This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/C7OVJmqMVZl4bFDK_jTgEhqtZEw.roa File: C7OVJmqMVZl4bFDK_jTgEhqtZEw.roa (raw, json) Hash identifier: crEmp8BtR20WMLGEgh9/O1jQEg8/jo4F0bI4yN1E41k= Subject key identifier: 0B:B3:95:26:6A:8C:55:99:78:6C:50:CA:FE:34:E0:12:1A:AD:64:4C Certificate issuer: /CN=611343a8ee92aec36510de97382dc6a420888efe Certificate serial: 019B4588297D5D9352FBD25485AA44A30CF3 Authority key identifier: 61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/C7OVJmqMVZl4bFDK_jTgEhqtZEw.roa Signing time: Mon 22 Dec 2025 10:08:30 +0000 ROA not before: Mon 22 Dec 2025 10:08:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56798 IP address blocks: 195.8.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.mft rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:88:29:7d:5d:93:52:fb:d2:54:85:aa:44:a3:0c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=611343a8ee92aec36510de97382dc6a420888efe Validity Not Before: Dec 22 10:08:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0bb395266a8c5599786c50cafe34e0121aad644c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ec:49:1e:b1:2f:a2:b2:21:4e:ac:b1:39:9e: cf:94:ef:0c:14:93:bb:c7:8e:89:ee:33:9b:c1:0c: 2e:53:4b:fa:e9:4b:e1:cb:d6:91:6e:34:89:78:1a: d5:a4:22:41:1d:fa:9d:cd:db:29:7f:6d:d9:25:47: da:27:dd:c2:87:8c:5c:b9:80:d7:47:44:68:fe:45: de:5c:f5:1c:fa:46:a7:14:f1:a9:5c:42:63:39:d0: ca:af:63:21:4c:8c:6b:00:9f:56:d4:9d:30:a1:0f: 06:e7:61:1b:0e:e2:1b:14:06:30:4b:02:e4:84:fc: 5a:12:83:38:36:ea:ab:cb:34:f1:b0:60:84:cf:bc: 1e:f6:75:6a:35:8f:16:af:52:0c:5a:df:58:83:15: 4a:0f:a1:de:b5:72:9b:86:85:de:b5:bc:07:59:8c: 55:cf:16:e0:bf:98:be:a0:b0:5a:20:78:07:ea:b3: ee:58:b7:6b:87:bc:e1:21:27:98:2f:c0:69:fc:51: 66:2c:ad:3c:aa:54:57:b8:86:96:08:71:b7:37:3a: 59:31:c7:a9:28:2c:a0:66:99:56:74:87:8d:4a:7d: 13:06:c8:5a:8b:a7:1e:d6:a7:af:5f:2f:db:af:97: 2d:e3:ee:9e:33:c9:62:af:ef:51:cc:c3:0e:ea:5c: 79:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B3:95:26:6A:8C:55:99:78:6C:50:CA:FE:34:E0:12:1A:AD:64:4C X509v3 Authority Key Identifier: keyid:61:13:43:A8:EE:92:AE:C3:65:10:DE:97:38:2D:C6:A4:20:88:8E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRNDqO6SrsNlEN6XOC3GpCCIjv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/C7OVJmqMVZl4bFDK_jTgEhqtZEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9a0112-c69a-452a-95b5-70b977e74a57/1/YRNDqO6SrsNlEN6XOC3GpCCIjv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.8.203.0/24 