This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/8zI-lFDcUB2RgRcC00g1yOL2ifM.roa File: 8zI-lFDcUB2RgRcC00g1yOL2ifM.roa (raw, json) Hash identifier: ULWbyz8b/wiEOd2bKihWm3PGPz2cXLYtHufs/seETw0= Subject key identifier: F3:32:3E:94:50:DC:50:1D:91:81:17:02:D3:48:35:C8:E2:F6:89:F3 Certificate issuer: /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f Certificate serial: 019B3579710527691B5C01E39CA8237E6E86 Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/8zI-lFDcUB2RgRcC00g1yOL2ifM.roa Signing time: Fri 19 Dec 2025 07:18:29 +0000 ROA not before: Fri 19 Dec 2025 07:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34762 IP address blocks: 213.158.76.0/22 maxlen: 24 213.158.84.0/22 maxlen: 24 213.158.88.0/23 maxlen: 24 213.158.90.0/23 maxlen: 24 213.158.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:79:71:05:27:69:1b:5c:01:e3:9c:a8:23:7e:6e:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f Validity Not Before: Dec 19 07:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3323e9450dc501d91811702d34835c8e2f689f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:52:24:55:28:06:a7:8a:af:1f:ac:86:a4:82: 48:64:2c:97:2b:30:f4:f3:8d:6a:09:18:2d:b1:76: 06:08:68:b4:07:ce:ea:5f:92:84:1d:af:9f:52:15: 95:80:b8:c6:d6:e6:42:62:21:68:29:ff:6f:95:47: ef:67:0e:e2:26:4b:3d:24:75:8d:28:eb:f1:ae:09: b3:ae:ec:14:f4:45:c6:d9:e9:df:b7:45:33:08:90: 67:eb:55:b3:01:34:22:60:e3:6e:9f:e7:51:70:12: fb:3c:d4:56:4a:0c:47:90:b3:ba:62:58:25:1c:a7: 0f:76:fb:d4:27:0a:3b:85:ef:89:05:b2:2d:a0:31: 12:4d:48:d3:aa:9c:38:31:12:fd:27:58:b4:51:0f: f6:21:7f:30:8e:66:9f:88:d4:ce:b0:3c:f9:59:d2: 76:06:70:ed:2f:80:30:33:bf:12:70:fb:25:52:64: 6d:ef:b4:8e:84:84:b5:e8:1c:a5:a1:2e:9b:3d:b6: fd:62:cd:65:61:3d:67:fe:fc:13:0d:e8:71:4c:6f: 37:dc:db:61:f8:47:81:17:12:76:16:5e:3a:fb:f7: e0:89:c3:96:55:bd:0e:75:43:ea:a8:4b:cb:e2:06: 19:f5:e8:5f:fc:fe:91:34:f7:e5:87:d6:01:61:e8: 5b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:32:3E:94:50:DC:50:1D:91:81:17:02:D3:48:35:C8:E2:F6:89:F3 X509v3 Authority Key Identifier: keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/8zI-lFDcUB2RgRcC00g1yOL2ifM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.158.76.0/22 213.158.84.0-213.158.95.255 Signature Algorithm: sha256WithRSAEncryption 6b:f8:0d:14:ee:44:0a:75:28:75:66:cd:f5:93:45:be:08:0a: 58:08:c3:60:80:e5:ab:8b:91:28:78:81:c1:d2:f3:e0:58:83: 61:38:50:86:e8:6f:3f:89:87:4f:d0:7d:1c:36:15:fe:47:a2: 83:c4:32:60:4d:f3:3a:12:35:55:f7:a2:c4:1a:88:95:e0:0c: 3c:76:8c:9f:e7:15:c1:1b:15:05:28:52:4a:f5:75:89:cc:84: 7b:c6:7a:f0:b8:8d:79:db:8f:88:78:d7:28:34:f6:a3:56:fa: 5e:31:de:01:3e:5c:0b:d5:a1:80:d7:28:67:8a:fb:27:1a:58: 03:82:e3:19:de:71:d4:23:3c:9f:ec:41:07:41:be:03:15:0e: ef:f1:72:1f:e0:ff:c5:6e:63:88:5d:2f:d2:53:f4:e5:97:61: 07:b9:f0:76:fa:fe:e9:f1:28:19:9d:3a:49:41:13:6d:b1:d9: fc:07:83:8a:74:05:f7:67:66:5c:ca:5b:7d:2e:10:fd:85:69: 0e:c0:80:52:18:1b:a9:bc:33:ae:4e:a9:d5:37:97:a1:5a:a0: 67:01:fc:74:8d:4c:1d:cb:6f:13:3c:85:98:47:cc:4c:cd:2b: 93:d2:8a:0a:e3:d2:f7:52:ea:80:71:60:48:ce:fb:c9:e7:e3: c6:05:5b:b0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZs1eXEFJ2kbXAHjnKgjfm6GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGRjMTJiMGYxYjUzM2Q4ZDA0ZWM2MTE3ZDZiOWU1MTJm Y2FhOWYwHhcNMjUxMjE5MDcxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzMyM2U5NDUwZGM1MDFkOTE4MTE3MDJkMzQ4MzVjOGUyZjY4OWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1IkVSgGp4qvH6yGpIJIZCyXKzD0 841qCRgtsXYGCGi0B87qX5KEHa+fUhWVgLjG1uZCYiFoKf9vlUfvZw7iJks9JHWN KOvxrgmzruwU9EXG2enft0UzCJBn61WzATQiYONun+dRcBL7PNRWSgxHkLO6Ylgl HKcPdvvUJwo7he+JBbItoDESTUjTqpw4MRL9J1i0UQ/2IX8wjmafiNTOsDz5WdJ2 BnDtL4AwM78ScPslUmRt77SOhIS16ByloS6bPbb9Ys1lYT1n/vwTDehxTG833Nth +EeBFxJ2Fl46+/fgicOWVb0OdUPqqEvL4gYZ9ehf/P6RNPflh9YBYehbywIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPMyPpRQ3FAdkYEXAtNINcji9onzMB8GA1UdIwQY MBaAFK8NwSsPG1M9jQTsYRfWueUS/KqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYt YmM1YjY5MTQ0NTg3LzEvOHpJLWxGRGNVQjJSZ1JjQzAwZzF5T0wyaWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYtYmM1YjY5MTQ0NTg3 LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQC1Z5MMAwD BALVnlQDBAXVnkAwDQYJKoZIhvcNAQELBQADggEBAGv4DRTuRAp1KHVmzfWTRb4I ClgIw2CA5auLkSh4gcHS8+BYg2E4UIbobz+Jh0/QfRw2Ff5HooPEMmBN8zoSNVX3 osQaiJXgDDx2jJ/nFcEbFQUoUkr1dYnMhHvGevC4jXnbj4h41yg09qNW+l4x3gE+ XAvVoYDXKGeK+ycaWAOC4xnecdQjPJ/sQQdBvgMVDu/xch/g/8VuY4hdL9JT9OWX YQe58Hb6/unxKBmdOklBE22x2fwHg4p0BfdnZlzKW30uEP2FaQ7AgFIYG6m8M65O qdU3l6FaoGcB/HSNTB3LbxM8hZhHzEzNK5PSigrj0vdS6oBxYEjO+8nn48YFW7A= -----END CERTIFICATE-----Generated at Sun Dec 21 00:08:51 2025 by rpki-client