This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/fBGiYdPEJOuwr9ZdHcwan8N33nE.roa File: fBGiYdPEJOuwr9ZdHcwan8N33nE.roa (raw, json) Hash identifier: kj/eTeZdS5uuZXiqBXZbFGO6B13ngEMgRHZO+Ooss2Q= Subject key identifier: 7C:11:A2:61:D3:C4:24:EB:B0:AF:D6:5D:1D:CC:1A:9F:C3:77:DE:71 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019A7D073D1DDBCD9305C2B7B39A2ABDCB62 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/fBGiYdPEJOuwr9ZdHcwan8N33nE.roa Signing time: Thu 13 Nov 2025 11:43:37 +0000 ROA not before: Thu 13 Nov 2025 11:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57494 IP address blocks: 31.130.132.0/24 maxlen: 24 31.130.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:07:3d:1d:db:cd:93:05:c2:b7:b3:9a:2a:bd:cb:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Nov 13 11:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c11a261d3c424ebb0afd65d1dcc1a9fc377de71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c3:90:d8:6e:c5:2d:7a:13:e0:b6:bc:c1:c9: 31:a0:d4:b6:20:83:fd:1b:3e:e2:42:b8:9d:07:15: 09:6b:85:4f:c8:43:a2:74:dc:65:79:e3:78:e9:99: 07:b5:1c:f6:39:af:6c:b1:f7:33:9f:ca:da:13:ad: e2:b8:c6:6d:43:75:5a:ed:02:1b:25:bf:02:8f:9d: f2:f6:a5:e4:46:83:ce:06:fb:94:06:d0:46:67:ca: d8:e6:6c:99:b7:3c:fd:bd:e7:30:8d:a2:b2:8a:06: ce:79:46:15:08:32:9a:d3:21:c1:47:cd:0e:3d:9c: 20:58:fb:7a:e2:06:9f:a5:b0:4a:97:7a:04:d9:c1: 83:5b:b1:ba:8f:29:b4:d9:c3:94:ea:d8:92:48:cb: 45:c1:85:e9:54:b6:b6:ee:79:54:f7:66:89:8a:53: ff:a4:cc:ed:0e:c1:65:f6:b8:ca:ac:a4:96:c7:2d: b8:1e:96:70:c2:16:72:26:ee:45:39:d8:0c:f0:6c: 64:00:4b:2f:9a:37:16:ae:71:bc:2f:65:79:15:b1: 34:18:84:d8:eb:6f:a3:b1:93:06:01:2b:49:29:4b: 7e:1b:61:73:9e:f1:72:9e:dc:98:92:e5:7a:35:29: 73:48:6d:ca:a8:5b:37:d2:35:8f:cb:7a:45:d8:c2: 9c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:11:A2:61:D3:C4:24:EB:B0:AF:D6:5D:1D:CC:1A:9F:C3:77:DE:71 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/fBGiYdPEJOuwr9ZdHcwan8N33nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.130.132.0/23 Signature Algorithm: sha256WithRSAEncryption 55:6f:6b:a7:ba:5c:f5:f1:90:2b:9f:70:78:d1:3b:f7:5a:2d: 4f:c2:6c:b7:0d:07:a6:8d:6b:d5:55:4c:16:02:8f:38:ce:22: 64:f6:f9:ef:63:5c:2b:8c:7e:20:a0:dd:5b:77:2f:a0:0f:26: f3:f3:58:b6:d4:2c:ff:b8:f4:8b:4a:d6:f2:6b:9e:8e:92:eb: 1c:d5:ac:a7:2e:cc:b4:99:48:e7:91:bb:e1:ec:66:74:24:73: 67:49:3e:6f:9e:09:1f:7a:22:ec:b6:bd:10:7b:56:a6:da:90: 84:a4:af:b5:dc:c6:d4:2b:57:d1:d2:ab:d0:1a:dc:be:08:0b: 63:f8:9a:d0:23:e0:9b:15:f9:44:bd:8d:f0:aa:d8:32:17:d8: f0:9a:cf:d7:d0:25:ad:a6:53:81:2f:06:aa:77:93:26:23:24: a1:02:69:99:eb:47:82:4f:bc:99:a1:9a:4c:d6:51:66:01:33: 7f:a3:66:ba:33:bc:88:ba:2b:63:47:29:45:e5:75:9b:a2:40: c3:fd:ed:5c:3e:4a:07:70:af:ba:b7:8d:89:3f:c2:1a:c1:a7: 04:db:ac:34:fb:88:4a:06:17:f4:04:d2:e7:dc:0a:c9:50:3f: ca:59:72:94:19:a2:fe:41:29:a9:af:10:c4:5b:a1:61:91:ae: b2:73:4f:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp9Bz0d282TBcK3s5oqvctiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUxMTEzMTE0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzExYTI2MWQzYzQyNGViYjBhZmQ2NWQxZGNjMWE5ZmMzNzdkZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cOQ2G7FLXoT4La8wckxoNS2IIP9 Gz7iQridBxUJa4VPyEOidNxleeN46ZkHtRz2Oa9ssfczn8raE63iuMZtQ3Va7QIb Jb8Cj53y9qXkRoPOBvuUBtBGZ8rY5myZtzz9vecwjaKyigbOeUYVCDKa0yHBR80O PZwgWPt64gafpbBKl3oE2cGDW7G6jym02cOU6tiSSMtFwYXpVLa27nlU92aJilP/ pMztDsFl9rjKrKSWxy24HpZwwhZyJu5FOdgM8GxkAEsvmjcWrnG8L2V5FbE0GITY 62+jsZMGAStJKUt+G2FznvFyntyYkuV6NSlzSG3KqFs30jWPy3pF2MKcEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwRomHTxCTrsK/WXR3MGp/Dd95xMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvZkJHaVlkUEVKT3V3cjlaZEhjd2FuOE4zM25FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH4KEMA0G CSqGSIb3DQEBCwUAA4IBAQBVb2unulz18ZArn3B40Tv3Wi1Pwmy3DQemjWvVVUwW Ao84ziJk9vnvY1wrjH4goN1bdy+gDybz81i21Cz/uPSLStbya56Okusc1aynLsy0 mUjnkbvh7GZ0JHNnST5vngkfeiLstr0Qe1am2pCEpK+13MbUK1fR0qvQGty+CAtj +JrQI+CbFflEvY3wqtgyF9jwms/X0CWtplOBLwaqd5MmIyShAmmZ60eCT7yZoZpM 1lFmATN/o2a6M7yIuitjRylF5XWbokDD/e1cPkoHcK+6t42JP8IawacE26w0+4hK Bhf0BNLn3ArJUD/KWXKUGaL+QSmprxDEW6Fhka6yc0/y -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:14 2025 by rpki-client