This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SR8gG2CjdP_IzCbGn-6bzn4KyJw.roa File: SR8gG2CjdP_IzCbGn-6bzn4KyJw.roa (raw, json) Hash identifier: uqYrvy5kmIa465qCVmn9Tv1bdXoiZOZAVoYIBfOqbm4= Subject key identifier: 49:1F:20:1B:60:A3:74:FF:C8:CC:26:C6:9F:EE:9B:CE:7E:0A:C8:9C Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AD3E3BBAB47918338C3C56D46508731E3 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SR8gG2CjdP_IzCbGn-6bzn4KyJw.roa Signing time: Sun 30 Nov 2025 08:31:48 +0000 ROA not before: Sun 30 Nov 2025 08:31:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 194.231.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 10:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d3:e3:bb:ab:47:91:83:38:c3:c5:6d:46:50:87:31:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 30 08:31:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=491f201b60a374ffc8cc26c69fee9bce7e0ac89c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:ff:f2:43:14:0c:41:6b:a1:85:31:26:ed: fa:6e:4f:76:33:df:0c:83:95:4c:c8:db:39:a6:58: 97:ae:44:3b:66:5a:0d:ce:34:2c:4b:d9:4d:09:2b: 6e:c2:96:88:90:ea:5e:52:1e:ab:ee:f5:58:3b:1d: bd:34:07:7a:b8:ac:10:c7:78:95:28:15:d5:ee:12: 3e:d2:b9:14:89:89:49:87:83:b6:eb:4f:6f:36:bb: cf:0d:40:6c:4b:08:fc:16:e4:1e:17:f4:d1:2d:eb: a4:e5:7e:af:54:56:6d:6a:b9:9c:79:8c:0e:c4:51: 2a:de:1f:c0:99:f9:65:9b:e2:98:d2:87:e9:4a:fa: 84:71:3e:44:d2:19:13:79:0e:af:53:9c:6a:97:a1: 3f:34:9c:b2:47:e2:bb:f9:cd:3a:d4:9a:51:c2:45: ee:2e:23:a2:34:89:f8:af:db:95:8e:0a:ae:08:88: 86:78:92:ec:c5:53:57:97:02:40:9d:47:15:3c:9a: 0c:c4:75:83:f8:90:2a:01:2d:36:d3:05:7b:59:da: 98:9d:b2:8d:73:3d:96:6e:fa:89:7b:80:ed:5b:2f: 92:ea:ab:9b:cb:85:90:a7:33:32:7e:80:67:77:0a: 96:f9:61:f9:92:2d:28:f9:a5:c2:5b:29:2c:86:f9: 6a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:20:1B:60:A3:74:FF:C8:CC:26:C6:9F:EE:9B:CE:7E:0A:C8:9C X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/SR8gG2CjdP_IzCbGn-6bzn4KyJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.231.134.0/24 Signature Algorithm: sha256WithRSAEncryption c7:e8:00:9c:5e:c4:17:40:0d:2b:db:4d:4d:0c:91:5b:f1:55: b7:65:82:5d:77:68:22:ad:61:90:44:59:83:14:2b:cc:3c:a2: 75:f8:44:57:a8:65:ff:59:af:ae:fc:f7:de:61:5f:65:1b:67: 6e:30:f5:69:40:f9:9a:5c:96:5b:45:58:ae:a5:22:84:16:6f: 41:77:e0:a7:70:5b:8e:f2:0e:47:b0:46:17:39:3f:f9:f9:ec: ff:aa:4b:2a:69:c1:a2:c3:fe:a2:6d:9b:03:e8:22:dd:6b:81: cb:dc:19:93:e9:27:b8:b5:43:4e:dc:56:97:74:16:4c:5e:82: e5:f3:3d:1c:06:4a:d5:00:3e:cb:80:e2:06:56:3c:c0:d8:fa: 1b:3f:4a:41:3d:58:70:cc:2a:3e:2a:8e:7c:31:53:57:3a:b5: fb:7b:6f:4c:6b:89:3f:5e:ad:0b:b1:d7:3a:0e:2c:8b:2b:9b: 79:32:36:b9:b6:64:e5:1d:32:de:1a:a4:80:69:9b:5e:23:a6: 7d:74:1d:b5:45:02:bd:c5:09:df:15:06:a2:f7:b2:ca:7f:c7: 97:c5:dd:71:e1:63:26:b2:51:d0:8e:a1:cf:f5:44:00:6c:35: 22:43:d5:23:c8:86:97:f1:15:b6:03:7d:72:bb:fe:1e:84:1b: cb:d1:da:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrT47urR5GDOMPFbUZQhzHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTMwMDgzMTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFmMjAxYjYwYTM3NGZmYzhjYzI2YzY5ZmVlOWJjZTdlMGFjODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUf/8kMUDEFroYUxJu36bk92M98M g5VMyNs5pliXrkQ7ZloNzjQsS9lNCStuwpaIkOpeUh6r7vVYOx29NAd6uKwQx3iV KBXV7hI+0rkUiYlJh4O2609vNrvPDUBsSwj8FuQeF/TRLeuk5X6vVFZtarmceYwO xFEq3h/Amfllm+KY0ofpSvqEcT5E0hkTeQ6vU5xql6E/NJyyR+K7+c061JpRwkXu LiOiNIn4r9uVjgquCIiGeJLsxVNXlwJAnUcVPJoMxHWD+JAqAS020wV7WdqYnbKN cz2WbvqJe4DtWy+S6quby4WQpzMyfoBndwqW+WH5ki0o+aXCWykshvlqjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkfIBtgo3T/yMwmxp/um85+CsicMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvU1I4Z0cyQ2pkUF9JekNiR24tNmJ6bjRLeUp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwueGMA0G CSqGSIb3DQEBCwUAA4IBAQDH6ACcXsQXQA0r201NDJFb8VW3ZYJdd2girWGQRFmD FCvMPKJ1+ERXqGX/Wa+u/PfeYV9lG2duMPVpQPmaXJZbRViupSKEFm9Bd+CncFuO 8g5HsEYXOT/5+ez/qksqacGiw/6ibZsD6CLda4HL3BmT6Se4tUNO3FaXdBZMXoLl 8z0cBkrVAD7LgOIGVjzA2PobP0pBPVhwzCo+Ko58MVNXOrX7e29Ma4k/Xq0Lsdc6 DiyLK5t5Mja5tmTlHTLeGqSAaZteI6Z9dB21RQK9xQnfFQai97LKf8eXxd1x4WMm slHQjqHP9UQAbDUiQ9UjyIaX8RW2A31yu/4ehBvL0dq8 -----END CERTIFICATE-----Generated at Fri Dec 5 12:25:41 2025 by rpki-client