This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8EtCsXrudw-zNouqQnS5w3yNnxc.roa File: 8EtCsXrudw-zNouqQnS5w3yNnxc.roa (raw, json) Hash identifier: y/TMqYH5y0HTuaKRqiLHqqewjiLQejeTrOPTcv0fu44= Subject key identifier: F0:4B:42:B1:7A:EE:77:0F:B3:36:8B:AA:42:74:B9:C3:7C:8D:9F:17 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AEF1349482A5E7E9DAB0C654E7A39388E Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8EtCsXrudw-zNouqQnS5w3yNnxc.roa Signing time: Fri 05 Dec 2025 15:13:29 +0000 ROA not before: Fri 05 Dec 2025 15:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35758 IP address blocks: 62.192.108.0/23 maxlen: 23 213.169.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:13:49:48:2a:5e:7e:9d:ab:0c:65:4e:7a:39:38:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Dec 5 15:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f04b42b17aee770fb3368baa4274b9c37c8d9f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:66:b9:4b:cb:a2:36:ef:e0:7c:3f:41:76: 6f:13:c0:cd:db:cc:bc:18:0f:7d:6c:6d:f3:6c:8e: e2:87:03:36:b6:54:87:60:c1:24:24:a2:c7:62:10: ef:cd:94:e2:c0:4e:d8:13:b6:51:8b:da:45:c0:fd: a9:c1:25:b5:8c:c3:9d:8b:6e:cc:cb:fa:8b:05:be: 08:84:8c:2e:d0:a2:61:94:d4:71:d6:b7:b6:61:bb: 91:09:5d:47:56:8c:d0:a8:12:b5:6f:df:9a:24:ea: 47:a3:be:f4:ab:66:e6:a0:37:3a:85:f3:84:85:0d: ca:fa:d2:ae:ac:67:41:fe:2d:da:01:e9:ba:1f:1d: 0e:0a:03:0c:32:46:a1:88:20:9b:44:09:21:b3:72: 04:17:58:ab:f0:8d:f7:1c:89:f6:11:6a:3e:72:1a: 67:9c:45:84:0c:ed:76:e5:7f:55:8e:17:06:52:ca: 90:18:ec:c1:c2:1d:82:3c:43:d0:39:9c:0a:0e:b1: f9:3d:af:27:ed:bd:35:0f:6f:d4:d9:9d:89:d1:3e: fb:c3:09:d8:61:4d:a6:6c:ec:0e:26:c7:81:9f:64: 3c:b9:68:95:07:dd:1b:4e:b1:08:e6:40:5a:fd:75: fa:47:cf:7d:22:9b:a6:02:b2:f4:6e:03:a2:da:67: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4B:42:B1:7A:EE:77:0F:B3:36:8B:AA:42:74:B9:C3:7C:8D:9F:17 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/8EtCsXrudw-zNouqQnS5w3yNnxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.108.0/23 213.169.200.0/23 Signature Algorithm: sha256WithRSAEncryption ca:a5:66:e2:25:6e:76:27:dc:ec:b3:bb:97:17:cd:54:df:76: f0:89:e5:5b:29:d3:82:76:e5:60:6a:1c:76:3d:67:4e:14:c2: ef:11:59:05:eb:8c:22:0b:8a:02:21:1d:cc:7d:d0:02:4f:2b: 80:6b:3a:a6:8f:83:8e:be:a0:5e:23:20:84:8e:ea:b6:6e:a0: eb:04:67:e0:eb:c0:37:64:5f:6b:ca:57:37:e1:b8:5d:85:a9: ad:29:51:6d:ee:8e:0f:4c:25:b4:a3:86:b0:71:6d:2d:38:9b: 62:9b:9b:db:98:08:89:f9:52:59:67:ba:eb:09:46:24:88:b8: e8:c7:3c:8b:ae:f9:06:4c:b6:13:d5:8d:12:03:f5:3b:6b:c3: c8:cf:d7:a7:6d:43:19:09:38:ce:56:91:44:64:49:0c:90:20: f3:09:5f:22:b0:7f:0e:b3:37:b4:19:64:bd:5f:7e:65:8c:a6: f5:09:2a:d3:53:03:09:4b:f5:1e:4c:76:04:96:22:11:4e:0d: 0f:42:c8:7b:06:5c:20:73:a4:0c:f2:2c:08:a0:8d:95:d2:b0: 02:73:29:3a:94:ce:ef:cf:fd:4c:0d:45:57:4e:17:61:ca:d2: a4:93:f1:42:05:ce:61:98:63:d5:21:d1:85:31:95:5b:c3:04: 7a:df:18:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrvE0lIKl5+nasMZU56OTiOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMjA1MTUxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDRiNDJiMTdhZWU3NzBmYjMzNjhiYWE0Mjc0YjljMzdjOGQ5ZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO9muUvLojbv4Hw/QXZvE8DN28y8 GA99bG3zbI7ihwM2tlSHYMEkJKLHYhDvzZTiwE7YE7ZRi9pFwP2pwSW1jMOdi27M y/qLBb4IhIwu0KJhlNRx1re2YbuRCV1HVozQqBK1b9+aJOpHo770q2bmoDc6hfOE hQ3K+tKurGdB/i3aAem6Hx0OCgMMMkahiCCbRAkhs3IEF1ir8I33HIn2EWo+chpn nEWEDO125X9VjhcGUsqQGOzBwh2CPEPQOZwKDrH5Pa8n7b01D2/U2Z2J0T77wwnY YU2mbOwOJseBn2Q8uWiVB90bTrEI5kBa/XX6R899IpumArL0bgOi2mcgmQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPBLQrF67ncPszaLqkJ0ucN8jZ8XMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvOEV0Q3NYcnVkdy16Tm91cVFuUzV3M3lObnhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPsBsAwQB 1anIMA0GCSqGSIb3DQEBCwUAA4IBAQDKpWbiJW52J9zss7uXF81U33bwieVbKdOC duVgahx2PWdOFMLvEVkF64wiC4oCIR3MfdACTyuAazqmj4OOvqBeIyCEjuq2bqDr BGfg68A3ZF9rylc34bhdhamtKVFt7o4PTCW0o4awcW0tOJtim5vbmAiJ+VJZZ7rr CUYkiLjoxzyLrvkGTLYT1Y0SA/U7a8PIz9enbUMZCTjOVpFEZEkMkCDzCV8isH8O sze0GWS9X35ljKb1CSrTUwMJS/UeTHYEliIRTg0PQsh7Blwgc6QM8iwIoI2V0rAC cyk6lM7vz/1MDUVXThdhytKkk/FCBc5hmGPVIdGFMZVbwwR63xhu -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:14 2025 by rpki-client