This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/fHiiYTRKgT-vGASRJTOpLNSLBTY.roa File: fHiiYTRKgT-vGASRJTOpLNSLBTY.roa (raw, json) Hash identifier: tk1CSWZsdj7wZBP3+exY2jU+UuEIgEVyb42DvkajDv0= Subject key identifier: 7C:78:A2:61:34:4A:81:3F:AF:18:04:91:25:33:A9:2C:D4:8B:05:36 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019A7C0251AB64C727FFCE84638F5BAF29BC Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/fHiiYTRKgT-vGASRJTOpLNSLBTY.roa Signing time: Thu 13 Nov 2025 06:58:37 +0000 ROA not before: Thu 13 Nov 2025 06:58:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 2.59.212.0/24 maxlen: 24 188.64.162.0/24 maxlen: 24 193.38.50.0/24 maxlen: 24 193.38.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:02:51:ab:64:c7:27:ff:ce:84:63:8f:5b:af:29:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Nov 13 06:58:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c78a261344a813faf1804912533a92cd48b0536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:52:19:c3:3f:da:74:6c:55:92:8b:30:0d:c8: 96:30:87:a7:d0:97:fe:48:d1:a3:99:e6:35:33:2d: b7:a0:75:a1:0e:9f:58:7a:5b:29:58:26:75:9f:c8: 7c:33:ff:3b:83:cd:65:c5:91:c3:57:64:0d:cc:93: 63:66:8f:ae:5a:ce:99:98:c4:6a:b7:ff:90:05:4a: ac:24:49:3d:c3:1e:77:08:18:0e:61:d2:e7:f0:f5: a1:95:b1:1d:1c:d1:88:d0:90:77:5e:89:88:72:c5: 69:db:ae:0d:91:6a:de:1c:85:ea:e5:e4:9f:65:d0: c4:7a:ec:e4:6d:57:14:3b:3c:32:16:4c:1f:2c:7a: 05:66:53:17:50:38:f6:b4:99:86:49:1f:e1:37:10: f7:59:ab:0a:a9:ca:74:d3:b0:ad:df:03:6c:d1:1b: 3a:4c:66:6d:58:f9:c3:ec:6a:d5:75:2d:33:b0:ab: d6:4a:0c:ec:f8:07:c2:96:3a:75:18:1b:e2:e9:50: 1d:19:1b:7d:e0:ac:9e:12:6a:7a:52:56:f1:54:8b: 08:1e:38:3c:a0:17:94:7f:c4:33:58:67:7a:a1:2e: 76:33:0a:73:f9:fb:2c:db:9a:b2:e0:87:2e:0a:da: 46:6d:d9:ba:c2:2b:79:43:5d:90:6e:29:cd:03:00: dd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:78:A2:61:34:4A:81:3F:AF:18:04:91:25:33:A9:2C:D4:8B:05:36 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/fHiiYTRKgT-vGASRJTOpLNSLBTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.212.0/24 188.64.162.0/24 193.38.50.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:19:d9:19:70:74:2f:bb:f1:25:1c:32:cd:9f:ec:bb:f8:6a: c0:49:0f:67:56:e9:42:78:3a:d0:0e:80:88:b9:ff:f3:58:40: 71:55:64:f1:d9:62:33:57:6e:f0:7b:2e:02:64:94:f1:01:b8: 75:ae:5b:b6:9b:58:86:bf:24:d6:d9:3b:e6:ad:07:f1:ca:ae: 97:2e:21:37:8f:f0:2c:04:36:65:78:4e:c8:50:3a:94:75:52: d7:4d:f0:21:77:65:b7:0c:ff:f2:62:5e:07:87:e5:77:c5:10: e2:8d:fa:18:20:b4:bf:8a:58:92:11:14:c5:3d:e8:b6:8f:8e: c5:09:ef:87:1b:d5:16:7e:01:d0:15:a8:2f:10:5f:fa:46:83: 7e:4f:ad:21:c6:b1:aa:d1:92:cb:e0:7f:f1:c4:27:49:43:30: 11:90:46:a1:6a:14:66:76:03:8d:9d:80:55:56:94:3c:9e:b8: 92:da:5a:e1:cd:b3:8b:04:3a:71:ce:4a:21:5f:0d:30:0b:f8: ff:39:4e:3b:85:71:4a:1e:0c:b2:89:f5:d8:1f:17:d4:2f:f3: a9:2b:a3:41:2c:8b:1d:9f:17:ee:ef:26:28:5d:3c:05:13:3c: 70:10:1f:93:a9:a6:9f:82:65:da:7d:a4:75:22:c1:84:41:42: 7e:a1:49:b1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZp8AlGrZMcn/86EY49brym8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjUxMTEzMDY1ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Yzc4YTI2MTM0NGE4MTNmYWYxODA0OTEyNTMzYTkyY2Q0OGIwNTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1IZwz/adGxVkoswDciWMIen0Jf+ SNGjmeY1My23oHWhDp9YelspWCZ1n8h8M/87g81lxZHDV2QNzJNjZo+uWs6ZmMRq t/+QBUqsJEk9wx53CBgOYdLn8PWhlbEdHNGI0JB3XomIcsVp264NkWreHIXq5eSf ZdDEeuzkbVcUOzwyFkwfLHoFZlMXUDj2tJmGSR/hNxD3WasKqcp007Ct3wNs0Rs6 TGZtWPnD7GrVdS0zsKvWSgzs+AfCljp1GBvi6VAdGRt94KyeEmp6UlbxVIsIHjg8 oBeUf8QzWGd6oS52Mwpz+fss25qy4IcuCtpGbdm6wit5Q12QbinNAwDddwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHx4omE0SoE/rxgEkSUzqSzUiwU2MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZkhpaVlUUktnVC12R0FTUkpUT3BMTlNMQlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjvUAwQA vECiAwQBwSYyMA0GCSqGSIb3DQEBCwUAA4IBAQAsGdkZcHQvu/ElHDLNn+y7+GrA SQ9nVulCeDrQDoCIuf/zWEBxVWTx2WIzV27wey4CZJTxAbh1rlu2m1iGvyTW2Tvm rQfxyq6XLiE3j/AsBDZleE7IUDqUdVLXTfAhd2W3DP/yYl4Hh+V3xRDijfoYILS/ iliSERTFPei2j47FCe+HG9UWfgHQFagvEF/6RoN+T60hxrGq0ZLL4H/xxCdJQzAR kEahahRmdgONnYBVVpQ8nriS2lrhzbOLBDpxzkohXw0wC/j/OU47hXFKHgyyifXY HxfUL/OpK6NBLIsdnxfu7yYoXTwFEzxwEB+TqaafgmXafaR1IsGEQUJ+oUmx -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:44 2025 by rpki-client