This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/B7K6x_EK-mDu9eLI2OIUh-hAC6s.roa File: B7K6x_EK-mDu9eLI2OIUh-hAC6s.roa (raw, json) Hash identifier: KLWngeXpa7mxkfdFEO1D1eoTXWk7wYWMUmCXR4WhaNU= Subject key identifier: 07:B2:BA:C7:F1:0A:FA:60:EE:F5:E2:C8:D8:E2:14:87:E8:40:0B:AB Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019AED193F084DC27129317832D35955D4F2 Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/B7K6x_EK-mDu9eLI2OIUh-hAC6s.roa Signing time: Fri 05 Dec 2025 06:00:46 +0000 ROA not before: Fri 05 Dec 2025 06:00:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 262287 IP address blocks: 2.57.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 06:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:19:3f:08:4d:c2:71:29:31:78:32:d3:59:55:d4:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Dec 5 06:00:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=07b2bac7f10afa60eef5e2c8d8e21487e8400bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b4:29:1e:82:e4:fe:3d:92:5d:5d:ec:71:af: 35:8d:bb:6b:8a:72:a0:38:62:3b:4e:a5:28:f6:0b: 68:7e:ec:41:9d:9f:2a:fe:1a:99:e5:e7:17:83:5c: 2f:1a:ee:6d:bc:19:08:f7:ab:56:6f:7a:40:3b:2f: d6:ae:9f:a1:a6:c3:29:d9:f8:b8:e9:ba:ef:12:0e: 2a:47:0a:39:b0:c7:e7:e5:e0:60:85:59:1d:a2:6a: 79:32:34:31:d4:1a:30:78:20:6f:4c:4e:1d:dd:a4: 1b:d2:3a:cd:e4:53:88:98:fb:e5:9c:4e:e4:30:59: 8e:1e:b7:53:6f:e9:d8:df:b0:2c:07:2e:38:67:8a: 35:2a:b9:ee:63:88:4d:84:5a:13:38:47:e0:79:0a: 54:68:b8:1f:ab:5d:cc:99:07:40:bf:8d:27:cd:b6: 98:18:ea:25:88:1f:50:6f:e0:9c:16:6f:4b:49:03: 16:59:f3:01:10:e8:41:a6:bb:13:53:cd:4d:4b:bb: 27:3d:9c:d4:8b:2a:47:75:10:ea:39:a3:7c:82:a9: 13:cd:5a:be:d0:4d:2c:fd:89:dc:94:20:4f:96:7d: 7f:68:fb:72:49:4d:d6:23:db:b0:e5:5f:cb:89:9b: f8:4b:60:d6:b1:4a:f9:b5:4a:48:35:78:31:7e:df: f0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B2:BA:C7:F1:0A:FA:60:EE:F5:E2:C8:D8:E2:14:87:E8:40:0B:AB X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/B7K6x_EK-mDu9eLI2OIUh-hAC6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.171.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d8:17:d3:1b:02:91:14:a4:b9:d1:cc:19:98:56:19:b9:71: 19:ce:eb:a9:29:d5:82:7e:c6:24:4a:73:47:ca:03:74:e1:c4: 16:be:a9:5e:d6:e5:86:b9:5d:e3:cc:85:7b:38:2c:76:8f:c8: 26:e8:24:3c:74:15:86:27:a0:2b:bb:18:8b:35:59:4b:bd:7f: 65:ee:0b:f5:de:96:8a:0a:3d:2e:f9:d7:0a:be:e3:d9:3d:37: a8:d5:71:b4:0e:29:07:23:a2:d1:61:66:2a:d6:f0:a6:62:dd: 2a:fa:3e:63:cb:62:63:c7:51:ee:70:a6:5f:a3:b3:f9:82:c1: fe:84:7f:2d:27:a4:31:bd:3f:00:98:48:f1:e9:d2:66:af:60: 43:96:1b:14:4c:b0:e9:bf:a4:62:69:52:5b:64:2d:f3:8d:d7: b5:7c:91:15:20:db:cb:fd:f9:9c:ab:f0:72:f2:0c:c4:f7:7c: 75:b6:ba:67:0b:01:43:1e:16:5b:4f:1e:34:54:d3:6c:c8:84: 12:73:25:04:63:16:41:18:63:5c:cb:14:f5:09:39:f9:bf:99: 3f:c0:73:8e:9a:06:92:eb:c5:7f:6a:e8:f8:77:04:15:fb:73: 61:14:58:dd:35:55:6a:bf:0e:02:1b:f8:5b:23:0d:5e:5e:4b: 19:4f:1f:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrtGT8ITcJxKTF4MtNZVdTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjUxMjA1MDYwMDQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2IyYmFjN2YxMGFmYTYwZWVmNWUyYzhkOGUyMTQ4N2U4NDAwYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrQpHoLk/j2SXV3sca81jbtrinKg OGI7TqUo9gtofuxBnZ8q/hqZ5ecXg1wvGu5tvBkI96tWb3pAOy/Wrp+hpsMp2fi4 6brvEg4qRwo5sMfn5eBghVkdomp5MjQx1BoweCBvTE4d3aQb0jrN5FOImPvlnE7k MFmOHrdTb+nY37AsBy44Z4o1KrnuY4hNhFoTOEfgeQpUaLgfq13MmQdAv40nzbaY GOoliB9Qb+CcFm9LSQMWWfMBEOhBprsTU81NS7snPZzUiypHdRDqOaN8gqkTzVq+ 0E0s/YnclCBPln1/aPtySU3WI9uw5V/LiZv4S2DWsUr5tUpINXgxft/wrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeyusfxCvpg7vXiyNjiFIfoQAurMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvQjdLNnhfRUstbUR1OWVMSTJPSVVoLWhBQzZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjmrMA0G CSqGSIb3DQEBCwUAA4IBAQCj2BfTGwKRFKS50cwZmFYZuXEZzuupKdWCfsYkSnNH ygN04cQWvqle1uWGuV3jzIV7OCx2j8gm6CQ8dBWGJ6AruxiLNVlLvX9l7gv13paK Cj0u+dcKvuPZPTeo1XG0DikHI6LRYWYq1vCmYt0q+j5jy2Jjx1HucKZfo7P5gsH+ hH8tJ6QxvT8AmEjx6dJmr2BDlhsUTLDpv6RiaVJbZC3zjde1fJEVINvL/fmcq/By 8gzE93x1trpnCwFDHhZbTx40VNNsyIQScyUEYxZBGGNcyxT1CTn5v5k/wHOOmgaS 68V/auj4dwQV+3NhFFjdNVVqvw4CG/hbIw1eXksZTx+r -----END CERTIFICATE-----Generated at Fri Dec 5 12:04:53 2025 by rpki-client