This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/aC9h37w9SxJy7YDijl5CtjD_8YI.roa File: aC9h37w9SxJy7YDijl5CtjD_8YI.roa (raw, json) Hash identifier: MHX8Dhiu7ht+UGjx6cFAfN7NE3zuBBwKSz8saWRCYw4= Subject key identifier: 68:2F:61:DF:BC:3D:4B:12:72:ED:80:E2:8E:5E:42:B6:30:FF:F1:82 Certificate issuer: /CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d Certificate serial: 019ADA6F4F8B6E6572B2081411957524C05D Authority key identifier: E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/aC9h37w9SxJy7YDijl5CtjD_8YI.roa Signing time: Mon 01 Dec 2025 15:01:59 +0000 ROA not before: Mon 01 Dec 2025 15:01:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208348 IP address blocks: 36.255.240.0/23 maxlen: 23 45.142.160.0/22 maxlen: 22 103.30.226.0/23 maxlen: 23 103.244.146.0/23 maxlen: 23 170.117.202.0/23 maxlen: 23 193.3.241.0/24 maxlen: 24 2a0e:f240::/29 maxlen: 29 2a0e:f240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.mft rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:6f:4f:8b:6e:65:72:b2:08:14:11:95:75:24:c0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4202a3fc1a8e85c9dfd2d65d319a80dd1fb917d Validity Not Before: Dec 1 15:01:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=682f61dfbc3d4b1272ed80e28e5e42b630fff182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:52:11:e7:d3:53:eb:39:94:0e:2f:73:2b:3d: b7:e8:da:13:b9:eb:0b:2a:57:e8:24:db:e8:9d:55: f5:38:72:78:8a:8a:b7:8c:e3:00:84:79:d3:29:c3: cd:df:f9:52:ac:c1:70:bd:b7:81:ba:75:57:60:7e: e9:40:57:fe:a2:ba:1b:a3:8f:26:13:8c:45:c6:7e: 82:3f:51:d2:75:78:fa:dd:76:b5:0a:72:99:46:37: 01:1b:f5:ae:04:7e:05:e3:7b:85:fe:ee:94:57:7f: b5:44:c0:c3:d0:41:cc:77:b4:e4:d8:ed:96:dd:21: fa:16:5c:46:07:f2:94:eb:ce:37:e7:bd:4b:be:45: b7:15:71:85:e5:fc:55:61:dd:94:22:d5:18:22:f9: a0:d1:b5:3d:12:48:e0:03:14:0b:9a:d8:e1:07:c7: 7f:0e:fd:0b:95:d7:1f:aa:42:7b:7f:ae:4b:14:61: 52:7b:e5:ab:99:95:f3:b7:65:ab:2e:f2:89:4d:1a: 3d:2b:36:a3:43:1c:11:3b:f0:9e:3f:b5:8a:3b:f9: 28:7e:35:8a:c3:73:8d:6f:d9:f7:e7:c6:fc:fc:37: f2:cf:f7:0e:b0:fd:67:6b:db:7f:cc:0e:30:32:94: b7:89:53:56:e5:76:47:8a:1d:26:56:bf:ce:2e:6f: b4:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:61:DF:BC:3D:4B:12:72:ED:80:E2:8E:5E:42:B6:30:FF:F1:82 X509v3 Authority Key Identifier: keyid:E4:20:2A:3F:C1:A8:E8:5C:9D:FD:2D:65:D3:19:A8:0D:D1:FB:91:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/aC9h37w9SxJy7YDijl5CtjD_8YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/0cf7b9-938f-4c17-8ec7-d18d1ea568f5/1/5CAqP8Go6Fyd_S1l0xmoDdH7kX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 36.255.240.0/23 