This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa File: 1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa (raw, json) Hash identifier: a3MzODKGqIz16CZMFFSjRzhUI5B7HYxJad8zpdAQZ4o= Subject key identifier: F8:5B:BC:B5:09:66:78:94:E7:00:FB:3F:92:53:7A:93:4B:15:B5:AB Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019AD8FE2F42A0CEE4EBE6946991F5C01DC0 Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa Signing time: Mon 01 Dec 2025 08:18:48 +0000 ROA not before: Mon 01 Dec 2025 08:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48018 IP address blocks: 31.172.64.0/24 maxlen: 24 31.172.66.0/24 maxlen: 24 31.172.67.0/24 maxlen: 24 31.172.76.0/24 maxlen: 24 81.85.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:fe:2f:42:a0:ce:e4:eb:e6:94:69:91:f5:c0:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Dec 1 08:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f85bbcb509667894e700fb3f92537a934b15b5ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8b:1d:14:27:85:bb:d2:59:61:72:d0:6e:36: c2:20:b7:8f:63:a6:31:b2:37:40:de:25:d0:30:53: bf:2a:ba:30:5f:e5:42:fd:73:5d:0d:4e:da:e6:8e: 5a:35:bd:9d:b8:6c:94:2d:95:ec:60:cb:80:19:80: ad:8e:cf:0e:ad:13:73:57:3c:bb:b9:57:fe:74:b0: 12:70:1b:05:3c:0f:ff:72:53:9b:4c:1f:82:43:3d: 4b:47:f6:b1:45:aa:57:bf:86:4f:59:d7:d2:22:3f: 1a:c0:76:34:39:bc:35:f8:f4:6b:4a:af:bc:df:5e: ca:16:fc:3b:a8:7b:bb:bb:7d:91:cc:1a:0c:ed:3a: 57:97:fd:c5:9f:cf:58:02:9d:d5:5f:02:b7:d3:08: cd:c7:4d:3f:6f:3f:5e:64:5a:fe:0c:0e:24:78:2a: f0:db:45:5f:44:94:32:9d:16:72:7b:0a:e0:d1:76: b4:c9:5b:04:13:f0:73:75:89:15:34:bd:ec:6b:78: 72:15:ed:9c:e7:70:92:0c:db:94:b6:00:de:68:88: 8b:67:2d:40:4f:67:3e:64:33:c7:2a:07:87:20:6f: be:ac:8f:8c:9a:70:cb:3e:d4:bf:da:ff:71:c7:86: 82:42:08:c6:e0:2d:4c:ea:97:a2:3f:90:53:60:68: bb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5B:BC:B5:09:66:78:94:E7:00:FB:3F:92:53:7A:93:4B:15:B5:AB X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/1-Fu8tQlmeJTnAPs_klN6k0sVtas.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.64.0/24 31.172.66.0/23 31.172.76.0/24 81.85.78.0/24 Signature Algorithm: sha256WithRSAEncryption 27:ae:9e:c3:8e:e6:28:27:74:3c:40:88:50:93:5a:3a:bd:86: 45:d4:3b:9b:25:d9:01:65:8d:76:53:69:85:c5:b0:73:39:ff: 07:3a:28:b6:61:92:c5:ca:e5:54:a0:55:f1:12:00:d7:d3:48: 83:b6:e5:5c:70:f8:54:0e:b4:ca:98:0c:87:a0:e3:4c:d1:f5: 0b:23:96:04:50:a7:06:4d:36:aa:fc:ec:ce:b8:8e:b0:be:e3: c1:e9:14:a0:a7:88:ba:50:85:54:0c:5f:ed:3f:18:24:fa:56: db:4c:91:b5:32:a1:f9:df:c5:54:1b:c4:44:5f:8b:95:c2:c0: 27:4f:21:1e:50:7b:26:0e:d3:2f:99:82:b9:fa:30:26:0d:49: 80:7b:73:de:5d:fd:df:1d:dc:f9:36:67:a7:cb:16:9c:a8:0d: e1:0f:e8:4d:9e:d4:0d:95:8c:fb:e2:a8:b3:23:03:02:0d:2f: b0:78:76:b8:38:62:53:f3:c7:8e:59:d3:ae:46:d1:57:a6:e6: 26:29:09:20:aa:aa:cf:a1:a3:34:82:e0:83:a3:fb:fc:7c:b4: 0b:0e:57:c5:d4:a2:c4:35:c5:5a:4e:7b:42:35:bb:95:be:12: b6:96:aa:71:81:24:0f:98:ad:3e:3c:a3:2b:2e:79:19:91:a2: 4a:54:24:90 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZrY/i9CoM7k6+aUaZH1wB3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjUxMjAxMDgxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODViYmNiNTA5NjY3ODk0ZTcwMGZiM2Y5MjUzN2E5MzRiMTViNWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIsdFCeFu9JZYXLQbjbCILePY6Yx sjdA3iXQMFO/KrowX+VC/XNdDU7a5o5aNb2duGyULZXsYMuAGYCtjs8OrRNzVzy7 uVf+dLAScBsFPA//clObTB+CQz1LR/axRapXv4ZPWdfSIj8awHY0Obw1+PRrSq+8 317KFvw7qHu7u32RzBoM7TpXl/3Fn89YAp3VXwK30wjNx00/bz9eZFr+DA4keCrw 20VfRJQynRZyewrg0Xa0yVsEE/BzdYkVNL3sa3hyFe2c53CSDNuUtgDeaIiLZy1A T2c+ZDPHKgeHIG++rI+MmnDLPtS/2v9xx4aCQgjG4C1M6peiP5BTYGi7+wIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPhbvLUJZniU5wD7P5JTepNLFbWrMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvMS1GdTh0UWxtZUpUbkFQc19rbE42azBzVnRhcy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjEvMjJmMWQ1LWYyNjktNGY0Zi1iZjhhLTFmYmM2NDFiNTBi MS8xL2NPV3pBbkxrTUZNZ2lYamI1RXYtNFFwZEFINC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAB+sQAME AR+sQgMEAB+sTAMEAFFVTjANBgkqhkiG9w0BAQsFAAOCAQEAJ66ew47mKCd0PECI UJNaOr2GRdQ7myXZAWWNdlNphcWwczn/BzootmGSxcrlVKBV8RIA19NIg7blXHD4 VA60ypgMh6DjTNH1CyOWBFCnBk02qvzszriOsL7jwekUoKeIulCFVAxf7T8YJPpW 20yRtTKh+d/FVBvERF+LlcLAJ08hHlB7Jg7TL5mCufowJg1JgHtz3l393x3c+TZn p8sWnKgN4Q/oTZ7UDZWM++KosyMDAg0vsHh2uDhiU/PHjlnTrkbRV6bmJikJIKqq z6GjNILgg6P7/Hy0Cw5XxdSixDXFWk57QjW7lb4StpaqcYEkD5itPjyjKy55GZGi SlQkkA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:29:02 2025 by rpki-client