This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/O13Y1O9CjBHkhRIB02im_EKmBD4.roa File: O13Y1O9CjBHkhRIB02im_EKmBD4.roa (raw, json) Hash identifier: L40a0Ih9g+p7QVr/nKoPYOyYjrOab8SdYR+oyVSI+hw= Subject key identifier: 3B:5D:D8:D4:EF:42:8C:11:E4:85:12:01:D3:68:A6:FC:42:A6:04:3E Certificate issuer: /CN=019969ac75abcd5968f189e0d45dbbdab2982bda Certificate serial: 019A59B8C06FD0B70712B97E6EE859385612 Authority key identifier: 01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/O13Y1O9CjBHkhRIB02im_EKmBD4.roa Signing time: Thu 06 Nov 2025 15:11:11 +0000 ROA not before: Thu 06 Nov 2025 15:11:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33915 IP address blocks: 62.145.192.0/18 maxlen: 18 62.145.192.0/19 maxlen: 19 62.145.224.0/19 maxlen: 19 80.112.0.0/17 maxlen: 17 80.112.0.0/18 maxlen: 18 80.112.64.0/18 maxlen: 18 80.114.0.0/17 maxlen: 17 80.114.0.0/18 maxlen: 18 80.114.64.0/18 maxlen: 18 80.114.192.0/18 maxlen: 18 80.114.192.0/19 maxlen: 19 80.114.224.0/19 maxlen: 19 80.115.0.0/17 maxlen: 17 80.115.0.0/18 maxlen: 18 80.115.64.0/18 maxlen: 18 80.115.128.0/18 maxlen: 18 80.115.128.0/19 maxlen: 19 80.115.160.0/19 maxlen: 19 82.72.0.0/14 maxlen: 14 82.72.0.0/15 maxlen: 15 82.74.0.0/15 maxlen: 15 82.101.192.0/18 maxlen: 18 82.101.192.0/19 maxlen: 19 82.101.224.0/19 maxlen: 19 82.151.160.0/19 maxlen: 19 82.151.160.0/20 maxlen: 20 82.151.176.0/20 maxlen: 20 82.217.0.0/16 maxlen: 16 82.217.0.0/17 maxlen: 17 82.217.128.0/17 maxlen: 17 83.80.0.0/13 maxlen: 13 83.80.0.0/14 maxlen: 14 83.84.0.0/14 maxlen: 14 84.24.0.0/13 maxlen: 13 84.24.0.0/14 maxlen: 14 84.28.0.0/14 maxlen: 14 84.104.0.0/14 maxlen: 14 84.104.0.0/15 maxlen: 15 84.106.0.0/15 maxlen: 15 85.147.0.0/16 maxlen: 16 85.147.0.0/17 maxlen: 17 85.147.128.0/17 maxlen: 17 89.220.128.0/17 maxlen: 17 89.220.128.0/18 maxlen: 18 89.220.192.0/18 maxlen: 18 94.208.0.0/13 maxlen: 13 94.208.0.0/14 maxlen: 14 94.212.0.0/14 maxlen: 14 185.130.168.0/22 maxlen: 22 212.54.32.0/19 maxlen: 19 212.54.32.0/20 maxlen: 20 212.54.48.0/20 maxlen: 20 212.120.64.0/18 maxlen: 18 212.120.64.0/19 maxlen: 19 212.120.96.0/19 maxlen: 19 212.127.128.0/17 maxlen: 17 212.127.128.0/18 maxlen: 18 212.127.192.0/18 maxlen: 18 212.204.128.0/18 maxlen: 18 212.204.128.0/19 maxlen: 19 212.204.160.0/19 maxlen: 19 213.34.96.0/19 maxlen: 19 213.34.96.0/20 maxlen: 20 213.34.112.0/20 maxlen: 20 213.51.0.0/16 maxlen: 16 213.73.128.0/17 maxlen: 17 213.73.128.0/18 maxlen: 18 213.73.192.0/18 maxlen: 18 217.62.0.0/16 maxlen: 16 217.62.0.0/17 maxlen: 17 217.62.128.0/17 maxlen: 17 217.63.0.0/18 maxlen: 18 217.63.0.0/19 maxlen: 19 217.63.32.0/19 maxlen: 19 217.63.192.0/18 maxlen: 18 217.63.192.0/19 maxlen: 19 217.63.224.0/19 maxlen: 19 217.101.0.0/16 maxlen: 16 217.101.0.0/17 maxlen: 17 217.101.128.0/17 maxlen: 17 217.102.128.0/18 maxlen: 18 217.102.128.0/19 