This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/PdEh-weHu1GNZzYwzSA2l6p4u4o.roa File: PdEh-weHu1GNZzYwzSA2l6p4u4o.roa (raw, json) Hash identifier: 81mX5r4txhMt28KzY3Hm4i2MJKH8dzlyDiigOnDnwXc= Subject key identifier: 3D:D1:21:FB:07:87:BB:51:8D:67:36:30:CD:20:36:97:AA:78:BB:8A Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019B020215ED7F363D0C5AB9BA8D405E1D57 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/PdEh-weHu1GNZzYwzSA2l6p4u4o.roa Signing time: Tue 09 Dec 2025 07:27:29 +0000 ROA not before: Tue 09 Dec 2025 07:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1301 IP address blocks: 163.62.72.0/21 maxlen: 21 163.62.80.0/22 maxlen: 22 163.62.92.0/22 maxlen: 22 163.62.96.0/21 maxlen: 21 163.62.112.0/22 maxlen: 22 163.62.116.0/24 maxlen: 24 163.62.118.0/23 maxlen: 23 163.62.120.0/21 maxlen: 21 163.62.128.0/23 maxlen: 23 163.62.132.0/22 maxlen: 22 163.62.240.0/20 maxlen: 20 163.114.20.0/22 maxlen: 22 163.116.0.0/21 maxlen: 21 163.116.8.0/22 maxlen: 22 192.54.192.0/23 maxlen: 23 192.196.12.0/23 maxlen: 23 192.196.36.0/22 maxlen: 22 192.196.40.0/22 maxlen: 22 192.196.70.0/23 maxlen: 23 192.196.72.0/23 maxlen: 23 192.196.90.0/23 maxlen: 23 192.196.92.0/23 maxlen: 23 192.196.98.0/23 maxlen: 23 192.196.114.0/23 maxlen: 23 192.196.118.0/23 maxlen: 23 192.196.120.0/22 maxlen: 22 192.196.124.0/23 maxlen: 23 192.196.140.0/22 maxlen: 22 192.196.148.0/23 maxlen: 23 2a00:7e40::/36 maxlen: 36 2a00:7e40:7000::/64 maxlen: 64 2a00:7e40:9ac1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:02:15:ed:7f:36:3d:0c:5a:b9:ba:8d:40:5e:1d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Dec 9 07:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3dd121fb0787bb518d673630cd203697aa78bb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:70:6d:df:ff:83:a8:8d:9b:0d:78:3e:89:0c: 0a:02:7e:f1:47:a8:2a:63:10:92:b4:08:22:54:6c: b6:c9:e3:22:9b:ba:8c:46:d6:69:53:a3:6b:a6:bb: 9b:bb:17:e9:ee:f8:6b:63:35:04:47:6c:45:89:d2: 74:84:90:2f:29:21:50:a2:4c:e4:33:99:48:54:0b: c8:41:5a:15:a4:46:a0:75:1b:1d:c6:56:0e:57:1d: 3b:22:e0:c9:bc:63:f1:0f:7b:84:5b:96:1b:1b:e0: 42:df:e8:ad:2e:8d:33:f3:74:67:53:21:31:c6:03: b9:c0:d1:83:40:73:fd:5d:41:3c:36:1c:99:9f:57: 9f:7d:ec:ca:93:16:7f:db:83:d1:15:8b:35:ab:3f: 49:f5:1a:b8:28:36:79:de:32:30:f5:85:95:de:09: 74:09:5b:97:ec:ec:75:a8:41:0d:79:62:f8:ab:db: de:1e:e0:4e:d3:f0:8c:14:64:f4:84:38:c1:ba:f3: b5:1b:d3:60:22:0d:a4:4d:1b:90:31:d9:83:00:21: 64:da:de:12:ae:ba:69:bc:88:91:68:7b:f5:ac:ce: fc:44:71:b9:c8:7f:af:c8:38:bd:5d:6e:63:d8:ac: 54:33:0d:26:99:a6:5c:49:7b:64:3f:85:c4:26:59: a8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D1:21:FB:07:87:BB:51:8D:67:36:30:CD:20:36:97:AA:78:BB:8A X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/PdEh-weHu1GNZzYwzSA2l6p4u4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.62.72.0-163.62.83.255 163.62.92.0-163.62.103.255 