This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Q8r-yq-WBBDz2eDZB8gELGrrlnA.roa File: Q8r-yq-WBBDz2eDZB8gELGrrlnA.roa (raw, json) Hash identifier: hU2zAel7ScEYqBZJx4eiwGyniI8FwzX0NfbqxlK/3V0= Subject key identifier: 43:CA:FE:CA:AF:96:04:10:F3:D9:E0:D9:07:C8:04:2C:6A:EB:96:70 Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019AE8DCB22D9D2331BE1489DCF1469699BC Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Q8r-yq-WBBDz2eDZB8gELGrrlnA.roa Signing time: Thu 04 Dec 2025 10:16:08 +0000 ROA not before: Thu 04 Dec 2025 10:16:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6871 IP address blocks: 31.185.32.0/19 maxlen: 19 31.185.128.0/17 maxlen: 17 46.208.0.0/16 maxlen: 16 51.6.0.0/15 maxlen: 15 51.9.0.0/16 maxlen: 16 80.189.0.0/16 maxlen: 16 80.229.0.0/16 maxlen: 16 84.92.0.0/15 maxlen: 15 87.112.0.0/14 maxlen: 14 87.112.0.0/16 maxlen: 16 87.113.0.0/16 maxlen: 16 87.114.0.0/16 maxlen: 16 87.115.0.0/16 maxlen: 16 91.125.0.0/16 maxlen: 16 146.90.0.0/16 maxlen: 16 194.75.0.0/19 maxlen: 19 194.75.80.0/20 maxlen: 20 194.75.220.0/22 maxlen: 22 195.99.8.0/21 maxlen: 21 195.99.32.0/19 maxlen: 19 195.99.88.0/21 maxlen: 21 195.99.224.0/20 maxlen: 20 195.213.0.0/16 maxlen: 16 212.140.0.0/19 maxlen: 19 212.140.32.0/20 maxlen: 20 212.140.48.0/21 maxlen: 21 213.31.0.0/16 maxlen: 16 217.32.30.0/23 maxlen: 23 217.32.32.0/20 maxlen: 20 217.32.112.0/22 maxlen: 22 217.32.148.0/22 maxlen: 22 217.32.152.0/21 maxlen: 21 217.32.160.0/22 maxlen: 22 217.32.176.0/22 maxlen: 22 217.39.16.0/20 maxlen: 20 217.39.112.0/20 maxlen: 20 217.45.24.0/21 maxlen: 21 217.45.96.0/20 maxlen: 20 217.46.24.0/22 maxlen: 22 217.46.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:dc:b2:2d:9d:23:31:be:14:89:dc:f1:46:96:99:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Dec 4 10:16:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=43cafecaaf960410f3d9e0d907c8042c6aeb9670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:01:ef:a7:0c:4a:c4:cb:54:1b:50:2f:53: 3f:a2:fd:3a:11:52:90:cb:bf:66:cc:c1:1f:c0:7a: fb:7a:2f:4b:5f:d3:d0:19:44:22:18:69:c8:1c:e3: c9:92:3b:4d:ba:e5:03:47:6c:79:bb:c6:f4:b9:4e: 64:a2:6b:96:df:aa:3b:9d:29:40:08:41:bd:53:a9: f6:13:3f:24:b2:73:3b:a1:d3:88:df:88:fb:d0:85: 71:11:1b:9d:90:3e:3b:7c:a3:a9:00:85:3a:97:63: 38:8f:55:10:8a:6d:94:7a:3e:d9:80:ac:d5:14:63: e0:d2:f8:ff:65:d3:d0:52:b8:e7:4c:3d:8f:33:47: 81:67:42:15:35:45:8b:73:ca:be:cb:ce:b8:d9:4e: 6f:ab:04:c2:3a:0a:7a:88:06:65:fd:ec:79:d0:3b: 87:75:df:4c:ab:72:2c:0c:04:b7:72:7b:e3:80:70: fd:68:5b:42:c6:e6:fd:9f:6f:8b:07:c5:be:86:fb: e6:55:ad:60:e7:dd:fd:66:b0:65:02:49:fe:b3:c6: 5d:f9:79:cc:9e:60:3a:3c:3f:47:80:60:6f:6a:3a: 17:c7:5f:fb:51:c1:c4:68:de:ec:6e:ee:fd:1e:61: 5b:c8:3e:e4:0a:09:45:94:79:11:5b:38:93:6b:b1: 35:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:FE:CA:AF:96:04:10:F3:D9:E0:D9:07:C8:04:2C:6A:EB:96:70 X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/Q8r-yq-WBBDz2eDZB8gELGrrlnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.185.32.0/19 