Signature Algorithm: sha256WithRSAEncryption ca:e0:a6:bf:41:b5:c7:c7:03:7e:be:1b:d0:5a:af:b9:13:59: 11:c9:20:70:41:37:17:51:a8:03:ea:5a:09:96:6c:6f:19:54: a1:f3:aa:50:79:85:75:b8:9e:d0:59:1f:f7:0d:10:32:58:9b: e0:01:35:76:71:b9:66:ff:da:9d:d9:c3:1a:fd:f5:d1:9e:e8: 94:ef:f8:f5:b2:df:a0:56:c4:1f:52:73:27:37:f4:40:e2:bd: 08:f1:f3:06:e5:c3:b0:3f:7b:8f:be:ec:a3:6a:17:79:39:eb: 0f:7e:75:01:70:55:8a:46:38:26:f7:90:79:cb:7e:d0:04:eb: 6b:be:cf:c1:ca:bd:0a:36:48:28:f6:e3:cd:20:ef:22:15:35: d8:3d:83:57:28:b8:24:d8:63:ce:10:20:11:a5:fb:3b:76:53: db:e5:32:ce:58:2f:71:5a:62:66:3b:ae:b7:cf:9a:43:52:45: 11:f9:31:f7:e7:f9:39:98:4d:90:e4:f5:27:b3:41:9a:d9:2c: 4e:94:56:7d:0c:9c:d6:10:84:16:ba:81:c8:4c:34:be:64:4f: b2:96:31:f4:81:34:be:65:55:6e:39:84:73:99:39:10:e1:70: 7d:f6:3d:99:24:b0:d7:43:aa:c7:91:96:ed:f1:19:11:52:48: 59:e6:15:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtFiCl9XZNS+9JUhapEowzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMTM0M2E4ZWU5MmFlYzM2NTEwZGU5NzM4MmRjNmE0MjA4 ODhlZmUwHhcNMjUxMjIyMTAwODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmIzOTUyNjZhOGM1NTk5Nzg2YzUwY2FmZTM0ZTAxMjFhYWQ2NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+xJHrEvorIhTqyxOZ7PlO8MFJO7 x46J7jObwQwuU0v66Uvhy9aRbjSJeBrVpCJBHfqdzdspf23ZJUfaJ93Ch4xcuYDX R0Ro/kXeXPUc+kanFPGpXEJjOdDKr2MhTIxrAJ9W1J0woQ8G52EbDuIbFAYwSwLk hPxaEoM4NuqryzTxsGCEz7we9nVqNY8Wr1IMWt9YgxVKD6HetXKbhoXetbwHWYxV zxbgv5i+oLBaIHgH6rPuWLdrh7zhISeYL8Bp/FFmLK08qlRXuIaWCHG3NzpZMcep KCygZplWdIeNSn0TBshai6ce1qevXy/br5ct4+6eM8lir+9RzMMO6lx5tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAuzlSZqjFWZeGxQyv404BIarWRMMB8GA1UdIwQY MBaAFGETQ6jukq7DZRDelzgtxqQgiI7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUt NzBiOTc3ZTc0YTU3LzEvQzdPVkptcU1WWmw0YkZES19qVGdFaHF0WkV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS85YTAxMTItYzY5YS00NTJhLTk1YjUtNzBiOTc3ZTc0YTU3 LzEvWVJORHFPNlNyc05sRU42WE9DM0dwQ0NJanY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwjLMA0G CSqGSIb3DQEBCwUAA4IBAQDK4Ka/QbXHxwN+vhvQWq+5E1kRySBwQTcXUagD6loJ lmxvGVSh86pQeYV1uJ7QWR/3DRAyWJvgATV2cblm/9qd2cMa/fXRnuiU7/j1st+g VsQfUnMnN/RA4r0I8fMG5cOwP3uPvuyjahd5OesPfnUBcFWKRjgm95B5y37QBOtr vs/Byr0KNkgo9uPNIO8iFTXYPYNXKLgk2GPOECARpfs7dlPb5TLOWC9xWmJmO663 z5pDUkUR+TH35/k5mE2Q5PUns0Ga2SxOlFZ9DJzWEIQWuoHITDS+ZE+yljH0gTS+ ZVVuOYRzmTkQ4XB99j2ZJLDXQ6rHkZbt8RkRUkhZ5hWs -----END CERTIFICATE-----Generated at Fri Dec 26 17:23:46 2025 by rpki-client