This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RaX7FxeiVbCTJFieIGbA51uSfWc.roa File: RaX7FxeiVbCTJFieIGbA51uSfWc.roa (raw, json) Hash identifier: 0rKZfQ5/ZHDk0+cegyekqD9cHVRYn0eg/IfOcDLoyEs= Subject key identifier: 45:A5:FB:17:17:A2:55:B0:93:24:58:9E:20:66:C0:E7:5B:92:7D:67 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A820FE6D18993ACF0E2810C6B7C740448 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RaX7FxeiVbCTJFieIGbA51uSfWc.roa Signing time: Fri 14 Nov 2025 11:11:11 +0000 ROA not before: Fri 14 Nov 2025 11:11:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21840 IP address blocks: 212.135.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:0f:e6:d1:89:93:ac:f0:e2:81:0c:6b:7c:74:04:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 14 11:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45a5fb1717a255b09324589e2066c0e75b927d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:68:73:42:a7:17:19:34:1a:f1:25:d8:90:58: 1e:8f:1d:da:2f:3a:c6:aa:5b:02:3c:c7:e7:28:8e: 2b:b1:fe:ba:00:ae:47:c6:15:19:ef:8a:48:4e:9f: cd:3b:eb:87:c4:57:31:01:c3:cb:4d:2a:3c:88:9c: 26:d9:ee:20:63:cb:e3:57:75:2f:9e:94:b5:63:e5: 37:f2:0f:a4:6a:bd:c3:ac:68:a9:e9:40:86:9f:32: 22:a6:3c:bc:ba:df:1c:c2:ae:b0:39:ff:08:80:3d: 97:70:76:06:8b:db:99:45:86:33:e0:8c:e3:47:48: b6:64:d1:e8:72:31:b6:10:15:72:e5:d0:5e:0c:bc: 62:2b:8b:79:99:59:ed:8b:e2:aa:f7:ad:dd:64:eb: e6:22:3c:1e:2e:e0:80:ee:d4:ab:fc:c1:09:3c:3f: a0:c0:60:65:21:e4:4e:ad:d5:cf:e8:e9:e6:c2:92: e5:93:3c:b5:16:82:51:3c:b2:29:bf:24:f1:28:91: 70:b7:33:8a:bc:19:3e:0e:d0:43:63:63:5b:35:49: 40:c6:23:63:7c:0a:d2:e0:31:fe:4e:d5:ea:d1:03: 48:2d:83:31:87:fe:5b:ca:f4:aa:34:10:7e:8a:19: 41:89:29:3a:8f:f0:9f:ab:1c:4e:a5:76:8e:79:50: b6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A5:FB:17:17:A2:55:B0:93:24:58:9E:20:66:C0:E7:5B:92:7D:67 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/RaX7FxeiVbCTJFieIGbA51uSfWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.242.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:78:ff:04:8b:a4:fe:7c:6d:9e:03:b7:84:3f:c1:34:b0:d4: 81:35:be:75:6c:be:58:3c:06:33:db:ac:24:e0:1f:bd:ec:d8: 6a:e3:eb:9b:ed:62:f5:46:79:7f:6f:66:38:70:7f:76:17:cc: b1:4e:2d:2d:95:4e:6f:0b:80:21:aa:3f:dd:17:7b:93:a5:a1: 48:a3:89:8f:3b:3e:9b:0c:5e:13:b4:78:f4:b0:0e:38:b0:64: 14:44:64:67:43:f4:d1:c8:53:18:f7:6e:cd:80:ae:d8:67:a6: ac:00:f2:c2:21:cf:3b:4b:e8:37:81:82:d4:29:89:99:99:7e: d4:6e:6b:d6:54:b0:53:87:90:ca:15:ba:93:19:43:14:18:7f: 4b:f9:9e:68:6a:28:24:83:eb:3a:b6:20:8d:2d:1a:fc:61:42: b3:72:d9:93:fd:71:1c:50:75:d5:24:92:4d:87:6c:92:5d:66: c1:eb:22:32:9c:d1:74:64:56:e4:ee:e8:a6:20:f8:47:49:6f: f2:c2:c3:38:4a:39:f3:d1:56:d6:e3:20:60:89:16:6d:a6:af: 05:52:02:7f:cd:55:02:13:a0:5c:8f:aa:89:c9:20:e4:64:4c: 8d:05:2c:40:63:0c:28:e6:ec:e0:50:7d:6f:d1:7d:b8:d7:7a: 3d:ff:bf:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqCD+bRiZOs8OKBDGt8dARIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTE0MTExMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWE1ZmIxNzE3YTI1NWIwOTMyNDU4OWUyMDY2YzBlNzViOTI3ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGhzQqcXGTQa8SXYkFgejx3aLzrG qlsCPMfnKI4rsf66AK5HxhUZ74pITp/NO+uHxFcxAcPLTSo8iJwm2e4gY8vjV3Uv npS1Y+U38g+kar3DrGip6UCGnzIipjy8ut8cwq6wOf8IgD2XcHYGi9uZRYYz4Izj R0i2ZNHocjG2EBVy5dBeDLxiK4t5mVnti+Kq963dZOvmIjweLuCA7tSr/MEJPD+g wGBlIeROrdXP6OnmwpLlkzy1FoJRPLIpvyTxKJFwtzOKvBk+DtBDY2NbNUlAxiNj fArS4DH+TtXq0QNILYMxh/5byvSqNBB+ihlBiSk6j/CfqxxOpXaOeVC2zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWl+xcXolWwkyRYniBmwOdbkn1nMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUmFYN0Z4ZWlWYkNUSkZpZUlHYkE1MXVTZldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IfyMA0G CSqGSIb3DQEBCwUAA4IBAQAfeP8Ei6T+fG2eA7eEP8E0sNSBNb51bL5YPAYz26wk 4B+97Nhq4+ub7WL1Rnl/b2Y4cH92F8yxTi0tlU5vC4Ahqj/dF3uTpaFIo4mPOz6b DF4TtHj0sA44sGQURGRnQ/TRyFMY927NgK7YZ6asAPLCIc87S+g3gYLUKYmZmX7U bmvWVLBTh5DKFbqTGUMUGH9L+Z5oaigkg+s6tiCNLRr8YUKzctmT/XEcUHXVJJJN h2ySXWbB6yIynNF0ZFbk7uimIPhHSW/ywsM4Sjnz0VbW4yBgiRZtpq8FUgJ/zVUC E6Bcj6qJySDkZEyNBSxAYwwo5uzgUH1v0X2413o9/7+0 -----END CERTIFICATE-----Generated at Thu Dec 4 19:54:06 2025 by rpki-client