This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/S7EWGXU39HlZ9rPpJeqIzBXH9uQ.roa File: S7EWGXU39HlZ9rPpJeqIzBXH9uQ.roa (raw, json) Hash identifier: 3tCF8lmB/ME/a2yNEsc4TXz+Ect7LfmnbvuaE1Dci8w= Subject key identifier: 4B:B1:16:19:75:37:F4:79:59:F6:B3:E9:25:EA:88:CC:15:C7:F6:E4 Certificate issuer: /CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38 Certificate serial: 019B264C2022EEFE134CA041BC77920CF8B7 Authority key identifier: 0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/S7EWGXU39HlZ9rPpJeqIzBXH9uQ.roa Signing time: Tue 16 Dec 2025 08:34:41 +0000 ROA not before: Tue 16 Dec 2025 08:34:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51066 IP address blocks: 195.254.190.0/23 maxlen: 23 2001:67c:210::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.mft rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:4c:20:22:ee:fe:13:4c:a0:41:bc:77:92:0c:f8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cec6f76298c5f5fe26b1e932a450513fcc39b38 Validity Not Before: Dec 16 08:34:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4bb116197537f47959f6b3e925ea88cc15c7f6e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:a1:1f:bb:ac:3e:c3:ec:a0:3c:31:d3:74: 0a:f1:bc:cd:91:e7:0b:96:2a:99:85:21:e4:bc:1b: b8:c9:42:92:ef:66:50:0f:53:a1:33:cf:ef:6f:a2: e4:46:5b:0c:99:a1:1d:13:c1:80:9e:d3:1e:bb:6b: 60:ce:91:28:6e:68:28:1e:5d:7f:4c:39:87:22:b9: 66:c8:25:62:69:1f:25:e6:08:0a:72:8e:2d:9a:76: a2:2c:0e:44:81:0e:6f:94:f2:57:a3:0b:a9:cd:28: ef:56:18:1a:8e:59:38:dc:2e:4b:31:01:fb:fd:69: b9:ba:b3:0d:f9:f5:2b:3b:eb:ec:fa:8b:ec:2b:2e: 94:ee:56:85:d6:d1:a3:fc:d3:27:b6:3b:9d:49:8c: 0f:4e:f7:03:66:04:60:6a:e1:65:ee:e6:4b:e2:56: fd:2a:75:57:36:6d:a2:c5:9c:e4:2f:3a:67:3b:cd: 72:68:82:ad:87:a7:48:d7:5c:f6:ed:78:dd:46:11: 1e:2a:95:d3:5d:b5:92:c8:44:15:b8:87:be:2c:1a: 9e:72:36:87:d4:5c:7f:f0:04:8f:8b:f3:3a:78:d2: d9:48:44:27:a7:b6:bb:6b:d4:34:cb:fa:b9:67:c1: 55:35:19:ae:bb:39:ee:fa:dc:f9:bc:40:85:11:21: 6f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B1:16:19:75:37:F4:79:59:F6:B3:E9:25:EA:88:CC:15:C7:F6:E4 X509v3 Authority Key Identifier: keyid:0C:EC:6F:76:29:8C:5F:5F:E2:6B:1E:93:2A:45:05:13:FC:C3:9B:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOxvdimMX1_iax6TKkUFE_zDmzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/S7EWGXU39HlZ9rPpJeqIzBXH9uQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/384467-2081-43b4-b47e-f9f385572696/1/DOxvdimMX1_iax6TKkUFE_zDmzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.254.190.0/23 