maxlen: 19 217.102.160.0/19 maxlen: 19 217.102.192.0/19 maxlen: 19 217.102.192.0/20 maxlen: 20 217.102.208.0/20 maxlen: 20 217.104.0.0/17 maxlen: 17 217.104.0.0/18 maxlen: 18 217.104.64.0/18 maxlen: 18 217.105.64.0/18 maxlen: 18 217.105.64.0/19 maxlen: 19 217.105.96.0/19 maxlen: 19 217.105.128.0/18 maxlen: 18 217.105.128.0/19 maxlen: 19 217.105.160.0/19 maxlen: 19 217.120.0.0/14 maxlen: 14 217.120.0.0/15 maxlen: 15 217.122.0.0/15 maxlen: 15 2001:b88::/33 maxlen: 33 2001:1c00::/23 maxlen: 23 2001:1c00::/24 maxlen: 24 2001:1d00::/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.mft rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:59:b8:c0:6f:d0:b7:07:12:b9:7e:6e:e8:59:38:56:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=019969ac75abcd5968f189e0d45dbbdab2982bda Validity Not Before: Nov 6 15:11:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b5dd8d4ef428c11e4851201d368a6fc42a6043e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:ab:97:e6:63:ac:e8:d1:ab:31:e3:2e:b7: 0b:ba:c1:70:71:65:b9:75:17:91:b2:f1:31:7f:fc: 5f:b0:c8:6a:4d:fa:5b:f7:da:ce:16:0a:88:cb:a9: ba:ca:93:24:2b:c8:f1:b6:44:ad:f7:c7:e5:fa:18: 80:3a:52:24:eb:70:d7:77:44:ad:49:a1:32:43:a9: a6:d9:59:6e:2a:cd:d1:ab:1e:0e:10:b3:74:29:93: 56:23:82:0f:98:70:43:97:f3:7a:90:4d:8f:58:76: 06:9e:33:d1:51:71:39:79:e7:97:d8:21:5e:aa:5f: a7:52:53:46:b3:48:86:21:68:9e:a1:1b:b4:eb:62: 91:d5:48:d8:c1:68:d4:a8:d7:48:c5:5a:55:52:bb: 01:cd:07:0a:a4:78:97:65:a1:b3:02:a5:d0:47:ea: 95:25:fe:48:c9:41:81:57:a7:58:70:1d:0d:87:ed: 27:5d:49:5a:77:9a:7a:cb:3d:5d:ac:1e:68:a0:51: 42:53:93:88:32:f0:06:38:7b:38:11:3c:79:26:9c: 33:4b:72:ce:c4:d3:1e:28:a4:67:33:2d:07:b9:74: fc:ce:76:c6:58:bd:a3:e6:35:c2:6d:93:95:bb:84: 99:ad:ea:65:7b:90:0b:14:03:a5:dc:a1:d9:37:77: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5D:D8:D4:EF:42:8C:11:E4:85:12:01:D3:68:A6:FC:42:A6:04:3E X509v3 Authority Key Identifier: keyid:01:99:69:AC:75:AB:CD:59:68:F1:89:E0:D4:5D:BB:DA:B2:98:2B:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZlprHWrzVlo8Yng1F272rKYK9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/O13Y1O9CjBHkhRIB02im_EKmBD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/6cb145-fe6a-45b7-885f-61d1f7fb1044/1/AZlprHWrzVlo8Yng1F272rKYK9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.145.192.0/18 80.112.0.0/17 80.114.0.0/17 80.114.192.0-80.115.191.255 82.72.0.0/14 82.101.192.0/18 82.151.160.0/19 82.217.0.0/16 83.80.0.0/13 84.24.0.0/13 84.104.0.0/14 85.147.0.0/16 89.220.128.0/17 94.208.0.0/13 185.130.168.0/22 212.54.32.0/19 212.120.64.0/18 212.127.128.0/17 212.204.128.0/18 213.34.96.0/19 213.51.0.0/16 213.73.128.0/17 217.62.0.0-217.63.63.255 217.63.192.0/18 217.101.0.0/16 217.102.128.0-217.102.223.255 217.104.0.0/17 217.105.64.0-217.105.191.255 217.120.0.0/14 IPv6: 2001:b88::/33 2001:1c00::/23 Signature Algorithm: