This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/8lbXgpG9f5Z_Hvq4s1hYkuX3AVI.roa File: 8lbXgpG9f5Z_Hvq4s1hYkuX3AVI.roa (raw, json) Hash identifier: bPhNihBfa09eCO+dgLREm/kYsuM471Qzs/mEmVKGQwc= Subject key identifier: F2:56:D7:82:91:BD:7F:96:7F:1E:FA:B8:B3:58:58:92:E5:F7:01:52 Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Certificate serial: 019ADA68BC0F20BF15DC3C2802878D6D0398 Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/8lbXgpG9f5Z_Hvq4s1hYkuX3AVI.roa Signing time: Mon 01 Dec 2025 14:54:48 +0000 ROA not before: Mon 01 Dec 2025 14:54:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43489 IP address blocks: 31.177.70.0/24 maxlen: 24 89.104.72.0/24 maxlen: 24 89.104.73.0/24 maxlen: 24 89.104.75.0/24 maxlen: 24 89.104.93.0/24 maxlen: 24 89.104.95.0/24 maxlen: 24 89.111.135.0/24 maxlen: 24 2a01:d8:8::/48 maxlen: 48 2a02:2090:6800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:68:bc:0f:20:bf:15:dc:3c:28:02:87:8d:6d:03:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff Validity Not Before: Dec 1 14:54:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f256d78291bd7f967f1efab8b3585892e5f70152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a3:88:2d:e9:d2:63:fd:38:68:07:f2:4e:80: fc:7b:d1:7b:d5:3a:88:e2:4b:94:b5:3c:19:22:91: 13:ef:bc:4e:04:3a:c4:8e:c5:55:22:a1:a2:ae:ae: 52:37:34:71:0e:d8:5d:c4:d8:da:33:18:9b:8b:83: 82:8b:96:1f:55:55:fb:52:88:b5:03:bd:65:e7:21: 61:a0:1b:52:ee:35:7e:bd:2d:01:07:37:7f:e7:b0: e1:86:6a:34:9b:e6:73:e8:c1:d1:d9:bd:ea:49:d3: ae:7e:31:c1:2f:f7:2b:bc:cf:90:80:c0:46:ae:63: 10:e4:61:72:cd:2c:fb:04:f7:bb:fd:75:32:38:1d: 04:23:dc:46:6c:ba:96:5f:b0:27:04:8c:c3:cf:9a: da:4a:21:43:3e:33:a0:66:03:3e:6c:b4:17:a6:f8: 81:99:24:53:f1:47:92:3c:38:bf:e8:31:31:b6:30: f4:9f:cf:98:c4:eb:77:42:94:88:ba:db:2c:3e:3b: f2:8c:fb:cb:f6:e5:25:86:0f:fc:79:ef:be:9d:9b: d2:d5:d6:db:32:9c:4f:07:d5:1e:ee:07:b8:b9:d5: 2f:14:0a:ea:06:bd:9e:91:e8:15:77:79:39:db:df: 7f:12:ab:13:2e:b9:70:10:5f:1d:71:99:7a:a2:ae: ae:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:56:D7:82:91:BD:7F:96:7F:1E:FA:B8:B3:58:58:92:E5:F7:01:52 X509v3 Authority Key Identifier: keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/8lbXgpG9f5Z_Hvq4s1hYkuX3AVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.177.70.0/24 89.104.72.0/23 89.104.75.0/24 89.104.93.0/24 89.104.95.0/24 89.111.135.0/24 IPv6: 2a01:d8:8::/48 