This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/adGon4jeIZ0r-mmhwuDe1fI5B2k.roa File: adGon4jeIZ0r-mmhwuDe1fI5B2k.roa (raw, json) Hash identifier: aBRQa0UMkK3S5EnY+OV2wpOm+sDP6DLxGshcVdzFnDI= Subject key identifier: 69:D1:A8:9F:88:DE:21:9D:2B:FA:69:A1:C2:E0:DE:D5:F2:39:07:69 Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019AFD5BE7ABA6AD7A29869CE40BE6E1254A Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/adGon4jeIZ0r-mmhwuDe1fI5B2k.roa Signing time: Mon 08 Dec 2025 09:47:29 +0000 ROA not before: Mon 08 Dec 2025 09:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62904 IP address blocks: 31.172.69.0/24 maxlen: 24 31.172.79.0/24 maxlen: 24 81.85.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:5b:e7:ab:a6:ad:7a:29:86:9c:e4:0b:e6:e1:25:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Dec 8 09:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69d1a89f88de219d2bfa69a1c2e0ded5f2390769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:6f:0b:b9:46:b8:f1:bc:99:1f:1f:0e:b8: 69:67:82:5c:0a:69:d1:3f:62:35:06:ea:14:8a:c7: f6:86:a2:f9:44:af:38:a1:78:b4:d8:a3:86:f6:0f: ab:12:8d:94:2b:79:f8:47:9b:58:df:ef:ef:5b:c2: 38:4f:4b:3f:84:ff:30:77:e5:01:f3:91:1e:ea:cf: 09:ec:5a:a7:ef:8a:17:ec:8a:e6:2a:6d:45:f7:3b: a6:08:1c:09:dd:17:da:e1:4a:2b:a6:2f:22:26:15: b5:d6:3d:3d:83:aa:ba:79:54:cc:bb:e8:8f:ac:2a: b3:ea:ff:37:d0:ce:b3:a9:10:ea:f4:f4:2b:17:de: c1:cf:73:19:a2:96:75:bb:06:89:c8:a4:87:a9:c5: bc:a2:d2:bc:62:70:38:03:f0:2c:e2:20:cf:79:7e: 15:11:a7:f2:9c:75:f8:f1:85:0b:13:52:54:05:d7: cb:c9:94:ff:32:56:a9:26:de:7b:2c:aa:fe:20:92: b0:61:3b:3e:71:e4:49:1b:bc:60:a8:05:43:9d:52: f0:36:d6:61:90:4d:4e:d6:65:ef:37:5e:50:a8:86: 0f:77:da:40:c7:c9:b4:20:27:d8:6d:e8:1f:b9:72: db:9f:0d:5a:26:b5:9c:2d:2a:a4:a1:64:2c:8c:83: 03:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:A8:9F:88:DE:21:9D:2B:FA:69:A1:C2:E0:DE:D5:F2:39:07:69 X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/adGon4jeIZ0r-mmhwuDe1fI5B2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.69.0/24 31.172.79.0/24 81.85.77.0/24 Signature Algorithm: sha256WithRSAEncryption 27:d2:17:b8:6d:e3:83:53:7a:eb:14:64:25:b1:bd:f8:6e:69: 67:bc:67:bb:aa:b1:52:67:4f:35:ba:59:35:f7:c7:41:58:18: e2:d7:58:74:62:be:bc:44:c8:30:73:fe:c0:60:63:1e:f8:8a: b6:c3:bf:c4:e2:d1:9e:62:9d:7a:fe:98:6d:4e:e0:6d:9d:fd: c5:2b:14:73:b4:eb:34:e7:2c:da:3f:38:29:f4:75:29:63:c3: 9a:28:5e:eb:8b:19:6a:a8:4c:64:17:64:66:8d:60:30:09:87: da:6b:e0:5d:3c:64:28:cb:56:f7:6b:46:6d:43:6e:5d:1e:ac: a6:51:7a:db:1a:e6:f3:4c:1c:e2:9a:bc:2a:46:06:a9:48:d6: 24:b0:79:e3:52:32:fd:74:4e:61:af:cd:1c:b4:13:3c:2b:d8: 73:22:aa:31:ac:e6:9d:7d:2b:10:6d:cb:32:48:fc:ff:d6:a9: 60:48:d7:39:26:1c:da:c3:9f:35:b9:ec:f7:cb:74:de:65:95: 74:6c:9b:32:bf:6b:aa:ae:92:2a:4b:a5:2b:e1:ae:d1:0e:ae: e7:5e:ee:50:68:03:70:31:9f:54:a1:80:f5:66:57:34:d3:8f: 76:a8:da:b5:3f:e7:47:5a:3c:9d:80:47:f6:0d:30:5d:a2:81: dd:37:b6:55 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr9W+erpq16KYac5Avm4SVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjUxMjA4MDk0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OWQxYTg5Zjg4ZGUyMTlkMmJmYTY5YTFjMmUwZGVkNWYyMzkwNzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyepvC7lGuPG8mR8fDrhpZ4JcCmnR P2I1BuoUisf2hqL5RK84oXi02KOG9g+rEo2UK3n4R5tY3+/vW8I4T0s/hP8wd+UB 85Ee6s8J7Fqn74oX7IrmKm1F9zumCBwJ3Rfa4Uorpi8iJhW11j09g6q6eVTMu+iP rCqz6v830M6zqRDq9PQrF97Bz3MZopZ1uwaJyKSHqcW8otK8YnA4A/As4iDPeX4V EafynHX48YULE1JUBdfLyZT/MlapJt57LKr+IJKwYTs+ceRJG7xgqAVDnVLwNtZh kE1O1mXvN15QqIYPd9pAx8m0ICfYbegfuXLbnw1aJrWcLSqkoWQsjIMDqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGnRqJ+I3iGdK/ppocLg3tXyOQdpMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvYWRHb240amVJWjByLW1taHd1RGUxZkk1QjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAH6xFAwQA H6xPAwQAUVVNMA0GCSqGSIb3DQEBCwUAA4IBAQAn0he4beODU3rrFGQlsb34bmln vGe7qrFSZ081ulk198dBWBji11h0Yr68RMgwc/7AYGMe+Iq2w7/E4tGeYp16/pht TuBtnf3FKxRztOs05yzaPzgp9HUpY8OaKF7rixlqqExkF2RmjWAwCYfaa+BdPGQo y1b3a0ZtQ25dHqymUXrbGubzTBzimrwqRgapSNYksHnjUjL9dE5hr80ctBM8K9hz IqoxrOadfSsQbcsySPz/1qlgSNc5Jhzaw581uez3y3TeZZV0bJsyv2uqrpIqS6Ur 4a7RDq7nXu5QaANwMZ9UoYD1Zlc00492qNq1P+dHWjydgEf2DTBdooHdN7ZV -----END CERTIFICATE-----Generated at Thu Dec 18 20:29:58 2025 by rpki-client