This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/C7ULwDGGDLspopWJvL9iddJcsoA.roa File: C7ULwDGGDLspopWJvL9iddJcsoA.roa (raw, json) Hash identifier: eXiH2Que0/hsKh26rBrekQ8hlPTu7doazMNc5MCmB1Y= Subject key identifier: 0B:B5:0B:C0:31:86:0C:BB:29:A2:95:89:BC:BF:62:75:D2:5C:B2:80 Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Certificate serial: 019B0CC3136FD59836957C59802228EEE044 Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/C7ULwDGGDLspopWJvL9iddJcsoA.roa Signing time: Thu 11 Dec 2025 09:34:29 +0000 ROA not before: Thu 11 Dec 2025 09:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41421 IP address blocks: 31.214.137.0/24 maxlen: 24 31.214.138.0/24 maxlen: 24 31.214.140.0/24 maxlen: 24 31.214.145.0/24 maxlen: 24 37.157.200.0/21 maxlen: 21 86.106.22.0/24 maxlen: 24 89.33.167.0/24 maxlen: 24 89.35.60.0/23 maxlen: 23 89.250.192.0/20 maxlen: 20 91.132.112.0/23 maxlen: 23 93.115.39.0/24 maxlen: 24 103.248.24.0/24 maxlen: 24 159.253.240.0/21 maxlen: 21 185.53.132.0/22 maxlen: 24 185.104.155.0/24 maxlen: 24 185.128.156.0/22 maxlen: 22 185.170.65.0/24 maxlen: 24 185.194.212.0/22 maxlen: 24 188.65.40.0/21 maxlen: 21 193.91.4.0/24 maxlen: 24 193.91.12.0/23 maxlen: 23 194.5.180.0/24 maxlen: 24 2a01:b8e0::/32 maxlen: 32 2a02:4c80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:c3:13:6f:d5:98:36:95:7c:59:80:22:28:ee:e0:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Validity Not Before: Dec 11 09:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0bb50bc031860cbb29a29589bcbf6275d25cb280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:dd:12:2e:67:82:3d:e0:d3:3f:91:eb:5b: a5:86:54:a9:46:fb:fa:e1:87:e7:91:9d:2f:39:5a: 5f:6a:2b:ec:57:5c:c5:1b:f0:9e:f2:23:b3:24:af: 76:8b:a8:44:b7:7e:7e:3a:fd:51:b7:d9:ab:83:b3: 8e:6c:1f:8e:54:92:ef:75:b3:54:0c:d4:b1:a4:83: 1b:2f:32:f9:84:e8:47:2e:bb:05:b4:b7:08:e6:db: c4:d3:63:ef:e0:a9:f3:64:67:dd:3b:66:d5:d0:9e: db:f9:4a:a8:e2:f2:02:7a:c6:c3:f8:06:be:b5:f1: d9:25:34:d7:8e:0f:7a:10:d5:bb:0a:20:c7:e6:86: 16:b0:1b:91:ce:d8:60:da:a3:3a:24:14:0f:ac:8b: f2:ea:2b:13:98:bd:d0:d7:48:0a:93:0c:8b:02:df: e0:2f:bf:17:0c:fd:91:b4:02:89:d6:4a:c1:11:61: 8f:2e:8a:f4:56:58:4c:a5:1a:a8:e9:b3:12:af:a0: 52:e7:ab:7c:bc:82:69:1b:53:28:b5:18:e8:9b:a0: 0d:a3:c8:6c:df:02:da:3b:1d:f4:e5:c1:4a:17:c1: 95:ef:e9:24:21:af:06:c3:fc:e3:a0:04:ec:a9:8b: be:ba:2c:67:41:58:52:9d:ad:27:f4:f8:15:e3:51: 4b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:B5:0B:C0:31:86:0C:BB:29:A2:95:89:BC:BF:62:75:D2:5C:B2:80 X509v3 Authority Key Identifier: keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/C7ULwDGGDLspopWJvL9iddJcsoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.214.137.0-31.214.138.255 31.214.140.0/24 31.214.145.0/24 37.157.200.0/21 86.106.22.0/24 89.33.167.0/24 