This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/cJQMfm3Nb-Yj_wiSeqPIhYmhihg.roa File: cJQMfm3Nb-Yj_wiSeqPIhYmhihg.roa (raw, json) Hash identifier: H1zjWIW+Nmv7M4Qo9+faRg9JdVHFVBqi+Ji0husl1dg= Subject key identifier: 70:94:0C:7E:6D:CD:6F:E6:23:FF:08:92:7A:A3:C8:85:89:A1:8A:18 Certificate issuer: /CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Certificate serial: 019AA0707282F94055FB8D0D7359522BB3CA Authority key identifier: 84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/cJQMfm3Nb-Yj_wiSeqPIhYmhihg.roa Signing time: Thu 20 Nov 2025 08:45:15 +0000 ROA not before: Thu 20 Nov 2025 08:45:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 197696 IP address blocks: 31.170.8.0/21 maxlen: 21 31.170.8.0/22 maxlen: 22 31.170.13.0/24 maxlen: 24 31.170.15.0/24 maxlen: 24 185.236.224.0/22 maxlen: 22 185.236.224.0/24 maxlen: 24 185.236.224.1/32 maxlen: 32 185.236.224.2/32 maxlen: 32 185.236.226.0/23 maxlen: 23 185.236.226.0/24 maxlen: 24 2a01:9500::/32 maxlen: 32 2a01:9500::/42 maxlen: 42 2a01:9500:26::/48 maxlen: 48 2a01:9500:80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.mft rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:70:72:82:f9:40:55:fb:8d:0d:73:59:52:2b:b3:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b87af5334c5c45141b6675a9ed46e57b7976ac Validity Not Before: Nov 20 08:45:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70940c7e6dcd6fe623ff08927aa3c88589a18a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d5:1a:61:fd:f6:75:89:8a:57:0a:76:29:8a: 10:d2:3f:8b:db:c9:55:f2:ed:df:6a:52:05:eb:75: fb:75:e2:d3:11:c9:ae:f4:ab:e1:78:2b:0c:2e:50: 20:3d:c9:a7:28:c0:c6:d4:5c:1b:d5:d8:18:27:a7: b1:aa:ec:ba:cd:f0:b8:d0:7a:7e:50:6d:43:44:94: 7c:11:be:92:44:3b:13:15:e1:db:26:5f:6d:39:96: a4:89:a6:b1:51:c8:6a:32:e7:3a:73:83:c1:ad:24: 03:ee:e7:53:b1:7e:8e:2d:36:fc:7f:4c:dd:b1:fe: 0d:94:3c:59:92:64:e5:f2:89:56:21:bd:40:af:ff: 81:32:7c:1b:e0:e3:f5:52:45:8a:6d:e2:f5:14:ff: b0:ca:6b:01:79:99:5a:29:22:d0:67:63:bd:19:94: 25:4a:c5:82:da:20:0d:b4:32:cb:f2:45:9d:03:bf: da:0f:92:21:29:dd:bd:39:9e:2d:88:67:8a:9d:25: ef:5e:84:e1:70:d7:d2:ff:b0:ab:6e:27:a4:5c:1a: 6d:6b:02:42:69:a2:33:1c:d4:4d:bd:6c:6f:2e:23: bc:67:ae:03:8d:cb:46:41:96:17:92:18:8d:55:87: 6f:01:f3:77:7d:4b:f2:ce:34:14:cb:6d:72:5c:89: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:0C:7E:6D:CD:6F:E6:23:FF:08:92:7A:A3:C8:85:89:A1:8A:18 X509v3 Authority Key Identifier: keyid:84:B8:7A:F5:33:4C:5C:45:14:1B:66:75:A9:ED:46:E5:7B:79:76:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/cJQMfm3Nb-Yj_wiSeqPIhYmhihg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b7bac3-f62d-4142-af3c-2e984fbff8b1/1/hLh69TNMXEUUG2Z1qe1G5Xt5dqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.8.0/21 