This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/o7ZIAxzewawQhSKUHd5kW91Ui0M.roa File: o7ZIAxzewawQhSKUHd5kW91Ui0M.roa (raw, json) Hash identifier: 7Wl8txa2QHhpsFyrY5UBiQUfswNeOV1rDFLck1u7018= Subject key identifier: A3:B6:48:03:1C:DE:C1:AC:10:85:22:94:1D:DE:64:5B:DD:54:8B:43 Certificate issuer: /CN=7714e817158dc307eed4d4c6edf51a89e5703ecf Certificate serial: 019AC7CB69F6F505769E1D3408A22275EFD4 Authority key identifier: 77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/o7ZIAxzewawQhSKUHd5kW91Ui0M.roa Signing time: Fri 28 Nov 2025 00:09:48 +0000 ROA not before: Fri 28 Nov 2025 00:09:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210524 IP address blocks: 212.52.21.0/24 maxlen: 24 2a12:6a00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.mft rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c7:cb:69:f6:f5:05:76:9e:1d:34:08:a2:22:75:ef:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7714e817158dc307eed4d4c6edf51a89e5703ecf Validity Not Before: Nov 28 00:09:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3b648031cdec1ac108522941dde645bdd548b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:c9:72:df:98:3d:8a:0a:23:4b:48:07:49: fc:9c:2b:b0:3d:ad:9f:06:db:48:ba:1e:40:43:80: 9f:f5:69:c0:98:de:fd:38:31:e8:40:62:18:ee:93: 09:91:92:d9:7d:c5:bb:c6:37:41:b6:08:44:be:83: 01:2f:d6:22:33:ac:ab:80:11:50:05:15:2c:05:6f: b6:0a:3d:03:a1:77:f6:7f:98:bb:22:36:4e:67:44: 44:93:a0:0c:01:a1:11:0a:6b:47:c4:d5:cb:88:fd: 0b:2a:ba:01:cf:e2:bb:60:9e:e2:b3:31:bb:a8:94: 42:1e:8a:82:e0:16:8b:67:08:03:4a:6e:02:37:0f: dd:7e:51:02:8a:2c:c9:ab:b8:64:60:6c:68:2b:09: 32:6a:ac:93:93:b6:62:b0:bc:10:c1:c4:1f:c5:0a: 31:ec:8a:aa:bf:d4:b7:49:a4:dc:8f:f6:20:a0:fc: af:64:b8:1d:e8:21:0c:4b:0d:47:f3:84:1e:ea:d1: 94:03:3b:3c:79:f3:64:6d:d3:16:a5:36:28:6d:92: 73:e8:9a:83:1b:c9:02:bd:ab:39:e4:44:10:db:0a: de:1f:d2:05:a4:e2:88:e1:b1:cb:ac:77:a7:34:ba: 98:dd:a9:8e:24:4e:d1:0f:3d:4e:f3:26:7e:95:9c: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B6:48:03:1C:DE:C1:AC:10:85:22:94:1D:DE:64:5B:DD:54:8B:43 X509v3 Authority Key Identifier: keyid:77:14:E8:17:15:8D:C3:07:EE:D4:D4:C6:ED:F5:1A:89:E5:70:3E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxToFxWNwwfu1NTG7fUaieVwPs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/o7ZIAxzewawQhSKUHd5kW91Ui0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1e6d59-27cf-419f-ad1d-6210641e52d6/1/dxToFxWNwwfu1NTG7fUaieVwPs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.52.21.0/24 