This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i7VQgk2dOoPc0oZS2s8fvp6rTj4.roa File: i7VQgk2dOoPc0oZS2s8fvp6rTj4.roa (raw, json) Hash identifier: B3Ubow/tSu8oRapVJ/aS8oc45S8tTb6+z03kmGMjHt0= Subject key identifier: 8B:B5:50:82:4D:9D:3A:83:DC:D2:86:52:DA:CF:1F:BE:9E:AB:4E:3E Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019A820FE8AF7CF2271A9665AD37D43F8F12 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i7VQgk2dOoPc0oZS2s8fvp6rTj4.roa Signing time: Fri 14 Nov 2025 11:11:11 +0000 ROA not before: Fri 14 Nov 2025 11:11:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137235 IP address blocks: 212.135.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 15:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:0f:e8:af:7c:f2:27:1a:96:65:ad:37:d4:3f:8f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Nov 14 11:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8bb550824d9d3a83dcd28652dacf1fbe9eab4e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:f3:f7:97:73:eb:f2:97:96:d1:f6:79:44: 6c:07:f8:05:3c:8e:bb:b4:63:a2:14:6a:7f:48:0f: 81:1a:c1:cc:77:dc:7c:be:6b:0c:65:42:c2:68:d8: 19:9f:13:3d:e8:26:de:56:33:e1:bd:e0:68:c3:59: a6:b2:ba:aa:23:43:f2:29:dc:26:77:a4:3e:35:9c: a1:42:76:ca:ac:e3:c9:75:3e:a0:c6:71:5f:df:1f: aa:4f:52:9e:82:89:9a:82:ce:e7:ec:09:44:ac:62: ae:5d:20:ca:01:d8:0e:bc:2b:f0:d6:2a:37:ce:f2: 15:61:2d:e8:56:50:46:ba:24:14:eb:06:82:f4:b6: 6d:d9:92:d2:07:d8:7a:67:f0:7a:29:63:99:a4:ca: fd:4b:83:51:3b:21:c2:a5:c8:c4:e8:8f:dd:a2:5c: c2:67:5f:13:6b:5d:e1:ea:91:ca:1d:d1:7b:c4:a5: 48:28:5c:3b:83:f6:3c:47:17:02:50:1d:bc:db:96: b4:69:10:d0:50:4e:89:ff:f1:cf:0b:16:6a:d6:43: 47:9f:f7:28:7a:d7:e7:bf:e0:b2:78:9a:86:c3:02: 41:cd:76:64:e3:44:b7:54:cc:db:76:3e:3e:68:fa: c6:82:fd:10:ac:8c:f2:b9:0c:dc:4c:2c:24:84:c7: c0:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B5:50:82:4D:9D:3A:83:DC:D2:86:52:DA:CF:1F:BE:9E:AB:4E:3E X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/i7VQgk2dOoPc0oZS2s8fvp6rTj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.135.30.0/24 Signature Algorithm: sha256WithRSAEncryption b1:5c:13:5b:a6:84:8d:21:63:49:c9:e3:89:ac:bb:09:11:c6: 33:cf:35:8a:49:c1:49:7d:b7:6a:da:6a:ba:25:c7:5b:55:dc: 89:5f:9c:f5:cb:e9:95:c6:23:5e:b7:12:74:14:b5:eb:44:4f: 82:b7:27:c5:c0:a3:ab:e7:f3:8d:56:df:8d:00:30:90:ba:9c: ca:98:1f:cd:59:4c:cd:66:c3:a6:42:f1:0c:53:73:d8:d7:cb: 93:58:97:4e:99:87:24:8e:1b:17:d3:51:a9:28:fe:6b:b4:ac: d0:67:cf:1b:dc:65:c8:cc:5a:fa:14:da:78:ee:fb:08:e4:66: c1:1f:56:21:79:72:4d:3e:78:94:ff:3c:8f:d0:5b:83:1b:e4: 40:f7:fe:97:ac:26:39:7e:ef:47:e9:57:f4:49:56:c6:aa:41: fd:4b:1c:86:bf:15:41:5e:08:08:d5:c0:b0:4f:82:12:6c:a4: 92:cd:1e:7b:30:2e:08:f4:99:8d:bd:0e:5e:77:4e:7d:17:40: ac:77:d8:6d:8e:77:55:63:8b:cf:6e:45:55:44:fa:eb:13:ca: ce:2e:e0:57:65:e5:31:9d:63:4a:23:29:ba:d4:43:e3:2e:2d: 1b:40:e1:e6:44:bf:7e:d8:58:55:d0:e8:8d:34:41:fa:06:1e: b9:dd:21:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqCD+ivfPInGpZlrTfUP48SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjUxMTE0MTExMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmI1NTA4MjRkOWQzYTgzZGNkMjg2NTJkYWNmMWZiZTllYWI0ZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pPz95dz6/KXltH2eURsB/gFPI67 tGOiFGp/SA+BGsHMd9x8vmsMZULCaNgZnxM96CbeVjPhveBow1mmsrqqI0PyKdwm d6Q+NZyhQnbKrOPJdT6gxnFf3x+qT1Kegomags7n7AlErGKuXSDKAdgOvCvw1io3 zvIVYS3oVlBGuiQU6waC9LZt2ZLSB9h6Z/B6KWOZpMr9S4NROyHCpcjE6I/dolzC Z18Ta13h6pHKHdF7xKVIKFw7g/Y8RxcCUB2825a0aRDQUE6J//HPCxZq1kNHn/co etfnv+CyeJqGwwJBzXZk40S3VMzbdj4+aPrGgv0QrIzyuQzcTCwkhMfAvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIu1UIJNnTqD3NKGUtrPH76eq04+MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvaTdWUWdrMmRPb1BjMG9aUzJzOGZ2cDZyVGo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IceMA0G CSqGSIb3DQEBCwUAA4IBAQCxXBNbpoSNIWNJyeOJrLsJEcYzzzWKScFJfbdq2mq6 JcdbVdyJX5z1y+mVxiNetxJ0FLXrRE+CtyfFwKOr5/ONVt+NADCQupzKmB/NWUzN ZsOmQvEMU3PY18uTWJdOmYckjhsX01GpKP5rtKzQZ88b3GXIzFr6FNp47vsI5GbB H1YheXJNPniU/zyP0FuDG+RA9/6XrCY5fu9H6Vf0SVbGqkH9SxyGvxVBXggI1cCw T4ISbKSSzR57MC4I9JmNvQ5ed059F0Csd9htjndVY4vPbkVVRPrrE8rOLuBXZeUx nWNKIym61EPjLi0bQOHmRL9+2FhV0OiNNEH6Bh653SGO -----END CERTIFICATE-----Generated at Thu Dec 4 19:55:06 2025 by rpki-client