This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/e7E8xfx3ELDzMoRWOc9Rdme69rU.roa File: e7E8xfx3ELDzMoRWOc9Rdme69rU.roa (raw, json) Hash identifier: 0vwt809HsOm9NJR+xTP6e5sMA+qhwVmChdRQakkC3R0= Subject key identifier: 7B:B1:3C:C5:FC:77:10:B0:F3:32:84:56:39:CF:51:76:67:BA:F6:B5 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019ACF697D15EEC133969267D00D1B498AD0 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/e7E8xfx3ELDzMoRWOc9Rdme69rU.roa Signing time: Sat 29 Nov 2025 11:39:48 +0000 ROA not before: Sat 29 Nov 2025 11:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61254 IP address blocks: 87.248.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 30 Nov 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:69:7d:15:ee:c1:33:96:92:67:d0:0d:1b:49:8a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Nov 29 11:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7bb13cc5fc7710b0f332845639cf517667baf6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:ca:10:5b:da:0f:0c:09:79:7e:74:bf:b4: a0:68:ec:15:3d:da:55:c8:0d:b3:f9:42:76:f2:4f: ee:16:57:a6:1c:46:df:bb:cb:a6:e6:fc:d7:e6:e8: 5d:d2:d4:24:d5:32:0c:17:58:d5:a8:03:bc:df:d1: fc:8a:27:5b:de:25:3c:a4:dc:45:58:0b:22:b0:e9: 37:22:4b:29:0f:40:7f:3b:0c:3e:1c:04:8b:67:61: f5:53:a6:42:dd:21:03:4d:39:27:6a:08:cf:39:89: 90:f3:40:0c:27:b5:5a:67:2c:79:15:4e:3e:d7:71: 23:09:03:e5:45:62:df:7e:14:c6:42:6f:ff:dd:a2: fa:ec:d9:70:dd:61:40:f6:a2:b5:9c:77:69:fc:97: 0f:f3:b5:c2:7a:37:ef:b1:75:75:26:4c:27:48:d9: 25:53:8f:ee:9b:ec:14:66:08:0c:c9:76:ff:ea:52: 7c:4c:00:84:4e:0e:44:64:74:b3:24:70:07:2e:2a: 16:e4:1f:5d:1c:25:02:1c:77:59:f4:08:51:64:58: 4d:2b:5a:67:35:39:00:b4:3d:ae:2d:47:7d:c1:15: 1a:dc:ec:59:99:e7:bb:df:44:9f:82:52:ee:bc:ea: cb:c1:c5:1c:7f:71:0a:83:d5:8d:ca:84:2c:be:1c: ba:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:3C:C5:FC:77:10:B0:F3:32:84:56:39:CF:51:76:67:BA:F6:B5 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/e7E8xfx3ELDzMoRWOc9Rdme69rU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.248.149.0/24 Signature Algorithm: sha256WithRSAEncryption 34:45:56:13:44:27:be:e8:92:6b:83:f7:91:cb:9a:5e:c2:df: d4:a9:e7:fc:39:8a:e5:ef:77:d7:37:ec:4c:8f:c5:76:58:b0: c8:0f:99:4e:3a:a6:a2:06:03:3b:7d:87:42:41:cb:d9:69:39: 02:84:ff:06:78:2a:67:a5:8f:c6:85:3f:74:83:49:96:94:35: 92:a8:b0:5d:66:65:df:3c:7d:7b:a5:aa:e7:50:0d:16:30:de: a3:44:38:c8:71:74:97:05:1c:06:53:65:d8:57:84:71:ff:de: ab:e5:27:44:e3:72:02:62:31:57:da:a9:4e:29:16:c6:2c:e5: 38:9e:45:54:f8:cc:98:10:86:ed:2c:4a:52:ec:41:d4:69:a5: 02:f9:c2:4b:8b:9a:8e:37:a8:8a:ab:93:be:08:dd:67:87:18: 0c:fe:8f:d8:2b:d0:9a:c0:0f:c6:d5:c9:5d:55:54:7e:ff:d0: 71:3d:03:8b:f2:8d:8e:a9:47:ce:01:a1:a2:fa:d3:c0:ca:64: 25:08:90:37:b5:10:e1:6d:b7:29:e1:e8:ed:c6:06:53:23:bc: 49:6a:ec:35:31:55:ca:f2:3b:eb:a2:4c:bd:0e:98:81:64:88: a9:5a:49:b7:f8:60:ba:77:f6:9b:77:51:81:40:98:05:20:da: cb:99:16:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrPaX0V7sEzlpJn0A0bSYrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjUxMTI5MTEzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmIxM2NjNWZjNzcxMGIwZjMzMjg0NTYzOWNmNTE3NjY3YmFmNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPKEFvaDwwJeX50v7SgaOwVPdpV yA2z+UJ28k/uFlemHEbfu8um5vzX5uhd0tQk1TIMF1jVqAO839H8iidb3iU8pNxF WAsisOk3IkspD0B/Oww+HASLZ2H1U6ZC3SEDTTknagjPOYmQ80AMJ7VaZyx5FU4+ 13EjCQPlRWLffhTGQm//3aL67Nlw3WFA9qK1nHdp/JcP87XCejfvsXV1JkwnSNkl U4/um+wUZggMyXb/6lJ8TACETg5EZHSzJHAHLioW5B9dHCUCHHdZ9AhRZFhNK1pn NTkAtD2uLUd9wRUa3OxZmee730SfglLuvOrLwcUcf3EKg9WNyoQsvhy6TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHuxPMX8dxCw8zKEVjnPUXZnuva1MB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvZTdFOHhmeDNFTER6TW9SV09jOVJkbWU2OXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iVMA0G CSqGSIb3DQEBCwUAA4IBAQA0RVYTRCe+6JJrg/eRy5pewt/Uqef8OYrl73fXN+xM j8V2WLDID5lOOqaiBgM7fYdCQcvZaTkChP8GeCpnpY/GhT90g0mWlDWSqLBdZmXf PH17parnUA0WMN6jRDjIcXSXBRwGU2XYV4Rx/96r5SdE43ICYjFX2qlOKRbGLOU4 nkVU+MyYEIbtLEpS7EHUaaUC+cJLi5qON6iKq5O+CN1nhxgM/o/YK9CawA/G1cld VVR+/9BxPQOL8o2OqUfOAaGi+tPAymQlCJA3tRDhbbcp4ejtxgZTI7xJauw1MVXK 8jvroky9DpiBZIipWkm3+GC6d/abd1GBQJgFINrLmRaG -----END CERTIFICATE-----Generated at Sun Nov 30 06:09:20 2025 by rpki-client