This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_e2YDlluO4ii6abU70i7zZECU8k.roa File: _e2YDlluO4ii6abU70i7zZECU8k.roa (raw, json) Hash identifier: 6oy05tlA8tClzLGbOUWPjvHzeRzF67vUfYvBUhmRD90= Subject key identifier: FD:ED:98:0E:59:6E:3B:88:A2:E9:A6:D4:EF:48:BB:CD:91:02:53:C9 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 019B1924A22FD7BF7919E651824DC5D8AB77 Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_e2YDlluO4ii6abU70i7zZECU8k.roa Signing time: Sat 13 Dec 2025 19:16:29 +0000 ROA not before: Sat 13 Dec 2025 19:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211439 IP address blocks: 31.43.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:24:a2:2f:d7:bf:79:19:e6:51:82:4d:c5:d8:ab:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: Dec 13 19:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fded980e596e3b88a2e9a6d4ef48bbcd910253c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9a:0f:59:5e:60:94:74:8b:3a:b1:0f:bb:42: 30:bf:15:0f:10:23:ab:a2:50:16:e5:ab:09:8d:ec: 25:1f:38:19:f8:ce:9e:7e:66:a9:15:7e:bb:6e:8d: 24:f4:1b:9d:96:71:83:82:b7:31:35:4c:e6:f8:f9: b1:74:92:8c:c3:79:6b:e1:2b:7d:78:40:d1:ad:7c: 65:c3:1e:6a:dd:ee:7b:ba:5e:ff:2b:df:58:94:9f: 30:e7:fe:1a:1e:40:d2:bf:e5:76:9f:be:33:32:cf: 12:87:30:f8:6b:fd:6c:f5:fd:82:5a:38:bb:c7:e9: b9:9b:29:d0:80:0d:34:59:42:4d:ba:f3:cd:32:d4: e1:64:88:48:d8:94:4f:02:42:0a:86:cf:05:7f:e3: 5c:0f:f8:e5:2d:4d:23:57:62:d9:a8:d3:27:74:f2: 31:c5:5c:e3:e5:14:15:4b:c8:78:b1:44:e8:0e:fd: 51:1e:36:0e:b1:0b:b9:82:18:33:72:1d:f2:81:47: 3a:e3:1d:c5:77:b9:8f:aa:68:96:e2:6d:d1:b3:76: d9:5e:5c:e4:b2:20:ef:c6:3e:07:9b:4e:93:9c:45: 79:33:74:00:fc:7c:d8:33:0d:ed:c3:ed:a4:c3:32: ce:be:3a:df:79:1f:8c:50:08:26:91:da:cb:f6:c4: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:ED:98:0E:59:6E:3B:88:A2:E9:A6:D4:EF:48:BB:CD:91:02:53:C9 X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/_e2YDlluO4ii6abU70i7zZECU8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.43.165.0/24 Signature Algorithm: sha256WithRSAEncryption 10:da:91:4d:9f:79:6e:7a:af:d6:f4:99:87:80:6b:6f:13:b2: f1:63:d3:26:bc:a4:94:7b:26:c0:35:e4:30:7d:3b:57:ae:86: b9:b8:18:1e:fe:c2:24:41:5f:34:69:ce:84:a4:3c:f9:d5:e9: 2e:e2:96:8c:60:a6:79:2b:11:6f:ea:9e:26:a6:bb:1a:31:0b: 5a:2f:e6:55:14:e6:50:cd:a6:59:cf:2c:c0:36:8b:5b:fd:5d: 8e:ed:17:43:42:ea:a8:10:d8:c8:b9:9d:33:86:f3:35:00:d1: 81:2c:9a:3b:6c:60:15:c4:5c:5f:e8:09:d5:ce:53:d8:b9:12: af:e2:3c:ff:9b:15:4c:09:42:df:dd:a6:5f:06:85:ec:61:2c: 21:20:00:ae:e7:69:30:9f:fc:51:76:36:ae:9e:b1:e7:8f:5b: c2:1e:67:fb:d7:1a:54:04:15:fc:f8:63:42:f1:7e:f2:fc:75: 06:90:9e:62:f6:19:ab:8a:5f:f7:89:9e:b4:d2:e4:53:e5:6c: 7f:6d:f4:b7:29:36:8e:ca:37:8a:41:8e:81:3a:e5:74:28:95: a1:17:6c:e6:9b:00:eb:e3:34:cf:75:74:dd:6d:6a:be:99:c7: ce:b5:7e:0b:b8:7b:29:71:ca:8a:ed:a3:79:e8:d2:cc:36:ac: f4:47:f2:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsZJKIv1795GeZRgk3F2Kt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjUxMjEzMTkxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGVkOTgwZTU5NmUzYjg4YTJlOWE2ZDRlZjQ4YmJjZDkxMDI1M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpoPWV5glHSLOrEPu0IwvxUPECOr olAW5asJjewlHzgZ+M6efmapFX67bo0k9BudlnGDgrcxNUzm+PmxdJKMw3lr4St9 eEDRrXxlwx5q3e57ul7/K99YlJ8w5/4aHkDSv+V2n74zMs8ShzD4a/1s9f2CWji7 x+m5mynQgA00WUJNuvPNMtThZIhI2JRPAkIKhs8Ff+NcD/jlLU0jV2LZqNMndPIx xVzj5RQVS8h4sUToDv1RHjYOsQu5ghgzch3ygUc64x3Fd7mPqmiW4m3Rs3bZXlzk siDvxj4Hm06TnEV5M3QA/HzYMw3tw+2kwzLOvjrfeR+MUAgmkdrL9sQP4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3tmA5ZbjuIoumm1O9Iu82RAlPJMB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvX2UyWURsbHVPNGlpNmFiVTcwaTd6WkVDVThrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyulMA0G CSqGSIb3DQEBCwUAA4IBAQAQ2pFNn3lueq/W9JmHgGtvE7LxY9MmvKSUeybANeQw fTtXroa5uBge/sIkQV80ac6EpDz51eku4paMYKZ5KxFv6p4mprsaMQtaL+ZVFOZQ zaZZzyzANotb/V2O7RdDQuqoENjIuZ0zhvM1ANGBLJo7bGAVxFxf6AnVzlPYuRKv 4jz/mxVMCULf3aZfBoXsYSwhIACu52kwn/xRdjaunrHnj1vCHmf71xpUBBX8+GNC 8X7y/HUGkJ5i9hmril/3iZ600uRT5Wx/bfS3KTaOyjeKQY6BOuV0KJWhF2zmmwDr 4zTPdXTdbWq+mcfOtX4LuHspccqK7aN56NLMNqz0R/L8 -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:53 2025 by rpki-client