This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/cEPjBaGbVjdPO-hNsYO67euLYpQ.roa File: cEPjBaGbVjdPO-hNsYO67euLYpQ.roa (raw, json) Hash identifier: T605woCbDSzS9CwoW3bIxK7R2PsaKmq7Bur/BezpJTA= Subject key identifier: 70:43:E3:05:A1:9B:56:37:4F:3B:E8:4D:B1:83:BA:ED:EB:8B:62:94 Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df Certificate serial: 019AB68C6EF41F797B7F29E9C00349A0057B Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/cEPjBaGbVjdPO-hNsYO67euLYpQ.roa Signing time: Mon 24 Nov 2025 15:47:28 +0000 ROA not before: Mon 24 Nov 2025 15:47:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40994 IP address blocks: 31.14.17.0/24 maxlen: 24 46.102.156.0/24 maxlen: 24 46.102.157.0/24 maxlen: 24 83.138.55.0/24 maxlen: 24 86.106.182.0/23 maxlen: 24 94.177.8.0/23 maxlen: 24 104.143.0.0/23 maxlen: 24 110.172.148.0/24 maxlen: 24 193.219.97.0/24 maxlen: 24 203.34.137.0/24 maxlen: 24 203.98.67.0/24 maxlen: 24 204.154.104.0/22 maxlen: 24 205.147.200.0/23 maxlen: 24 2a0d:f302::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:8c:6e:f4:1f:79:7b:7f:29:e9:c0:03:49:a0:05:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df Validity Not Before: Nov 24 15:47:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7043e305a19b56374f3be84db183baedeb8b6294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:0d:5c:cb:28:98:0b:d0:f4:34:ac:50:9b: 7d:5d:37:f2:1e:72:f3:32:4a:c1:44:fe:32:82:78: 43:a8:31:fa:f1:93:1f:65:b4:0d:61:97:3b:19:54: 41:08:f5:3e:85:35:e4:9e:b5:28:d2:70:ce:7b:98: 83:05:5b:da:ec:97:be:35:11:2d:7e:60:66:50:af: a0:c9:24:2e:ee:19:a2:87:4b:bd:6d:10:93:c5:cc: 53:03:3c:15:92:1d:10:ee:dc:08:10:c4:91:dc:f5: 15:a4:91:0a:73:86:fd:62:2f:74:af:01:a8:14:fa: 34:d8:e2:c4:21:57:3a:53:02:a3:d4:96:fe:fd:40: c3:2a:20:c9:09:a6:32:c2:b7:77:94:51:f7:6f:8a: 2b:31:ce:1a:3f:1f:e5:3c:95:36:3e:59:7e:a4:29: a5:af:eb:dc:94:af:92:02:90:ee:17:03:bd:1b:a8: 67:1c:c7:b6:aa:b1:24:7d:c5:6e:8b:55:8a:ae:bd: 65:19:10:b5:47:e7:7e:78:1b:fa:cf:51:39:14:cc: 96:fb:ad:63:20:79:18:bd:42:90:6a:b8:39:7f:dc: 28:0c:87:06:d9:a1:26:d6:fa:dd:2b:c7:62:82:e0: 6d:1f:51:d7:60:44:13:f7:01:7c:71:e5:42:51:34: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:43:E3:05:A1:9B:56:37:4F:3B:E8:4D:B1:83:BA:ED:EB:8B:62:94 X509v3 Authority Key Identifier: keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/cEPjBaGbVjdPO-hNsYO67euLYpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.17.0/24 46.102.156.0/23 83.138.55.0/24 86.106.182.0/23 94.177.8.0/23 104.143.0.0/23 110.172.148.0/24 193.219.97.0/24 203.34.137.0/24 203.98.67.0/24 204.154.104.0/22 