This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iQpRMRUxN_HyT-egtf3BPVid8Yk.roa File: iQpRMRUxN_HyT-egtf3BPVid8Yk.roa (raw, json) Hash identifier: qKeg7xWHW3c3W1Pt3sIr7R/HtlFF4bwXJzHw8CTmAZY= Subject key identifier: 89:0A:51:31:15:31:37:F1:F2:4F:E7:A0:B5:FD:C1:3D:58:9D:F1:89 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019AA60A2BBE14846AE64B0FD48363E2C8A2 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iQpRMRUxN_HyT-egtf3BPVid8Yk.roa Signing time: Fri 21 Nov 2025 10:51:15 +0000 ROA not before: Fri 21 Nov 2025 10:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203589 IP address blocks: 194.31.141.0/24 maxlen: 24 2a0b:b81:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:0a:2b:be:14:84:6a:e6:4b:0f:d4:83:63:e2:c8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Nov 21 10:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=890a5131153137f1f24fe7a0b5fdc13d589df189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:3f:ca:27:bf:aa:78:38:09:9a:2c:d4:6a: 33:44:a4:c9:71:21:4e:78:f8:66:30:07:6c:09:b9: 5c:91:79:f4:75:ec:dd:d5:3b:c4:c2:d8:8d:9e:88: da:ca:6b:10:b4:04:c6:cf:ab:b2:74:62:68:39:da: f9:bf:06:d7:5d:58:58:a9:10:7b:13:b2:51:99:e4: 5b:23:e1:93:07:d7:46:9b:3e:d6:d6:67:e6:86:63: 37:84:56:0f:fe:ea:ae:77:89:75:42:06:3c:68:91: 21:35:08:dc:c1:b2:95:d3:4e:fe:f0:dd:c4:1e:e0: f3:bd:61:ea:2b:76:2a:b3:c4:f3:0a:7b:57:d5:4c: 90:05:9a:7c:6c:a0:e9:fa:19:d7:a5:34:7c:52:f7: f2:09:ab:78:23:50:da:95:29:1c:03:37:6c:34:79: 92:9e:ab:4f:19:6c:a4:6b:79:cc:3c:d7:4f:28:2c: 7f:8b:06:1a:8f:c9:02:43:96:6b:28:ea:47:d9:2d: 3a:aa:78:ce:65:13:c0:66:dc:e2:d8:2a:fd:cf:6c: d5:37:78:07:4d:0e:91:ea:61:c1:a0:b1:97:db:82: 68:0b:1b:a4:72:7b:47:0b:3e:f5:2c:cf:79:b6:98: c0:6c:fb:c0:75:24:2a:b2:de:3c:ff:8c:28:89:11: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0A:51:31:15:31:37:F1:F2:4F:E7:A0:B5:FD:C1:3D:58:9D:F1:89 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/iQpRMRUxN_HyT-egtf3BPVid8Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.141.0/24 IPv6: 2a0b:b81:3600::/40 Signature Algorithm: sha256WithRSAEncryption 4b:59:c6:2e:f9:af:e7:e6:10:44:eb:2e:18:04:25:06:38:54: c4:cb:36:05:35:32:b7:75:0f:44:cf:e1:fb:30:e6:5d:e3:bd: a7:3c:98:b9:d6:f8:9a:35:87:11:9f:d3:a9:0f:80:4c:f8:a0: 87:44:d2:60:85:18:f8:a0:84:fa:97:c8:2d:2d:3a:b4:a1:6c: 4f:b6:d5:7f:22:69:19:4a:e0:26:cb:a7:12:9b:04:e9:d1:7b: c9:20:3c:aa:db:ed:14:e1:6b:31:13:41:06:f4:fc:e6:f5:ca: 37:c9:38:e9:7e:96:fb:42:7b:85:da:ba:8d:ee:a5:7d:03:a5: cd:38:72:28:1d:d5:89:49:9a:c4:ac:a4:82:99:7d:b1:02:01: a4:c5:c5:7c:34:93:cb:20:fd:ce:d9:20:a0:4b:9b:03:1d:44: 47:fa:77:89:b0:99:5d:55:ee:55:a5:cf:39:c6:3f:cb:ea:ce: 0a:0e:d9:71:92:e7:79:86:47:20:06:76:c1:84:b1:e1:fc:01: db:c5:39:bc:62:0d:5f:d5:fd:05:d0:00:14:a5:30:0c:69:a9: 97:b2:a3:8b:f2:58:d2:0b:b0:74:72:ff:57:c8:74:bc:e2:e9: f0:a9:f5:49:7a:c6:ac:0a:31:85:9b:01:14:d8:5f:e1:9c:df: d1:a9:3a:f4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZqmCiu+FIRq5ksP1INj4siiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjUxMTIxMTA1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTBhNTEzMTE1MzEzN2YxZjI0ZmU3YTBiNWZkYzEzZDU4OWRmMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVA/yie/qng4CZos1GozRKTJcSFO ePhmMAdsCblckXn0dezd1TvEwtiNnojaymsQtATGz6uydGJoOdr5vwbXXVhYqRB7 E7JRmeRbI+GTB9dGmz7W1mfmhmM3hFYP/uqud4l1QgY8aJEhNQjcwbKV007+8N3E HuDzvWHqK3Yqs8TzCntX1UyQBZp8bKDp+hnXpTR8UvfyCat4I1DalSkcAzdsNHmS nqtPGWyka3nMPNdPKCx/iwYaj8kCQ5ZrKOpH2S06qnjOZRPAZtzi2Cr9z2zVN3gH TQ6R6mHBoLGX24JoCxukcntHCz71LM95tpjAbPvAdSQqst48/4woiRGPEQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFIkKUTEVMTfx8k/noLX9wT1YnfGJMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvaVFwUk1SVXhOX0h5VC1lZ3RmM0JQVmlkOFlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwh+NMA4E AgACMAgDBgAqCwuBNjANBgkqhkiG9w0BAQsFAAOCAQEAS1nGLvmv5+YQROsuGAQl BjhUxMs2BTUyt3UPRM/h+zDmXeO9pzyYudb4mjWHEZ/TqQ+ATPigh0TSYIUY+KCE +pfILS06tKFsT7bVfyJpGUrgJsunEpsE6dF7ySA8qtvtFOFrMRNBBvT85vXKN8k4 6X6W+0J7hdq6je6lfQOlzThyKB3ViUmaxKykgpl9sQIBpMXFfDSTyyD9ztkgoEub Ax1ER/p3ibCZXVXuVaXPOcY/y+rOCg7ZcZLneYZHIAZ2wYSx4fwB28U5vGINX9X9 BdAAFKUwDGmpl7Kji/JY0guwdHL/V8h0vOLp8Kn1SXrGrAoxhZsBFNhf4Zzf0ak6 9A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:16:33 2025 by rpki-client