This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/7DpOIi23b7w6zVte6tZo0zLsIsI.roa File: 7DpOIi23b7w6zVte6tZo0zLsIsI.roa (raw, json) Hash identifier: 8WUFXjUR6rohu76kGO9oBTKuoh9CTAEJxOJOkr+Eaig= Subject key identifier: EC:3A:4E:22:2D:B7:6F:BC:3A:CD:5B:5E:EA:D6:68:D3:32:EC:22:C2 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019A9DBD90BD7FC6B6195355D6F1E9EA6D24 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/7DpOIi23b7w6zVte6tZo0zLsIsI.roa Signing time: Wed 19 Nov 2025 20:10:37 +0000 ROA not before: Wed 19 Nov 2025 20:10:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 78.108.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9d:bd:90:bd:7f:c6:b6:19:53:55:d6:f1:e9:ea:6d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Nov 19 20:10:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ec3a4e222db76fbc3acd5b5eead668d332ec22c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:68:db:65:6e:ee:3f:a7:d9:4c:72:d8:6c:20: dc:c9:65:77:d2:03:24:9b:ec:52:3f:9d:b2:39:9c: 47:cc:e3:a8:e1:12:70:ee:95:e0:90:6e:d5:7d:bf: b1:1a:55:01:4d:78:b8:f9:0d:ce:b8:ac:bc:19:af: 28:e8:e3:03:b1:88:18:60:e1:d0:00:85:e9:74:fc: d7:ec:19:71:de:6c:8e:57:64:78:c7:36:27:21:9f: aa:a8:2a:ac:55:57:e4:21:4a:65:9b:51:3e:f4:7c: 01:47:44:c4:ec:1f:c4:cb:7c:7a:13:7b:00:c8:ed: d6:45:8f:eb:13:c9:5d:01:6e:d0:00:d0:73:14:11: 3d:86:b8:42:31:e4:bd:b5:38:c5:72:63:6b:7e:d5: dc:ad:b6:5c:85:38:04:d3:6f:d3:d6:ea:3a:9f:2f: 43:48:00:df:52:44:93:0b:fe:85:b9:e6:b7:ef:04: ee:56:e3:a1:dd:6f:c2:bc:21:e6:e4:79:4f:9b:92: 92:8d:8c:15:8a:7c:f1:f5:3d:53:ff:4b:24:28:22: 36:88:5e:8f:49:9a:33:fc:b0:11:72:0e:6a:64:26: 70:5b:4a:7a:08:d4:fa:5c:80:61:c9:09:25:17:61: 98:2b:95:a1:2d:ac:6e:26:10:5a:db:2c:f7:35:bb: a7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3A:4E:22:2D:B7:6F:BC:3A:CD:5B:5E:EA:D6:68:D3:32:EC:22:C2 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/7DpOIi23b7w6zVte6tZo0zLsIsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.59.0/24 Signature Algorithm: sha256WithRSAEncryption e5:1e:d0:19:79:dc:98:17:8c:90:61:36:b6:ff:00:34:4d:21: 84:ba:39:6b:53:e5:1e:3b:df:c2:b6:10:7e:1a:ba:13:9b:bc: 1b:ed:9a:e3:df:60:42:b1:3b:4d:51:bf:7b:63:bb:89:56:b7: 0c:c8:19:e4:d6:c3:42:0d:e8:61:37:1d:6b:3e:aa:75:5c:b3: 87:be:e3:49:7c:d9:2e:bc:69:b8:0f:8a:1a:96:df:fe:ce:fb: 9b:25:90:1d:28:b8:1b:73:e7:7a:5d:18:88:8e:43:b0:85:39: 41:03:70:dd:36:66:e7:9b:a1:68:98:98:62:d4:a9:5f:e1:fd: 22:1e:29:29:ed:22:ab:49:ee:3e:0e:38:28:27:22:bf:d4:98: 9a:2f:35:0e:0c:0e:c8:3e:06:36:05:c1:7b:e5:b3:63:d8:3e: 8d:24:40:82:94:93:ac:12:c6:68:24:93:fb:b2:cb:96:11:93: f4:1c:f4:01:5e:5e:c9:d9:74:71:14:26:e2:b2:da:ca:c1:91: cc:8d:2e:b1:6a:ac:8a:37:da:22:22:29:50:1f:47:82:0e:0a: 38:2f:75:c7:6f:58:90:5d:ac:a5:10:54:80:d6:50:1e:49:07: 15:16:e0:33:ac:50:6c:12:e2:6d:df:00:3d:e3:ce:47:b0:ac: 1c:0c:26:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqdvZC9f8a2GVNV1vHp6m0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjUxMTE5MjAxMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzNhNGUyMjJkYjc2ZmJjM2FjZDViNWVlYWQ2NjhkMzMyZWMyMmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWjbZW7uP6fZTHLYbCDcyWV30gMk m+xSP52yOZxHzOOo4RJw7pXgkG7Vfb+xGlUBTXi4+Q3OuKy8Ga8o6OMDsYgYYOHQ AIXpdPzX7Blx3myOV2R4xzYnIZ+qqCqsVVfkIUplm1E+9HwBR0TE7B/Ey3x6E3sA yO3WRY/rE8ldAW7QANBzFBE9hrhCMeS9tTjFcmNrftXcrbZchTgE02/T1uo6ny9D SADfUkSTC/6Fuea37wTuVuOh3W/CvCHm5HlPm5KSjYwVinzx9T1T/0skKCI2iF6P SZoz/LARcg5qZCZwW0p6CNT6XIBhyQklF2GYK5WhLaxuJhBa2yz3NbunOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOw6TiItt2+8Os1bXurWaNMy7CLCMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvN0RwT0lpMjNiN3c2elZ0ZTZ0Wm8wekxzSXNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw7MA0G CSqGSIb3DQEBCwUAA4IBAQDlHtAZedyYF4yQYTa2/wA0TSGEujlrU+UeO9/CthB+ GroTm7wb7Zrj32BCsTtNUb97Y7uJVrcMyBnk1sNCDehhNx1rPqp1XLOHvuNJfNku vGm4D4oalt/+zvubJZAdKLgbc+d6XRiIjkOwhTlBA3DdNmbnm6FomJhi1Klf4f0i Hikp7SKrSe4+DjgoJyK/1JiaLzUODA7IPgY2BcF75bNj2D6NJECClJOsEsZoJJP7 ssuWEZP0HPQBXl7J2XRxFCbistrKwZHMjS6xaqyKN9oiIilQH0eCDgo4L3XHb1iQ XaylEFSA1lAeSQcVFuAzrFBsEuJt3wA9485HsKwcDCZb -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:34 2025 by rpki-client