This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/02C_6-y3jpHJLm9UcRW5gBVff44.roa File: 02C_6-y3jpHJLm9UcRW5gBVff44.roa (raw, json) Hash identifier: wYTntFQi0lmSYI73ThMJ6MckJaqvifZzL3vAEsSW0Jk= Subject key identifier: D3:60:BF:EB:EC:B7:8E:91:C9:2E:6F:54:71:15:B9:80:15:5F:7F:8E Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Certificate serial: 019AA49934F842B147D9767356A042958AA0 Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/02C_6-y3jpHJLm9UcRW5gBVff44.roa Signing time: Fri 21 Nov 2025 04:08:15 +0000 ROA not before: Fri 21 Nov 2025 04:08:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39741 IP address blocks: 31.25.240.0/21 maxlen: 24 31.25.247.0/24 maxlen: 24 185.234.116.0/24 maxlen: 24 185.234.117.0/24 maxlen: 24 185.234.118.0/24 maxlen: 24 185.234.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a4:99:34:f8:42:b1:47:d9:76:73:56:a0:42:95:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824 Validity Not Before: Nov 21 04:08:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d360bfebecb78e91c92e6f547115b980155f7f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a9:6f:0c:ea:92:fb:f8:c8:44:1a:71:bb:1d: 3f:b5:4e:d5:e6:da:13:7d:bc:a5:95:df:c1:23:70: 85:31:c1:f6:85:26:94:06:8a:04:d5:e3:53:74:b5: aa:66:b2:93:da:fb:f5:8d:1b:68:97:4c:ce:91:e4: 5b:bf:ed:b7:97:35:0e:a3:09:05:8d:d6:57:78:72: 1a:74:1d:11:f4:a1:cb:71:a2:3d:b3:fb:d1:8a:e9: 1e:18:6a:4c:8b:12:53:84:51:53:80:ac:e6:c4:34: 4e:2a:80:b5:0b:9a:60:50:e8:25:6e:37:fb:6d:c9: ce:8d:df:90:db:c7:9c:4b:dd:88:f5:37:ea:3f:82: fd:50:e0:c4:3f:0c:ad:57:e6:9c:85:c2:3e:fc:13: 38:84:ed:d4:d9:24:53:83:88:fa:72:ea:7b:43:d7: 29:60:7d:a3:cb:c9:e6:b1:bb:6f:17:34:79:8f:05: a4:0c:8b:c8:2c:23:b9:37:f1:51:cc:4e:d0:68:cf: cf:c3:86:93:ca:e8:56:46:c4:f9:c9:2c:d9:98:24: 28:bb:18:c7:62:01:cd:df:86:29:2f:5e:52:47:26: 11:f7:9d:71:b2:1c:be:5c:5c:51:de:43:e5:92:64: 4c:70:ba:8b:6b:f4:88:3d:b5:f1:9e:bd:7d:a9:71: 02:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:60:BF:EB:EC:B7:8E:91:C9:2E:6F:54:71:15:B9:80:15:5F:7F:8E X509v3 Authority Key Identifier: keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/02C_6-y3jpHJLm9UcRW5gBVff44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.240.0/21 185.234.116.0/22 Signature Algorithm: sha256WithRSAEncryption 47:58:1c:02:b9:88:8a:1d:07:dc:ce:22:4e:8e:19:9d:82:0c: 6b:20:d1:61:c4:59:37:83:56:73:22:d8:a9:02:8f:5f:ed:5b: 06:f7:63:cc:9f:bb:3b:f6:f4:93:98:d2:11:50:ed:a8:a0:59: da:84:6a:60:0e:14:ed:4c:cf:29:fa:2c:49:c6:7a:08:c4:53: 2d:5d:73:1a:6f:c6:d2:ea:3f:6c:e1:ac:cf:87:82:7f:c9:00: 5b:ec:17:07:d3:d6:00:89:6d:75:5e:67:5f:14:05:cb:0e:23: 5d:0c:97:90:fb:cc:3b:a2:af:2e:08:23:9c:65:e6:fc:2b:7a: f1:04:fd:c1:58:e9:2d:90:50:82:a7:9e:a9:d0:9f:d8:4f:bd: 75:f8:8a:19:77:2d:58:e3:8a:74:a4:70:b0:1a:fe:f0:af:a4: 31:3c:42:ee:fa:cb:26:0a:3d:60:c7:11:1d:f5:b2:e8:63:37: bc:f4:4c:7f:22:5d:63:02:ae:da:3a:ec:33:eb:fc:80:ad:e8: cf:17:28:6b:3d:c6:e9:35:9e:21:ab:34:68:50:9b:e3:bf:c2: 36:0f:e1:5b:df:76:81:ce:a6:99:df:fa:96:b7:d7:af:59:6a: b1:e8:da:ee:54:38:32:af:32:79:ee:08:0f:9a:47:9b:53:f8: eb:31:26:0d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqkmTT4QrFH2XZzVqBClYqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyY2JlOWFiYTFmZjc1NjRkOTEzZWQ3ODY3MmUzMzcxYjdm MzU4MjQwHhcNMjUxMTIxMDQwODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzYwYmZlYmVjYjc4ZTkxYzkyZTZmNTQ3MTE1Yjk4MDE1NWY3ZjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46lvDOqS+/jIRBpxux0/tU7V5toT fbylld/BI3CFMcH2hSaUBooE1eNTdLWqZrKT2vv1jRtol0zOkeRbv+23lzUOowkF jdZXeHIadB0R9KHLcaI9s/vRiukeGGpMixJThFFTgKzmxDROKoC1C5pgUOglbjf7 bcnOjd+Q28ecS92I9TfqP4L9UODEPwytV+achcI+/BM4hO3U2SRTg4j6cup7Q9cp YH2jy8nmsbtvFzR5jwWkDIvILCO5N/FRzE7QaM/Pw4aTyuhWRsT5ySzZmCQouxjH YgHN34YpL15SRyYR951xshy+XFxR3kPlkmRMcLqLa/SIPbXxnr19qXECzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNNgv+vst46RyS5vVHEVuYAVX3+OMB8GA1UdIwQY MBaAFKLL6auh/3Vk2RPteGcuM3G381gkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzkt ZGYzMjRjNGM2ZWVkLzEvMDJDXzYteTNqcEhKTG05VWNSVzVnQlZmZjQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS80MDhlODMtNTMwZC00NDYyLWIxYzktZGYzMjRjNGM2ZWVk LzEvb3N2cHE2SF9kV1RaRS0xNFp5NHpjYmZ6V0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDHxnwAwQC uep0MA0GCSqGSIb3DQEBCwUAA4IBAQBHWBwCuYiKHQfcziJOjhmdggxrINFhxFk3 g1ZzItipAo9f7VsG92PMn7s79vSTmNIRUO2ooFnahGpgDhTtTM8p+ixJxnoIxFMt XXMab8bS6j9s4azPh4J/yQBb7BcH09YAiW11XmdfFAXLDiNdDJeQ+8w7oq8uCCOc Zeb8K3rxBP3BWOktkFCCp56p0J/YT711+IoZdy1Y44p0pHCwGv7wr6QxPELu+ssm Cj1gxxEd9bLoYze89Ex/Il1jAq7aOuwz6/yArejPFyhrPcbpNZ4hqzRoUJvjv8I2 D+Fb33aBzqaZ3/qWt9evWWqx6NruVDgyrzJ57ggPmkebU/jrMSYN -----END CERTIFICATE-----Generated at Mon Dec 22 07:03:06 2025 by rpki-client