185.236.224.0/22 IPv6: 2a01:9500::/32 Signature Algorithm: sha256WithRSAEncryption 38:ab:84:e1:7c:22:9b:3c:43:5e:41:9c:38:e2:a4:52:95:4e: ae:e5:bb:63:ea:49:28:a3:92:de:15:4a:49:6f:8e:f3:26:fa: ef:3f:48:5d:0e:fd:df:f7:53:59:ea:f5:a5:a4:95:60:f5:f2: b9:4d:0e:e1:cc:98:76:d4:45:c5:fc:96:84:7c:c4:19:81:5f: 07:79:76:f9:f0:c9:94:bf:3a:d0:75:d7:b8:ca:ae:19:3a:fa: 8e:15:00:e0:5e:ea:74:eb:87:e9:6e:cb:7b:ab:02:92:2e:fc: 74:d0:4e:40:33:44:60:7c:64:a6:b8:8b:b4:ef:77:4f:c3:d2: 4d:c9:e8:8a:a1:0c:8e:3c:97:c4:29:1c:dd:29:5f:f1:ab:5f: 03:64:17:b4:d6:19:df:09:95:8b:f6:47:0b:8b:6c:ce:ae:56: ec:29:87:02:ea:38:ef:a4:3f:ad:65:c4:a4:e5:17:b9:31:43: ec:0d:8f:51:6a:cb:99:cc:89:1d:1f:2f:08:0e:6d:a0:22:b2: 7e:5d:e8:b0:b2:22:1e:c1:72:85:1b:61:e4:06:3e:94:dd:47: f8:91:f0:fb:59:c2:99:84:6d:88:7e:70:8f:52:db:bd:a1:75: c2:4b:c6:39:f4:66:45:c9:c3:bc:15:cc:33:d5:6d:51:ff:01: ca:c3:96:a4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqgcHKC+UBV+40Nc1lSK7PKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0Yjg3YWY1MzM0YzVjNDUxNDFiNjY3NWE5ZWQ0NmU1N2I3 OTc2YWMwHhcNMjUxMTIwMDg0NTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk0MGM3ZTZkY2Q2ZmU2MjNmZjA4OTI3YWEzYzg4NTg5YTE4YTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9UaYf32dYmKVwp2KYoQ0j+L28lV 8u3falIF63X7deLTEcmu9KvheCsMLlAgPcmnKMDG1Fwb1dgYJ6exquy6zfC40Hp+ UG1DRJR8Eb6SRDsTFeHbJl9tOZakiaaxUchqMuc6c4PBrSQD7udTsX6OLTb8f0zd sf4NlDxZkmTl8olWIb1Ar/+BMnwb4OP1UkWKbeL1FP+wymsBeZlaKSLQZ2O9GZQl SsWC2iANtDLL8kWdA7/aD5IhKd29OZ4tiGeKnSXvXoThcNfS/7CrbiekXBptawJC aaIzHNRNvWxvLiO8Z64DjctGQZYXkhiNVYdvAfN3fUvyzjQUy21yXIme9wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHCUDH5tzW/mI/8IknqjyIWJoYoYMB8GA1UdIwQY MBaAFIS4evUzTFxFFBtmdantRuV7eXasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2Mt MmU5ODRmYmZmOGIxLzEvY0pRTWZtM05iLVlqX3dpU2VxUEloWW1oaWhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9iN2JhYzMtZjYyZC00MTQyLWFmM2MtMmU5ODRmYmZmOGIx LzEvaExoNjlUTk1YRVVVRzJaMXFlMUc1WHQ1ZHF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDH6oIAwQC uezgMA0EAgACMAcDBQAqAZUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4q4ThfCKbPENe QZw44qRSlU6u5btj6kkoo5LeFUpJb47zJvrvP0hdDv3f91NZ6vWlpJVg9fK5TQ7h zJh21EXF/JaEfMQZgV8HeXb58MmUvzrQdde4yq4ZOvqOFQDgXup064fpbst7qwKS Lvx00E5AM0RgfGSmuIu073dPw9JNyeiKoQyOPJfEKRzdKV/xq18DZBe01hnfCZWL 9kcLi2zOrlbsKYcC6jjvpD+tZcSk5Re5MUPsDY9RasuZzIkdHy8IDm2gIrJ+Xeiw siIewXKFG2HkBj6U3Uf4kfD7WcKZhG2IfnCPUtu9oXXCS8Y59GZFycO8Fcwz1W1R /wHKw5ak -----END CERTIFICATE-----Generated at Sat Dec 6 11:44:52 2025 by rpki-client