This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/74e7Npx1h-r2J9zWBwJrx-lKSuM.roa File: 74e7Npx1h-r2J9zWBwJrx-lKSuM.roa (raw, json) Hash identifier: l9QAre4knUC/HY+BUGQlz/8DoDnZPGKFrZRqBUSeSOA= Subject key identifier: EF:87:BB:36:9C:75:87:EA:F6:27:DC:D6:07:02:6B:C7:E9:4A:4A:E3 Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019B037E09DCA3EDEAAFB6FF9F3FD8553750 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/74e7Npx1h-r2J9zWBwJrx-lKSuM.roa Signing time: Tue 09 Dec 2025 14:22:30 +0000 ROA not before: Tue 09 Dec 2025 14:22:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213224 IP address blocks: 66.71.160.0/20 maxlen: 24 85.235.158.0/23 maxlen: 24 209.227.208.0/20 maxlen: 24 209.227.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:7e:09:dc:a3:ed:ea:af:b6:ff:9f:3f:d8:55:37:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Dec 9 14:22:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ef87bb369c7587eaf627dcd607026bc7e94a4ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:27:c0:a9:82:39:58:07:60:15:1f:2d:ba: 6a:6f:e2:0c:06:13:2e:6b:32:4d:6c:83:3b:da:17: 4b:aa:b2:87:c4:c9:4b:c4:64:2c:6b:db:9e:7c:98: 89:7f:85:21:8a:ad:b7:b3:86:66:55:28:b2:8f:98: 10:ba:77:ef:37:8b:6a:ef:00:70:02:6e:a0:25:3d: cb:c4:12:b5:e0:cc:18:ba:7d:c4:f7:ae:cd:9c:91: ed:62:b4:f8:85:cf:a1:72:73:08:e9:0e:8b:65:3c: 27:f0:8a:8a:d2:b8:09:9e:8f:49:bf:5b:81:f3:23: df:2e:04:b7:43:e5:6c:88:de:ee:9a:9d:9f:34:ab: 61:f7:fd:d8:93:f6:97:e2:d0:51:2f:8d:c2:59:8c: ba:b9:97:36:e1:d8:18:7f:dc:b2:9e:78:63:f5:84: 41:67:43:21:83:ed:e0:95:fc:e1:de:a7:43:1f:6e: c2:f4:96:e8:03:e6:85:fe:ad:1e:ae:95:09:75:c9: c7:68:a4:c3:37:86:38:37:fa:e7:c2:e2:c9:e0:e5: 46:d9:cd:d6:e3:0e:8c:01:17:27:85:22:e0:9c:47: 71:cf:b3:d5:66:9c:65:e0:4b:14:61:9e:7b:c9:a5: d7:0e:1f:bd:0b:6e:45:a9:fe:ae:b9:9c:65:37:fa: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:87:BB:36:9C:75:87:EA:F6:27:DC:D6:07:02:6B:C7:E9:4A:4A:E3 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/74e7Npx1h-r2J9zWBwJrx-lKSuM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.71.160.0/20 85.235.158.0/23 209.227.208.0/20 209.227.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9f:17:d5:6c:d5:75:b3:67:74:4b:f9:17:7f:bb:df:df:ae:f2: 0d:76:df:8f:76:7e:e2:2a:ce:48:34:f2:13:96:41:67:a0:af: ef:72:f0:0d:c7:94:f2:cb:ae:97:09:4a:15:b5:b0:14:24:91: b5:ac:30:5b:a2:6d:3e:0d:4b:0e:b4:c4:3e:6c:3e:db:a1:ba: 52:45:33:31:6d:4f:4d:c3:cd:17:0f:f2:6d:f4:c8:1d:16:b5: 7f:e8:71:ce:a9:3b:c7:48:06:95:5e:70:11:fa:17:ed:ef:37: 9f:33:b0:fc:37:87:39:20:23:ff:16:aa:39:29:47:92:6b:55: 8b:23:9a:c9:69:e6:fc:9f:ec:cd:29:e7:a4:a1:af:cf:ef:31: 74:0d:23:46:d2:c5:51:a9:ee:99:f2:65:45:8d:44:f0:3c:0e: 9b:43:0c:e9:21:14:5e:95:77:02:df:ac:81:5d:5a:57:ee:84: e9:87:5d:91:3e:39:fb:b9:b9:80:df:a1:a6:d8:57:80:a1:b5: 6f:61:9e:cd:72:d0:17:8f:c2:3c:66:32:21:d0:78:ab:91:d0: 9a:3e:77:f5:1b:39:8e:78:1d:c5:dc:93:3a:aa:a3:43:21:f0: 8d:39:99:5e:9c:3b:28:de:e8:f4:21:93:6d:ad:bc:22:15:47: 4f:d4:06:8c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsDfgnco+3qr7b/nz/YVTdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjUxMjA5MTQyMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjg3YmIzNjljNzU4N2VhZjYyN2RjZDYwNzAyNmJjN2U5NGE0YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTonwKmCOVgHYBUfLbpqb+IMBhMu azJNbIM72hdLqrKHxMlLxGQsa9uefJiJf4Uhiq23s4ZmVSiyj5gQunfvN4tq7wBw Am6gJT3LxBK14MwYun3E967NnJHtYrT4hc+hcnMI6Q6LZTwn8IqK0rgJno9Jv1uB 8yPfLgS3Q+VsiN7ump2fNKth9/3Yk/aX4tBRL43CWYy6uZc24dgYf9yynnhj9YRB Z0Mhg+3glfzh3qdDH27C9JboA+aF/q0erpUJdcnHaKTDN4Y4N/rnwuLJ4OVG2c3W 4w6MARcnhSLgnEdxz7PVZpxl4EsUYZ57yaXXDh+9C25Fqf6uuZxlN/rzJwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO+HuzacdYfq9ifc1gcCa8fpSkrjMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvNzRlN05weDFoLXIySjl6V0J3SnJ4LWxLU3VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEQkegAwQB VeueAwQE0ePQAwQE0ePwMA0GCSqGSIb3DQEBCwUAA4IBAQCfF9Vs1XWzZ3RL+Rd/ u9/frvINdt+Pdn7iKs5INPITlkFnoK/vcvANx5Tyy66XCUoVtbAUJJG1rDBbom0+ DUsOtMQ+bD7bobpSRTMxbU9Nw80XD/Jt9MgdFrV/6HHOqTvHSAaVXnAR+hft7zef M7D8N4c5ICP/Fqo5KUeSa1WLI5rJaeb8n+zNKeekoa/P7zF0DSNG0sVRqe6Z8mVF jUTwPA6bQwzpIRRelXcC36yBXVpX7oTph12RPjn7ubmA36Gm2FeAobVvYZ7NctAX j8I8ZjIh0HirkdCaPnf1GzmOeB3F3JM6qqNDIfCNOZlenDso3uj0IZNtrbwiFUdP 1AaM -----END CERTIFICATE-----Generated at Sun Dec 14 01:01:36 2025 by rpki-client