2a02:2090:6800::/48 Signature Algorithm: sha256WithRSAEncryption 23:e5:ee:b5:48:53:c4:e7:4a:11:0c:45:6f:1d:c7:d2:f5:00: e6:ad:51:d6:9c:cf:25:62:24:0e:67:76:d2:4c:10:1a:6c:c6: 1d:cd:55:a8:eb:0b:a5:6c:6e:bd:70:82:14:2d:cf:e4:c5:a2: 6a:c7:48:dd:13:c7:b5:87:c7:ab:e0:16:dd:6f:7d:a8:a5:d7: 7d:e6:9a:36:1f:37:0b:85:8c:29:a7:fd:68:6b:c2:90:93:c8: dc:90:a5:79:7e:e7:86:22:81:f4:fc:59:1e:01:49:60:75:15: 46:f4:c5:80:a4:ee:e8:43:af:e1:9a:87:58:63:c8:8f:28:1e: 35:9f:49:89:9a:92:4c:aa:f4:f2:c9:ef:3a:f7:75:a8:8a:64: 07:16:6d:19:c7:ba:4a:11:48:7a:98:59:25:16:77:e2:ab:a2: 57:f6:90:27:ef:88:9d:11:45:a9:6f:8c:c1:3c:9f:8a:dd:60: 2b:cb:1a:80:49:99:25:74:2b:70:a4:82:c7:f4:05:65:cc:7e: 4b:7f:8c:7f:9b:13:e8:5c:4a:a1:cd:82:07:76:03:5c:c7:51: d4:9f:36:96:7e:97:cb:e3:e1:0a:2a:07:c3:2b:18:27:4d:b3: d6:ad:92:d6:66:c2:d0:b0:13:b2:c9:3e:63:64:36:e6:f4:6d: 11:23:18:c2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZraaLwPIL8V3DwoAoeNbQOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2 ZjFmZmYwHhcNMjUxMjAxMTQ1NDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjU2ZDc4MjkxYmQ3Zjk2N2YxZWZhYjhiMzU4NTg5MmU1ZjcwMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6OILenSY/04aAfyToD8e9F71TqI 4kuUtTwZIpET77xOBDrEjsVVIqGirq5SNzRxDthdxNjaMxibi4OCi5YfVVX7Uoi1 A71l5yFhoBtS7jV+vS0BBzd/57Dhhmo0m+Zz6MHR2b3qSdOufjHBL/crvM+QgMBG rmMQ5GFyzSz7BPe7/XUyOB0EI9xGbLqWX7AnBIzDz5raSiFDPjOgZgM+bLQXpviB mSRT8UeSPDi/6DExtjD0n8+YxOt3QpSIutssPjvyjPvL9uUlhg/8ee++nZvS1dbb MpxPB9Ue7ge4udUvFArqBr2ekegVd3k5299/EqsTLrlwEF8dcZl6oq6ulQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFPJW14KRvX+Wfx76uLNYWJLl9wFSMB8GA1UdIwQY MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt NGY0ZTcxZTMyMDg0LzEvOGxiWGdwRzlmNVpfSHZxNHMxaFlrdVgzQVZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0 LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQAH7FGAwQB WWhIAwQAWWhLAwQAWWhdAwQAWWhfAwQAWW+HMBgEAgACMBIDBwAqAQDYAAgDBwAq AiCQaAAwDQYJKoZIhvcNAQELBQADggEBACPl7rVIU8TnShEMRW8dx9L1AOatUdac zyViJA5ndtJMEBpsxh3NVajrC6Vsbr1wghQtz+TFomrHSN0Tx7WHx6vgFt1vfail 133mmjYfNwuFjCmn/WhrwpCTyNyQpXl+54YigfT8WR4BSWB1FUb0xYCk7uhDr+Ga h1hjyI8oHjWfSYmakkyq9PLJ7zr3daiKZAcWbRnHukoRSHqYWSUWd+Krolf2kCfv iJ0RRalvjME8n4rdYCvLGoBJmSV0K3Ckgsf0BWXMfkt/jH+bE+hcSqHNggd2A1zH UdSfNpZ+l8vj4QoqB8MrGCdNs9atktZmwtCwE7LJPmNkNub0bREjGMI= -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:51 2025 by rpki-client