This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-zN68RzDUkQSvJXNS8dincbUleI.roa File: 1-zN68RzDUkQSvJXNS8dincbUleI.roa (raw, json) Hash identifier: fE4oeSoLwqVmRgDbSnTQc1QLzjzal3yIn5BqU7p0EaA= Subject key identifier: FB:33:7A:F1:1C:C3:52:44:12:BC:95:CD:4B:C7:62:9D:C6:D4:95:E2 Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Certificate serial: 019B1E114FA4BDA017D07A6B2A546CF45569 Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-zN68RzDUkQSvJXNS8dincbUleI.roa Signing time: Sun 14 Dec 2025 18:13:29 +0000 ROA not before: Sun 14 Dec 2025 18:13:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 31.98.140.0/22 maxlen: 22 31.98.144.0/20 maxlen: 20 31.98.160.0/19 maxlen: 19 31.98.192.0/19 maxlen: 19 31.105.0.0/18 maxlen: 18 31.105.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:11:4f:a4:bd:a0:17:d0:7a:6b:2a:54:6c:f4:55:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06 Validity Not Before: Dec 14 18:13:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fb337af11cc3524412bc95cd4bc7629dc6d495e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3a:db:d9:5b:1e:ec:bd:6b:20:55:e4:bd:ff: 63:85:7e:90:0a:41:3e:63:aa:44:7e:23:ce:d1:d7: 15:e6:40:bc:e0:90:41:fc:0e:e1:da:a7:22:3e:53: 80:dc:38:80:52:52:a3:30:fc:cd:3a:89:4a:4c:46: 28:2b:5a:f1:0f:07:5c:60:da:1a:53:47:00:20:97: fe:cc:dc:e6:b1:02:f2:01:8d:74:8d:35:69:47:b7: 5c:99:a2:a6:75:b9:69:a3:67:b7:a2:d9:8c:c2:53: 54:1e:5b:04:7f:05:09:02:f4:2e:75:90:83:cc:a3: 8d:d8:8c:99:13:47:59:d0:ca:0a:15:f9:43:e3:95: b7:ee:34:aa:fa:49:c6:75:0b:e4:91:47:db:55:c9: 3e:11:d4:db:d8:07:8c:8e:24:c0:29:75:9d:01:e6: df:62:36:84:cf:1c:bd:0b:76:ae:6a:48:d7:61:49: bd:85:7a:9e:f6:b6:25:d5:c1:31:a3:46:6a:d7:31: d5:d7:51:ec:ac:1f:00:0a:16:5d:23:36:4c:cb:d3: d8:5b:92:de:fd:9e:63:96:f8:e2:e8:84:52:5c:da: c3:5a:9f:62:7f:68:41:d7:91:7d:e3:8e:6a:10:d7: 85:da:04:7d:11:76:e8:11:89:a7:80:cb:cc:cd:ac: 5a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:33:7A:F1:1C:C3:52:44:12:BC:95:CD:4B:C7:62:9D:C6:D4:95:E2 X509v3 Authority Key Identifier: keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/1-zN68RzDUkQSvJXNS8dincbUleI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.98.140.0-31.98.223.255 31.105.0.0-31.105.95.255 Signature Algorithm: sha256WithRSAEncryption 0c:86:be:1c:b0:91:d5:c7:11:fb:42:c1:67:d2:41:c3:72:51: 36:7c:8b:b8:a6:4b:e3:93:ad:8b:b3:cd:ad:8a:67:24:ed:51: b0:e2:2a:30:ae:46:a3:48:d4:e3:2c:56:63:e0:e2:0c:95:86: