This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/x7eLSArXfKOvuDeVf671PG61MTU.roa File: x7eLSArXfKOvuDeVf671PG61MTU.roa (raw, json) Hash identifier: r6ETft1LI20v6JjEysljSnODPklVmMLXu8JFH/sQMAk= Subject key identifier: C7:B7:8B:48:0A:D7:7C:A3:AF:B8:37:95:7F:AE:F5:3C:6E:B5:31:35 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B07EA8A593E94450701CA6C9CDB774FE7 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/x7eLSArXfKOvuDeVf671PG61MTU.roa Signing time: Wed 10 Dec 2025 10:59:29 +0000 ROA not before: Wed 10 Dec 2025 10:59:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200436 IP address blocks: 5.42.217.0/24 maxlen: 24 62.3.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ea:8a:59:3e:94:45:07:01:ca:6c:9c:db:77:4f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Dec 10 10:59:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c7b78b480ad77ca3afb837957faef53c6eb53135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d9:79:71:cd:4d:bc:f5:78:6a:13:e6:c5:b0: 71:5e:c8:d6:e1:6a:e5:70:93:45:46:2d:ea:a9:26: 65:a6:c0:b1:f8:65:c3:e2:23:00:5e:d2:0d:84:5a: 2d:bd:8c:41:9f:91:f2:86:e6:01:7d:5e:06:74:18: 1e:03:80:6a:6f:d5:33:ae:fb:c7:1f:d7:16:c2:64: e9:82:51:fa:86:9b:ca:69:96:ba:48:6b:87:25:23: 29:03:ad:9d:b5:60:18:ae:12:5f:ec:a0:9b:ad:3d: 32:94:ef:7a:b6:54:95:5c:fd:54:1e:3c:35:8b:9d: b2:ce:6a:f3:a1:7f:96:b8:41:a2:13:f6:5f:9e:8b: 59:54:70:4c:24:7a:07:c4:6c:d3:d1:54:02:64:95: cd:01:d7:4e:6d:69:9f:2c:22:96:b5:65:e3:16:99: cd:45:30:dc:26:a2:3f:69:b4:e2:5c:cd:5e:97:54: 4f:76:e3:05:2b:47:75:bb:14:ed:2f:3f:85:b9:d2: 3d:94:5c:68:53:de:63:04:0b:f5:ae:1c:bf:f0:da: c2:b6:a2:6e:2b:ec:1f:b5:ba:ea:f1:2f:ef:36:5a: a1:d1:54:12:a2:54:5a:92:d9:c3:c4:c0:da:4e:93: b1:f3:35:25:1c:a1:26:95:77:a8:1b:1a:bc:64:4b: e1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B7:8B:48:0A:D7:7C:A3:AF:B8:37:95:7F:AE:F5:3C:6E:B5:31:35 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/x7eLSArXfKOvuDeVf671PG61MTU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.217.0/24 62.3.14.0/24 Signature Algorithm: sha256WithRSAEncryption 73:4d:45:b6:8c:d8:50:b2:bb:cd:66:5f:c0:b7:3c:d0:f2:33: ec:cf:03:f7:e0:97:d3:d6:22:aa:1d:48:65:ca:2e:f3:bc:70: 24:c7:d1:8d:bd:77:a0:d9:13:cc:02:c0:54:96:7a:5d:d5:c8: 2e:9f:eb:86:d9:1d:ca:ad:3f:15:73:cd:d2:28:c3:de:f5:39: 83:70:bb:0e:3c:58:e8:0c:77:3b:4f:62:71:3b:49:ea:21:2a: fb:87:6d:7e:c7:a4:cb:93:e3:4b:e7:ac:0f:fc:e2:e4:a7:3b: 70:df:68:06:63:be:70:40:be:2b:71:4c:16:c7:4d:8d:83:e1: fd:06:d6:e3:9f:be:ae:77:41:93:4b:73:e5:e0:4d:18:9d:7b: 1b:b9:54:03:94:3c:c9:9a:64:66:56:83:0b:7c:30:f8:1d:83: cb:b8:5f:94:44:41:bf:15:66:92:60:d6:44:85:4f:dc:73:01: 2a:b0:7c:9c:b6:06:0d:c5:5a:39:ac:24:07:a6:17:e6:1a:e5: f4:eb:ba:a4:cb:81:63:25:ad:c7:f7:45:f1:be:85:bc:4a:81: 8c:a0:a7:11:30:38:f3:e5:42:07:6f:c2:17:c7:94:d2:eb:c0: 14:0e:b0:fd:cf:06:3b:4d:96:fc:ad:2b:30:cd:26:23:74:15: 9b:63:21:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsH6opZPpRFBwHKbJzbd0/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjUxMjEwMTA1OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2I3OGI0ODBhZDc3Y2EzYWZiODM3OTU3ZmFlZjUzYzZlYjUzMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9l5cc1NvPV4ahPmxbBxXsjW4Wrl cJNFRi3qqSZlpsCx+GXD4iMAXtINhFotvYxBn5HyhuYBfV4GdBgeA4Bqb9UzrvvH H9cWwmTpglH6hpvKaZa6SGuHJSMpA62dtWAYrhJf7KCbrT0ylO96tlSVXP1UHjw1 i52yzmrzoX+WuEGiE/ZfnotZVHBMJHoHxGzT0VQCZJXNAddObWmfLCKWtWXjFpnN RTDcJqI/abTiXM1el1RPduMFK0d1uxTtLz+FudI9lFxoU95jBAv1rhy/8NrCtqJu K+wftbrq8S/vNlqh0VQSolRaktnDxMDaTpOx8zUlHKEmlXeoGxq8ZEvhZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMe3i0gK13yjr7g3lX+u9TxutTE1MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEveDdlTFNBclhmS092dURlVmY2NzFQRzYxTVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSrZAwQA PgMOMA0GCSqGSIb3DQEBCwUAA4IBAQBzTUW2jNhQsrvNZl/AtzzQ8jPszwP34JfT 1iKqHUhlyi7zvHAkx9GNvXeg2RPMAsBUlnpd1cgun+uG2R3KrT8Vc83SKMPe9TmD cLsOPFjoDHc7T2JxO0nqISr7h21+x6TLk+NL56wP/OLkpztw32gGY75wQL4rcUwW x02Ng+H9Btbjn76ud0GTS3Pl4E0YnXsbuVQDlDzJmmRmVoMLfDD4HYPLuF+UREG/ FWaSYNZEhU/ccwEqsHyctgYNxVo5rCQHphfmGuX067qky4FjJa3H90XxvoW8SoGM oKcRMDjz5UIHb8IXx5TS68AUDrD9zwY7TZb8rSswzSYjdBWbYyGB -----END CERTIFICATE-----Generated at Mon Dec 15 06:04:20 2025 by rpki-client