sha256WithRSAEncryption 7b:7f:ea:0c:ed:25:24:b0:2e:a8:d4:17:1a:e5:af:ba:4c:88: 97:34:d8:b9:23:cd:9f:8c:4f:10:e7:1f:95:8f:ab:5d:cc:e3: cb:ad:33:0e:c7:17:df:be:a3:e4:4b:5e:b4:66:16:e7:70:5d: 08:a8:f9:68:79:d6:41:b7:24:70:91:79:c1:98:e4:7d:b7:36: e7:96:22:b5:f3:bd:a9:3a:27:d7:6f:ec:f5:99:ca:20:7c:a2: 7e:63:8e:a3:0e:96:e8:a9:46:e2:43:15:61:3e:67:16:92:3b: c8:12:be:10:42:64:32:a3:ea:b9:8e:a9:c9:6c:21:d0:2e:55: 31:64:6c:76:ab:a6:6f:89:44:fc:bc:cb:19:74:ab:d4:22:e1: 35:4b:c5:f3:df:37:57:ca:ad:e0:b3:1e:70:f6:39:b7:09:75: 5e:27:09:94:6c:ba:79:f1:d3:32:ad:5f:e0:b9:f1:cf:a2:76: ba:30:56:2c:22:43:96:93:7d:15:90:eb:87:bc:8e:8b:15:80: 26:a4:ca:08:d4:02:e5:91:cb:6f:45:12:22:d7:55:e6:ca:90: 03:7c:35:67:cb:1d:d3:f8:61:ee:c4:53:f9:11:b6:bf:6f:38: dd:08:56:94:0a:50:c9:d5:0e:c0:ab:ff:b0:1a:db:92:fa:93: c1:e9:b5:42 -----BEGIN CERTIFICATE----- MIIF1TCCBL2gAwIBAgISAZpZuMBv0LcHErl+buhZOFYSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTk2OWFjNzVhYmNkNTk2OGYxODllMGQ0NWRiYmRhYjI5 ODJiZGEwHhcNMjUxMTA2MTUxMTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjVkZDhkNGVmNDI4YzExZTQ4NTEyMDFkMzY4YTZmYzQyYTYwNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAmrl+ZjrOjRqzHjLrcLusFwcWW5 dReRsvExf/xfsMhqTfpb99rOFgqIy6m6ypMkK8jxtkSt98fl+hiAOlIk63DXd0St SaEyQ6mm2VluKs3Rqx4OELN0KZNWI4IPmHBDl/N6kE2PWHYGnjPRUXE5eeeX2CFe ql+nUlNGs0iGIWieoRu062KR1UjYwWjUqNdIxVpVUrsBzQcKpHiXZaGzAqXQR+qV Jf5IyUGBV6dYcB0Nh+0nXUlad5p6yz1drB5ooFFCU5OIMvAGOHs4ETx5JpwzS3LO xNMeKKRnMy0HuXT8znbGWL2j5jXCbZOVu4SZreple5ALFAOl3KHZN3eO2wIDAQAB o4IC4TCCAt0wHQYDVR0OBBYEFDtd2NTvQowR5IUSAdNopvxCpgQ+MB8GA1UdIwQY MBaAFAGZaax1q81ZaPGJ4NRdu9qymCvaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpscHJIV3J6VmxvOFluZzFGMjcycktZSzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi82Y2IxNDUtZmU2YS00NWI3LTg4NWYt NjFkMWY3ZmIxMDQ0LzEvTzEzWTFPOUNqQkhraFJJQjAyaW1fRUttQkQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi82Y2IxNDUtZmU2YS00NWI3LTg4NWYtNjFkMWY3ZmIxMDQ0 LzEvQVpscHJIV3J6VmxvOFluZzFGMjcycktZSzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH2BggrBgEFBQcBBwEB/wSB5jCB4zCBygQCAAEwgcMDBAY+ kcADBAdQcAADBAdQcgAwDAMEBlBywAMEBlBzgAMDAlJIAwQGUmXAAwQFUpegAwMA UtkDAwNTUAMDA1QYAwMCVGgDAwBVkwMEB1ncgAMDA17QAwQCuYKoAwQF1DYgAwQG 1HhAAwQH1H+AAwQG1MyAAwQF1SJgAwMA1TMDBAfVSYAwCwMDAdk+AwQG2T8AAwQG 2T/AAwMA2WUwDAMEB9lmgAMEBdlmwAMEB9loADAMAwQG2WlAAwQG2WmAAwMC2Xgw FAQCAAIwDgMGByABC4gAAwQBIAEcMA0GCSqGSIb3DQEBCwUAA4IBAQB7f+oM7SUk sC6o1Bca5a+6TIiXNNi5I82fjE8Q5x+Vj6tdzOPLrTMOxxffvqPkS160ZhbncF0I qPloedZBtyRwkXnBmOR9tzbnliK1872pOifXb+z1mcogfKJ+Y46jDpboqUbiQxVh PmcWkjvIEr4QQmQyo+q5jqnJbCHQLlUxZGx2q6ZviUT8vMsZdKvUIuE1S8Xz3zdX yq3gsx5w9jm3CXVeJwmUbLp58dMyrV/gufHPona6MFYsIkOWk30VkOuHvI6LFYAm pMoI1ALlkctvRRIi11XmypADfDVnyx3T+GHuxFP5Eba/bzjdCFaUClDJ1Q7Aq/+w GtuS+pPB6bVC -----END CERTIFICATE-----Generated at Sat Dec 6 18:23:44 2025 by rpki-client