e2:4d:97:5f:ba:6e:e6:3a:a2:54:21:21:a9:cb:65:ae:88:ad: d6:84:32:33:31:f7:b9:6d:44:1b:12:d1:05:d3:f3:56:2f:8a: 72:b9:96:65:e3:f9:9e:0b:60:a9:73:60:76:92:b6:ea:13:54: f0:9f:a3:66:7b:c4:0c:b2:cf:62:bf:da:93:5c:81:ee:a1:c5: 5d:7b:20:14:77:8b:1b:9a:96:99:b8:ef:87:3c:23:57:09:b6: fc:50:a6:b1:0c:2f:1b:38:6f:91:26:fd:2c:0c:2a:87:2b:cd: 96:84:24:17:cf:b3:40:5d:d5:ca:1d:eb:5c:5e:9b:36:49:db: 53:54:d5:93:22:40:c4:cf:5c:57:ef:f5:e3:78:69:c3:cb:34: 44:e8:8b:9b:ca:76:23:4d:80:6e:c7:72:23:1c:74:8c:de:19: d8:b0:2d:ef:be:7a:27:3f:39:8e:08:98:54:41:f9:d0:0a:e3: cc:89:30:d5:e3:66:eb:42:a4:30:60:8f:20:a4:b3:a1:66:d9: 8f:32:4e:f3 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZseEU+kvaAX0HprKlRs9FVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDQ2OGYzY2MzZjM4NmYyNmU2MjgxYjdmYThiMGMzYmIy MzZhMDYwHhcNMjUxMjE0MTgxMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjMzN2FmMTFjYzM1MjQ0MTJiYzk1Y2Q0YmM3NjI5ZGM2ZDQ5NWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zrb2Vse7L1rIFXkvf9jhX6QCkE+ Y6pEfiPO0dcV5kC84JBB/A7h2qciPlOA3DiAUlKjMPzNOolKTEYoK1rxDwdcYNoa U0cAIJf+zNzmsQLyAY10jTVpR7dcmaKmdblpo2e3otmMwlNUHlsEfwUJAvQudZCD zKON2IyZE0dZ0MoKFflD45W37jSq+knGdQvkkUfbVck+EdTb2AeMjiTAKXWdAebf YjaEzxy9C3auakjXYUm9hXqe9rYl1cExo0Zq1zHV11HsrB8AChZdIzZMy9PYW5Le /Z5jlvji6IRSXNrDWp9if2hB15F9445qENeF2gR9EXboEYmngMvMzaxarQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPszevEcw1JEEryVzUvHYp3G1JXiMB8GA1UdIwQY MBaAFNlEaPPMPzhvJuYoG3+osMO7I2oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVSbzg4d19PRzhtNWlnYmY2aXd3N3NqYWdZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84Mjg3MWUtNTJhMC00MGRmLWFlM2Qt NzZmYTUxNWI0YjZlLzEvMS16TjY4UnpEVWtRU3ZKWE5TOGRpbmNiVWxlSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmIvODI4NzFlLTUyYTAtNDBkZi1hZTNkLTc2ZmE1MTViNGI2 ZS8xLzJVUm84OHdfT0c4bTVpZ2JmNml3dzdzamFnWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwIQQCAAEwGzAMAwQCH2KM AwQFH2LAMAsDAwAfaQMEBR9pQDANBgkqhkiG9w0BAQsFAAOCAQEADIa+HLCR1ccR +0LBZ9JBw3JRNnyLuKZL45Oti7PNrYpnJO1RsOIqMK5Go0jU4yxWY+DiDJWG4k2X X7pu5jqiVCEhqctlroit1oQyMzH3uW1EGxLRBdPzVi+KcrmWZeP5ngtgqXNgdpK2 6hNU8J+jZnvEDLLPYr/ak1yB7qHFXXsgFHeLG5qWmbjvhzwjVwm2/FCmsQwvGzhv kSb9LAwqhyvNloQkF8+zQF3Vyh3rXF6bNknbU1TVkyJAxM9cV+/143hpw8s0ROiL m8p2I02AbsdyIxx0jN4Z2LAt7756Jz85jgiYVEH50ArjzIkw1eNm60KkMGCPIKSz oWbZjzJO8w== -----END CERTIFICATE-----Generated at Fri Dec 19 20:18:48 2025 by rpki-client