This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/O9epNS0NrOI-bOL5KKfYRX4De8A.roa File: O9epNS0NrOI-bOL5KKfYRX4De8A.roa (raw, json) Hash identifier: G611SXA/jC4vDIlVwFGLwWk81ZAiML9tAZ+IqKvstVo= Subject key identifier: 3B:D7:A9:35:2D:0D:AC:E2:3E:6C:E2:F9:28:A7:D8:45:7E:03:7B:C0 Certificate issuer: /CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Certificate serial: 019A5D4E828D6AF0AF67F63BCF0A9376F339 Authority key identifier: 5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/O9epNS0NrOI-bOL5KKfYRX4De8A.roa Signing time: Fri 07 Nov 2025 07:53:37 +0000 ROA not before: Fri 07 Nov 2025 07:53:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4455 IP address blocks: 31.217.128.0/19 maxlen: 24 31.217.128.0/24 maxlen: 24 31.217.129.0/24 maxlen: 24 31.217.130.0/24 maxlen: 24 46.18.168.0/21 maxlen: 24 83.243.16.0/21 maxlen: 24 89.30.0.0/17 maxlen: 24 89.30.58.0/24 maxlen: 24 89.30.68.0/22 maxlen: 24 91.196.184.0/22 maxlen: 24 185.55.16.0/22 maxlen: 24 185.143.244.0/22 maxlen: 22 194.126.217.0/24 maxlen: 24 212.121.32.0/19 maxlen: 24 2a01:8200::/32 maxlen: 64 2a02:27f0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5d:4e:82:8d:6a:f0:af:67:f6:3b:cf:0a:93:76:f3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e400ac2396ae228d2b2e56f4b06739969379e44 Validity Not Before: Nov 7 07:53:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3bd7a9352d0dace23e6ce2f928a7d8457e037bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:a0:13:61:0b:ad:8f:e8:0d:db:33:b7:1f: 8e:8c:02:4c:15:3e:8d:02:92:d1:ce:eb:33:aa:b0: 68:b2:f0:62:45:74:6e:cd:88:ab:7c:cc:9d:e0:8d: 8e:6b:6a:94:ec:e3:cb:ed:b6:c5:e6:d3:48:94:b9: f0:c0:24:76:8f:0e:cb:88:f2:9c:5b:cb:cb:ab:38: 77:7d:ba:6d:5f:0d:ec:c4:92:62:c9:81:95:5a:e2: d3:62:ce:75:ab:33:50:7b:9c:10:f2:4b:9f:36:d8: b2:39:d5:27:8b:4c:f8:af:f6:37:97:c1:26:da:36: c5:16:24:c1:b1:3d:4c:63:dc:b7:6a:be:c0:91:9c: f9:83:15:52:01:8f:e0:cf:7a:62:54:0c:3b:c6:79: 84:b5:64:5e:82:ac:40:3d:99:b4:20:01:4d:36:63: 7b:01:c2:20:42:f5:17:55:58:37:df:e9:76:ce:0c: a0:fb:12:70:c6:2d:5f:06:16:03:43:7f:a0:e9:99: 5c:10:0e:cc:9c:a6:79:d8:9e:46:de:fb:e7:97:4d: 6b:09:c3:76:30:af:d8:21:87:78:55:14:75:78:66: bc:3b:00:f8:58:1f:23:a7:f8:09:fd:68:83:cd:0a: f0:68:02:5a:54:d3:80:57:cb:77:1c:d0:ba:78:2f: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:A9:35:2D:0D:AC:E2:3E:6C:E2:F9:28:A7:D8:45:7E:03:7B:C0 X509v3 Authority Key Identifier: keyid:5E:40:0A:C2:39:6A:E2:28:D2:B2:E5:6F:4B:06:73:99:69:37:9E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/O9epNS0NrOI-bOL5KKfYRX4De8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d67a95-cb36-4937-9226-dfed12f1a01e/1/XkAKwjlq4ijSsuVvSwZzmWk3nkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.217.128.0/19 