This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/cCgTb8X6pIy80V_PJ66PvKfmf8A.roa File: cCgTb8X6pIy80V_PJ66PvKfmf8A.roa (raw, json) Hash identifier: wMMFmNIatqATxNZJr23krWEqGeEpB6KiCLDJPXvnxLE= Subject key identifier: 70:28:13:6F:C5:FA:A4:8C:BC:D1:5F:CF:27:AE:8F:BC:A7:E6:7F:C0 Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Certificate serial: 019A7F1C137FC0306A2542335861418F547F Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/cCgTb8X6pIy80V_PJ66PvKfmf8A.roa Signing time: Thu 13 Nov 2025 21:25:37 +0000 ROA not before: Thu 13 Nov 2025 21:25:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199242 IP address blocks: 31.222.234.0/24 maxlen: 24 37.72.142.0/24 maxlen: 24 62.3.11.0/24 maxlen: 24 62.106.90.0/24 maxlen: 24 62.233.61.0/24 maxlen: 24 80.71.144.0/24 maxlen: 24 91.246.50.0/24 maxlen: 24 146.19.4.0/24 maxlen: 24 146.19.199.0/24 maxlen: 24 146.19.203.0/24 maxlen: 24 176.97.217.0/24 maxlen: 24 176.126.101.0/24 maxlen: 24 185.234.12.0/24 maxlen: 24 188.244.119.0/24 maxlen: 24 193.9.48.0/24 maxlen: 24 193.162.132.0/24 maxlen: 24 193.162.133.0/24 maxlen: 24 194.26.230.0/24 maxlen: 24 194.26.231.0/24 maxlen: 24 194.99.158.0/24 maxlen: 24 195.96.130.0/24 maxlen: 24 195.96.131.0/24 maxlen: 24 212.52.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7f:1c:13:7f:c0:30:6a:25:42:33:58:61:41:8f:54:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48 Validity Not Before: Nov 13 21:25:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7028136fc5faa48cbcd15fcf27ae8fbca7e67fc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:79:65:e0:9f:93:58:b1:c8:51:67:8e:eb: dd:35:7a:35:b5:79:51:41:a2:1a:a6:2f:15:82:6a: 05:1c:50:29:a0:c5:4f:30:10:97:d4:8e:43:1d:73: 89:0e:bf:42:c7:4f:a7:3c:04:0e:bf:df:9b:66:fb: 84:be:05:03:32:fb:96:56:88:5b:92:5b:4b:20:8e: df:f0:65:2a:d1:ba:f7:b5:30:7d:10:a7:e5:8b:c5: 03:13:ee:cc:f9:67:a1:ac:48:bb:f8:e7:bb:6b:8f: 1e:d0:cd:6c:88:9a:fe:d3:dc:7f:db:61:8d:f5:56: 8a:b7:ac:8e:9e:bf:cd:89:91:0d:6c:c0:75:3c:cf: f2:19:9b:09:90:83:ce:d5:7a:9b:6b:9f:9e:9c:fc: 4b:41:61:5a:a6:1c:54:ae:38:0f:90:6e:47:06:83: b5:83:00:bd:36:c5:27:ee:88:80:ab:4f:eb:84:d0: c4:2d:3a:f7:74:93:af:31:27:cc:7c:82:dd:7b:7b: e6:14:a6:f1:a1:eb:0a:57:3a:c4:fa:1b:91:7f:16: 8c:bb:1c:94:40:cf:ee:23:15:ad:a3:8c:54:82:cd: 14:26:c3:a6:53:18:8e:6f:df:85:55:b8:6d:09:30: 55:71:5f:38:4d:77:85:5c:1b:20:36:1b:57:32:c4: 98:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:28:13:6F:C5:FA:A4:8C:BC:D1:5F:CF:27:AE:8F:BC:A7:E6:7F:C0 X509v3 Authority Key Identifier: keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/cCgTb8X6pIy80V_PJ66PvKfmf8A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.234.0/24 37.72.142.0/24 62.3.11.0/24 62.106.90.0/24 62.233.61.0/24 80.71.144.0/24 91.246.50.0/24 146.19.4.0/24 146.19.199.0/24 