This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/7sZHEb-3j0UDknNTVR4r3jEHiPw.roa File: 7sZHEb-3j0UDknNTVR4r3jEHiPw.roa (raw, json) Hash identifier: kjKnTMuWRl0f+MG1heWAt7d7HgqUPWdFN6Svv/sgCx8= Subject key identifier: EE:C6:47:11:BF:B7:8F:45:03:92:73:53:55:1E:2B:DE:31:07:88:FC Certificate issuer: /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Certificate serial: 019B14D9FEFA5CB474CD64BD5A335F2187BC Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/7sZHEb-3j0UDknNTVR4r3jEHiPw.roa Signing time: Fri 12 Dec 2025 23:16:29 +0000 ROA not before: Fri 12 Dec 2025 23:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 91.195.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:14:d9:fe:fa:5c:b4:74:cd:64:bd:5a:33:5f:21:87:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf Validity Not Before: Dec 12 23:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=eec64711bfb78f4503927353551e2bde310788fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:57:99:b5:a0:c0:22:91:e4:bb:56:5f:d8: 89:2b:fa:4f:e4:1b:54:7a:69:cc:fb:fb:cf:5e:ff: 7b:cc:b4:e6:a4:71:41:f4:91:e5:22:a2:38:34:0c: cc:db:f7:11:84:b6:4b:41:b2:bd:b9:94:a9:31:1e: 67:f4:b1:3d:64:fa:95:26:10:33:fa:a0:e7:46:42: da:45:41:3a:0e:f7:21:39:2e:f2:8a:33:ea:6d:e2: 61:68:fc:8e:3a:33:e2:fb:f0:05:00:69:9e:94:9b: 6e:eb:68:3d:70:6d:cb:ba:c3:41:fc:6a:01:8a:24: b1:41:09:0d:fa:d8:6c:28:da:85:82:95:97:ee:2f: 05:22:f0:b1:d9:ef:96:47:08:43:f0:96:e2:1f:6c: f1:a0:29:27:b2:f3:53:22:81:c6:ca:0e:14:98:0a: 8f:ee:84:82:22:90:fd:38:2d:3d:88:b5:b8:8f:7c: a8:0e:17:e5:78:c9:42:28:c9:34:7a:b2:66:a7:4f: cc:04:60:a1:77:ab:c8:62:4a:45:a2:e7:b6:32:52: 96:71:0e:35:d3:2e:8b:bf:3d:35:21:1d:ab:2b:79: e5:91:95:71:e3:17:da:85:d3:52:e3:76:79:b5:88: 8e:ac:81:b7:a5:e3:73:09:74:f6:79:6f:07:16:09: c8:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C6:47:11:BF:B7:8F:45:03:92:73:53:55:1E:2B:DE:31:07:88:FC X509v3 Authority Key Identifier: keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/7sZHEb-3j0UDknNTVR4r3jEHiPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.110.0/24 Signature Algorithm: sha256WithRSAEncryption 32:c1:66:17:53:14:c3:6b:65:1d:19:42:1a:f9:f4:91:73:70: 06:cc:8b:ad:ed:24:60:ad:9b:bb:72:cf:cd:cb:96:19:b8:a9: c7:c2:bd:0f:1b:04:cc:8b:8a:2e:d4:44:39:22:5c:74:e3:09: ec:97:91:2d:f9:c1:84:a6:d7:2c:4a:7c:d9:83:b3:44:bd:e9: f2:8c:70:a0:7d:27:ae:c6:92:eb:42:da:9d:fa:43:f5:c8:7c: cb:91:6c:42:ee:e8:cb:77:2b:ec:10:41:08:6a:eb:54:78:85: 6b:d4:ec:95:41:b3:9c:70:96:a1:e6:84:54:50:44:b7:a8:f0: af:a0:d3:30:aa:f5:5c:9e:83:3d:3a:9f:45:2c:25:3a:52:26: 0c:34:61:46:cc:26:3a:74:a6:8e:0c:2e:6e:5e:14:dd:ad:61: 9f:85:8b:51:bb:41:58:b7:ac:76:74:8f:c0:8e:54:59:ef:0c: ba:6e:47:52:5e:cb:fc:87:43:77:0d:71:71:72:93:f7:2b:7f: 96:3d:12:1f:64:a6:dd:8f:d1:ec:2b:87:93:33:79:21:95:00: e1:99:b5:6c:97:1e:3b:59:8b:34:f8:17:a6:fd:53:6d:41:14: 56:71:3d:9c:ab:d8:68:f4:06:29:3f:85:de:b1:7b:41:96:08: cd:c2:bc:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsU2f76XLR0zWS9WjNfIYe8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWVkM2Q3YmE1MTFjYTYwMDJkODQ1YjNjMGFhODExMWEz NTU5Y2YwHhcNMjUxMjEyMjMxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWM2NDcxMWJmYjc4ZjQ1MDM5MjczNTM1NTFlMmJkZTMxMDc4OGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zFXmbWgwCKR5LtWX9iJK/pP5BtU emnM+/vPXv97zLTmpHFB9JHlIqI4NAzM2/cRhLZLQbK9uZSpMR5n9LE9ZPqVJhAz +qDnRkLaRUE6DvchOS7yijPqbeJhaPyOOjPi+/AFAGmelJtu62g9cG3LusNB/GoB iiSxQQkN+thsKNqFgpWX7i8FIvCx2e+WRwhD8JbiH2zxoCknsvNTIoHGyg4UmAqP 7oSCIpD9OC09iLW4j3yoDhfleMlCKMk0erJmp0/MBGChd6vIYkpFoue2MlKWcQ41 0y6Lvz01IR2rK3nlkZVx4xfahdNS43Z5tYiOrIG3peNzCXT2eW8HFgnISQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO7GRxG/t49FA5JzU1UeK94xB4j8MB8GA1UdIwQY MBaAFDMe09e6URymAC2EWzwKqBEaNVnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQt YmFmMjRkZDU4MzlmLzEvN3NaSEViLTNqMFVEa25OVFZSNHIzakVIaVB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mZWFhMWItYjdjMS00YjQ4LTk1OTQtYmFmMjRkZDU4Mzlm LzEvTXg3VDE3cFJIS1lBTFlSYlBBcW9FUm8xV2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8NuMA0G CSqGSIb3DQEBCwUAA4IBAQAywWYXUxTDa2UdGUIa+fSRc3AGzIut7SRgrZu7cs/N y5YZuKnHwr0PGwTMi4ou1EQ5Ilx04wnsl5Et+cGEptcsSnzZg7NEvenyjHCgfSeu xpLrQtqd+kP1yHzLkWxC7ujLdyvsEEEIautUeIVr1OyVQbOccJah5oRUUES3qPCv oNMwqvVcnoM9Op9FLCU6UiYMNGFGzCY6dKaODC5uXhTdrWGfhYtRu0FYt6x2dI/A jlRZ7wy6bkdSXsv8h0N3DXFxcpP3K3+WPRIfZKbdj9HsK4eTM3khlQDhmbVslx47 WYs0+Bem/VNtQRRWcT2cq9ho9AYpP4XesXtBlgjNwry9 -----END CERTIFICATE-----Generated at Wed Dec 17 18:41:48 2025 by rpki-client