163.62.112.0-163.62.116.255 163.62.118.0-163.62.129.255 163.62.132.0/22 163.62.240.0/20 163.114.20.0/22 163.116.0.0-163.116.11.255 192.54.192.0/23 192.196.12.0/23 192.196.36.0-192.196.43.255 192.196.70.0-192.196.73.255 192.196.90.0-192.196.93.255 192.196.98.0/23 192.196.114.0/23 192.196.118.0-192.196.125.255 192.196.140.0/22 192.196.148.0/23 IPv6: 2a00:7e40::/36 2a00:7e40:7000::/64 2a00:7e40:9ac1::/48 Signature Algorithm: sha256WithRSAEncryption 88:eb:04:4e:77:60:d1:ca:f5:7f:80:83:4c:67:a2:8d:07:49: ad:a9:f2:ad:8a:4e:25:63:ed:00:81:ec:1d:23:be:d1:34:a4: bf:06:ec:1c:fe:0f:9f:e6:13:c1:32:72:64:98:61:fa:96:3d: b6:f5:eb:a1:1b:8d:07:55:4e:ec:53:8a:35:f4:0c:18:b9:0e: f0:8b:dc:71:64:14:e5:7d:7a:35:97:27:c9:ab:1b:41:4a:aa: c0:5d:d4:f6:01:95:bc:7e:6c:5e:4a:63:c9:ce:79:39:fa:10: 6e:0a:03:94:62:b7:df:89:b4:b2:0f:76:3d:51:02:3b:6f:03: 7f:e5:9e:d6:44:f7:24:7b:fe:d2:e0:94:2d:63:d9:45:24:17: 9a:f4:b3:89:7d:ad:fd:dc:20:12:82:8c:14:7e:70:85:4f:7c: 41:4f:ae:c1:f9:aa:ae:7b:71:a0:5b:4d:b4:ef:14:2e:89:7e: 56:47:b3:a0:8e:e8:68:08:89:65:40:65:95:e4:0f:96:d5:e0: 76:45:24:1a:87:d7:97:9f:14:80:db:6a:7e:f3:18:5b:ef:0a: 7a:2e:6a:50:35:5a:76:6c:1f:31:72:1a:a0:57:3d:17:71:dc: e8:82:52:86:0b:f9:59:97:4e:53:75:91:05:55:13:4b:5d:95: 6b:72:d3:ac -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgISAZsCAhXtfzY9DFq5uo1AXh1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjUxMjA5MDcyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGQxMjFmYjA3ODdiYjUxOGQ2NzM2MzBjZDIwMzY5N2FhNzhiYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83Bt3/+DqI2bDXg+iQwKAn7xR6gq YxCStAgiVGy2yeMim7qMRtZpU6Nrprubuxfp7vhrYzUER2xFidJ0hJAvKSFQokzk M5lIVAvIQVoVpEagdRsdxlYOVx07IuDJvGPxD3uEW5YbG+BC3+itLo0z83RnUyEx xgO5wNGDQHP9XUE8NhyZn1effezKkxZ/24PRFYs1qz9J9Rq4KDZ53jIw9YWV3gl0 CVuX7Ox1qEENeWL4q9veHuBO0/CMFGT0hDjBuvO1G9NgIg2kTRuQMdmDACFk2t4S rrppvIiRaHv1rM78RHG5yH+vyDi9XW5j2KxUMw0mmaZcSXtkP4XEJlmoxQIDAQAB o4IC3zCCAtswHQYDVR0OBBYEFD3RIfsHh7tRjWc2MM0gNpeqeLuKMB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvUGRFaC13ZUh1MUdOWnpZd3pTQTJsNnA0dTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH0BggrBgEFBQcBBwEB/wSB5DCB4TCBugQCAAEwgbMwDAME A6M+SAMEAqM+UDAMAwQCoz5cAwQDoz5gMAwDBASjPnADBACjPnQwDAMEAaM+dgME AaM+gAMEAqM+hAMEBKM+8AMEAqNyFDALAwMCo3QDBAKjdAgDBAHANsADBAHAxAww DAMEAsDEJAMEAsDEKDAMAwQBwMRGAwQBwMRIMAwDBAHAxFoDBAHAxFwDBAHAxGID BAHAxHIwDAMEAcDEdgMEAcDEfAMEAsDEjAMEAcDElDAiBAIAAjAcAwYEKgB+QAAD CQAqAH5AcAAAAAMHACoAfkCawTANBgkqhkiG9w0BAQsFAAOCAQEAiOsETndg0cr1 f4CDTGeijQdJranyrYpOJWPtAIHsHSO+0TSkvwbsHP4Pn+YTwTJyZJhh+pY9tvXr oRuNB1VO7FOKNfQMGLkO8IvccWQU5X16NZcnyasbQUqqwF3U9gGVvH5sXkpjyc55 OfoQbgoDlGK334m0sg92PVECO28Df+We1kT3JHv+0uCULWPZRSQXmvSziX2t/dwg EoKMFH5whU98QU+uwfmqrntxoFtNtO8ULol+VkezoI7oaAiJZUBlleQPltXgdkUk GofXl58UgNtqfvMYW+8Kei5qUDVadmwfMXIaoFc9F3Hc6IJShgv5WZdOU3WRBVUT S12Va3LTrA== -----END CERTIFICATE-----Generated at Fri Dec 19 17:18:42 2025 by rpki-client