89.35.60.0/23 89.250.192.0/20 91.132.112.0/23 93.115.39.0/24 103.248.24.0/24 159.253.240.0/21 185.53.132.0/22 185.104.155.0/24 185.128.156.0/22 185.170.65.0/24 185.194.212.0/22 188.65.40.0/21 193.91.4.0/24 193.91.12.0/23 194.5.180.0/24 IPv6: 2a01:b8e0::/32 2a02:4c80::/32 Signature Algorithm: sha256WithRSAEncryption 6d:33:5f:15:2b:00:68:b6:df:75:76:e6:eb:e2:77:5b:2c:92: 18:1b:fa:e6:3b:74:a3:a7:e8:71:44:73:4c:90:cc:aa:82:8f: dd:98:29:c5:db:8e:63:7d:ea:78:68:1f:73:ae:16:10:a7:99: f6:54:8e:89:0d:96:7d:e9:12:e7:8e:10:9f:ef:a5:ca:7c:ca: 0a:5d:06:5a:e7:5f:b6:d8:a6:83:2f:3d:48:35:b3:ea:ae:23: 1d:6c:1f:86:00:81:b5:09:27:dc:38:a7:ef:04:fe:b7:a1:9d: f6:57:77:39:ba:e8:56:c7:46:84:40:0a:8f:d3:7f:98:bd:0d: 63:7b:9d:2c:ec:e9:a9:31:8d:42:d6:07:7c:d1:95:07:f2:cd: 1a:c2:ed:2d:ad:ba:ab:4c:bf:33:88:1b:52:27:65:4e:e4:69: 26:f6:aa:4d:e8:22:f9:a3:9e:fa:91:96:de:f3:a7:1b:d5:ed: 33:03:a6:4a:af:3b:f7:24:b0:6d:cc:e8:c7:1d:04:15:c3:94: 88:da:60:69:57:17:04:68:1f:23:48:9c:9f:b3:a2:47:c8:a0: cf:68:61:46:65:9e:72:4b:02:0b:ff:b8:4f:82:3f:a2:2a:87: 69:ab:d6:ac:fd:48:4c:a3:ad:a8:05:ce:86:58:30:e9:6a:b3: 3b:ff:98:fb -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgISAZsMwxNv1Zg2lXxZgCIo7uBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj M2Y5YWYwHhcNMjUxMjExMDkzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmI1MGJjMDMxODYwY2JiMjlhMjk1ODliY2JmNjI3NWQyNWNiMjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkHdEi5ngj3g0z+R61ulhlSpRvv6 4YfnkZ0vOVpfaivsV1zFG/Ce8iOzJK92i6hEt35+Ov1Rt9mrg7OObB+OVJLvdbNU DNSxpIMbLzL5hOhHLrsFtLcI5tvE02Pv4KnzZGfdO2bV0J7b+Uqo4vICesbD+Aa+ tfHZJTTXjg96ENW7CiDH5oYWsBuRzthg2qM6JBQPrIvy6isTmL3Q10gKkwyLAt/g L78XDP2RtAKJ1krBEWGPLor0VlhMpRqo6bMSr6BS56t8vIJpG1MotRjom6ANo8hs 3wLaOx305cFKF8GV7+kkIa8Gw/zjoATsqYu+uixnQVhSna0n9PgV41FLMQIDAQAB o4ICpDCCAqAwHQYDVR0OBBYEFAu1C8Axhgy7KaKViby/YnXSXLKAMB8GA1UdIwQY MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt ZmE3MThhYzlkNzU4LzEvQzdVTHdER0dETHNwb3BXSnZMOWlkZEpjc29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4 LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG5BggrBgEFBQcBBwEB/wSBqTCBpjCBjQQCAAEwgYYwDAME AB/WiQMEAB/WigMEAB/WjAMEAB/WkQMEAyWdyAMEAFZqFgMEAFkhpwMEAVkjPAME BFn6wAMEAVuEcAMEAF1zJwMEAGf4GAMEA5/98AMEArk1hAMEALlomwMEArmAnAME ALmqQQMEArnC1AMEA7xBKAMEAMFbBAMEAcFbDAMEAMIFtDAUBAIAAjAOAwUAKgG4 4AMFACoCTIAwDQYJKoZIhvcNAQELBQADggEBAG0zXxUrAGi233V25uvid1sskhgb +uY7dKOn6HFEc0yQzKqCj92YKcXbjmN96nhoH3OuFhCnmfZUjokNln3pEueOEJ/v pcp8ygpdBlrnX7bYpoMvPUg1s+quIx1sH4YAgbUJJ9w4p+8E/rehnfZXdzm66FbH RoRACo/Tf5i9DWN7nSzs6akxjULWB3zRlQfyzRrC7S2tuqtMvzOIG1InZU7kaSb2 qk3oIvmjnvqRlt7zpxvV7TMDpkqvO/cksG3M6McdBBXDlIjaYGlXFwRoHyNInJ+z okfIoM9oYUZlnnJLAgv/uE+CP6Iqh2mr1qz9SEyjragFzoZYMOlqszv/mPs= -----END CERTIFICATE-----Generated at Fri Dec 12 03:40:17 2025 by rpki-client