This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/8QszGi_L6JhrmquvHd-qusJKNos.roa File: 8QszGi_L6JhrmquvHd-qusJKNos.roa (raw, json) Hash identifier: ZOQpdDZEcijtL3oJgSkReM1RxPxRiHc5Dvw3Wyep5dM= Subject key identifier: F1:0B:33:1A:2F:CB:E8:98:6B:9A:AB:AF:1D:DF:AA:BA:C2:4A:36:8B Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Certificate serial: 019B6948AB5CF7FF83D32D1C58FDC56C0C50 Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/8QszGi_L6JhrmquvHd-qusJKNos.roa Signing time: Mon 29 Dec 2025 08:45:28 +0000 ROA not before: Mon 29 Dec 2025 08:45:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203057 IP address blocks: 31.42.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:48:ab:5c:f7:ff:83:d3:2d:1c:58:fd:c5:6c:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98 Validity Not Before: Dec 29 08:45:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f10b331a2fcbe8986b9aabaf1ddfaabac24a368b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:1b:70:36:79:35:50:cf:e7:e7:cf:aa:35: fc:a5:0e:49:ab:41:5f:27:ec:c1:0a:4c:83:9c:e8: 9e:ee:01:e8:ba:47:34:aa:ce:ab:49:94:fc:86:84: 6a:ca:51:c3:f1:09:29:e7:8c:c3:40:ad:f9:00:31: 4b:39:c1:41:28:1d:15:ec:8f:9e:0c:99:a2:5a:9a: 22:a6:a5:5b:e3:15:c0:20:cb:72:d3:a8:d8:b3:ff: 07:ae:32:21:c1:07:9e:24:54:f5:ea:0a:09:a1:c7: 23:14:3f:b4:a4:2a:11:39:a4:2b:33:6f:50:9c:d9: 28:f3:25:2a:f7:36:6d:72:fc:23:b1:53:74:3e:ae: 88:42:e5:7e:7b:38:4a:a1:79:7f:19:00:d6:a3:b9: 00:3e:db:84:41:52:c6:3b:c1:31:fd:32:88:95:e6: 20:7d:e9:09:ca:9a:f2:8d:e4:d1:57:a1:30:6c:3a: b6:92:cc:d9:bf:fd:78:09:2e:da:6d:1c:29:f1:ba: 92:b6:57:05:5f:2c:1d:ad:ba:0e:5b:15:8a:b9:10: 31:e9:1c:57:4c:45:8d:b5:cf:15:bf:dc:b1:13:da: 47:79:ee:38:f4:b7:36:60:1d:a7:e0:4f:8c:2e:dc: b1:b7:f3:d1:63:68:87:86:89:f0:4f:ad:e6:53:c3: 5c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0B:33:1A:2F:CB:E8:98:6B:9A:AB:AF:1D:DF:AA:BA:C2:4A:36:8B X509v3 Authority Key Identifier: keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/8QszGi_L6JhrmquvHd-qusJKNos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.42.120.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:ec:bb:09:ef:f8:73:f6:27:78:6b:b6:c7:92:4b:01:48:c5: 59:48:07:18:5b:12:51:ac:b0:5e:eb:b9:e4:fe:bb:ae:39:72: a5:76:48:e3:11:0e:c6:4f:42:34:d5:5e:7b:54:67:44:52:ab: 0d:65:b9:e1:1d:47:87:74:b3:b7:14:fe:5c:10:8e:c5:d4:e9: 59:a6:af:f0:5a:99:4d:f1:8f:fe:8a:15:c4:60:e9:a9:79:0c: 55:1d:6c:3a:ba:e2:d7:53:ab:88:27:cb:61:48:58:aa:55:96: e5:09:aa:fe:8b:15:d1:34:32:5b:ea:18:fd:d5:6d:f4:d6:7c: 4a:71:fc:3c:bf:97:19:cb:e2:26:41:53:49:12:95:75:88:7a: 06:60:e8:f1:7e:c6:fa:d8:dd:97:77:f3:07:cb:7e:ba:10:99: 9f:0c:28:ff:c1:56:e3:95:57:6f:bd:64:dd:4c:df:a5:94:ea: ba:0d:04:30:4b:e9:85:0b:65:78:9a:2b:f1:de:ca:4f:35:00: 4b:cd:fc:27:77:32:48:37:2a:33:72:72:6a:aa:b0:a4:68:d6: c1:9d:ee:47:cf:61:90:39:13:ab:90:9a:c4:dd:c4:a6:04:3d: 6b:37:aa:f7:0d:b6:60:45:29:c4:97:96:3a:b9:65:e2:2a:7c: 7e:c8:21:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtpSKtc9/+D0y0cWP3FbAxQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1 ZTNmOTgwHhcNMjUxMjI5MDg0NTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTBiMzMxYTJmY2JlODk4NmI5YWFiYWYxZGRmYWFiYWMyNGEzNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApigbcDZ5NVDP5+fPqjX8pQ5Jq0Ff J+zBCkyDnOie7gHoukc0qs6rSZT8hoRqylHD8Qkp54zDQK35ADFLOcFBKB0V7I+e DJmiWpoipqVb4xXAIMty06jYs/8HrjIhwQeeJFT16goJoccjFD+0pCoROaQrM29Q nNko8yUq9zZtcvwjsVN0Pq6IQuV+ezhKoXl/GQDWo7kAPtuEQVLGO8Ex/TKIleYg fekJypryjeTRV6EwbDq2kszZv/14CS7abRwp8bqStlcFXywdrboOWxWKuRAx6RxX TEWNtc8Vv9yxE9pHee449Lc2YB2n4E+MLtyxt/PRY2iHhonwT63mU8NcBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPELMxovy+iYa5qrrx3fqrrCSjaLMB8GA1UdIwQY MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt OWNkNjYyYmM4MzIwLzEvOFFzekdpX0w2SmhybXF1dkhkLXF1c0pLTm9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyp4MA0G CSqGSIb3DQEBCwUAA4IBAQCP7LsJ7/hz9id4a7bHkksBSMVZSAcYWxJRrLBe67nk /ruuOXKldkjjEQ7GT0I01V57VGdEUqsNZbnhHUeHdLO3FP5cEI7F1OlZpq/wWplN 8Y/+ihXEYOmpeQxVHWw6uuLXU6uIJ8thSFiqVZblCar+ixXRNDJb6hj91W301nxK cfw8v5cZy+ImQVNJEpV1iHoGYOjxfsb62N2Xd/MHy366EJmfDCj/wVbjlVdvvWTd TN+llOq6DQQwS+mFC2V4mivx3spPNQBLzfwndzJINyozcnJqqrCkaNbBne5Hz2GQ OROrkJrE3cSmBD1rN6r3DbZgRSnEl5Y6uWXiKnx+yCHU -----END CERTIFICATE-----Generated at Wed Dec 31 09:39:48 2025 by rpki-client