This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/ox97KswXfIOw3gih_lmoLatCwqE.roa File: ox97KswXfIOw3gih_lmoLatCwqE.roa (raw, json) Hash identifier: vhOZjRnzXjeol/44YXiIpjf8tDB+Yuf5buWOPjPnuek= Subject key identifier: A3:1F:7B:2A:CC:17:7C:83:B0:DE:08:A1:FE:59:A8:2D:AB:42:C2:A1 Certificate issuer: /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Certificate serial: 019B27DA32B7DEA72AC85ED238397F63EE3B Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/ox97KswXfIOw3gih_lmoLatCwqE.roa Signing time: Tue 16 Dec 2025 15:49:29 +0000 ROA not before: Tue 16 Dec 2025 15:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14061 IP address blocks: 62.182.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:da:32:b7:de:a7:2a:c8:5e:d2:38:39:7f:63:ee:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89 Validity Not Before: Dec 16 15:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a31f7b2acc177c83b0de08a1fe59a82dab42c2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bb:4d:88:1c:0e:a6:e6:79:d9:3c:b0:37:81: 3f:64:91:9d:13:9e:2c:4c:ac:7c:76:9d:42:99:a4: 32:5d:07:cc:21:d6:57:30:1f:3c:3d:37:24:e9:84: db:0f:55:22:72:fb:88:ef:2a:7f:38:25:4f:b7:b1: 6d:7b:c7:80:52:49:f0:60:c3:8a:d4:63:40:e2:05: 58:b7:54:10:6e:45:91:7b:27:98:29:b2:8e:a6:1e: 28:84:8d:12:f3:11:20:e4:e8:70:6d:9d:de:53:35: eb:da:b8:41:32:b8:df:db:e9:d8:68:bb:c5:3d:f4: 44:77:82:98:54:42:1d:f7:cf:31:36:4b:cd:3c:46: b1:21:be:1d:36:83:aa:66:2b:ee:d4:65:30:08:b7: 98:8f:05:08:0b:01:a7:e6:93:92:74:6d:4e:99:0c: 34:3f:0e:ab:ee:46:22:00:6c:db:41:18:83:f0:6e: 8b:3c:46:1b:31:c0:ee:33:e9:22:5e:a6:a3:65:d0: 78:ac:b9:40:13:fd:7d:f1:eb:ed:25:71:15:4a:cc: de:d5:b0:24:ea:24:dd:91:fd:1e:6d:a2:87:17:2e: 8f:26:cb:47:6e:d3:50:79:52:76:4f:0d:3c:12:bc: 42:cc:ef:73:75:7e:f1:ef:95:ef:f5:0d:dc:66:71: 0e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:7B:2A:CC:17:7C:83:B0:DE:08:A1:FE:59:A8:2D:AB:42:C2:A1 X509v3 Authority Key Identifier: keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/ox97KswXfIOw3gih_lmoLatCwqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.182.191.0/24 Signature Algorithm: sha256WithRSAEncryption 46:07:41:a2:0a:79:e3:a1:b4:49:90:8a:7b:a8:e9:39:ec:78: ef:ac:17:84:2a:c8:3a:11:80:d4:ec:fc:75:8e:31:65:06:e7: ff:c0:a4:eb:4a:79:0d:86:7a:37:cd:b8:00:2d:0b:a2:39:4c: df:5c:53:01:1c:c5:23:11:d5:98:f5:c1:f8:a2:79:e4:40:40: 3b:b5:6e:17:a0:05:c3:f0:5a:9d:c7:9d:74:6c:cc:51:81:95: e0:a8:86:8e:05:96:5e:48:17:a7:64:e6:93:04:3b:d1:09:c0: 14:55:df:77:0d:07:a1:8d:e0:81:66:59:28:23:2b:d5:04:db: 3c:8f:9f:87:30:d2:38:39:5d:30:52:56:3e:a7:65:e9:4b:e9: ae:4f:53:b9:6d:44:59:12:c5:12:73:ff:aa:89:59:55:fe:08: 07:53:d4:b3:16:0a:fb:ac:ba:6f:b3:16:05:44:33:ed:21:24: cc:2e:87:75:21:ce:34:9d:cb:72:ed:82:b4:88:07:ce:42:a1: b1:5c:a2:10:18:f8:45:b2:5b:5a:9a:81:b6:b7:26:02:66:fb: 3e:cc:65:69:45:07:4f:1f:98:1d:33:37:a6:a1:e6:fe:88:5d: e1:13:de:50:dd:2c:3f:92:97:e5:f6:2d:43:56:07:6b:9d:a6: 5b:51:23:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsn2jK33qcqyF7SODl/Y+47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzN2U2MzZiYTYwYzcxNGZmZTg3NTRhYjlkMDRjNmQxZWVk YjliODkwHhcNMjUxMjE2MTU0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzFmN2IyYWNjMTc3YzgzYjBkZTA4YTFmZTU5YTgyZGFiNDJjMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rtNiBwOpuZ52TywN4E/ZJGdE54s TKx8dp1CmaQyXQfMIdZXMB88PTck6YTbD1UicvuI7yp/OCVPt7Fte8eAUknwYMOK 1GNA4gVYt1QQbkWReyeYKbKOph4ohI0S8xEg5OhwbZ3eUzXr2rhBMrjf2+nYaLvF PfREd4KYVEId988xNkvNPEaxIb4dNoOqZivu1GUwCLeYjwUICwGn5pOSdG1OmQw0 Pw6r7kYiAGzbQRiD8G6LPEYbMcDuM+kiXqajZdB4rLlAE/198evtJXEVSsze1bAk 6iTdkf0ebaKHFy6PJstHbtNQeVJ2Tw08ErxCzO9zdX7x75Xv9Q3cZnEOZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMfeyrMF3yDsN4Iof5ZqC2rQsKhMB8GA1UdIwQY MBaAFDN+Y2umDHFP/odUq50ExtHu25uJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzkt NzBjMjI4ZWU5Yzk1LzEvb3g5N0tzd1hmSU93M2dpaF9sbW9MYXRDd3FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9lNzBjODMtNDZmZC00MGI0LTgzYzktNzBjMjI4ZWU5Yzk1 LzEvTTM1amE2WU1jVV8taDFTcm5RVEcwZTdibTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPra/MA0G CSqGSIb3DQEBCwUAA4IBAQBGB0GiCnnjobRJkIp7qOk57HjvrBeEKsg6EYDU7Px1 jjFlBuf/wKTrSnkNhno3zbgALQuiOUzfXFMBHMUjEdWY9cH4onnkQEA7tW4XoAXD 8Fqdx510bMxRgZXgqIaOBZZeSBenZOaTBDvRCcAUVd93DQehjeCBZlkoIyvVBNs8 j5+HMNI4OV0wUlY+p2XpS+muT1O5bURZEsUSc/+qiVlV/ggHU9SzFgr7rLpvsxYF RDPtISTMLod1Ic40ncty7YK0iAfOQqGxXKIQGPhFsltamoG2tyYCZvs+zGVpRQdP H5gdMzemoeb+iF3hE95Q3Sw/kpfl9i1DVgdrnaZbUSNF -----END CERTIFICATE-----Generated at Wed Dec 17 19:16:55 2025 by rpki-client