This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/A7wbT-x3sTCS0NQAnrepRYnYwHo.roa File: A7wbT-x3sTCS0NQAnrepRYnYwHo.roa (raw, json) Hash identifier: PUzsVnyGi+EuTi16N0vtRQEeVOHZqUbU/82+cC3zkzg= Subject key identifier: 03:BC:1B:4F:EC:77:B1:30:92:D0:D4:00:9E:B7:A9:45:89:D8:C0:7A Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924 Certificate serial: 019B124327F3CD29CBF209A4CD64B66F5E95 Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/A7wbT-x3sTCS0NQAnrepRYnYwHo.roa Signing time: Fri 12 Dec 2025 11:12:29 +0000 ROA not before: Fri 12 Dec 2025 11:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210902 IP address blocks: 83.168.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:43:27:f3:cd:29:cb:f2:09:a4:cd:64:b6:6f:5e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924 Validity Not Before: Dec 12 11:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=03bc1b4fec77b13092d0d4009eb7a94589d8c07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3b:39:91:fd:06:49:68:8b:e7:5e:f3:6c:3c: 81:1f:4e:ee:f7:a3:c8:80:de:3c:83:3c:54:d6:e4: 2b:57:02:33:31:5b:ed:80:a4:43:91:6b:82:a4:0a: 18:9b:bd:88:2d:af:9c:8e:be:fb:8f:b4:63:f8:d7: fc:00:23:b9:cd:da:1d:ef:8c:08:b5:33:2c:58:86: 60:13:87:32:5b:50:2b:e6:41:a2:72:ff:69:fb:a2: 18:f4:4a:24:db:ee:97:b1:82:64:89:d4:2c:96:33: 28:03:d3:21:ac:bd:73:99:28:f1:26:2f:69:79:68: f9:8a:00:91:64:24:cb:42:11:ba:dd:bb:7a:f4:bf: 50:ab:8e:52:94:81:d5:dd:fb:3c:7b:6d:ce:e2:4f: 0b:a5:72:0d:77:09:03:63:1b:17:72:65:f8:8a:73: dd:73:8e:89:1e:44:57:11:ce:9d:da:5d:26:38:d3: 1c:19:e3:b2:2c:11:8a:a8:97:67:6f:47:10:3e:4a: f1:6c:4d:ee:25:4d:b8:8a:00:7a:e6:18:43:78:5e: ac:b6:b6:2d:72:95:38:ae:fe:ea:bd:49:a7:ae:87: ac:8a:59:8b:78:53:71:df:be:92:91:86:79:a6:79: ba:f2:1c:de:73:9c:39:b2:6f:91:8f:01:fc:9d:0d: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BC:1B:4F:EC:77:B1:30:92:D0:D4:00:9E:B7:A9:45:89:D8:C0:7A X509v3 Authority Key Identifier: keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/A7wbT-x3sTCS0NQAnrepRYnYwHo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.168.96.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:03:63:26:b8:86:31:07:88:4f:83:59:a4:ec:66:43:50:e2: 1f:2f:24:01:a8:9a:05:38:63:95:4f:33:51:1a:4a:ed:c3:68: de:48:c6:9e:b8:02:ff:c9:49:22:92:d3:d5:8b:21:7e:70:c5: c5:ff:f3:0a:fc:50:b2:f0:fd:57:0c:36:aa:61:57:12:26:c8: b4:0c:73:c4:ce:b1:03:0a:ef:f7:ab:5f:ea:b9:ed:b5:74:13: ce:b4:c5:93:b8:be:d4:37:04:db:8a:3e:bb:f4:4a:c8:4c:5b: b8:70:23:3b:1c:38:bf:77:e7:b1:15:27:67:dc:d8:2e:c3:2b: c8:2e:db:42:6d:79:d2:ad:f1:9e:28:bb:2c:a1:b6:9a:a6:2b: eb:d5:db:27:82:13:e5:04:51:fd:ec:e1:e7:26:60:2b:4c:17: e0:ca:d9:2a:19:b0:b0:7b:54:7d:d6:33:d4:6d:e4:d2:94:93: 03:f0:0b:34:28:f4:fd:9c:47:ef:7f:9a:cb:29:20:8b:ec:0e: 81:90:41:2a:bc:e8:ba:12:41:28:d8:ce:18:f3:e8:e7:29:a4: 8c:e5:3a:07:ff:d9:80:c2:a4:a4:d1:98:76:f8:fe:61:4f:4d: 3b:1f:39:c2:15:27:11:a0:97:de:0d:5b:c9:76:ac:87:ae:df: 06:38:c7:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSQyfzzSnL8gmkzWS2b16VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZmVlZjA5YzQ1MDk5MGFmMzQ3NzljZTcwMWJlNmNkNTRi M2Q5MjQwHhcNMjUxMjEyMTExMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2JjMWI0ZmVjNzdiMTMwOTJkMGQ0MDA5ZWI3YTk0NTg5ZDhjMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDs5kf0GSWiL517zbDyBH07u96PI gN48gzxU1uQrVwIzMVvtgKRDkWuCpAoYm72ILa+cjr77j7Rj+Nf8ACO5zdod74wI tTMsWIZgE4cyW1Ar5kGicv9p+6IY9Eok2+6XsYJkidQsljMoA9MhrL1zmSjxJi9p eWj5igCRZCTLQhG63bt69L9Qq45SlIHV3fs8e23O4k8LpXINdwkDYxsXcmX4inPd c46JHkRXEc6d2l0mONMcGeOyLBGKqJdnb0cQPkrxbE3uJU24igB65hhDeF6strYt cpU4rv7qvUmnroesilmLeFNx376SkYZ5pnm68hzec5w5sm+RjwH8nQ0ZmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAO8G0/sd7EwktDUAJ63qUWJ2MB6MB8GA1UdIwQY MBaAFGb+7wnEUJkK80d5znAb5s1Us9kkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYt ODI0NTFmMzNmNGNhLzEvQTd3YlQteDNzVENTME5RQW5yZXBSWW5Zd0hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMTU5N2ItNmVmMi00NDMwLWFhNTYtODI0NTFmMzNmNGNh LzEvWnY3dkNjUlFtUXJ6UjNuT2NCdm16VlN6MlNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU6hgMA0G CSqGSIb3DQEBCwUAA4IBAQCNA2MmuIYxB4hPg1mk7GZDUOIfLyQBqJoFOGOVTzNR Gkrtw2jeSMaeuAL/yUkiktPViyF+cMXF//MK/FCy8P1XDDaqYVcSJsi0DHPEzrED Cu/3q1/que21dBPOtMWTuL7UNwTbij679ErITFu4cCM7HDi/d+exFSdn3NguwyvI LttCbXnSrfGeKLssobaapivr1dsnghPlBFH97OHnJmArTBfgytkqGbCwe1R91jPU beTSlJMD8As0KPT9nEfvf5rLKSCL7A6BkEEqvOi6EkEo2M4Y8+jnKaSM5ToH/9mA wqSk0Zh2+P5hT007HznCFScRoJfeDVvJdqyHrt8GOMeo -----END CERTIFICATE-----Generated at Fri Dec 26 10:30:46 2025 by rpki-client