This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8te2kap7dOwBBlIzCDFzdZh1tp8.roa File: 8te2kap7dOwBBlIzCDFzdZh1tp8.roa (raw, json) Hash identifier: Lfl4azNwmKzcJT+4BWY2T23pBZQjYp/zvsKxTvfqgp0= Subject key identifier: F2:D7:B6:91:AA:7B:74:EC:01:06:52:33:08:31:73:75:98:75:B6:9F Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019ABC1BE426172773826A5EC81F790596F8 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8te2kap7dOwBBlIzCDFzdZh1tp8.roa Signing time: Tue 25 Nov 2025 17:42:15 +0000 ROA not before: Tue 25 Nov 2025 17:42:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57271 IP address blocks: 31.24.251.0/24 maxlen: 24 45.90.46.0/24 maxlen: 24 2a0d:e242::/32 maxlen: 32 2a0e:19c6::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:1b:e4:26:17:27:73:82:6a:5e:c8:1f:79:05:96:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 25 17:42:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f2d7b691aa7b74ec01065233083173759875b69f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:3c:0a:7d:5f:be:d9:3c:1d:73:47:95:79: 1a:7c:7c:5e:df:85:8f:89:07:a9:02:7f:ec:df:fa: 10:a4:e8:8b:fd:d1:d1:56:0a:a2:5b:d4:27:29:4d: d5:54:e6:2c:5a:69:40:c3:09:fb:ce:dd:57:b8:2c: 06:6f:73:ac:1d:3c:81:ff:c0:75:de:84:c5:37:d2: ee:21:e6:91:5c:0e:cf:1f:91:a0:09:04:da:7f:f7: d9:d6:7a:b2:41:c8:42:36:ac:eb:0c:5a:35:8d:ba: f0:00:62:cc:2e:5e:ac:95:32:41:4e:88:c6:f1:df: a1:ca:26:82:d5:ca:23:40:e6:2e:8e:bd:01:76:92: 1d:87:a8:db:85:c6:ae:f3:8b:08:82:90:53:ec:63: f7:77:61:64:bf:97:47:f7:17:65:26:26:9e:23:4b: 9d:fe:31:0c:d2:2f:d6:81:69:9e:fd:f2:f5:88:bb: 25:10:df:97:d1:21:5a:f5:9a:08:77:ee:ea:68:e7: e2:58:56:1c:aa:a2:a8:1b:ae:14:cd:32:7e:97:16: 90:8d:15:bc:40:53:2a:d8:a7:41:d1:17:6b:38:47: d0:a5:4c:b3:62:eb:9b:64:c4:48:74:13:d3:08:53: a5:15:fc:f6:05:a1:fb:f6:58:de:0c:56:f3:a1:a8: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:D7:B6:91:AA:7B:74:EC:01:06:52:33:08:31:73:75:98:75:B6:9F X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/8te2kap7dOwBBlIzCDFzdZh1tp8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.24.251.0/24 45.90.46.0/24 IPv6: 2a0d:e242::/32 2a0e:19c6::/32 Signature Algorithm: sha256WithRSAEncryption 58:14:e2:a5:40:f0:89:83:d8:f4:48:81:77:78:e8:ee:11:d0: 90:17:a7:b8:ae:bf:cf:bd:a9:4f:f4:85:6e:50:58:83:7c:62: 3a:26:74:1d:e0:4b:a2:22:f6:d9:52:10:4b:bb:1a:a9:4d:b3: ce:de:d0:9a:ad:b7:a5:b9:20:d5:6c:28:4d:3c:ef:ee:6e:cd: 8c:aa:d2:9b:74:39:c4:23:8d:a6:9d:ba:51:86:6b:c8:12:bd: 95:82:23:ee:28:76:6a:eb:33:ac:c8:78:c4:be:90:5b:ac:46: 71:ae:cf:49:6c:a4:5b:77:48:d0:9a:89:51:86:27:cc:31:70: 53:ed:48:db:d1:a7:96:f2:50:1c:93:6e:d8:01:a4:7f:dd:0c: 95:16:3d:bc:27:5a:d0:8a:33:a0:8b:b6:59:ee:87:2f:15:90: ac:5e:d5:2f:24:d8:67:a3:e8:cc:00:f4:03:22:fd:f5:99:a5: bb:62:f3:c4:8f:f4:30:ac:bb:cf:e0:1a:3d:1d:04:30:bd:7c: fe:a3:69:96:1b:91:83:8d:2f:51:68:98:b1:f0:9f:4c:30:86: 3b:29:0d:53:20:cd:9b:54:4d:57:21:e9:2d:bd:57:d9:78:2e: 13:cf:a3:c2:51:a6:28:4b:cd:64:a5:fd:9f:ef:69:c6:5b:92: ac:ca:4b:84 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZq8G+QmFydzgmpeyB95BZb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTI1MTc0MjE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMmQ3YjY5MWFhN2I3NGVjMDEwNjUyMzMwODMxNzM3NTk4NzViNjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iE8Cn1fvtk8HXNHlXkafHxe34WP iQepAn/s3/oQpOiL/dHRVgqiW9QnKU3VVOYsWmlAwwn7zt1XuCwGb3OsHTyB/8B1 3oTFN9LuIeaRXA7PH5GgCQTaf/fZ1nqyQchCNqzrDFo1jbrwAGLMLl6slTJBTojG 8d+hyiaC1cojQOYujr0BdpIdh6jbhcau84sIgpBT7GP3d2Fkv5dH9xdlJiaeI0ud /jEM0i/WgWme/fL1iLslEN+X0SFa9ZoId+7qaOfiWFYcqqKoG64UzTJ+lxaQjRW8 QFMq2KdB0RdrOEfQpUyzYuubZMRIdBPTCFOlFfz2BaH79ljeDFbzoahTcQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPLXtpGqe3TsAQZSMwgxc3WYdbafMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvOHRlMmthcDdkT3dCQmxJekNERnpkWmgxdHA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQAHxj7AwQA LVouMBQEAgACMA4DBQAqDeJCAwUAKg4ZxjANBgkqhkiG9w0BAQsFAAOCAQEAWBTi pUDwiYPY9EiBd3jo7hHQkBenuK6/z72pT/SFblBYg3xiOiZ0HeBLoiL22VIQS7sa qU2zzt7Qmq23pbkg1WwoTTzv7m7NjKrSm3Q5xCONpp26UYZryBK9lYIj7ih2ausz rMh4xL6QW6xGca7PSWykW3dI0JqJUYYnzDFwU+1I29GnlvJQHJNu2AGkf90MlRY9 vCda0IozoIu2We6HLxWQrF7VLyTYZ6PozAD0AyL99Zmlu2LzxI/0MKy7z+AaPR0E ML18/qNplhuRg40vUWiYsfCfTDCGOykNUyDNm1RNVyHpLb1X2XguE8+jwlGmKEvN ZKX9n+9pxluSrMpLhA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:23:00 2025 by rpki-client