This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/7fLUpyKKPrBgGFQS34m8446XoSg.roa File: 7fLUpyKKPrBgGFQS34m8446XoSg.roa (raw, json) Hash identifier: OTvk1iOGoxbyUJ3vxjQiy7VEf0n7PWAfE2T+vy9sMmc= Subject key identifier: ED:F2:D4:A7:22:8A:3E:B0:60:18:54:12:DF:89:BC:E3:8E:97:A1:28 Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3 Certificate serial: 019B45CCD1C7D14C54FC8084591BE48D2E7B Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/7fLUpyKKPrBgGFQS34m8446XoSg.roa Signing time: Mon 22 Dec 2025 11:23:29 +0000 ROA not before: Mon 22 Dec 2025 11:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 31.99.64.0/18 maxlen: 18 31.99.128.0/18 maxlen: 18 31.99.192.0/21 maxlen: 21 31.99.200.0/21 maxlen: 21 31.99.208.0/20 maxlen: 20 31.99.224.0/19 maxlen: 19 178.106.0.0/16 maxlen: 16 178.107.32.0/19 maxlen: 19 178.107.64.0/18 maxlen: 18 185.102.192.0/22 maxlen: 22 185.102.196.0/22 maxlen: 22 185.102.200.0/22 maxlen: 22 194.36.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:cc:d1:c7:d1:4c:54:fc:80:84:59:1b:e4:8d:2e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b98127943e7175734964010c89ef821416a31b3 Validity Not Before: Dec 22 11:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=edf2d4a7228a3eb060185412df89bce38e97a128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fd:05:e3:5d:3b:75:eb:67:40:3d:69:1f:ef: b3:5b:69:dc:11:bf:d8:9c:93:e3:ce:ec:08:2e:ef: 06:85:cd:fc:4f:29:0b:12:e5:d1:f4:be:fb:a9:43: 94:ab:74:dd:44:c3:64:37:38:d6:19:a9:ca:97:30: 8f:ae:d1:cf:39:80:bb:5b:cc:67:54:5f:03:e2:bc: bf:67:12:8d:69:ee:4e:5c:75:99:a6:80:25:13:1f: 74:bd:cc:12:cc:87:42:50:6c:ed:2e:91:a8:93:99: e4:1d:74:fc:e6:d6:c0:d6:40:d9:aa:53:bf:13:74: 00:29:aa:87:1f:b2:cd:dc:d9:ba:27:8b:a3:c0:cc: cf:b8:ea:2f:90:5c:69:ab:af:ce:b9:d9:58:a3:58: e9:0f:88:10:7d:d5:3a:17:4e:e1:ff:17:03:f3:d6: 44:89:8b:41:7d:f2:7e:9f:cb:d8:09:1f:0f:2a:29: 07:27:6f:31:77:d4:d5:09:4b:e0:91:ea:7c:90:1d: cd:db:f5:9a:6d:2d:19:fc:23:3c:00:83:ca:68:de: d3:a5:76:9b:b0:6f:a7:36:be:8d:00:3a:d8:eb:f7: 46:3e:e4:ad:0f:94:d2:b6:ab:10:b8:ea:fd:0d:b3: 73:4e:11:3d:e3:a0:e6:de:61:79:57:03:32:00:c4: 8c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F2:D4:A7:22:8A:3E:B0:60:18:54:12:DF:89:BC:E3:8E:97:A1:28 X509v3 Authority Key Identifier: keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/7fLUpyKKPrBgGFQS34m8446XoSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.99.64.0-31.99.255.255 