This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/tj2ZTI6oYQQ6SUQNBFwuVa5ktvo.roa File: tj2ZTI6oYQQ6SUQNBFwuVa5ktvo.roa (raw, json) Hash identifier: F4AsnG1OTFE4PFJVWl5fTdVnNE+VzAtrZErpV40jY7g= Subject key identifier: B6:3D:99:4C:8E:A8:61:04:3A:49:44:0D:04:5C:2E:55:AE:64:B6:FA Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019AE9C762E53CD0DE4745875B21C692DFDD Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/tj2ZTI6oYQQ6SUQNBFwuVa5ktvo.roa Signing time: Thu 04 Dec 2025 14:32:29 +0000 ROA not before: Thu 04 Dec 2025 14:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 31.98.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:c7:62:e5:3c:d0:de:47:45:87:5b:21:c6:92:df:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Dec 4 14:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b63d994c8ea861043a49440d045c2e55ae64b6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a1:02:f4:5d:ae:f0:42:12:aa:be:6d:fc:72: 5d:5a:ec:a0:73:1b:fd:e5:24:12:66:f5:85:71:a2: c7:1c:43:0b:5f:77:57:fb:5b:af:39:46:7b:a2:49: a2:c8:f9:07:6b:c6:83:d8:7c:34:54:56:14:f2:1a: ae:2c:a5:25:7c:38:4b:36:c3:98:34:e5:4f:48:67: 01:1d:05:a2:1b:b2:1e:e4:30:61:8e:ce:03:07:b8: 1e:da:54:1d:e5:33:78:ae:45:67:34:c7:9b:7a:92: f2:60:8e:58:75:a6:05:81:3e:a0:df:f9:ed:22:c0: e3:13:b1:62:4e:2a:b2:1c:4e:35:ba:50:07:c5:4d: 9a:66:48:bd:d6:74:89:86:de:3f:6e:a0:2b:6f:6d: 3c:4c:db:e5:47:2d:2e:5c:a2:bf:50:dd:a8:ce:80: ad:16:f9:50:e3:28:a9:70:a1:9e:b8:b5:c2:43:0a: 26:38:15:de:7c:5f:b0:39:31:69:0d:a9:0e:0d:aa: 07:d3:25:b8:16:a6:fe:d1:d4:7a:63:9c:89:a7:65: cc:86:5b:2a:e9:92:47:86:1d:91:dc:64:c1:ef:c3: d0:fc:b2:ac:09:2b:95:5d:86:0f:92:d4:4c:d1:d0: 7e:3b:be:d7:d2:1b:99:ff:59:5b:6c:db:4f:dc:31: be:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:3D:99:4C:8E:A8:61:04:3A:49:44:0D:04:5C:2E:55:AE:64:B6:FA X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/tj2ZTI6oYQQ6SUQNBFwuVa5ktvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.98.140.0/22 Signature Algorithm: sha256WithRSAEncryption ac:a0:cc:54:1a:c1:de:af:85:86:69:9c:a8:1a:49:3a:84:50: 6a:42:20:9d:7e:6e:da:8e:9d:2f:b8:93:2e:5a:32:dc:ed:4c: 73:28:aa:34:a3:1a:f4:00:db:00:66:77:f1:45:91:cd:9e:84: 92:bc:c9:6f:2a:d6:a7:f3:39:6c:2f:7b:a1:6b:7f:ea:09:28: 75:88:86:e3:7c:4d:09:f8:48:c3:35:fd:e4:ec:77:91:d6:eb: 98:fe:3f:d7:c1:d0:57:88:be:ba:36:3a:09:39:ae:32:50:ce: 5a:06:a1:57:bc:5d:bd:6b:8a:7f:8e:31:3d:09:04:3a:77:ce: 58:30:d9:56:e8:d2:0b:bf:28:91:22:00:d8:fa:18:4e:a2:11: 2f:a2:82:80:5d:0e:57:81:a1:6d:d0:a8:56:64:03:fc:7a:d1: d7:53:8d:2c:f7:58:6a:54:67:7a:01:ed:14:09:6e:23:94:fb: 3b:ef:ad:60:9f:56:ad:85:6c:b3:68:54:71:f6:6f:04:fa:2b: b9:df:36:c4:2e:b2:8a:23:be:97:ae:33:13:2a:4d:f8:5b:97: 46:20:6e:1b:50:5c:42:e6:c9:ab:e8:cd:32:ab:1a:b0:0b:dc: 90:e9:f8:f5:3a:1c:34:ad:1a:e7:bc:84:b6:76:cb:07:d2:c6: d9:08:e4:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrpx2LlPNDeR0WHWyHGkt/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjUxMjA0MTQzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjNkOTk0YzhlYTg2MTA0M2E0OTQ0MGQwNDVjMmU1NWFlNjRiNmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6EC9F2u8EISqr5t/HJdWuygcxv9 5SQSZvWFcaLHHEMLX3dX+1uvOUZ7okmiyPkHa8aD2Hw0VFYU8hquLKUlfDhLNsOY NOVPSGcBHQWiG7Ie5DBhjs4DB7ge2lQd5TN4rkVnNMebepLyYI5YdaYFgT6g3/nt IsDjE7FiTiqyHE41ulAHxU2aZki91nSJht4/bqArb208TNvlRy0uXKK/UN2ozoCt FvlQ4yipcKGeuLXCQwomOBXefF+wOTFpDakODaoH0yW4Fqb+0dR6Y5yJp2XMhlsq 6ZJHhh2R3GTB78PQ/LKsCSuVXYYPktRM0dB+O77X0huZ/1lbbNtP3DG+aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLY9mUyOqGEEOklEDQRcLlWuZLb6MB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvdGoyWlRJNm9ZUVE2U1VRTkJGd3VWYTVrdHZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2QtNzZmYTUxNWI0YjZl LzEvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCH2KMMA0G CSqGSIb3DQEBCwUAA4IBAQCsoMxUGsHer4WGaZyoGkk6hFBqQiCdfm7ajp0vuJMu WjLc7UxzKKo0oxr0ANsAZnfxRZHNnoSSvMlvKtan8zlsL3uha3/qCSh1iIbjfE0J +EjDNf3k7HeR1uuY/j/XwdBXiL66NjoJOa4yUM5aBqFXvF29a4p/jjE9CQQ6d85Y MNlW6NILvyiRIgDY+hhOohEvooKAXQ5XgaFt0KhWZAP8etHXU40s91hqVGd6Ae0U CW4jlPs7761gn1athWyzaFRx9m8E+iu53zbELrKKI76XrjMTKk34W5dGIG4bUFxC 5smr6M0yqxqwC9yQ6fj1Ohw0rRrnvIS2dssH0sbZCOQK -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:49 2025 by rpki-client