IPv6: 2a12:6a00::/29 Signature Algorithm: sha256WithRSAEncryption 5e:39:25:2a:e5:1d:7a:ed:f4:02:71:e3:fe:99:cd:dd:5f:5f: 5d:49:e5:91:96:ad:80:0a:91:96:5b:e3:14:3a:98:da:b0:3a: 06:1e:18:56:d8:aa:f8:d1:b5:d5:b0:a5:eb:a1:33:8b:27:28: 88:a1:b4:7c:8e:c7:cb:8a:cd:db:d6:9c:2a:0d:d9:ce:85:34: 1f:71:73:3a:f1:90:76:43:0f:3d:f1:67:81:2c:46:ef:fb:54: ff:ef:90:3a:9d:4c:11:2b:fd:c0:c8:20:43:02:60:1d:de:e4: 1b:d3:17:79:e8:19:e1:78:a5:39:e5:9c:0c:34:46:6c:8d:26: a1:ed:a6:31:a8:e7:11:d0:4a:43:ae:bd:a2:84:f6:6f:eb:d5: 58:85:18:be:42:f8:8c:99:81:8f:7c:e1:0b:61:c0:49:04:d2: 00:ae:75:10:6b:64:50:2c:5f:c9:16:a7:63:35:82:95:9e:97: 7f:ae:20:1e:52:ab:85:45:f7:db:09:eb:a5:a0:65:20:aa:8f: 13:59:3d:72:c7:3a:32:9c:c5:4a:5c:21:9d:8c:0d:93:1b:bb: 1f:aa:fc:14:91:d3:53:02:e6:9e:bb:83:63:c1:6b:c3:91:cf: 9f:8c:53:a2:f4:ed:02:63:b4:5a:a6:32:11:ae:51:b0:d8:fe: 64:05:b5:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZrHy2n29QV2nh00CKIide/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTRlODE3MTU4ZGMzMDdlZWQ0ZDRjNmVkZjUxYTg5ZTU3 MDNlY2YwHhcNMjUxMTI4MDAwOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2I2NDgwMzFjZGVjMWFjMTA4NTIyOTQxZGRlNjQ1YmRkNTQ4YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EXJct+YPYoKI0tIB0n8nCuwPa2f BttIuh5AQ4Cf9WnAmN79ODHoQGIY7pMJkZLZfcW7xjdBtghEvoMBL9YiM6yrgBFQ BRUsBW+2Cj0DoXf2f5i7IjZOZ0REk6AMAaERCmtHxNXLiP0LKroBz+K7YJ7iszG7 qJRCHoqC4BaLZwgDSm4CNw/dflECiizJq7hkYGxoKwkyaqyTk7ZisLwQwcQfxQox 7Iqqv9S3SaTcj/YgoPyvZLgd6CEMSw1H84Qe6tGUAzs8efNkbdMWpTYobZJz6JqD G8kCvas55EQQ2wreH9IFpOKI4bHLrHenNLqY3amOJE7RDz1O8yZ+lZw+AwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKO2SAMc3sGsEIUilB3eZFvdVItDMB8GA1UdIwQY MBaAFHcU6BcVjcMH7tTUxu31GonlcD7PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQt NjIxMDY0MWU1MmQ2LzEvbzdaSUF4emV3YXdRaFNLVUhkNWtXOTFVaTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi8xZTZkNTktMjdjZi00MTlmLWFkMWQtNjIxMDY0MWU1MmQ2 LzEvZHhUb0Z4V053d2Z1MU5URzdmVWFpZVZ3UHM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1DQVMA0E AgACMAcDBQMqEmoAMA0GCSqGSIb3DQEBCwUAA4IBAQBeOSUq5R167fQCceP+mc3d X19dSeWRlq2ACpGWW+MUOpjasDoGHhhW2Kr40bXVsKXroTOLJyiIobR8jsfLis3b 1pwqDdnOhTQfcXM68ZB2Qw898WeBLEbv+1T/75A6nUwRK/3AyCBDAmAd3uQb0xd5 6BnheKU55ZwMNEZsjSah7aYxqOcR0EpDrr2ihPZv69VYhRi+QviMmYGPfOELYcBJ BNIArnUQa2RQLF/JFqdjNYKVnpd/riAeUquFRffbCeuloGUgqo8TWT1yxzoynMVK XCGdjA2TG7sfqvwUkdNTAuaeu4NjwWvDkc+fjFOi9O0CY7RapjIRrlGw2P5kBbXs -----END CERTIFICATE-----Generated at Thu Dec 18 18:50:07 2025 by rpki-client