IPv6: 2001:67c:210::/48 Signature Algorithm: sha256WithRSAEncryption 50:19:80:f3:3c:ab:7c:ed:56:7e:66:60:36:33:0b:2a:a7:eb: db:4f:da:2f:0f:8c:e6:ac:1b:d9:a5:8c:c1:e9:f3:42:93:47: 07:62:e6:9e:0a:bc:a6:28:3d:22:43:71:75:07:42:6e:80:f4: 7a:38:66:81:e5:22:08:61:21:2f:2c:1e:99:16:53:bf:f3:15: 1c:5e:7d:da:d9:20:7d:9b:2a:9b:43:53:ac:78:33:2f:33:49: e2:0f:14:2e:50:6d:44:1e:9f:c9:10:0f:a0:a3:c9:e5:6b:d7: e2:26:b4:cd:77:97:7a:36:1c:30:af:5b:93:3c:d4:e6:36:1c: f4:33:42:e8:8f:dc:96:2b:2c:c1:90:2f:3a:b2:b3:30:1e:c8: 71:31:c3:7a:49:10:0e:72:31:fe:97:ea:3d:83:61:a3:9f:03: 06:ec:6a:92:82:60:35:de:3a:63:27:8a:3f:b7:ee:d6:57:65: f2:6c:e0:00:09:73:d0:58:d5:49:fa:99:45:d4:72:59:dc:35: 20:74:14:a6:64:0d:c9:f6:c7:7c:7f:81:11:0a:b4:d2:2c:c9: 45:1d:a6:9c:8a:fc:08:62:0d:6a:97:bd:3b:c4:be:98:29:d5: 5d:00:0f:11:d9:3a:0d:05:b7:32:3c:c3:8d:ae:08:ff:03:14: 67:02:19:85 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZsmTCAi7v4TTKBBvHeSDPi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWM2Zjc2Mjk4YzVmNWZlMjZiMWU5MzJhNDUwNTEzZmNj MzliMzgwHhcNMjUxMjE2MDgzNDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmIxMTYxOTc1MzdmNDc5NTlmNmIzZTkyNWVhODhjYzE1YzdmNmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukOhH7usPsPsoDwx03QK8bzNkecL liqZhSHkvBu4yUKS72ZQD1OhM8/vb6LkRlsMmaEdE8GAntMeu2tgzpEobmgoHl1/ TDmHIrlmyCViaR8l5ggKco4tmnaiLA5EgQ5vlPJXowupzSjvVhgajlk43C5LMQH7 /Wm5urMN+fUrO+vs+ovsKy6U7laF1tGj/NMntjudSYwPTvcDZgRgauFl7uZL4lb9 KnVXNm2ixZzkLzpnO81yaIKth6dI11z27XjdRhEeKpXTXbWSyEQVuIe+LBqecjaH 1Fx/8ASPi/M6eNLZSEQnp7a7a9Q0y/q5Z8FVNRmuuznu+tz5vECFESFv8wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEuxFhl1N/R5Wfaz6SXqiMwVx/bkMB8GA1UdIwQY MBaAFAzsb3YpjF9f4msekypFBRP8w5s4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2Ut ZjlmMzg1NTcyNjk2LzEvUzdFV0dYVTM5SGxaOXJQcEplcUl6QlhIOXVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zODQ0NjctMjA4MS00M2I0LWI0N2UtZjlmMzg1NTcyNjk2 LzEvRE94dmRpbU1YMV9pYXg2VEtrVUZFX3pEbXpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw/6+MA8E AgACMAkDBwAgAQZ8AhAwDQYJKoZIhvcNAQELBQADggEBAFAZgPM8q3ztVn5mYDYz Cyqn69tP2i8PjOasG9mljMHp80KTRwdi5p4KvKYoPSJDcXUHQm6A9Ho4ZoHlIghh IS8sHpkWU7/zFRxefdrZIH2bKptDU6x4My8zSeIPFC5QbUQen8kQD6CjyeVr1+Im tM13l3o2HDCvW5M81OY2HPQzQuiP3JYrLMGQLzqyszAeyHExw3pJEA5yMf6X6j2D YaOfAwbsapKCYDXeOmMnij+37tZXZfJs4AAJc9BY1Un6mUXUclncNSB0FKZkDcn2 x3x/gREKtNIsyUUdppyK/AhiDWqXvTvEvpgp1V0ADxHZOg0FtzI8w42uCP8DFGcC GYU= -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:43 2025 by rpki-client