This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3IuX2BJtINkDJIocya3PfYPTjGs.roa File: 3IuX2BJtINkDJIocya3PfYPTjGs.roa (raw, json) Hash identifier: rHbyKEHCCMC6Nd1iSSnaD3OCLk6aq+1Wzu3hX57k8k4= Subject key identifier: DC:8B:97:D8:12:6D:20:D9:03:24:8A:1C:C9:AD:CF:7D:83:D3:8C:6B Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019A6D8CD7738A5B384C634CADA84209CC31 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3IuX2BJtINkDJIocya3PfYPTjGs.roa Signing time: Mon 10 Nov 2025 11:35:37 +0000 ROA not before: Mon 10 Nov 2025 11:35:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207326 IP address blocks: 31.210.42.0/24 maxlen: 24 31.210.55.0/24 maxlen: 24 78.135.82.0/24 maxlen: 24 78.135.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:8c:d7:73:8a:5b:38:4c:63:4c:ad:a8:42:09:cc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Nov 10 11:35:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dc8b97d8126d20d903248a1cc9adcf7d83d38c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:46:02:f1:c8:13:03:42:08:c9:e1:86:e2:6e: b4:a6:21:b5:ff:40:2e:bc:27:1b:f6:3c:69:a8:d9: 0f:23:b3:f5:01:bc:b1:38:f8:51:ed:b7:45:e2:b1: 91:6c:08:b7:45:a3:ce:11:38:96:64:e5:18:a5:b0: 77:59:7f:b0:13:ef:d5:23:67:37:49:2e:a1:f0:96: f3:48:b6:37:17:b0:87:95:32:02:48:64:6d:62:e3: 6e:7a:1b:3c:fc:cd:bc:d5:f7:93:f5:e8:fa:08:7f: db:0f:f3:05:53:b1:74:ec:b1:d0:12:97:44:7a:71: a2:1c:83:58:d4:69:c8:cb:86:e2:b9:d8:ad:bf:43: e8:46:63:43:bc:5c:b1:c9:14:c8:89:9b:34:f3:68: ca:75:bc:61:a8:e1:14:00:92:b3:11:f3:cf:06:9b: e9:f8:b0:b3:f9:de:e7:73:5d:6d:a3:0e:ae:64:bb: 27:cc:f9:84:eb:3c:17:c1:2c:be:96:03:4c:ca:80: f9:6e:8a:d0:d4:44:69:34:ef:37:4c:77:76:10:6e: 4e:b6:dc:c1:db:d0:a1:e0:33:8e:6c:b8:ae:2f:df: 40:e0:5c:0b:3a:1d:86:57:7f:37:78:b7:b4:6b:0c: c8:31:e0:c3:b6:3e:57:d6:6e:72:1c:e2:b0:dd:c0: 3d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8B:97:D8:12:6D:20:D9:03:24:8A:1C:C9:AD:CF:7D:83:D3:8C:6B X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/3IuX2BJtINkDJIocya3PfYPTjGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.42.0/24 31.210.55.0/24 78.135.82.0/23 Signature Algorithm: sha256WithRSAEncryption a9:80:13:ad:16:24:b3:71:65:f4:c5:02:62:38:05:ba:c2:a5: 5f:2d:ac:3a:7c:ab:58:3d:c7:54:72:28:53:14:98:52:f0:27: 59:26:2b:45:fe:88:fb:1c:35:c6:a3:41:96:ff:8d:31:b2:80: 22:d3:64:e6:ac:15:08:ed:d0:e8:dc:88:69:5a:66:25:7e:b4: de:c3:76:36:59:b6:82:cb:e6:5d:17:1c:97:da:3d:ab:71:cc: 40:6d:0b:be:05:0c:87:2d:59:ac:be:88:d5:82:a9:7a:d7:cc: 33:17:2e:c7:c6:bc:8e:3c:d8:45:f6:95:b9:b4:62:8d:b9:f3: 59:a7:44:38:bc:0a:8e:e9:73:3d:cb:b1:29:2e:67:e3:bb:a7: a1:a6:27:02:3c:c2:46:3f:bc:18:16:74:26:a9:9c:d2:75:13: 6c:8b:ba:5f:c0:28:bf:77:80:5d:82:fb:23:29:fe:98:d8:4e: b4:14:07:12:f6:ce:f0:9d:72:e1:b9:a8:de:fd:36:5f:d3:c4: de:de:67:e7:96:a6:7a:88:6f:e4:81:8c:b5:f5:15:91:0d:b6: 50:86:7d:27:8f:c0:f5:b6:4b:dc:33:08:52:fe:c7:39:38:2e: ba:b1:27:00:3e:88:d4:13:9b:b8:56:3f:24:43:94:0a:0e:d8: 56:83:22:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZptjNdzils4TGNMrahCCcwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMTEwMTEzNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzhiOTdkODEyNmQyMGQ5MDMyNDhhMWNjOWFkY2Y3ZDgzZDM4YzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEYC8cgTA0IIyeGG4m60piG1/0Au vCcb9jxpqNkPI7P1AbyxOPhR7bdF4rGRbAi3RaPOETiWZOUYpbB3WX+wE+/VI2c3 SS6h8JbzSLY3F7CHlTICSGRtYuNuehs8/M281feT9ej6CH/bD/MFU7F07LHQEpdE enGiHINY1GnIy4biuditv0PoRmNDvFyxyRTIiZs082jKdbxhqOEUAJKzEfPPBpvp +LCz+d7nc11tow6uZLsnzPmE6zwXwSy+lgNMyoD5borQ1ERpNO83THd2EG5OttzB 29Ch4DOObLiuL99A4FwLOh2GV383eLe0awzIMeDDtj5X1m5yHOKw3cA9dQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNyLl9gSbSDZAySKHMmtz32D04xrMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvM0l1WDJCSnRJTmtESklvY3lhM1BmWVBUakdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH9IqAwQA H9I3AwQBTodSMA0GCSqGSIb3DQEBCwUAA4IBAQCpgBOtFiSzcWX0xQJiOAW6wqVf Law6fKtYPcdUcihTFJhS8CdZJitF/oj7HDXGo0GW/40xsoAi02TmrBUI7dDo3Ihp WmYlfrTew3Y2WbaCy+ZdFxyX2j2rccxAbQu+BQyHLVmsvojVgql618wzFy7HxryO PNhF9pW5tGKNufNZp0Q4vAqO6XM9y7EpLmfju6ehpicCPMJGP7wYFnQmqZzSdRNs i7pfwCi/d4BdgvsjKf6Y2E60FAcS9s7wnXLhuaje/TZf08Te3mfnlqZ6iG/kgYy1 9RWRDbZQhn0nj8D1tkvcMwhS/sc5OC66sScAPojUE5u4Vj8kQ5QKDthWgyJq -----END CERTIFICATE-----Generated at Sat Dec 6 20:52:20 2025 by rpki-client