This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/fvDwz21x9i7OCO_it8az05W_upA.roa File: fvDwz21x9i7OCO_it8az05W_upA.roa (raw, json) Hash identifier: nmcakeG86ZQCTvLBngIz1TTb4TeumZCizFRicaj+i/c= Subject key identifier: 7E:F0:F0:CF:6D:71:F6:2E:CE:08:EF:E2:B7:C6:B3:D3:95:BF:BA:90 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019AA6CE18A0A49E3B8D8E7E68D688F7CE87 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/fvDwz21x9i7OCO_it8az05W_upA.roa Signing time: Fri 21 Nov 2025 14:25:15 +0000 ROA not before: Fri 21 Nov 2025 14:25:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57841 IP address blocks: 31.42.88.0/23 maxlen: 23 194.9.213.0/24 maxlen: 24 195.245.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:ce:18:a0:a4:9e:3b:8d:8e:7e:68:d6:88:f7:ce:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Nov 21 14:25:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ef0f0cf6d71f62ece08efe2b7c6b3d395bfba90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:23:7b:9e:08:6b:95:14:e9:19:00:57:5d: 60:58:b2:e0:d8:63:ee:a5:9d:46:ab:e8:59:da:25: ce:23:4a:f7:65:2b:f0:49:0d:24:24:eb:ee:a9:7d: 7a:da:45:d1:25:72:d6:e8:22:b0:10:55:2e:30:82: 6e:31:58:58:cd:4c:fd:07:1d:e8:ec:c6:9e:54:44: 8e:a6:75:2a:f5:19:53:5b:4c:3a:99:c1:9b:38:ab: c5:4b:99:01:33:3b:fa:11:ad:d6:d9:f6:3c:e1:76: f5:19:55:bd:e2:e9:ec:83:a3:8d:93:c9:66:43:df: 2e:53:70:d0:91:e8:78:e6:ee:64:ca:e9:d8:6e:e7: 36:1b:15:77:6a:69:96:c8:f9:86:35:74:9b:eb:0e: 2b:91:94:84:c2:ad:b6:d9:42:b3:7d:88:3a:cc:42: 3d:fc:ad:bd:15:53:ff:c4:e7:56:c1:26:0e:82:6e: bf:98:2d:db:34:67:69:fe:41:3d:94:68:88:e8:d4: fc:35:29:2b:5f:2f:e0:09:cc:0d:3b:f1:f9:c9:8c: 9f:85:a3:b6:7b:51:d1:e3:ea:af:54:d1:07:7a:65: 39:f5:73:96:58:b9:93:99:63:99:1f:1f:42:f6:84: d8:ed:57:e5:4a:e3:80:20:a6:79:61:e6:d0:22:d7: dd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F0:F0:CF:6D:71:F6:2E:CE:08:EF:E2:B7:C6:B3:D3:95:BF:BA:90 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/fvDwz21x9i7OCO_it8az05W_upA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.88.0/23 194.9.213.0/24 195.245.194.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:5c:ac:26:03:be:14:f9:ec:47:36:89:b4:0d:a9:75:1b:a4: 8c:bc:51:30:c3:97:02:59:96:b5:e2:f5:78:ac:a0:32:20:9a: 09:c7:84:52:da:02:3e:62:29:2d:40:e6:2d:a6:85:69:47:ad: f3:5e:73:08:c0:df:1d:2f:00:47:e9:51:e6:c0:bb:24:ee:3e: 44:1d:fa:81:10:fe:54:b3:7c:2a:2f:4a:79:d8:7f:b3:1c:bd: c1:ce:06:bf:ad:ad:7d:c6:a6:3d:25:92:80:e5:4c:ee:02:98: 72:13:d5:a4:4d:20:c3:82:3c:2f:8b:58:4a:4f:17:7e:bd:79: 84:9a:e2:42:8b:ad:2f:2d:fd:f6:58:87:4d:62:bd:25:e6:03: c5:6f:62:ed:27:78:83:0e:c2:d4:22:ef:b1:9d:3f:c7:77:20: 1d:23:ef:38:5e:f4:74:43:98:ef:81:78:55:7a:c7:a9:4b:1c: ac:bf:2f:c9:c2:8f:16:53:2f:e0:d5:3d:9e:8e:02:0e:3b:31: ef:ef:fc:f7:c5:f1:d4:6f:ca:6a:d0:29:21:6d:bb:b1:6d:f6: 36:1a:7a:82:20:83:4e:68:82:2d:12:ef:83:a3:58:bb:e1:57: 49:2a:50:65:36:8d:72:0c:78:cb:69:dc:77:e2:09:9c:f4:f5: f7:51:06:c0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqmzhigpJ47jY5+aNaI986HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjUxMTIxMTQyNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWYwZjBjZjZkNzFmNjJlY2UwOGVmZTJiN2M2YjNkMzk1YmZiYTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKUje54Ia5UU6RkAV11gWLLg2GPu pZ1Gq+hZ2iXOI0r3ZSvwSQ0kJOvuqX162kXRJXLW6CKwEFUuMIJuMVhYzUz9Bx3o 7MaeVESOpnUq9RlTW0w6mcGbOKvFS5kBMzv6Ea3W2fY84Xb1GVW94unsg6ONk8lm Q98uU3DQkeh45u5kyunYbuc2GxV3ammWyPmGNXSb6w4rkZSEwq222UKzfYg6zEI9 /K29FVP/xOdWwSYOgm6/mC3bNGdp/kE9lGiI6NT8NSkrXy/gCcwNO/H5yYyfhaO2 e1HR4+qvVNEHemU59XOWWLmTmWOZHx9C9oTY7VflSuOAIKZ5YebQItfdcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH7w8M9tcfYuzgjv4rfGs9OVv7qQMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvZnZEd3oyMXg5aTdPQ09faXQ4YXowNVdfdXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBHypYAwQA wgnVAwQAw/XCMA0GCSqGSIb3DQEBCwUAA4IBAQBMXKwmA74U+exHNom0Dal1G6SM vFEww5cCWZa14vV4rKAyIJoJx4RS2gI+YiktQOYtpoVpR63zXnMIwN8dLwBH6VHm wLsk7j5EHfqBEP5Us3wqL0p52H+zHL3Bzga/ra19xqY9JZKA5UzuAphyE9WkTSDD gjwvi1hKTxd+vXmEmuJCi60vLf32WIdNYr0l5gPFb2LtJ3iDDsLUIu+xnT/HdyAd I+84XvR0Q5jvgXhVesepSxysvy/Jwo8WUy/g1T2ejgIOOzHv7/z3xfHUb8pq0Ckh bbuxbfY2GnqCIINOaIItEu+Do1i74VdJKlBlNo1yDHjLadx34gmc9PX3UQbA -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:28 2025 by rpki-client