This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/EB8Z8JGqALo1AXhH97vSbq2bKOQ.roa File: EB8Z8JGqALo1AXhH97vSbq2bKOQ.roa (raw, json) Hash identifier: 8sCpaInWnYw6mai7mNmkX8CkJ0mm/y9FmV+/kHTDr3U= Subject key identifier: 10:1F:19:F0:91:AA:00:BA:35:01:78:47:F7:BB:D2:6E:AD:9B:28:E4 Certificate issuer: /CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Certificate serial: 019AFA1805AC2844026F3A64A52794A5ED8A Authority key identifier: 1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/EB8Z8JGqALo1AXhH97vSbq2bKOQ.roa Signing time: Sun 07 Dec 2025 18:34:29 +0000 ROA not before: Sun 07 Dec 2025 18:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25437 IP address blocks: 31.40.158.0/24 maxlen: 24 31.40.180.0/24 maxlen: 24 31.40.181.0/24 maxlen: 24 195.20.118.0/24 maxlen: 24 195.20.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:18:05:ac:28:44:02:6f:3a:64:a5:27:94:a5:ed:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1eaf5c2e5edc197834d07f345962b0745bee66d7 Validity Not Before: Dec 7 18:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=101f19f091aa00ba35017847f7bbd26ead9b28e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:04:eb:b3:6e:72:11:a1:7c:f9:16:f6:7d: 50:7c:2e:20:2c:4e:9a:d6:06:b0:6d:00:c3:db:5b: 0b:cd:f2:6a:c1:3e:02:fe:f0:b6:f3:a0:2c:91:23: 30:15:82:cc:cf:55:fb:63:ea:84:49:04:13:53:e0: 83:60:0f:94:82:e0:f9:cf:78:d0:1b:36:7f:49:b1: 8c:aa:3b:7d:3a:c8:da:c4:30:cc:c8:56:a5:ac:3b: 3d:74:a9:68:9f:40:79:1c:4c:f6:02:b5:f0:36:7a: c3:c8:77:a9:26:86:6b:eb:70:05:2d:22:74:98:8e: e7:0b:6f:c1:58:f6:1c:96:10:95:b4:d9:74:fc:4a: 29:85:13:82:c9:da:11:c4:4f:48:f0:b4:d6:96:60: 90:b7:a3:02:2a:0a:08:3d:53:af:24:26:2d:87:7b: 31:7e:8e:32:53:33:82:a4:58:38:a1:93:59:67:46: 15:cf:5f:f8:10:1f:e4:57:56:2f:2c:ee:36:29:f0: 1c:65:85:76:15:9b:c4:2e:af:90:15:a4:6f:53:e8: df:cf:31:ad:ff:ba:2b:71:8f:14:a8:05:df:3a:6c: 19:c9:0d:bf:c5:63:fb:62:3d:98:26:64:1c:2d:b5: 3b:a0:c2:31:45:4e:82:a3:43:d8:87:c3:b6:d1:7f: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:1F:19:F0:91:AA:00:BA:35:01:78:47:F7:BB:D2:6E:AD:9B:28:E4 X509v3 Authority Key Identifier: keyid:1E:AF:5C:2E:5E:DC:19:78:34:D0:7F:34:59:62:B0:74:5B:EE:66:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hq9cLl7cGXg00H80WWKwdFvuZtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/EB8Z8JGqALo1AXhH97vSbq2bKOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1cfb92-9c31-464f-9382-4a34c1bbab2b/1/Hq9cLl7cGXg00H80WWKwdFvuZtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.40.158.0/24 