178.106.0.0/16 178.107.32.0-178.107.127.255 185.102.192.0-185.102.203.255 194.36.212.0/22 Signature Algorithm: sha256WithRSAEncryption 17:67:fc:d1:81:b8:e9:44:ad:e6:3f:3a:aa:21:34:68:94:7c: 6a:b6:c4:5e:c4:4f:16:17:66:9b:f4:25:02:75:f6:bc:bb:9b: 62:39:c9:a1:90:40:b7:66:c0:b6:b9:e9:44:c0:fc:a6:07:68: 8b:18:fc:4a:8d:f9:6b:85:e7:ff:2c:2d:ed:5f:b4:08:2f:e2: 10:d5:2f:2e:a7:5e:a8:21:bc:14:0c:be:05:55:b7:90:9b:78: da:6c:83:8a:aa:e4:87:23:fa:9a:56:fc:ba:bf:2b:61:0e:bb: 7f:fb:5c:60:ea:9a:4c:44:73:b5:78:83:b6:52:51:2d:08:02: f1:0e:ba:e5:71:99:10:66:33:0c:53:e0:8e:8c:dc:07:c8:01: 2a:fc:89:ec:ff:89:7e:28:d8:d2:40:96:6a:62:37:9c:67:2d: af:a8:7a:89:18:2f:7a:c3:a5:58:a4:31:92:cc:3b:55:c6:1c: b3:6d:83:ad:d9:b3:9a:ab:d4:13:79:62:c7:21:16:1a:27:f5: 4a:38:fc:9b:56:fd:61:f3:31:ad:1a:22:01:7d:ec:0b:33:ba: b0:31:2d:b4:6e:ea:a0:d8:1d:2c:c2:32:bb:b6:f8:61:e3:98: 35:d3:6b:45:72:c4:12:84:df:59:2b:02:8a:85:7a:0b:16:41: fb:75:60:ba -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZtFzNHH0UxU/ICEWRvkjS57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2 YTMxYjMwHhcNMjUxMjIyMTEyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGYyZDRhNzIyOGEzZWIwNjAxODU0MTJkZjg5YmNlMzhlOTdhMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/0F4107detnQD1pH++zW2ncEb/Y nJPjzuwILu8Ghc38TykLEuXR9L77qUOUq3TdRMNkNzjWGanKlzCPrtHPOYC7W8xn VF8D4ry/ZxKNae5OXHWZpoAlEx90vcwSzIdCUGztLpGok5nkHXT85tbA1kDZqlO/ E3QAKaqHH7LN3Nm6J4ujwMzPuOovkFxpq6/OudlYo1jpD4gQfdU6F07h/xcD89ZE iYtBffJ+n8vYCR8PKikHJ28xd9TVCUvgkep8kB3N2/WabS0Z/CM8AIPKaN7TpXab sG+nNr6NADrY6/dGPuStD5TStqsQuOr9DbNzThE946Dm3mF5VwMyAMSMwQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFO3y1Kciij6wYBhUEt+JvOOOl6EoMB8GA1UdIwQY MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt NjIxNzkyZjdlNTZhLzEvN2ZMVXB5S0tQckJnR0ZRUzM0bTg0NDZYb1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAsDBAYfY0AD AwIfYAMDALJqMAwDBAWyayADBAeyawAwDAMEBrlmwAMEArlmyAMEAsIk1DANBgkq hkiG9w0BAQsFAAOCAQEAF2f80YG46USt5j86qiE0aJR8arbEXsRPFhdmm/QlAnX2 vLubYjnJoZBAt2bAtrnpRMD8pgdoixj8So35a4Xn/ywt7V+0CC/iENUvLqdeqCG8 FAy+BVW3kJt42myDiqrkhyP6mlb8ur8rYQ67f/tcYOqaTERztXiDtlJRLQgC8Q66 5XGZEGYzDFPgjozcB8gBKvyJ7P+JfijY0kCWamI3nGctr6h6iRgvesOlWKQxksw7 VcYcs22DrdmzmqvUE3lixyEWGif1Sjj8m1b9YfMxrRoiAX3sCzO6sDEttG7qoNgd LMIyu7b4YeOYNdNrRXLEEoTfWSsCioV6CxZB+3Vgug== -----END CERTIFICATE-----Generated at Mon Dec 22 15:26:59 2025 by rpki-client