This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/T9R72edvy1b4bR86MCMZkMB1kbA.roa File: T9R72edvy1b4bR86MCMZkMB1kbA.roa (raw, json) Hash identifier: 00F/9J6JFJf7Y2QryCeap2NumSeGIJgrnJ44y9zetCw= Subject key identifier: 4F:D4:7B:D9:E7:6F:CB:56:F8:6D:1F:3A:30:23:19:90:C0:75:91:B0 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019A7D073CD775B51F320B5D9EB7FE735207 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/T9R72edvy1b4bR86MCMZkMB1kbA.roa Signing time: Thu 13 Nov 2025 11:43:37 +0000 ROA not before: Thu 13 Nov 2025 11:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9123 IP address blocks: 31.130.134.0/24 maxlen: 24 31.130.135.0/24 maxlen: 24 31.130.144.0/21 maxlen: 24 31.130.152.0/22 maxlen: 24 77.233.220.0/22 maxlen: 24 81.17.154.0/24 maxlen: 24 94.141.162.0/24 maxlen: 24 185.185.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:07:3c:d7:75:b5:1f:32:0b:5d:9e:b7:fe:73:52:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Nov 13 11:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4fd47bd9e76fcb56f86d1f3a30231990c07591b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4c:c6:09:6f:34:83:17:d2:1b:bf:0f:15:53: ec:64:3c:79:ac:eb:5f:14:66:d4:3f:b3:d4:0d:d3: 0e:00:9d:cc:65:0a:20:5b:5b:17:89:7f:30:f0:b5: 57:7a:3c:b0:53:a4:2c:d8:5a:ff:f3:df:f6:eb:e3: 31:18:2a:4c:62:8e:68:84:0a:b0:22:19:81:2c:3d: b8:1f:37:6c:ed:6d:25:1f:10:4f:d7:1b:f1:79:61: 97:f8:18:33:cb:57:eb:4e:a7:a3:8f:42:cb:aa:e4: 4c:ba:f8:db:e0:dd:4f:0d:bc:dd:c5:31:d7:a8:c0: 60:7e:61:dd:3d:47:64:4c:22:ef:55:fd:5f:51:a2: d3:1e:39:91:26:3a:a4:af:e8:c8:5f:9f:42:d8:15: 35:97:67:65:8b:8b:86:b8:27:59:e3:05:fe:da:19: 55:f6:87:30:b7:9c:74:69:77:bb:92:52:70:f0:f4: ce:8c:7b:e3:86:e4:fd:d8:0c:75:85:af:35:45:10: 2c:d6:6c:e4:5c:25:c4:be:c6:ff:3e:bd:df:d6:10: 08:f2:49:b8:e8:6e:e3:d4:eb:dd:83:89:c2:7d:4a: 84:2b:33:bc:42:65:e5:56:33:87:93:f4:50:a3:0a: 0b:56:cb:1e:bb:72:f3:eb:ff:a5:76:c3:16:8c:e9: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D4:7B:D9:E7:6F:CB:56:F8:6D:1F:3A:30:23:19:90:C0:75:91:B0 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/T9R72edvy1b4bR86MCMZkMB1kbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.134.0/23 31.130.144.0-31.130.155.255 77.233.220.0/22 81.17.154.0/24 94.141.162.0/24 185.185.142.0/23 Signature Algorithm: sha256WithRSAEncryption bb:20:8e:d1:79:41:23:96:7a:d0:3d:ee:2c:2d:4d:92:78:ea: ef:51:74:0d:2f:75:53:44:60:1b:6a:bd:0d:d5:83:ce:42:ad: cd:00:56:22:40:7b:2a:2f:51:36:71:66:34:b8:c8:c9:b6:34: f9:93:6c:77:75:43:9c:7c:59:2e:d3:ce:51:12:d3:67:7c:b4: 58:65:86:63:42:fc:e4:a4:ff:9a:41:d3:a8:bf:47:a5:bf:8b: 79:5a:5e:50:dd:cd:47:4c:3c:6d:26:6f:f6:b8:37:7b:bd:3b: 03:41:b1:48:a2:f4:fd:42:1a:bd:16:09:ec:91:e9:1f:77:8e: 33:3b:52:24:a1:f9:69:24:0f:f6:2e:b2:70:62:80:70:89:fe: 99:f9:d4:f8:b7:69:4b:79:eb:b7:3a:52:f9:2f:f3:fa:67:71: a7:bc:0f:52:29:f8:5f:4b:c9:52:bb:63:83:be:4f:55:e2:2f: 32:aa:b1:13:f6:3e:a7:7d:ee:23:93:91:39:c0:cb:a6:51:0b: db:52:9f:4a:79:61:91:58:92:b4:bf:80:26:ed:d0:16:82:66: 6f:79:1d:3b:4d:39:40:a8:42:36:08:8d:d4:83:7b:98:cf:48: af:71:d8:39:21:43:23:cf:5a:47:f6:37:ae:d0:40:c8:de:9c: f9:3b:a6:a0 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZp9BzzXdbUfMgtdnrf+c1IHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUxMTEzMTE0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmQ0N2JkOWU3NmZjYjU2Zjg2ZDFmM2EzMDIzMTk5MGMwNzU5MWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0zGCW80gxfSG78PFVPsZDx5rOtf FGbUP7PUDdMOAJ3MZQogW1sXiX8w8LVXejywU6Qs2Fr/89/26+MxGCpMYo5ohAqw IhmBLD24Hzds7W0lHxBP1xvxeWGX+Bgzy1frTqejj0LLquRMuvjb4N1PDbzdxTHX qMBgfmHdPUdkTCLvVf1fUaLTHjmRJjqkr+jIX59C2BU1l2dli4uGuCdZ4wX+2hlV 9ocwt5x0aXe7klJw8PTOjHvjhuT92Ax1ha81RRAs1mzkXCXEvsb/Pr3f1hAI8km4 6G7j1Ovdg4nCfUqEKzO8QmXlVjOHk/RQowoLVsseu3Lz6/+ldsMWjOml6QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFE/Ue9nnb8tW+G0fOjAjGZDAdZGwMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvVDlSNzJlZHZ5MWI0YlI4Nk1DTVprTUIxa2JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBH4KGMAwD BAQfgpADBAIfgpgDBAJN6dwDBABREZoDBABejaIDBAG5uY4wDQYJKoZIhvcNAQEL BQADggEBALsgjtF5QSOWetA97iwtTZJ46u9RdA0vdVNEYBtqvQ3Vg85Crc0AViJA eyovUTZxZjS4yMm2NPmTbHd1Q5x8WS7TzlES02d8tFhlhmNC/OSk/5pB06i/R6W/ i3laXlDdzUdMPG0mb/a4N3u9OwNBsUii9P1CGr0WCeyR6R93jjM7UiSh+WkkD/Yu snBigHCJ/pn51Pi3aUt567c6Uvkv8/pncae8D1Ip+F9LyVK7Y4O+T1XiLzKqsRP2 Pqd97iOTkTnAy6ZRC9tSn0p5YZFYkrS/gCbt0BaCZm95HTtNOUCoQjYIjdSDe5jP SK9x2DkhQyPPWkf2N67QQMjenPk7pqA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:18:35 2025 by rpki-client