This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-sMMF2F6pTZ2oVAirlPx7sqPTaE.roa File: 1-sMMF2F6pTZ2oVAirlPx7sqPTaE.roa (raw, json) Hash identifier: X3PXqrskdFo7+K3AlgQagpOCKvXesBjYnIt93vgJMrs= Subject key identifier: FA:C3:0C:17:61:7A:A5:36:76:A1:50:22:AE:53:F1:EE:CA:8F:4D:A1 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019A57B52F45D26514BDA70116B7F5864211 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-sMMF2F6pTZ2oVAirlPx7sqPTaE.roa Signing time: Thu 06 Nov 2025 05:48:03 +0000 ROA not before: Thu 06 Nov 2025 05:48:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 31224 IP address blocks: 31.173.96.0/24 maxlen: 24 31.173.97.0/24 maxlen: 24 31.173.99.0/24 maxlen: 24 31.173.100.0/23 maxlen: 23 31.173.100.0/24 maxlen: 24 31.173.101.0/24 maxlen: 24 31.173.102.0/24 maxlen: 24 31.173.103.0/24 maxlen: 24 31.173.120.0/24 maxlen: 24 31.173.121.0/24 maxlen: 24 31.173.122.0/24 maxlen: 24 31.173.123.0/24 maxlen: 24 31.173.124.0/24 maxlen: 24 31.173.125.0/24 maxlen: 24 31.173.126.0/24 maxlen: 24 31.173.127.0/24 maxlen: 24 37.29.44.0/22 maxlen: 22 46.229.132.0/22 maxlen: 22 78.25.88.0/22 maxlen: 22 80.253.8.0/24 maxlen: 24 80.253.9.0/24 maxlen: 24 83.149.32.0/22 maxlen: 22 83.149.34.0/24 maxlen: 24 83.149.36.0/22 maxlen: 22 83.149.37.0/24 maxlen: 24 83.149.39.0/24 maxlen: 24 83.169.216.0/24 maxlen: 24 85.26.192.0/22 maxlen: 22 128.204.68.0/24 maxlen: 24 128.204.69.0/24 maxlen: 24 178.176.104.0/21 maxlen: 21 178.176.112.0/24 maxlen: 24 178.176.113.0/24 maxlen: 24 178.178.88.0/22 maxlen: 22 178.178.92.0/22 maxlen: 22 178.178.229.0/24 maxlen: 24 178.178.230.0/24 maxlen: 24 2a03:d000:5000::/40 maxlen: 40 2a03:d000:5000::/41 maxlen: 41 2a03:d000:5080::/41 maxlen: 41 2a03:d000:5100::/40 maxlen: 40 2a03:d000:5100::/41 maxlen: 41 2a03:d000:5180::/41 maxlen: 41 2a03:d000:5200::/41 maxlen: 41 2a03:d000:5270::/44 maxlen: 44 2a03:d000:5280::/41 maxlen: 41 2a03:d000:52f0::/44 maxlen: 44 2a03:d000:5301::/48 maxlen: 48 2a03:d000:5302::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:57:b5:2f:45:d2:65:14:bd:a7:01:16:b7:f5:86:42:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Nov 6 05:48:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fac30c17617aa53676a15022ae53f1eeca8f4da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:c9:10:6d:6a:b5:b3:be:b2:77:8a:14:33: 0b:5c:7b:f5:a9:58:4e:e9:75:b6:c0:4d:30:ce:61: f7:27:7f:fa:32:a3:bc:b1:c2:d0:e6:06:6c:18:6c: 63:56:7d:76:36:75:e2:aa:06:d2:16:bb:d4:9e:2d: 3d:11:c5:d7:b6:a1:38:f0:0f:81:7a:8b:22:ce:93: e9:6c:6b:2d:29:cd:48:d6:f1:db:b3:1d:55:27:0e: 3b:49:f6:b2:f3:54:9d:ea:25:db:2d:79:5f:14:7c: 3d:99:e7:f4:dd:da:2a:ca:19:49:5f:b6:64:92:3f: a2:0b:d3:4e:4a:0c:96:ec:4b:aa:b9:fc:76:ca:2d: 8c:d1:5e:5b:12:a1:16:3a:07:95:ec:80:03:1f:e3: f8:02:4a:f9:07:31:fb:cc:c6:0c:a8:bf:68:f9:9b: 8f:53:01:76:3a:69:93:e4:c6:81:72:c4:f3:ec:78: 3c:a8:1b:da:21:c0:2c:53:31:a7:87:46:60:8d:04: eb:5a:31:16:5e:8e:1e:b7:d5:5f:4a:25:cf:cf:45: a6:5c:d3:ef:72:67:a5:ad:0c:20:ed:d0:d4:a2:16: 37:1c:55:73:58:80:f6:b8:b4:12:a3:10:e7:6e:d4: c4:fe:05:22:80:08:88:3a:20:28:c2:6f:f4:72:e6: 