This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/iwI7hmhd9ihd7UmcAizhleam4bs.roa File: iwI7hmhd9ihd7UmcAizhleam4bs.roa (raw, json) Hash identifier: qU+X8QQY8YLA+awtFYkGwQlLWhcUcwrt2BLiSdzVeG8= Subject key identifier: 8B:02:3B:86:68:5D:F6:28:5D:ED:49:9C:02:2C:E1:95:E6:A6:E1:BB Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019A961740E90282530A7CE16E097660D4A1 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/iwI7hmhd9ihd7UmcAizhleam4bs.roa Signing time: Tue 18 Nov 2025 08:31:37 +0000 ROA not before: Tue 18 Nov 2025 08:31:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44843 IP address blocks: 31.207.66.0/23 maxlen: 23 31.207.66.0/24 maxlen: 24 31.207.67.0/24 maxlen: 24 31.207.71.0/24 maxlen: 24 152.89.134.0/24 maxlen: 24 178.236.128.0/21 maxlen: 21 178.236.128.0/24 maxlen: 24 178.236.129.0/24 maxlen: 24 178.236.130.0/24 maxlen: 24 178.236.131.0/24 maxlen: 24 178.236.132.0/24 maxlen: 24 178.236.133.0/24 maxlen: 24 178.236.134.0/24 maxlen: 24 178.236.135.0/24 maxlen: 24 2a02:1710:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:17:40:e9:02:82:53:0a:7c:e1:6e:09:76:60:d4:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Nov 18 08:31:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b023b86685df6285ded499c022ce195e6a6e1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:79:aa:33:cd:0a:d2:19:ad:ae:be:bb:3d: 13:09:61:7b:4d:57:54:c6:8c:ba:bc:94:4d:01:bb: 0c:4d:2a:7c:4c:bd:cb:e6:7b:73:2e:e0:67:0e:65: 73:ca:e9:9a:ca:86:8f:14:0b:60:d0:82:3d:73:66: 5a:24:98:e5:b1:e6:56:f9:99:28:8d:7f:04:b9:49: cc:aa:b7:e6:b9:c1:3b:fd:e7:cb:18:01:fa:77:96: ed:4a:c5:9a:60:2b:19:e5:dd:85:3e:c7:34:aa:84: f7:0d:8c:7b:c6:56:8b:cf:01:6f:06:11:88:37:89: 0f:f4:a8:6f:67:d6:4e:2b:25:45:dd:f3:f1:9a:f4: 9e:97:4b:5d:e3:4c:93:95:18:bd:87:b5:a1:70:cb: 12:3d:16:d0:ef:e9:d4:79:07:5a:57:cf:ed:49:70: 73:eb:73:25:e9:32:5f:bb:7b:1a:ba:e7:b8:72:4e: 87:76:a0:68:7b:6b:3e:25:da:c2:a0:e7:95:86:6b: f3:44:8f:fe:0d:82:0f:e3:8c:d5:a0:87:80:41:e0: 16:ac:4d:69:ec:9d:fd:3e:5e:32:35:31:fc:0d:2c: 4f:74:d5:1d:7f:42:68:ba:6c:d8:f7:a5:da:92:69: 05:0f:6f:c8:51:3c:58:8f:1d:2f:2b:cf:0e:2a:68: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:3B:86:68:5D:F6:28:5D:ED:49:9C:02:2C:E1:95:E6:A6:E1:BB X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/iwI7hmhd9ihd7UmcAizhleam4bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.66.0/23 31.207.71.0/24 152.89.134.0/24 178.236.128.0/21 IPv6: 2a02:1710:4::/48 Signature Algorithm: sha256WithRSAEncryption 11:29:4d:d8:ba:8d:59:7a:23:89:a8:75:7f:a6:86:af:e8:a5: d1:33:3c:91:a9:a0:c5:1c:c6:73:88:30:ab:67:3c:3f:cc:ed: e0:48:72:b3:b8:8c:1c:e3:4e:8e:d7:2e:b7:90:b5:83:02:ef: 03:a3:05:81:1b:6f:d6:01:da:a1:20:5a:61:7b:b9:74:43:43: 41:2d:dd:a2:17:6f:a4:1c:a0:50:f6:97:46:e9:60:c5:a8:82: 1e:c8:5f:3e:08:e5:6a:d6:20:c1:26:d7:8c:de:8e:9e:b7:30: 2c:5f:3d:b5:41:42:39:69:23:d6:2e:34:86:3f:be:dc:37:25: 35:de:4f:1c:d8:fc:92:bf:4e:7b:9b:d9:c1:ad:8d:b8:3b:bb: ef:af:99:aa:bb:f0:25:6a:35:76:f8:84:ba:db:8b:fd:cd:3a: a3:f0:0b:11:5c:fc:95:8b:5d:00:a0:d7:3c:9b:d2:1a:26:fc: c2:4e:bb:83:3b:42:f4:52:a6:b0:ba:82:37:e6:e4:e6:98:4f: de:9e:c3:ae:71:84:87:33:2f:b2:e6:58:d4:37:a3:34:31:fe: 55:50:82:e8:1c:fd:30:3b:b4:79:61:52:c8:36:de:1d:15:48: 9f:b6:97:10:9c:e6:f6:38:9c:f3:b3:17:75:e5:02:85:57:db: e8:8a:ae:15 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZqWF0DpAoJTCnzhbgl2YNShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUxMTE4MDgzMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjAyM2I4NjY4NWRmNjI4NWRlZDQ5OWMwMjJjZTE5NWU2YTZlMWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGh5qjPNCtIZra6+uz0TCWF7TVdU xoy6vJRNAbsMTSp8TL3L5ntzLuBnDmVzyumayoaPFAtg0II9c2ZaJJjlseZW+Zko jX8EuUnMqrfmucE7/efLGAH6d5btSsWaYCsZ5d2FPsc0qoT3DYx7xlaLzwFvBhGI N4kP9KhvZ9ZOKyVF3fPxmvSel0td40yTlRi9h7WhcMsSPRbQ7+nUeQdaV8/tSXBz 63Ml6TJfu3sauue4ck6HdqBoe2s+JdrCoOeVhmvzRI/+DYIP44zVoIeAQeAWrE1p 7J39Pl4yNTH8DSxPdNUdf0JoumzY96XakmkFD2/IUTxYjx0vK88OKmgkIQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFIsCO4ZoXfYoXe1JnAIs4ZXmpuG7MB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvaXdJN2htaGQ5aWhkN1VtY0FpemhsZWFtNGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQBH89CAwQA H89HAwQAmFmGAwQDsuyAMA8EAgACMAkDBwAqAhcQAAQwDQYJKoZIhvcNAQELBQAD ggEBABEpTdi6jVl6I4modX+mhq/opdEzPJGpoMUcxnOIMKtnPD/M7eBIcrO4jBzj To7XLreQtYMC7wOjBYEbb9YB2qEgWmF7uXRDQ0Et3aIXb6QcoFD2l0bpYMWogh7I Xz4I5WrWIMEm14zejp63MCxfPbVBQjlpI9YuNIY/vtw3JTXeTxzY/JK/Tnub2cGt jbg7u++vmaq78CVqNXb4hLrbi/3NOqPwCxFc/JWLXQCg1zyb0hom/MJOu4M7QvRS prC6gjfm5OaYT96ew65xhIczL7LmWNQ3ozQx/lVQgugc/TA7tHlhUsg23h0VSJ+2 lxCc5vY4nPOzF3XlAoVX2+iKrhU= -----END CERTIFICATE-----Generated at Sat Dec 6 11:03:52 2025 by rpki-client