This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JfzaQ2dY5KVszGMdtdyIa5vKvk0.roa File: JfzaQ2dY5KVszGMdtdyIa5vKvk0.roa (raw, json) Hash identifier: v3XTTf92l+Sj9j1h2fHKleeb4kiTLIT150pzvx27CfE= Subject key identifier: 25:FC:DA:43:67:58:E4:A5:6C:CC:63:1D:B5:DC:88:6B:9B:CA:BE:4D Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B20D41A727E8F559C55B33D02A845C5D4 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JfzaQ2dY5KVszGMdtdyIa5vKvk0.roa Signing time: Mon 15 Dec 2025 07:05:29 +0000 ROA not before: Mon 15 Dec 2025 07:05:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.72.161.0/24 maxlen: 24 62.72.162.0/23 maxlen: 23 62.72.164.0/22 maxlen: 22 62.72.164.0/23 maxlen: 23 62.72.171.0/24 maxlen: 24 62.72.187.0/24 maxlen: 24 62.72.191.0/24 maxlen: 24 81.21.1.0/24 maxlen: 24 81.21.2.0/23 maxlen: 23 81.21.4.0/22 maxlen: 24 176.57.56.0/24 maxlen: 24 176.57.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:d4:1a:72:7e:8f:55:9c:55:b3:3d:02:a8:45:c5:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Dec 15 07:05:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=25fcda436758e4a56ccc631db5dc886b9bcabe4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:fe:f5:91:3f:71:e3:89:11:a9:57:92:7f: 4e:5c:86:45:a8:88:3e:0b:be:92:1c:ae:ed:a6:bb: 8b:b4:7c:92:27:5e:ef:9a:86:83:23:eb:07:0b:a2: 98:66:f5:7b:db:c3:2e:cf:6f:6c:52:c7:b3:53:cb: 64:f0:cc:0b:07:d4:2b:97:68:85:6e:8e:43:00:25: 89:e8:ef:5a:f7:a1:58:98:ad:7c:6c:1e:70:af:93: 80:a0:49:10:a0:71:89:ec:7d:f8:46:d2:45:2a:e5: 5f:1b:a6:5b:38:c1:97:14:bd:9f:7d:7e:4b:5a:ea: ab:01:ab:c7:f5:ca:05:75:81:69:02:8d:57:5d:9a: 8f:ec:fc:f9:52:41:d9:7b:b6:30:90:49:e8:7f:00: 03:11:f8:80:8c:64:02:be:83:0f:5d:26:53:27:14: 41:8d:37:6a:5f:d0:d8:85:f9:59:08:39:b2:85:40: d5:e1:6c:b4:68:17:df:53:8a:af:f6:7f:e4:12:09: ee:53:c7:e5:e3:e2:a0:5c:fa:73:58:a4:6f:a3:4e: 42:b5:ce:bb:d5:22:24:fb:cf:6c:32:bd:43:18:ce: 9f:44:8b:8b:ed:8b:79:0b:29:4c:2e:78:6b:fb:33: 6d:b3:6a:41:b9:4d:f6:8c:ac:11:d2:81:e3:8b:e7: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FC:DA:43:67:58:E4:A5:6C:CC:63:1D:B5:DC:88:6B:9B:CA:BE:4D X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/JfzaQ2dY5KVszGMdtdyIa5vKvk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.161.0-62.72.167.255 62.72.171.0/24 62.72.187.0/24 62.72.191.0/24 81.21.1.0-81.21.7.255 176.57.56.0/24 176.57.63.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:ec:93:63:e9:81:9d:d5:8d:4d:44:50:f9:48:f0:30:7e:7e: 60:64:36:73:dc:d9:dc:16:d6:44:42:da:0b:e4:e7:80:6b:6b: 6e:91:09:47:27:fb:f9:28:52:3d:5c:5a:f7:fb:59:41:49:92: 89:12:15:78:fa:20:ff:79:21:83:24:44:9d:3c:8c:17:ff:db: 24:a7:d0:bf:a1:e2:d4:82:7a:7b:6c:90:d0:94:28:41:ba:d7: 92:9a:de:68:3a:8f:e6:1e:b2:d5:1b:5b:95:03:da:a3:3c:7c: c6:d1:88:95:c0:d7:d0:a5:b1:a7:c6:18:80:42:8f:92:3b:3b: d9:c5:af:d1:57:d4:63:81:53:43:d9:40:5d:37:2d:8e:30:a7: dc:af:40:bd:2f:9f:1b:3c:93:03:98:d3:07:67:82:cd:48:16: 13:79:1a:c0:4e:8e:ee:cf:1e:6a:cd:ea:a3:ed:ac:46:00:c9: 0b:e1:c3:6f:3f:fa:58:f8:e6:88:a4:3a:67:4c:ec:f6:c1:b8: 33:66:88:7d:fe:68:8e:02:79:ef:3b:3f:91:e6:0a:65:a5:8a: 52:42:1c:f3:bd:7e:19:0f:54:fc:f6:b4:ce:4d:63:94:e9:cb: c4:dc:7d:74:88:79:9b:89:bb:62:a9:2e:dd:c8:4d:c3:bd:65: 5d:f2:95:c7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZsg1Bpyfo9VnFWzPQKoRcXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjUxMjE1MDcwNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWZjZGE0MzY3NThlNGE1NmNjYzYzMWRiNWRjODg2YjliY2FiZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbz+9ZE/ceOJEalXkn9OXIZFqIg+ C76SHK7tpruLtHySJ17vmoaDI+sHC6KYZvV728Muz29sUsezU8tk8MwLB9Qrl2iF bo5DACWJ6O9a96FYmK18bB5wr5OAoEkQoHGJ7H34RtJFKuVfG6ZbOMGXFL2ffX5L WuqrAavH9coFdYFpAo1XXZqP7Pz5UkHZe7YwkEnofwADEfiAjGQCvoMPXSZTJxRB jTdqX9DYhflZCDmyhUDV4Wy0aBffU4qv9n/kEgnuU8fl4+KgXPpzWKRvo05Ctc67 1SIk+89sMr1DGM6fRIuL7Yt5CylMLnhr+zNts2pBuU32jKwR0oHji+c40wIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFCX82kNnWOSlbMxjHbXciGubyr5NMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvSmZ6YVEyZFk1S1ZzekdNZHRkeUlhNXZLdmswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAA+SKED BAM+SKADBAA+SKsDBAA+SLsDBAA+SL8wDAMEAFEVAQMEA1EVAAMEALA5OAMEALA5 PzANBgkqhkiG9w0BAQsFAAOCAQEAT+yTY+mBndWNTURQ+UjwMH5+YGQ2c9zZ3BbW RELaC+TngGtrbpEJRyf7+ShSPVxa9/tZQUmSiRIVePog/3khgyREnTyMF//bJKfQ v6Hi1IJ6e2yQ0JQoQbrXkpreaDqP5h6y1RtblQPaozx8xtGIlcDX0KWxp8YYgEKP kjs72cWv0VfUY4FTQ9lAXTctjjCn3K9AvS+fGzyTA5jTB2eCzUgWE3kawE6O7s8e as3qo+2sRgDJC+HDbz/6WPjmiKQ6Z0zs9sG4M2aIff5ojgJ57zs/keYKZaWKUkIc 871+GQ9U/Pa0zk1jlOnLxNx9dIh5m4m7Yqku3chNw71lXfKVxw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:23:05 2025 by rpki-client