31.40.180.0/23 195.20.118.0/23 Signature Algorithm: sha256WithRSAEncryption 18:ca:b2:76:d5:58:e9:47:70:e9:51:85:fd:f0:9a:f7:6a:be: 81:e0:b5:8f:3a:54:31:91:c2:b7:b7:34:69:95:a2:6c:5e:a7: 15:2d:d4:d7:3d:0a:6a:e4:c2:c3:c0:7a:ce:f2:03:0d:8c:a9: 87:ed:e5:52:3d:01:b0:2e:6e:31:c3:d8:33:00:b7:54:77:b7: 7e:cc:06:88:ff:ae:8d:4e:7e:07:cf:6b:12:7b:5e:0b:39:52: aa:4b:62:76:ae:0a:22:1a:7c:13:dc:a6:b9:09:ba:51:f8:7a: 67:e1:03:a0:ce:c1:d9:b8:11:6e:49:9e:6a:f8:cc:09:71:75: 5f:95:e3:96:7d:18:fd:79:dd:98:d4:03:66:62:e7:34:87:c8: d0:4e:db:58:17:9f:df:e6:bc:52:f1:dd:83:06:56:f4:43:32: b6:58:59:8b:30:d3:00:7b:b5:26:0c:52:c3:88:f6:77:08:7d: af:94:9d:26:11:1d:f8:53:66:9a:30:45:63:86:57:bb:80:7c: 36:02:fa:9a:86:78:5f:35:8d:f7:9e:8b:32:9f:67:bd:2c:56: 6b:8d:72:45:9d:6f:ef:e7:34:72:8c:df:b1:ac:26:4b:8e:bf: 4f:64:74:dc:32:25:ee:18:fa:93:c7:b2:11:dd:11:61:3f:62: d3:9f:eb:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr6GAWsKEQCbzpkpSeUpe2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlYWY1YzJlNWVkYzE5NzgzNGQwN2YzNDU5NjJiMDc0NWJl ZTY2ZDcwHhcNMjUxMjA3MTgzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDFmMTlmMDkxYWEwMGJhMzUwMTc4NDdmN2JiZDI2ZWFkOWIyOGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQEE67NuchGhfPkW9n1QfC4gLE6a 1gawbQDD21sLzfJqwT4C/vC286AskSMwFYLMz1X7Y+qESQQTU+CDYA+UguD5z3jQ GzZ/SbGMqjt9OsjaxDDMyFalrDs9dKlon0B5HEz2ArXwNnrDyHepJoZr63AFLSJ0 mI7nC2/BWPYclhCVtNl0/EophROCydoRxE9I8LTWlmCQt6MCKgoIPVOvJCYth3sx fo4yUzOCpFg4oZNZZ0YVz1/4EB/kV1YvLO42KfAcZYV2FZvELq+QFaRvU+jfzzGt /7orcY8UqAXfOmwZyQ2/xWP7Yj2YJmQcLbU7oMIxRU6Co0PYh8O20X+i9wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBAfGfCRqgC6NQF4R/e70m6tmyjkMB8GA1UdIwQY MBaAFB6vXC5e3Bl4NNB/NFlisHRb7mbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODIt NGEzNGMxYmJhYjJiLzEvRUI4WjhKR3FBTG8xQVhoSDk3dlNicTJiS09RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xY2ZiOTItOWMzMS00NjRmLTkzODItNGEzNGMxYmJhYjJi LzEvSHE5Y0xsN2NHWGcwMEg4MFdXS3dkRnZ1WnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyieAwQB Hyi0AwQBwxR2MA0GCSqGSIb3DQEBCwUAA4IBAQAYyrJ21VjpR3DpUYX98Jr3ar6B 4LWPOlQxkcK3tzRplaJsXqcVLdTXPQpq5MLDwHrO8gMNjKmH7eVSPQGwLm4xw9gz ALdUd7d+zAaI/66NTn4Hz2sSe14LOVKqS2J2rgoiGnwT3Ka5CbpR+Hpn4QOgzsHZ uBFuSZ5q+MwJcXVfleOWfRj9ed2Y1ANmYuc0h8jQTttYF5/f5rxS8d2DBlb0QzK2 WFmLMNMAe7UmDFLDiPZ3CH2vlJ0mER34U2aaMEVjhle7gHw2AvqahnhfNY33nosy n2e9LFZrjXJFnW/v5zRyjN+xrCZLjr9PZHTcMiXuGPqTx7IR3RFhP2LTn+tO -----END CERTIFICATE-----Generated at Fri Dec 12 05:00:24 2025 by rpki-client