This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/7YOWWh9Kyz_ZAX0adfGjGlU1ucg.roa File: 7YOWWh9Kyz_ZAX0adfGjGlU1ucg.roa (raw, json) Hash identifier: BaAIaVDrT6fotYg5aqSbD/H9u6W4QoZda+dujHf7LBg= Subject key identifier: ED:83:96:5A:1F:4A:CB:3F:D9:01:7D:1A:75:F1:A3:1A:55:35:B9:C8 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019AF2738A4489208A7A61A0DA274ABC4699 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/7YOWWh9Kyz_ZAX0adfGjGlU1ucg.roa Signing time: Sat 06 Dec 2025 06:57:29 +0000 ROA not before: Sat 06 Dec 2025 06:57:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44208 IP address blocks: 31.170.48.0/20 maxlen: 24 37.49.148.0/24 maxlen: 24 94.74.128.0/18 maxlen: 24 94.74.136.0/24 maxlen: 24 94.74.147.0/24 maxlen: 24 94.74.152.0/22 maxlen: 24 94.74.158.0/24 maxlen: 24 94.74.164.0/24 maxlen: 24 94.74.165.0/24 maxlen: 24 94.74.166.0/23 maxlen: 23 94.74.168.0/23 maxlen: 24 94.74.182.0/24 maxlen: 24 94.74.187.0/24 maxlen: 24 94.74.190.0/24 maxlen: 24 94.74.191.0/24 maxlen: 24 109.203.176.0/21 maxlen: 24 176.46.134.0/24 maxlen: 24 176.46.139.0/24 maxlen: 24 176.46.141.0/24 maxlen: 24 176.46.144.0/24 maxlen: 24 176.46.147.0/24 maxlen: 24 176.46.148.0/24 maxlen: 24 176.46.149.0/24 maxlen: 24 176.46.152.0/24 maxlen: 24 176.46.153.0/24 maxlen: 24 176.46.154.0/24 maxlen: 24 176.46.155.0/24 maxlen: 24 176.46.156.0/24 maxlen: 24 176.46.157.0/24 maxlen: 24 176.46.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:73:8a:44:89:20:8a:7a:61:a0:da:27:4a:bc:46:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Dec 6 06:57:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ed83965a1f4acb3fd9017d1a75f1a31a5535b9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:87:38:2c:be:5b:9c:69:79:66:4f:7a:14:47: f7:b4:d4:59:27:6a:fa:bb:e9:f8:c6:50:f9:dd:50: 86:ff:46:e6:55:74:58:08:04:ab:39:ec:7f:f8:67: 09:3e:02:76:19:ce:27:8c:b4:5b:40:b0:ca:cf:9d: cc:8d:ef:15:1a:33:0b:e6:91:0b:11:5e:e9:7e:77: 1a:1a:cf:ff:5a:6d:8e:bc:75:f7:cc:ed:18:9a:f3: 78:55:39:14:33:7f:8f:27:1c:5c:d9:06:37:89:16: 4e:30:0b:c6:bc:6a:32:bb:e9:32:16:64:cc:31:93: c4:3c:ed:48:97:f5:e9:48:75:61:7e:cb:e4:5d:5f: 92:e2:82:4f:5c:46:4f:57:76:2a:60:89:8d:23:69: 51:bf:02:01:18:ce:bb:c9:4a:72:e1:3f:37:a3:ac: 78:bd:bb:8c:8e:17:4c:ed:e1:e6:20:3d:d7:15:06: 77:a0:a5:d2:ea:58:c9:5e:bc:1f:05:84:d4:be:26: 56:af:f2:43:a8:13:43:51:c5:df:5f:c0:38:76:d7: 02:3d:70:b3:f4:48:90:bb:b5:c8:65:78:b8:3e:92: 8e:0f:66:f8:86:ec:50:d7:68:0e:a2:be:32:fd:c9: d9:2a:29:71:b8:11:f2:c8:38:00:d6:75:a0:4d:d0: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:83:96:5A:1F:4A:CB:3F:D9:01:7D:1A:75:F1:A3:1A:55:35:B9:C8 