnhIMA0GCSqGSIb3DQEBCwUAA4IBAQACtwMKNRkxN892WkAaxGpKswDik+Rk9n7+ fENtrMURjCtRSoLeakLD3UOUdZW3OFMqrVkLnOd7GUKaf+SHptE6CYBDekYjBLTL dLdHLlE/LqsTTFvXlinua8oeWZx+1tsULkg6N6AZN6wI+WdVrGVt5hz6vOKo2gHj CWwUfzpSl6O81qZbm/dzX/S3pmKUETI1X3LfYEZublh2jvuxl9EzlZuhC6H6phvS YqC5zgHiYX+QNKx8CGtl4hoskp+JsYzB1RSR4dvcCQ9Ktm8LcgnMgoSTopJJVbKr DWdzDy4WNY3O5rOAd8ofkRK+sRbCCM0nIz+N0AEqwwmvmYctsep0 -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:33 2025 by rpki-client