This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LUqfPdr5U7rGSs9qDPdgE78y3Ys.roa File: LUqfPdr5U7rGSs9qDPdgE78y3Ys.roa (raw, json) Hash identifier: t6Hq8qeAuoJbps2mezodFgaH6dF91/bm/cTfH1sfuFk= Subject key identifier: 2D:4A:9F:3D:DA:F9:53:BA:C6:4A:CF:6A:0C:F7:60:13:BF:32:DD:8B Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142 Certificate serial: 019A91242A18FC0261DF2A44B1E5699777AF Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LUqfPdr5U7rGSs9qDPdgE78y3Ys.roa Signing time: Mon 17 Nov 2025 09:27:37 +0000 ROA not before: Mon 17 Nov 2025 09:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 31.14.37.0/24 maxlen: 24 45.132.27.0/24 maxlen: 24 185.155.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:24:2a:18:fc:02:61:df:2a:44:b1:e5:69:97:77:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3718b734349bf327d9453b96501e44b192e55142 Validity Not Before: Nov 17 09:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2d4a9f3ddaf953bac64acf6a0cf76013bf32dd8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:a1:65:81:d6:54:4a:a9:15:f1:57:2d:0e: bd:60:07:a0:16:f0:81:2a:c1:ef:4b:d4:16:7c:31: 25:94:82:31:bd:5a:9e:50:26:1c:56:c7:1e:72:eb: 56:f9:d0:b4:b5:2d:bf:9f:67:93:56:34:c3:be:0d: 13:6d:21:b0:88:1c:b2:4f:70:05:9a:77:7c:89:20: 53:54:c3:b8:99:ee:71:26:27:6a:ab:48:63:f6:b2: 25:ee:bd:94:3e:19:d1:39:df:0d:62:33:8d:e3:cf: d0:f5:a6:bf:5c:4e:fc:35:3f:0d:3c:8a:fb:48:cb: 60:e5:0a:3e:0c:ee:a4:56:29:a6:02:98:11:4e:db: 2f:2f:59:f7:ad:ee:7d:77:75:4e:74:eb:9a:8f:f8: 77:44:e7:d7:66:47:0f:17:a4:c3:b0:96:66:92:c5: 2e:07:ae:ad:f7:09:f0:32:81:f2:9a:63:28:e7:6c: 13:a3:1f:43:ec:70:30:ff:11:5f:4b:62:c7:0f:33: 5b:82:0d:0c:8d:cc:4d:57:7e:81:08:3f:df:45:13: 35:2c:8b:6c:fd:c1:04:f2:e3:f7:9b:b3:f6:7a:4e: e5:d2:8c:8e:1a:9d:7c:a2:b1:e2:48:fc:c4:bc:f9: b1:56:b0:0c:22:7f:c9:fc:74:00:56:c2:54:76:51: b9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4A:9F:3D:DA:F9:53:BA:C6:4A:CF:6A:0C:F7:60:13:BF:32:DD:8B X509v3 Authority Key Identifier: keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/LUqfPdr5U7rGSs9qDPdgE78y3Ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.14.37.0/24 45.132.27.0/24 185.155.55.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:40:a2:cb:3a:47:d3:7b:fc:66:72:e4:f8:37:1a:9d:81:e9: f7:a6:ce:57:0a:6f:59:57:cc:82:68:e3:13:32:77:d6:e8:3b: 1d:e2:70:c6:6f:ca:a1:4c:93:95:a4:2b:e2:3d:cc:81:18:51: 9e:cc:d8:91:56:8e:57:f1:3b:0c:d4:12:9e:1a:e8:45:36:07: dc:a5:49:da:d7:4f:89:9f:5f:8b:86:b3:8d:c7:16:de:1f:a3: 0a:2c:c2:65:d5:8a:97:fc:e9:ff:7a:db:22:78:4a:07:7e:90: b6:cd:03:27:5b:00:34:4e:c0:a4:1c:c9:c2:32:c6:10:24:f5: b9:d6:44:b1:19:a0:e0:11:ce:e7:b6:06:ba:c5:eb:04:91:72: 37:30:ba:9d:2b:f2:c3:59:ee:e2:58:3e:a4:40:cf:0c:46:a1: 85:2b:d6:9c:3d:e1:b2:54:dd:b2:fb:74:b6:60:17:8c:90:b2: fb:b7:c4:eb:6f:82:f9:ac:42:77:5b:01:50:e3:14:71:a9:75: 11:3f:5c:90:ee:02:c0:0f:ea:0c:ca:1c:64:d2:1d:2f:8e:f5: 96:1b:78:50:f1:9a:bf:04:85:61:bd:c9:22:d5:69:e1:b3:b0: 3f:7f:fe:2c:14:02:a8:22:49:6e:53:95:9c:bf:4a:04:60:7b: 21:40:5f:81 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqRJCoY/AJh3ypEseVpl3evMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl NTUxNDIwHhcNMjUxMTE3MDkyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZDRhOWYzZGRhZjk1M2JhYzY0YWNmNmEwY2Y3NjAxM2JmMzJkZDhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaOhZYHWVEqpFfFXLQ69YAegFvCB KsHvS9QWfDEllIIxvVqeUCYcVscecutW+dC0tS2/n2eTVjTDvg0TbSGwiByyT3AF mnd8iSBTVMO4me5xJidqq0hj9rIl7r2UPhnROd8NYjON48/Q9aa/XE78NT8NPIr7 SMtg5Qo+DO6kVimmApgRTtsvL1n3re59d3VOdOuaj/h3ROfXZkcPF6TDsJZmksUu B66t9wnwMoHymmMo52wTox9D7HAw/xFfS2LHDzNbgg0MjcxNV36BCD/fRRM1LIts /cEE8uP3m7P2ek7l0oyOGp18orHiSPzEvPmxVrAMIn/J/HQAVsJUdlG55wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC1Knz3a+VO6xkrPagz3YBO/Mt2LMB8GA1UdIwQY MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct YzgyM2NjOGYzODM3LzEvTFVxZlBkcjVVN3JHU3M5cURQZGdFNzh5M1lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3 LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHw4lAwQA LYQbAwQAuZs3MA0GCSqGSIb3DQEBCwUAA4IBAQBMQKLLOkfTe/xmcuT4Nxqdgen3 ps5XCm9ZV8yCaOMTMnfW6Dsd4nDGb8qhTJOVpCviPcyBGFGezNiRVo5X8TsM1BKe GuhFNgfcpUna10+Jn1+LhrONxxbeH6MKLMJl1YqX/On/etsieEoHfpC2zQMnWwA0 TsCkHMnCMsYQJPW51kSxGaDgEc7ntga6xesEkXI3MLqdK/LDWe7iWD6kQM8MRqGF K9acPeGyVN2y+3S2YBeMkLL7t8Trb4L5rEJ3WwFQ4xRxqXURP1yQ7gLAD+oMyhxk 0h0vjvWWG3hQ8Zq/BIVhvcki1Wnhs7A/f/4sFAKoIkluU5Wcv0oEYHshQF+B -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:30 2025 by rpki-client