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/7YOWWh9Kyz_ZAX0adfGjGlU1ucg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.48.0/20 37.49.148.0/24 94.74.128.0/18 109.203.176.0/21 176.46.134.0/24 176.46.139.0/24 176.46.141.0/24 176.46.144.0/24 176.46.147.0-176.46.149.255 176.46.152.0-176.46.158.255 Signature Algorithm: sha256WithRSAEncryption 84:53:fc:1b:f1:fa:c3:99:62:6a:ca:f1:84:c2:56:06:8f:e2: 97:23:e1:6f:aa:12:ad:7a:81:62:dd:c6:53:2b:7e:03:fb:61: c9:6a:fe:ce:f6:86:e6:1c:e1:3c:bb:7f:4f:93:9e:b4:c4:07: e6:3c:4c:ae:bb:e1:47:87:16:24:b9:24:09:4c:24:bd:9d:da: ca:2a:4d:53:40:ab:ef:e6:95:ae:99:e4:50:fc:f2:d1:9a:c7: d3:20:bf:c7:3c:69:53:0c:fb:70:50:55:ec:f3:bf:a3:04:a5: 8f:8f:b1:bd:92:f3:52:41:d6:c9:79:23:b7:41:ce:44:7e:bc: d3:83:cd:05:94:44:9e:04:04:b5:01:fc:62:9b:ff:4d:df:aa: 30:16:7e:d3:66:74:dd:0c:01:29:35:f9:8f:2d:8b:37:1c:85: 18:c5:81:4e:60:64:94:67:fa:81:70:7f:d5:fd:14:7f:3e:cf: 60:86:b7:2c:34:22:68:04:f5:8d:5a:c8:24:1a:25:eb:03:85: af:cc:51:2a:6b:70:29:3b:98:3d:9c:7c:5d:7b:dc:46:e2:f9: 75:02:72:83:4c:7d:d6:cf:ed:5d:dc:42:a7:3d:08:9b:57:ab: 08:62:49:a6:cf:32:72:6d:b6:53:98:ae:e8:38:10:2b:91:0f: db:bc:24:55 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZryc4pEiSCKemGg2idKvEaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMjA2MDY1NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDgzOTY1YTFmNGFjYjNmZDkwMTdkMWE3NWYxYTMxYTU1MzViOWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIc4LL5bnGl5Zk96FEf3tNRZJ2r6 u+n4xlD53VCG/0bmVXRYCASrOex/+GcJPgJ2Gc4njLRbQLDKz53Mje8VGjML5pEL EV7pfncaGs//Wm2OvHX3zO0YmvN4VTkUM3+PJxxc2QY3iRZOMAvGvGoyu+kyFmTM MZPEPO1Il/XpSHVhfsvkXV+S4oJPXEZPV3YqYImNI2lRvwIBGM67yUpy4T83o6x4 vbuMjhdM7eHmID3XFQZ3oKXS6ljJXrwfBYTUviZWr/JDqBNDUcXfX8A4dtcCPXCz 9EiQu7XIZXi4PpKOD2b4huxQ12gOor4y/cnZKilxuBHyyDgA1nWgTdCPcQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFO2DllofSss/2QF9GnXxoxpVNbnIMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvN1lPV1doOUt5el9aQVgwYWRmR2pHbFUxdWNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQEH6owAwQA JTGUAwQGXkqAAwQDbcuwAwQAsC6GAwQAsC6LAwQAsC6NAwQAsC6QMAwDBACwLpMD BAGwLpQwDAMEA7AumAMEALAunjANBgkqhkiG9w0BAQsFAAOCAQEAhFP8G/H6w5li asrxhMJWBo/ilyPhb6oSrXqBYt3GUyt+A/thyWr+zvaG5hzhPLt/T5OetMQH5jxM rrvhR4cWJLkkCUwkvZ3ayipNU0Cr7+aVrpnkUPzy0ZrH0yC/xzxpUwz7cFBV7PO/ owSlj4+xvZLzUkHWyXkjt0HORH6804PNBZREngQEtQH8Ypv/Td+qMBZ+02Z03QwB KTX5jy2LNxyFGMWBTmBklGf6gXB/1f0Ufz7PYIa3LDQiaAT1jVrIJBol6wOFr8xR KmtwKTuYPZx8XXvcRuL5dQJyg0x91s/tXdxCpz0Im1erCGJJps8ycm22U5iu6DgQ K5EP27wkVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:14:37 2025 by rpki-client