45.142.160.0/22 103.30.226.0/23 103.244.146.0/23 170.117.202.0/23 193.3.241.0/24 IPv6: 2a0e:f240::/29 Signature Algorithm: sha256WithRSAEncryption 10:d6:37:77:8a:05:a9:9a:7f:c3:c2:7c:76:38:3e:c8:3a:b5: a8:82:76:b0:42:d0:bc:f1:2e:c7:5f:ea:86:91:a0:d8:05:95: 33:ab:92:43:bc:21:15:6b:78:98:cc:2d:e0:29:4b:28:ef:4d: 1d:9e:4c:b9:b6:b8:41:d2:69:f0:51:dd:de:98:3c:d2:10:27: da:c3:c2:65:82:a9:50:9f:61:74:d1:a6:ea:80:f9:64:3e:2d: d3:21:26:48:86:1f:09:ac:63:8b:cf:66:be:d7:22:d4:05:72: d9:ef:82:47:51:b0:ea:c1:36:aa:0b:ed:f8:3c:55:88:ef:d5: a5:3a:36:34:e7:ab:ab:fb:6d:d7:62:b7:67:5d:03:ea:30:6d: 9e:35:ff:92:29:2d:b0:5d:c2:63:78:47:3e:8a:f9:2e:26:35: 63:58:64:ad:ee:71:d7:a5:91:c7:39:ec:57:5b:01:b4:52:86: 3e:6b:52:53:d7:a3:52:58:fa:c7:2e:2b:d0:bf:cd:6c:78:06: 24:ef:d6:a1:14:97:8f:f7:3e:3c:f7:93:fb:84:70:db:93:a9: c0:5c:73:92:cb:63:cb:af:3d:c2:3f:fb:2c:4a:ef:a8:84:00: 7d:78:a8:20:b3:da:0a:3d:d7:dd:44:64:0d:d8:68:ad:89:3d: 46:5d:3b:32 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZrab0+LbmVysggUEZV1JMBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0MjAyYTNmYzFhOGU4NWM5ZGZkMmQ2NWQzMTlhODBkZDFm YjkxN2QwHhcNMjUxMjAxMTUwMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODJmNjFkZmJjM2Q0YjEyNzJlZDgwZTI4ZTVlNDJiNjMwZmZmMTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylIR59NT6zmUDi9zKz236NoTuesL KlfoJNvonVX1OHJ4ioq3jOMAhHnTKcPN3/lSrMFwvbeBunVXYH7pQFf+orobo48m E4xFxn6CP1HSdXj63Xa1CnKZRjcBG/WuBH4F43uF/u6UV3+1RMDD0EHMd7Tk2O2W 3SH6FlxGB/KU6843571LvkW3FXGF5fxVYd2UItUYIvmg0bU9EkjgAxQLmtjhB8d/ Dv0LldcfqkJ7f65LFGFSe+WrmZXzt2WrLvKJTRo9KzajQxwRO/CeP7WKO/kofjWK w3ONb9n358b8/Dfyz/cOsP1na9t/zA4wMpS3iVNW5XZHih0mVr/OLm+0WwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFGgvYd+8PUsScu2A4o5eQrYw//GCMB8GA1UdIwQY MBaAFOQgKj/BqOhcnf0tZdMZqA3R+5F9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzct ZDE4ZDFlYTU2OGY1LzEvYUM5aDM3dzlTeEp5N1lEaWpsNUN0akRfOFlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8wY2Y3YjktOTM4Zi00YzE3LThlYzctZDE4ZDFlYTU2OGY1 LzEvNUNBcVA4R282RnlkX1MxbDB4bW9EZEg3a1gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQBJP/wAwQC LY6gAwQBZx7iAwQBZ/SSAwQBqnXKAwQAwQPxMA0EAgACMAcDBQMqDvJAMA0GCSqG SIb3DQEBCwUAA4IBAQAQ1jd3igWpmn/Dwnx2OD7IOrWognawQtC88S7HX+qGkaDY BZUzq5JDvCEVa3iYzC3gKUso700dnky5trhB0mnwUd3emDzSECfaw8JlgqlQn2F0 0abqgPlkPi3TISZIhh8JrGOLz2a+1yLUBXLZ74JHUbDqwTaqC+34PFWI79WlOjY0 56ur+23XYrdnXQPqMG2eNf+SKS2wXcJjeEc+ivkuJjVjWGSt7nHXpZHHOexXWwG0 UoY+a1JT16NSWPrHLivQv81seAYk79ahFJeP9z4895P7hHDbk6nAXHOSy2PLrz3C P/ssSu+ohAB9eKggs9oKPdfdRGQN2GitiT1GXTsy -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:31 2025 by rpki-client