This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/XokqtWFIqT_7Y6x0Y8bvhw_rTk0.roa File: XokqtWFIqT_7Y6x0Y8bvhw_rTk0.roa (raw, json) Hash identifier: pu/AyDOQYIhXZhlQAW0PUPOuqEy3eFycFh4kcz6z1H8= Subject key identifier: 5E:89:2A:B5:61:48:A9:3F:FB:63:AC:74:63:C6:EF:87:0F:EB:4E:4D Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Certificate serial: 019AEF32696584706B38FA85521505D61A66 Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/XokqtWFIqT_7Y6x0Y8bvhw_rTk0.roa Signing time: Fri 05 Dec 2025 15:47:29 +0000 ROA not before: Fri 05 Dec 2025 15:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1301 IP address blocks: 163.62.80.0/22 maxlen: 22 163.62.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:32:69:65:84:70:6b:38:fa:85:52:15:05:d6:1a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6 Validity Not Before: Dec 5 15:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5e892ab56148a93ffb63ac7463c6ef870feb4e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:99:40:4e:bb:0e:d9:01:56:6d:52:65:42:4a: 9b:59:3f:84:f9:4d:73:c8:78:a0:f6:8b:24:0e:9d: 28:65:67:06:59:6d:a6:56:7f:de:ef:05:0a:f5:f7: 19:1a:09:be:3b:17:88:04:f3:24:03:b9:d3:9c:25: 13:26:18:52:da:02:36:94:ae:58:d0:5d:04:5e:5f: 06:cb:db:eb:ca:2c:d2:c5:6f:77:ba:6e:b2:54:55: a2:ee:25:b1:00:cb:05:60:78:ab:91:14:7d:e3:40: d4:d2:95:67:63:d0:55:77:e1:88:3e:c2:ce:08:10: 15:7f:c8:57:cd:85:5b:ff:5c:99:50:ea:78:00:f7: fb:d8:89:7a:aa:f3:a0:76:f5:b4:41:92:02:11:1c: 44:d3:9c:c2:a9:f6:39:8e:c6:54:cd:d4:42:50:4b: 50:b0:ca:73:42:ce:03:86:7d:1d:46:ad:f0:a1:50: 38:05:9c:4b:40:24:2f:59:5c:99:69:04:a7:ed:e7: 86:6b:6c:14:cb:4e:aa:a4:95:aa:6f:d3:41:24:da: e5:2e:f8:09:65:b4:90:9e:2e:00:b6:e8:26:39:07: 60:0d:b2:fe:1f:12:2d:4f:62:6e:21:cb:e5:d0:47: d0:cb:65:53:7d:04:9d:fa:43:98:bd:5d:65:ec:8a: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:2A:B5:61:48:A9:3F:FB:63:AC:74:63:C6:EF:87:0F:EB:4E:4D X509v3 Authority Key Identifier: keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/XokqtWFIqT_7Y6x0Y8bvhw_rTk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.62.80.0/22 163.62.96.0/21 Signature Algorithm: sha256WithRSAEncryption 87:38:e0:58:14:98:0e:cf:5d:4b:a4:67:69:0e:50:d0:8c:73: 30:ee:14:5b:46:7c:7f:b0:e6:04:35:f0:9d:e5:56:9c:2f:e6: 10:63:98:e9:ba:92:be:fa:81:a3:67:e3:b6:d9:cd:39:f4:d1: 07:8a:15:00:80:c8:39:0e:b3:42:2a:3a:1a:ab:32:1f:7c:9d: cf:a5:fb:97:fc:d8:c9:24:e7:5d:fb:4c:2e:7a:c7:ea:bf:46: 74:2c:d5:e6:41:e6:20:65:6f:aa:4c:a9:23:72:78:97:94:36: 3a:31:11:50:1c:24:b2:f9:c0:b0:73:c4:0c:bd:e3:31:d8:9c: 0c:84:16:e4:31:c3:48:83:46:21:eb:9c:2f:2d:9f:06:17:f2: 97:0d:75:fc:9b:70:29:0a:f7:2a:d1:5b:26:1b:49:b4:82:f3: 6e:5b:6e:f5:2f:38:3c:09:5a:0a:f5:fa:61:14:40:1f:50:22: 91:56:f4:f3:d5:c0:d0:fa:c9:86:09:ea:d9:14:a3:ee:d1:30: 03:bb:b4:de:b6:f5:37:f9:96:7e:30:23:82:59:80:3d:c1:3c: df:65:1b:9d:35:9d:2f:ee:b5:c9:85:6a:93:3f:d8:5b:ce:c4: 73:06:f2:ff:33:73:50:16:c1:fd:d7:e0:e1:10:c6:64:16:bb: 69:27:ce:a2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrvMmllhHBrOPqFUhUF1hpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz ODc0YzYwHhcNMjUxMjA1MTU0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTg5MmFiNTYxNDhhOTNmZmI2M2FjNzQ2M2M2ZWY4NzBmZWI0ZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZlATrsO2QFWbVJlQkqbWT+E+U1z yHig9oskDp0oZWcGWW2mVn/e7wUK9fcZGgm+OxeIBPMkA7nTnCUTJhhS2gI2lK5Y 0F0EXl8Gy9vryizSxW93um6yVFWi7iWxAMsFYHirkRR940DU0pVnY9BVd+GIPsLO CBAVf8hXzYVb/1yZUOp4APf72Il6qvOgdvW0QZICERxE05zCqfY5jsZUzdRCUEtQ sMpzQs4Dhn0dRq3woVA4BZxLQCQvWVyZaQSn7eeGa2wUy06qpJWqb9NBJNrlLvgJ ZbSQni4AtugmOQdgDbL+HxItT2JuIcvl0EfQy2VTfQSd+kOYvV1l7IoskQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFF6JKrVhSKk/+2OsdGPG74cP605NMB8GA1UdIwQY MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt Y2U1OTUyMmVmNjZmLzEvWG9rcXRXRklxVF83WTZ4MFk4YnZod19yVGswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCoz5QAwQD oz5gMA0GCSqGSIb3DQEBCwUAA4IBAQCHOOBYFJgOz11LpGdpDlDQjHMw7hRbRnx/ sOYENfCd5VacL+YQY5jpupK++oGjZ+O22c059NEHihUAgMg5DrNCKjoaqzIffJ3P pfuX/NjJJOdd+0wuesfqv0Z0LNXmQeYgZW+qTKkjcniXlDY6MRFQHCSy+cCwc8QM veMx2JwMhBbkMcNIg0Yh65wvLZ8GF/KXDXX8m3ApCvcq0VsmG0m0gvNuW271Lzg8 CVoK9fphFEAfUCKRVvTz1cDQ+smGCerZFKPu0TADu7TetvU3+ZZ+MCOCWYA9wTzf ZRudNZ0v7rXJhWqTP9hbzsRzBvL/M3NQFsH91+DhEMZkFrtpJ86i -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:44 2025 by rpki-client