This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/L7838bUvDMxy7ZosaDwIaJHwqGU.roa File: L7838bUvDMxy7ZosaDwIaJHwqGU.roa (raw, json) Hash identifier: SA3K5mwsY8DcrrYYsuf8C827DdRGnbVyCTResbqWs+I= Subject key identifier: 2F:BF:37:F1:B5:2F:0C:CC:72:ED:9A:2C:68:3C:08:68:91:F0:A8:65 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B79EBB7BC59E88D3BCB9A144A8FCA5A91 Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/L7838bUvDMxy7ZosaDwIaJHwqGU.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35614 IP address blocks: 31.128.170.0/24 maxlen: 24 94.124.166.0/24 maxlen: 24 193.105.7.0/24 maxlen: 24 2a0c:29c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b7:bc:59:e8:8d:3b:cb:9a:14:4a:8f:ca:5a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fbf37f1b52f0ccc72ed9a2c683c086891f0a865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:50:48:fa:c2:53:d7:e6:94:5e:2d:38:25: aa:1c:08:3a:0d:43:03:04:27:8a:5b:bf:8e:8d:ad: 5d:c5:be:83:4c:c9:40:8c:80:00:8f:fb:33:e8:ca: 28:aa:16:3c:b9:e5:30:4e:a8:08:2c:5a:28:d3:b8: c0:6d:4f:b5:8f:16:61:16:13:78:14:7a:6a:1b:9f: e3:32:b6:d7:8e:a1:99:0b:79:4a:ad:98:2d:a1:a9: 9e:fe:a3:eb:ec:e1:b7:ec:0b:d8:00:2a:96:b2:06: 01:e2:0f:dc:a0:6a:fe:5e:d3:b1:ec:5c:5a:97:5a: f6:1c:3d:48:62:03:be:33:b9:7a:24:70:63:42:ca: a2:70:95:b6:91:ef:3d:64:e6:31:2a:c1:cf:1a:f3: d2:8a:da:15:8f:a0:fd:8d:08:30:72:71:fc:61:02: c9:53:65:ed:09:ee:22:1a:7f:83:ea:c2:67:c9:8a: dd:ae:14:d9:97:3d:c5:ae:3b:c1:cc:fc:fb:74:56: bd:1b:ff:ab:ec:7b:7e:ec:1b:1d:79:26:01:d7:5e: 61:e0:f6:b2:17:7c:85:6a:46:7f:00:7f:14:e1:3a: 34:a1:5b:f7:2d:91:fd:01:a7:b5:c4:c0:e6:03:3c: 91:fc:05:b0:ba:d1:67:14:31:e8:ac:bc:95:e3:bb: 11:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BF:37:F1:B5:2F:0C:CC:72:ED:9A:2C:68:3C:08:68:91:F0:A8:65 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/L7838bUvDMxy7ZosaDwIaJHwqGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.170.0/24 94.124.166.0/24 193.105.7.0/24 IPv6: 2a0c:29c0::/32 Signature Algorithm: sha256WithRSAEncryption cf:1f:38:dd:7d:89:14:34:d9:80:da:50:88:85:ee:75:7f:e2: d3:70:7f:34:79:f0:1b:9e:57:1c:60:c5:9d:e4:a0:58:f4:c1: b2:6f:f5:fd:6c:a5:f5:bc:9f:00:1e:be:56:75:30:f6:5f:84: ad:ce:02:91:b4:1b:98:82:4c:92:d1:e2:47:1e:7d:f8:76:17: 0c:d4:00:e8:b8:60:bb:15:12:7c:33:49:7c:2b:da:cb:b4:fe: 1b:69:5f:14:c5:ca:fe:67:79:63:bc:c4:2e:06:ce:61:59:10: d9:57:e5:9b:93:69:08:46:b6:9a:5b:72:55:75:b0:5f:84:ab: 75:dd:1f:ae:e3:e6:9c:7d:3c:9d:e2:9e:2f:76:e3:1e:1e:5d: 7e:81:0f:51:e0:16:30:01:56:7b:f9:30:35:16:f4:5b:2d:15: 9b:6c:bf:58:52:b0:29:fe:15:76:3e:64:dc:4f:cd:19:20:d8: d6:3a:c2:da:8a:5f:35:c5:90:9f:9d:93:c2:18:6b:47:d8:a5: ac:52:05:10:a1:ac:42:8d:1c:75:ee:fe:9d:14:a5:d2:cf:cc: fd:95:83:65:ea:0d:25:8c:f5:70:47:e4:cf:7e:ef:2e:52:27: f0:61:25:84:a5:5a:56:5c:9f:cd:95:43:f2:56:6c:b4:8f:7a: 81:b2:da:8e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt567e8WeiNO8uaFEqPylqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmJmMzdmMWI1MmYwY2NjNzJlZDlhMmM2ODNjMDg2ODkxZjBhODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6FQSPrCU9fmlF4tOCWqHAg6DUMD BCeKW7+Oja1dxb6DTMlAjIAAj/sz6MooqhY8ueUwTqgILFoo07jAbU+1jxZhFhN4 FHpqG5/jMrbXjqGZC3lKrZgtoame/qPr7OG37AvYACqWsgYB4g/coGr+XtOx7Fxa l1r2HD1IYgO+M7l6JHBjQsqicJW2ke89ZOYxKsHPGvPSitoVj6D9jQgwcnH8YQLJ U2XtCe4iGn+D6sJnyYrdrhTZlz3FrjvBzPz7dFa9G/+r7Ht+7BsdeSYB115h4Pay F3yFakZ/AH8U4To0oVv3LZH9Aae1xMDmAzyR/AWwutFnFDHorLyV47sR0QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFC+/N/G1LwzMcu2aLGg8CGiR8KhlMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvTDc4MzhiVXZETXh5N1pvc2FEd0lhSkh3cUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAH4CqAwQA XnymAwQAwWkHMA0EAgACMAcDBQAqDCnAMA0GCSqGSIb3DQEBCwUAA4IBAQDPHzjd fYkUNNmA2lCIhe51f+LTcH80efAbnlccYMWd5KBY9MGyb/X9bKX1vJ8AHr5WdTD2 X4StzgKRtBuYgkyS0eJHHn34dhcM1ADouGC7FRJ8M0l8K9rLtP4baV8Uxcr+Z3lj vMQuBs5hWRDZV+Wbk2kIRraaW3JVdbBfhKt13R+u4+acfTyd4p4vduMeHl1+gQ9R 4BYwAVZ7+TA1FvRbLRWbbL9YUrAp/hV2PmTcT80ZINjWOsLail81xZCfnZPCGGtH 2KWsUgUQoaxCjRx17v6dFKXSz8z9lYNl6g0ljPVwR+TPfu8uUifwYSWEpVpWXJ/N lUPyVmy0j3qBstqO -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:14 2026 by rpki-client