46.18.168.0/21 83.243.16.0/21 89.30.0.0/17 91.196.184.0/22 185.55.16.0/22 185.143.244.0/22 194.126.217.0/24 212.121.32.0/19 IPv6: 2a01:8200::/32 2a02:27f0::/32 Signature Algorithm: sha256WithRSAEncryption 83:55:8f:9d:bd:81:de:b6:d4:ec:60:f2:ee:ea:5e:27:56:00: f0:74:be:72:d4:10:35:9d:6d:e0:f1:ca:8c:1b:83:82:4b:0f: 9c:88:47:fc:bc:3f:1d:11:d1:5a:ac:cc:6c:fd:5b:65:43:b2: 68:e1:11:1b:18:c8:66:22:d8:85:b7:8b:1e:97:7c:5e:ee:b4: 6b:1b:35:38:25:50:43:9a:73:62:f5:07:3a:09:a7:24:36:e4: 77:46:31:4c:f6:a6:ce:16:ec:64:e5:77:b7:92:5c:11:be:db: 9a:d1:8e:2c:00:83:b3:37:c2:a5:82:ce:58:1d:82:7f:f4:e4: 69:ac:70:5d:7c:25:e9:7e:78:87:ea:f6:9d:a1:10:00:0e:f5: 01:9d:9f:6a:9f:4e:e5:12:2b:e8:25:2c:01:67:d5:b5:bd:80: 43:67:ea:df:12:31:f7:7e:bf:30:6c:bf:ba:44:85:b4:e7:2c: 5d:6e:ef:6d:a3:7a:9e:48:cf:3a:05:e1:f9:ee:f2:d3:fb:38: e7:0e:e9:3e:9d:b5:28:89:1c:97:c2:ac:97:6f:aa:e5:43:f9: bf:8d:38:30:38:10:f0:b8:08:e2:da:19:ae:a9:ed:4d:ee:65: 55:55:90:15:52:41:55:75:a5:c7:d5:1e:a5:32:30:4a:ac:86: 8a:ee:d7:42 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZpdToKNavCvZ/Y7zwqTdvM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNDAwYWMyMzk2YWUyMjhkMmIyZTU2ZjRiMDY3Mzk5Njkz NzllNDQwHhcNMjUxMTA3MDc1MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmQ3YTkzNTJkMGRhY2UyM2U2Y2UyZjkyOGE3ZDg0NTdlMDM3YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHygE2ELrY/oDdsztx+OjAJMFT6N ApLRzuszqrBosvBiRXRuzYirfMyd4I2Oa2qU7OPL7bbF5tNIlLnwwCR2jw7LiPKc W8vLqzh3fbptXw3sxJJiyYGVWuLTYs51qzNQe5wQ8kufNtiyOdUni0z4r/Y3l8Em 2jbFFiTBsT1MY9y3ar7AkZz5gxVSAY/gz3piVAw7xnmEtWRegqxAPZm0IAFNNmN7 AcIgQvUXVVg33+l2zgyg+xJwxi1fBhYDQ3+g6ZlcEA7MnKZ52J5G3vvnl01rCcN2 MK/YIYd4VRR1eGa8OwD4WB8jp/gJ/WiDzQrwaAJaVNOAV8t3HNC6eC84CQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFDvXqTUtDaziPmzi+Sin2EV+A3vAMB8GA1UdIwQY MBaAFF5ACsI5auIo0rLlb0sGc5lpN55EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYt ZGZlZDEyZjFhMDFlLzEvTzllcE5TME5yT0ktYk9MNUtLZllSWDREZThBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kNjdhOTUtY2IzNi00OTM3LTkyMjYtZGZlZDEyZjFhMDFl LzEvWGtBS3dqbHE0aWpTc3VWdlN3WnptV2szbmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQFH9mAAwQD LhKoAwQDU/MQAwQHWR4AAwQCW8S4AwQCuTcQAwQCuY/0AwQAwn7ZAwQF1HkgMBQE AgACMA4DBQAqAYIAAwUAKgIn8DANBgkqhkiG9w0BAQsFAAOCAQEAg1WPnb2B3rbU 7GDy7upeJ1YA8HS+ctQQNZ1t4PHKjBuDgksPnIhH/Lw/HRHRWqzMbP1bZUOyaOER GxjIZiLYhbeLHpd8Xu60axs1OCVQQ5pzYvUHOgmnJDbkd0YxTPamzhbsZOV3t5Jc Eb7bmtGOLACDszfCpYLOWB2Cf/TkaaxwXXwl6X54h+r2naEQAA71AZ2fap9O5RIr 6CUsAWfVtb2AQ2fq3xIx936/MGy/ukSFtOcsXW7vbaN6nkjPOgXh+e7y0/s45w7p Pp21KIkcl8Ksl2+q5UP5v404MDgQ8LgI4toZrqntTe5lVVWQFVJBVXWlx9UepTIw SqyGiu7XQg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:47:23 2025 by rpki-client