2f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C3:0C:17:61:7A:A5:36:76:A1:50:22:AE:53:F1:EE:CA:8F:4D:A1 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/1-sMMF2F6pTZ2oVAirlPx7sqPTaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.173.96.0/23 31.173.99.0-31.173.103.255 31.173.120.0/21 37.29.44.0/22 46.229.132.0/22 78.25.88.0/22 80.253.8.0/23 83.149.32.0/21 83.169.216.0/24 85.26.192.0/22 128.204.68.0/23 178.176.104.0-178.176.113.255 178.178.88.0/21 178.178.229.0-178.178.230.255 IPv6: 2a03:d000:5000::-2a03:d000:52ff:ffff:ffff:ffff:ffff:ffff 2a03:d000:5301::-2a03:d000:5302:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 16:0f:15:2c:7e:0d:23:2d:71:c0:d8:c4:39:6a:16:d9:a5:d7: dd:95:55:c1:3c:b1:8e:29:4f:18:57:e2:40:6b:d7:2c:90:c3: 90:66:8f:0c:93:bf:65:4f:d5:1e:3e:e6:d2:01:f6:9c:52:ff: e3:19:2f:1a:06:df:05:4f:5e:75:c8:c1:35:c3:13:bc:60:ff: a4:22:f3:e3:55:b7:02:04:57:1d:45:a9:cb:fa:34:58:b6:d8: b2:e8:60:b1:80:c5:d7:6f:bb:80:f8:f4:9e:57:72:7f:67:3c: 48:86:51:42:6a:82:37:1c:91:5e:e0:fc:6b:97:ee:25:83:d3: 13:78:51:24:83:a6:80:d4:47:a7:59:3b:a3:97:eb:5a:e2:4f: 8b:a9:33:32:3b:5f:9a:99:8e:66:c9:c5:0b:bf:78:3b:ba:d7: 4c:20:e5:57:3f:9d:a3:2e:a7:d9:da:a7:69:d3:cf:8c:6a:b0: f4:b0:3e:46:4b:b9:85:ea:18:0f:12:71:e9:c8:6a:6c:a9:3b: f7:ae:80:f3:86:07:31:79:dd:7b:87:09:06:2a:c5:b9:3e:8e: 72:2e:f7:e1:cf:0f:d8:84:53:78:15:31:d0:45:d3:e9:94:9e: 4e:ea:80:2d:7b:11:ac:28:2c:48:35:70:a4:2c:32:4e:a5:b2: ee:24:b5:d1 -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgISAZpXtS9F0mUUvacBFrf1hkIRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjUxMTA2MDU0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWMzMGMxNzYxN2FhNTM2NzZhMTUwMjJhZTUzZjFlZWNhOGY0ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKfJEG1qtbO+sneKFDMLXHv1qVhO 6XW2wE0wzmH3J3/6MqO8scLQ5gZsGGxjVn12NnXiqgbSFrvUni09EcXXtqE48A+B eosizpPpbGstKc1I1vHbsx1VJw47Sfay81Sd6iXbLXlfFHw9mef03doqyhlJX7Zk kj+iC9NOSgyW7Euqufx2yi2M0V5bEqEWOgeV7IADH+P4Akr5BzH7zMYMqL9o+ZuP UwF2OmmT5MaBcsTz7Hg8qBvaIcAsUzGnh0ZgjQTrWjEWXo4et9VfSiXPz0WmXNPv cmelrQwg7dDUohY3HFVzWID2uLQSoxDnbtTE/gUigAiIOiAowm/0cuYv1QIDAQAB o4ICoTCCAp0wHQYDVR0OBBYEFPrDDBdheqU2dqFQIq5T8e7Kj02hMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvMS1zTU1GMkY2cFRaMm9WQWlybFB4N3NxUFRhRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzcvOWNmZjdjLWYwNWEtNGUwMi1iZWE3LTg5ZTU2YzgwZDFk MC8xL2t0ZkNvUWN0YzFCNjJfWlFmZWFLcXNBWGhjQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBtQYIKwYBBQUHAQcBAf8EgaUwgaIwcgQCAAEwbAMEAR+t YDAMAwQAH61jAwQDH61gAwQDH614AwQCJR0sAwQCLuWEAwQCThlYAwQBUP0IAwQD U5UgAwQAU6nYAwQCVRrAAwQBgMxEMAwDBAOysGgDBAGysHADBAOyslgwDAMEALKy 5QMEALKy5jAsBAIAAjAmMBADBgQqA9AAUAMGACoD0ABSMBIDBwAqA9AAUwEDBwAq A9AAUwIwDQYJKoZIhvcNAQELBQADggEBABYPFSx+DSMtccDYxDlqFtml192VVcE8 sY4pTxhX4kBr1yyQw5BmjwyTv2VP1R4+5tIB9pxS/+MZLxoG3wVPXnXIwTXDE7xg /6Qi8+NVtwIEVx1Fqcv6NFi22LLoYLGAxddvu4D49J5Xcn9nPEiGUUJqgjcckV7g /GuX7iWD0xN4USSDpoDUR6dZO6OX61riT4upMzI7X5qZjmbJxQu/eDu610wg5Vc/ naMup9nap2nTz4xqsPSwPkZLuYXqGA8ScenIamypO/eugPOGBzF53XuHCQYqxbk+ jnIu9+HPD9iEU3gVMdBF0+mUnk7qgC17EawoLEg1cKQsMk6lsu4ktdE= -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:02 2025 by rpki-client