205.147.200.0/23 IPv6: 2a0d:f302::/32 Signature Algorithm: sha256WithRSAEncryption 5f:17:82:44:64:8c:86:0f:b0:ec:63:3f:31:cd:8c:ba:c9:54: 8d:c3:fe:3c:bd:57:ed:64:6e:9a:47:ae:38:96:23:c0:b0:c3: 5a:47:fb:fa:64:3d:4c:c4:66:9a:80:fe:6e:a9:97:ac:b1:4c: ec:24:ec:14:7d:c0:25:b8:4b:ef:60:34:a3:dd:d3:1c:88:a1: 33:4a:00:8b:d3:c0:ec:89:6a:a5:fd:ee:50:8f:c5:5b:e8:9c: 51:e1:09:c7:38:66:7f:79:78:d6:25:50:ea:d2:05:92:0e:cd: 3f:5d:3c:93:66:37:fb:c3:f4:cd:58:b3:43:6a:bb:8f:5b:3a: 04:34:bb:26:02:51:df:76:2a:f7:1c:a2:62:bd:ff:73:b9:21: 16:5c:11:f7:96:59:f8:41:82:4d:17:88:5b:f2:a7:bd:f0:3c: fa:a8:6d:2f:53:5e:91:cb:f2:32:bf:9f:40:2b:11:d5:03:5e: 88:e7:3d:6a:fa:18:09:ed:2e:bd:2d:4a:30:d5:59:9e:9f:f0: 5e:53:2c:43:8b:8e:a9:fa:9f:fd:04:c4:49:63:6a:89:c4:13: 53:8b:54:52:cc:a3:9d:04:45:d6:65:6a:18:33:d7:5f:8e:36: 48:89:6f:2b:74:db:7b:17:af:ac:df:aa:f1:54:9b:a5:08:39: 80:36:7b:4e -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZq2jG70H3l7fynpwANJoAV7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2YwZmJkNWY2ZTE3NTk5MDNjYzY5ZGUwZGM0ZWEyNGMx ZjgzZGYwHhcNMjUxMTI0MTU0NzI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDQzZTMwNWExOWI1NjM3NGYzYmU4NGRiMTgzYmFlZGViOGI2Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbUNXMsomAvQ9DSsUJt9XTfyHnLz MkrBRP4ygnhDqDH68ZMfZbQNYZc7GVRBCPU+hTXknrUo0nDOe5iDBVva7Je+NREt fmBmUK+gySQu7hmih0u9bRCTxcxTAzwVkh0Q7twIEMSR3PUVpJEKc4b9Yi90rwGo FPo02OLEIVc6UwKj1Jb+/UDDKiDJCaYywrd3lFH3b4orMc4aPx/lPJU2Pll+pCml r+vclK+SApDuFwO9G6hnHMe2qrEkfcVui1WKrr1lGRC1R+d+eBv6z1E5FMyW+61j IHkYvUKQarg5f9woDIcG2aEm1vrdK8diguBtH1HXYEQT9wF8ceVCUTQ9+wIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFHBD4wWhm1Y3TzvoTbGDuu3ri2KUMB8GA1UdIwQY MBaAFNTPD71fbhdZkDzGneDcTqJMH4PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMt NTg1N2YxYzE3NjI0LzEvY0VQakJhR2JWamRQTy1oTnNZTzY3ZXVMWXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9kMzRmYTItM2EzNy00MzA4LWI3ODMtNTg1N2YxYzE3NjI0 LzEvMU04UHZWOXVGMW1RUE1hZDROeE9va3dmZzk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQAHw4RAwQB LmacAwQAU4o3AwQBVmq2AwQBXrEIAwQBaI8AAwQAbqyUAwQAwdthAwQAyyKJAwQA y2JDAwQCzJpoAwQBzZPIMA0EAgACMAcDBQAqDfMCMA0GCSqGSIb3DQEBCwUAA4IB AQBfF4JEZIyGD7DsYz8xzYy6yVSNw/48vVftZG6aR644liPAsMNaR/v6ZD1MxGaa gP5uqZessUzsJOwUfcAluEvvYDSj3dMciKEzSgCL08DsiWql/e5Qj8Vb6JxR4QnH OGZ/eXjWJVDq0gWSDs0/XTyTZjf7w/TNWLNDaruPWzoENLsmAlHfdir3HKJivf9z uSEWXBH3lln4QYJNF4hb8qe98Dz6qG0vU16Ry/Iyv59AKxHVA16I5z1q+hgJ7S69 LUow1Vmen/BeUyxDi46p+p/9BMRJY2qJxBNTi1RSzKOdBEXWZWoYM9dfjjZIiW8r dNt7F6+s36rxVJulCDmANntO -----END CERTIFICATE-----Generated at Sun Dec 7 10:27:40 2025 by rpki-client