31.185.128.0/17 46.208.0.0/16 51.6.0.0/15 51.9.0.0/16 80.189.0.0/16 80.229.0.0/16 84.92.0.0/15 87.112.0.0/14 91.125.0.0/16 146.90.0.0/16 194.75.0.0/19 194.75.80.0/20 194.75.220.0/22 195.99.8.0/21 195.99.32.0/19 195.99.88.0/21 195.99.224.0/20 195.213.0.0/16 212.140.0.0-212.140.55.255 213.31.0.0/16 217.32.30.0-217.32.47.255 217.32.112.0/22 217.32.148.0-217.32.163.255 217.32.176.0/22 217.39.16.0/20 217.39.112.0/20 217.45.24.0/21 217.45.96.0/20 217.46.24.0/22 217.46.128.0/20 Signature Algorithm: sha256WithRSAEncryption 26:cf:17:9c:95:71:9f:11:4f:56:af:fc:15:47:a0:fb:fd:b6: 56:98:6d:71:eb:02:81:c9:ba:ba:8a:91:b5:17:01:59:57:2f: 05:f6:9c:5e:0f:c2:42:84:5a:b7:04:12:0b:f7:9e:39:5c:7c: d6:d1:4b:41:d1:60:6b:de:25:9e:e1:aa:4a:cc:f5:a7:1c:a9: 6d:91:f2:90:7b:5e:31:30:16:f9:34:76:76:ee:66:59:c7:68: 82:ef:f9:e5:8d:8e:01:13:af:e1:7b:ad:0f:87:4e:c6:13:98: 38:3b:59:28:f8:ad:97:49:7a:6b:f0:82:8b:c8:cb:84:0f:bd: 24:0d:f3:34:8d:51:cf:d2:f1:d8:c8:7b:a5:66:10:42:1e:19: 3a:9c:05:0a:18:54:10:0f:8d:b5:93:86:2b:75:a6:12:bb:b7: 8a:7a:3b:44:64:7a:6e:5f:31:ec:ed:71:01:99:ec:c2:49:a8: 21:93:84:41:2d:9b:7c:d6:e9:38:4e:7c:13:da:0e:d3:19:55: 5f:8e:56:81:0d:80:bb:a6:af:d7:28:a5:05:3a:6d:49:64:a2: c4:a8:d5:21:ed:b4:f6:85:5e:ca:69:bf:60:07:2d:71:63:19: 15:3a:10:7a:96:e0:24:91:e3:93:87:51:a7:93:26:9b:f3:96: 4e:d2:7e:4e -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgISAZro3LItnSMxvhSJ3PFGlpm8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjUxMjA0MTAxNjA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2NhZmVjYWFmOTYwNDEwZjNkOWUwZDkwN2M4MDQyYzZhZWI5NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+8B76cMSsTLVBtQL1M/ov06EVKQ y79mzMEfwHr7ei9LX9PQGUQiGGnIHOPJkjtNuuUDR2x5u8b0uU5komuW36o7nSlA CEG9U6n2Ez8ksnM7odOI34j70IVxERudkD47fKOpAIU6l2M4j1UQim2Uej7ZgKzV FGPg0vj/ZdPQUrjnTD2PM0eBZ0IVNUWLc8q+y8642U5vqwTCOgp6iAZl/ex50DuH dd9Mq3IsDAS3cnvjgHD9aFtCxub9n2+LB8W+hvvmVa1g5939ZrBlAkn+s8Zd+XnM nmA6PD9HgGBvajoXx1/7UcHEaN7sbu79HmFbyD7kCglFlHkRWziTa7E1swIDAQAB o4ICzjCCAsowHQYDVR0OBBYEFEPK/sqvlgQQ89ng2QfIBCxq65ZwMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvUThyLXlxLVdCQkR6MmVEWkI4Z0VMR3JybG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHjBggrBgEFBQcBBwEB/wSB0zCB0DCBzQQCAAEwgcYDBAUf uSADBAcfuYADAwAu0AMDATMGAwMAMwkDAwBQvQMDAFDlAwMBVFwDAwJXcAMDAFt9 AwMAkloDBAXCSwADBATCS1ADBALCS9wDBAPDYwgDBAXDYyADBAPDY1gDBATDY+AD AwDD1TALAwMC1IwDBAPUjDADAwDVHzAMAwQB2SAeAwQE2SAgAwQC2SBwMAwDBALZ IJQDBALZIKADBALZILADBATZJxADBATZJ3ADBAPZLRgDBATZLWADBALZLhgDBATZ LoAwDQYJKoZIhvcNAQELBQADggEBACbPF5yVcZ8RT1av/BVHoPv9tlaYbXHrAoHJ urqKkbUXAVlXLwX2nF4PwkKEWrcEEgv3njlcfNbRS0HRYGveJZ7hqkrM9accqW2R 8pB7XjEwFvk0dnbuZlnHaILv+eWNjgETr+F7rQ+HTsYTmDg7WSj4rZdJemvwgovI y4QPvSQN8zSNUc/S8djIe6VmEEIeGTqcBQoYVBAPjbWThit1phK7t4p6O0Rkem5f MeztcQGZ7MJJqCGThEEtm3zW6ThOfBPaDtMZVV+OVoENgLumr9copQU6bUlkosSo 1SHttPaFXsppv2AHLXFjGRU6EHqW4CSR45OHUaeTJpvzlk7Sfk4= -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:48 2025 by rpki-client