This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8cZ_rT6dDwr1aCbdkMYvPjNmb-I.roa File: 8cZ_rT6dDwr1aCbdkMYvPjNmb-I.roa (raw, json) Hash identifier: l7MsNK8+eizB6MsIU/z+ojYKfrWOGYUzccKcHAU3AjM= Subject key identifier: F1:C6:7F:AD:3E:9D:0F:0A:F5:68:26:DD:90:C6:2F:3E:33:66:6F:E2 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B400558A5C2239B7F3059FBDCE2DEC825 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8cZ_rT6dDwr1aCbdkMYvPjNmb-I.roa Signing time: Sun 21 Dec 2025 08:27:30 +0000 ROA not before: Sun 21 Dec 2025 08:27:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215727 IP address blocks: 31.57.206.0/24 maxlen: 24 31.59.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:05:58:a5:c2:23:9b:7f:30:59:fb:dc:e2:de:c8:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Dec 21 08:27:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f1c67fad3e9d0f0af56826dd90c62f3e33666fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:31:1c:c2:8c:ef:6b:27:ad:0b:25:99:cb:c9: 7c:29:6e:c8:1c:db:9c:d9:36:bd:4f:35:08:88:e3: eb:b8:50:f4:0e:e0:ff:0e:d0:49:b2:55:b7:08:c6: 04:f5:b7:fc:1d:cd:0f:c9:da:05:41:d1:15:f3:1b: dd:20:0d:44:91:39:2b:57:cc:7e:c2:e4:67:c1:1b: 98:59:33:26:08:fc:41:fe:89:23:ff:5d:4d:e2:d6: b5:ca:58:11:0d:35:7d:bf:7f:12:73:98:e1:b0:e6: dd:b1:0f:e7:e8:f6:6e:d2:a8:5f:90:36:f7:76:b4: 0d:d7:3a:bf:aa:45:6c:2b:f6:53:26:14:99:c0:e8: 84:80:f0:2d:db:ad:05:57:db:86:a8:34:1d:34:43: 82:4b:a7:8b:88:90:7a:02:0b:72:c0:69:80:d5:c0: d8:ca:96:bf:54:8f:63:be:11:b2:a9:0f:7c:e2:f3: a1:1a:85:3d:b2:86:df:d7:fa:de:e2:4e:8f:30:21: ff:ea:f3:76:1b:8b:ae:7a:99:1b:d7:94:e2:74:ba: b8:a3:51:90:87:59:a1:e3:86:00:a0:54:65:29:a8: 5e:b0:cb:a8:0d:16:83:4e:37:ec:0f:37:2d:75:d9: ec:33:18:f4:ca:2d:99:7f:42:e6:b8:a1:e2:fd:f6: d9:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C6:7F:AD:3E:9D:0F:0A:F5:68:26:DD:90:C6:2F:3E:33:66:6F:E2 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/8cZ_rT6dDwr1aCbdkMYvPjNmb-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.57.206.0/24 31.59.99.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:7d:9b:4f:14:ab:b5:73:f2:1f:d9:ee:40:26:ac:0d:45:20: 8d:8d:98:d2:b1:58:81:1c:12:0a:6c:f6:c1:6d:dd:45:26:74: 94:2d:35:c6:a8:26:ca:ac:af:d5:43:c7:64:7c:e5:8f:da:dc: 69:dd:24:6e:61:bc:dc:2f:8b:eb:bc:07:61:8e:db:64:0b:50: 0c:19:55:e9:4a:4d:65:84:10:1f:21:55:52:bf:20:db:f0:ac: 6e:bb:1d:7b:4f:ad:3a:09:53:84:a3:ec:b9:a1:10:88:7e:a9: 37:10:51:12:df:9a:6a:8e:2a:07:19:c5:75:5b:c3:f2:26:a1: d9:f9:9b:30:41:26:3c:36:56:d0:a8:e9:79:33:93:81:f1:18: c5:46:ab:37:57:7f:de:77:5c:46:2a:cc:a2:a4:06:9e:03:b9: 75:4e:a7:d4:20:e9:ec:be:49:25:19:83:06:e1:75:84:29:ca: 47:58:73:8f:18:d6:f6:09:6f:97:ad:d4:a4:dc:3a:9a:43:a0: c3:18:b8:c7:70:9c:9e:34:6f:72:48:aa:10:2b:e7:a8:e9:ef: e4:10:29:72:9f:58:56:f2:a5:db:31:16:ef:26:d4:08:06:72: d3:e9:a0:d2:fa:b4:46:58:53:74:68:d4:67:8b:84:da:29:ee: c2:37:ba:8a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtABVilwiObfzBZ+9zi3sglMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMjIxMDgyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWM2N2ZhZDNlOWQwZjBhZjU2ODI2ZGQ5MGM2MmYzZTMzNjY2ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zEcwozvayetCyWZy8l8KW7IHNuc 2Ta9TzUIiOPruFD0DuD/DtBJslW3CMYE9bf8Hc0PydoFQdEV8xvdIA1EkTkrV8x+ wuRnwRuYWTMmCPxB/okj/11N4ta1ylgRDTV9v38Sc5jhsObdsQ/n6PZu0qhfkDb3 drQN1zq/qkVsK/ZTJhSZwOiEgPAt260FV9uGqDQdNEOCS6eLiJB6AgtywGmA1cDY ypa/VI9jvhGyqQ984vOhGoU9sobf1/re4k6PMCH/6vN2G4uuepkb15TidLq4o1GQ h1mh44YAoFRlKahesMuoDRaDTjfsDzctddnsMxj0yi2Zf0LmuKHi/fbZuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPHGf60+nQ8K9Wgm3ZDGLz4zZm/iMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvOGNaX3JUNmREd3IxYUNiZGtNWXZQak5tYi1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHznOAwQA HztjMA0GCSqGSIb3DQEBCwUAA4IBAQA8fZtPFKu1c/If2e5AJqwNRSCNjZjSsViB HBIKbPbBbd1FJnSULTXGqCbKrK/VQ8dkfOWP2txp3SRuYbzcL4vrvAdhjttkC1AM GVXpSk1lhBAfIVVSvyDb8Kxuux17T606CVOEo+y5oRCIfqk3EFES35pqjioHGcV1 W8PyJqHZ+ZswQSY8NlbQqOl5M5OB8RjFRqs3V3/ed1xGKsyipAaeA7l1TqfUIOns vkklGYMG4XWEKcpHWHOPGNb2CW+XrdSk3DqaQ6DDGLjHcJyeNG9ySKoQK+eo6e/k EClyn1hW8qXbMRbvJtQIBnLT6aDS+rRGWFN0aNRni4TaKe7CN7qK -----END CERTIFICATE-----Generated at Mon Dec 22 01:31:39 2025 by rpki-client