146.19.203.0/24 176.97.217.0/24 176.126.101.0/24 185.234.12.0/24 188.244.119.0/24 193.9.48.0/24 193.162.132.0/23 194.26.230.0/23 194.99.158.0/24 195.96.130.0/23 212.52.28.0/24 Signature Algorithm: sha256WithRSAEncryption a5:00:9b:20:17:59:09:e2:27:2c:85:6e:d3:5b:06:20:7e:69: 90:a4:bb:f8:b4:b5:7f:f5:0c:6d:57:03:4f:45:0f:2f:e4:9b: c8:ef:ea:bf:5e:8a:ae:6f:2d:6c:62:5d:88:f2:cd:38:98:fe: 56:c4:e2:31:95:3c:04:06:fe:75:c6:f0:69:23:30:c4:0a:2d: 6b:e4:2d:6f:64:ec:3f:98:6b:d7:93:ff:55:b7:7c:79:1c:e9: 87:07:b7:0d:ef:37:87:c5:bb:67:9c:45:90:69:1b:88:dc:ad: 19:5c:61:f2:2b:6a:e3:88:b8:e7:37:6d:63:01:30:6e:8a:58: 8c:63:c4:c0:d8:8a:8d:59:4e:4c:dc:a8:70:53:8c:1e:ac:93: 36:d9:20:20:6a:94:6c:8c:e1:db:2d:94:e9:dd:6b:44:ee:9a: a3:67:75:72:21:17:ed:ee:1d:12:cd:21:56:a0:d1:69:49:c2: ae:8a:62:08:a4:53:fe:09:d5:cc:9a:8c:3f:8b:f5:5b:ea:56: 91:f8:a9:e9:95:49:68:7c:30:49:87:67:af:d4:df:31:41:ff: 40:c4:89:84:27:f6:e7:d4:3d:56:3d:27:55:4b:5b:9b:e0:9b: 50:96:49:3c:74:a5:89:cc:f2:07:5a:41:b7:73:af:ec:09:94: 8a:04:03:5a -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgISAZp/HBN/wDBqJUIzWGFBj1R/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMzY4YjBhZWM2YzdmZDQ4ZDBkOTZiNDA3N2EyM2Y5MDZh ODZhNDgwHhcNMjUxMTEzMjEyNTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDI4MTM2ZmM1ZmFhNDhjYmNkMTVmY2YyN2FlOGZiY2E3ZTY3ZmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuih5ZeCfk1ixyFFnjuvdNXo1tXlR QaIapi8VgmoFHFApoMVPMBCX1I5DHXOJDr9Cx0+nPAQOv9+bZvuEvgUDMvuWVohb kltLII7f8GUq0br3tTB9EKfli8UDE+7M+WehrEi7+Oe7a48e0M1siJr+09x/22GN 9VaKt6yOnr/NiZENbMB1PM/yGZsJkIPO1Xqba5+enPxLQWFaphxUrjgPkG5HBoO1 gwC9NsUn7oiAq0/rhNDELTr3dJOvMSfMfILde3vmFKbxoesKVzrE+huRfxaMuxyU QM/uIxWto4xUgs0UJsOmUxiOb9+FVbhtCTBVcV84TXeFXBsgNhtXMsSYowIDAQAB o4ICfjCCAnowHQYDVR0OBBYEFHAoE2/F+qSMvNFfzyeuj7yn5n/AMB8GA1UdIwQY MBaAFC42iwrsbH/UjQ2WtAd6I/kGqGpIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQt MTQyN2RkMTZlZmE0LzEvY0NnVGI4WDZwSXk4MFZfUEo2NlB2S2ZtZjhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9kYzcwMzAtNzhjYy00ODAwLTg4OGQtMTQyN2RkMTZlZmE0 LzEvTGphTEN1eHNmOVNORFphMEIzb2otUWFvYWtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGTBggrBgEFBQcBBwEB/wSBgzCBgDB+BAIAATB4AwQAH97q AwQAJUiOAwQAPgMLAwQAPmpaAwQAPuk9AwQAUEeQAwQAW/YyAwQAkhMEAwQAkhPH AwQAkhPLAwQAsGHZAwQAsH5lAwQAueoMAwQAvPR3AwQAwQkwAwQBwaKEAwQBwhrm AwQAwmOeAwQBw2CCAwQA1DQcMA0GCSqGSIb3DQEBCwUAA4IBAQClAJsgF1kJ4ics hW7TWwYgfmmQpLv4tLV/9QxtVwNPRQ8v5JvI7+q/Xoquby1sYl2I8s04mP5WxOIx lTwEBv51xvBpIzDECi1r5C1vZOw/mGvXk/9Vt3x5HOmHB7cN7zeHxbtnnEWQaRuI 3K0ZXGHyK2rjiLjnN21jATBuiliMY8TA2IqNWU5M3KhwU4werJM22SAgapRsjOHb LZTp3WtE7pqjZ3VyIRft7h0SzSFWoNFpScKuimIIpFP+CdXMmow/i/Vb6laR+Knp lUlofDBJh2ev1N8xQf9AxImEJ/bn1D1WPSdVS1ub4JtQlkk8dKWJzPIHWkG3c6/s CZSKBANa -----END CERTIFICATE-----Generated at Sat Dec 6 19:23:33 2025 by rpki-client