This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pz7Fb-j3jBvmZwNMsPnxz6V7q_k.roa File: pz7Fb-j3jBvmZwNMsPnxz6V7q_k.roa (raw, json) Hash identifier: sHxD2Ti2xXz3BqJbeG75fa5AtkQDTX2t8Gn4HupXD24= Subject key identifier: A7:3E:C5:6F:E8:F7:8C:1B:E6:67:03:4C:B0:F9:F1:CF:A5:7B:AB:F9 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A791BD357C6B52F23003BBC6EE468AC9A Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pz7Fb-j3jBvmZwNMsPnxz6V7q_k.roa Signing time: Wed 12 Nov 2025 17:27:37 +0000 ROA not before: Wed 12 Nov 2025 17:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21840 IP address blocks: 77.93.143.0/24 maxlen: 24 213.210.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:79:1b:d3:57:c6:b5:2f:23:00:3b:bc:6e:e4:68:ac:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 12 17:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a73ec56fe8f78c1be667034cb0f9f1cfa57babf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1e:ad:50:8f:e7:0a:86:5d:b2:9e:f8:58:3c: 47:ca:07:e8:0e:48:57:bc:7c:0f:af:6b:bc:a9:e0: 4a:8f:38:7d:f1:92:33:75:4b:73:7c:c0:90:4e:79: 8d:35:3b:cf:30:c6:84:c3:2d:8f:ff:3a:7b:4a:8c: a3:22:27:ae:0e:ed:1a:75:da:0a:2e:af:c9:9d:b6: ac:bf:96:a6:ab:6b:f8:3f:c8:58:17:4d:8b:37:37: 7c:81:c7:c3:9a:65:37:e9:6d:10:0a:57:7e:b1:0a: b9:0c:07:2e:37:13:89:62:03:37:53:bc:c6:89:6f: 4d:ca:bb:79:85:e8:57:1e:39:4a:1b:d0:e4:ef:4d: 19:e1:18:b5:68:bb:60:e4:3c:0f:5c:b2:ef:a2:42: 22:3f:16:17:d6:f0:b7:66:46:ce:ff:55:0f:29:67: 09:f2:91:df:37:a5:08:53:1a:ce:40:ce:91:e1:2c: ba:bb:5e:ab:af:0e:80:1a:2d:fa:ff:95:62:d6:f4: a5:6f:1f:ee:ed:90:e5:44:79:a6:aa:93:df:18:fc: 0c:d8:22:f8:7a:3b:cf:94:f2:2a:f0:37:cb:81:6d: 8d:42:b0:2c:64:de:2f:e9:90:f2:61:4e:f2:92:25: 58:08:26:b1:f8:9b:bf:43:f1:89:92:1b:3c:b9:11: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:C5:6F:E8:F7:8C:1B:E6:67:03:4C:B0:F9:F1:CF:A5:7B:AB:F9 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pz7Fb-j3jBvmZwNMsPnxz6V7q_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.143.0/24 213.210.28.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:8e:43:d2:fd:6d:4e:64:8d:75:c1:f6:30:9d:ff:89:71:b5: 84:f7:4d:10:57:db:d6:89:3d:7b:ea:d9:d4:60:a8:99:de:63: 96:8a:2b:19:7b:a8:c9:ff:80:32:ae:0d:3b:57:7a:c7:b6:bc: d4:8d:ca:7b:0d:65:e6:a6:49:4d:84:0b:64:7d:22:a6:10:85: fe:aa:ef:65:71:37:d9:db:ae:4c:38:db:05:1b:8e:ea:18:4f: d3:c0:cc:52:dd:6f:55:af:4e:c4:de:55:38:83:75:3c:b5:fd: b5:c3:b4:ac:d3:9a:13:a5:56:36:ab:a1:d9:dc:76:88:39:82: c8:ea:84:fc:92:0d:66:74:df:a8:8a:f7:56:28:e7:ea:0f:aa: ce:33:9d:9a:a9:2d:99:53:14:47:54:d6:13:c8:ae:3f:ad:17: 43:52:4d:d4:82:ee:c0:d3:af:c4:a4:f5:3a:2a:fc:cc:e1:e5: 32:da:93:c9:e0:1d:98:79:e8:68:df:c4:53:80:05:e9:d9:4c: f8:ef:92:76:d4:94:22:30:8c:0d:86:e6:ad:77:f7:ab:c1:db: 20:2e:55:cf:cf:09:90:4e:24:fc:ab:40:bc:ca:2c:7a:29:98: 17:90:3b:01:10:a9:63:10:83:99:58:b0:5a:29:bb:31:aa:d1: 0c:97:ac:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp5G9NXxrUvIwA7vG7kaKyaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTEyMTcyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzNlYzU2ZmU4Zjc4YzFiZTY2NzAzNGNiMGY5ZjFjZmE1N2JhYmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx6tUI/nCoZdsp74WDxHygfoDkhX vHwPr2u8qeBKjzh98ZIzdUtzfMCQTnmNNTvPMMaEwy2P/zp7SoyjIieuDu0addoK Lq/Jnbasv5amq2v4P8hYF02LNzd8gcfDmmU36W0QCld+sQq5DAcuNxOJYgM3U7zG iW9Nyrt5hehXHjlKG9Dk700Z4Ri1aLtg5DwPXLLvokIiPxYX1vC3ZkbO/1UPKWcJ 8pHfN6UIUxrOQM6R4Sy6u16rrw6AGi36/5Vi1vSlbx/u7ZDlRHmmqpPfGPwM2CL4 ejvPlPIq8DfLgW2NQrAsZN4v6ZDyYU7ykiVYCCax+Ju/Q/GJkhs8uRHowQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKc+xW/o94wb5mcDTLD58c+le6v5MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcHo3RmItajNqQnZtWndOTXNQbnh6NlY3cV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATV2PAwQA 1dIcMA0GCSqGSIb3DQEBCwUAA4IBAQCKjkPS/W1OZI11wfYwnf+JcbWE900QV9vW iT176tnUYKiZ3mOWiisZe6jJ/4Ayrg07V3rHtrzUjcp7DWXmpklNhAtkfSKmEIX+ qu9lcTfZ265MONsFG47qGE/TwMxS3W9Vr07E3lU4g3U8tf21w7Ss05oTpVY2q6HZ 3HaIOYLI6oT8kg1mdN+oivdWKOfqD6rOM52aqS2ZUxRHVNYTyK4/rRdDUk3Ugu7A 06/EpPU6KvzM4eUy2pPJ4B2Yeeho38RTgAXp2Uz475J21JQiMIwNhuatd/erwdsg LlXPzwmQTiT8q0C8yix6KZgXkDsBEKljEIOZWLBaKbsxqtEMl6xc -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:17 2025 by rpki-client