This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/3p0Wlr49r2oy-mqOd40rAvvmW3w.roa File: 3p0Wlr49r2oy-mqOd40rAvvmW3w.roa (raw, json) Hash identifier: z1wQ/dZS1Nu1TOpyODQg46+I11CB0aKuZl5lRQ8vxEI= Subject key identifier: DE:9D:16:96:BE:3D:AF:6A:32:FA:6A:8E:77:8D:2B:02:FB:E6:5B:7C Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a Certificate serial: 019AE99D74FABD5747985A0A4663C793CC9D Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/3p0Wlr49r2oy-mqOd40rAvvmW3w.roa Signing time: Thu 04 Dec 2025 13:46:41 +0000 ROA not before: Thu 04 Dec 2025 13:46:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12678 IP address blocks: 31.222.64.0/22 maxlen: 22 31.222.64.0/23 maxlen: 23 31.222.66.0/23 maxlen: 23 31.222.66.0/24 maxlen: 24 31.222.67.0/24 maxlen: 24 31.222.68.0/23 maxlen: 23 31.222.70.0/23 maxlen: 23 31.222.70.0/24 maxlen: 24 31.222.72.0/22 maxlen: 22 31.222.72.0/23 maxlen: 23 31.222.74.0/23 maxlen: 23 31.222.74.0/24 maxlen: 24 31.222.75.0/24 maxlen: 24 31.222.76.0/23 maxlen: 23 31.222.78.0/23 maxlen: 23 31.222.78.0/24 maxlen: 24 159.253.176.0/22 maxlen: 22 159.253.180.0/24 maxlen: 24 159.253.181.0/24 maxlen: 24 185.153.131.0/24 maxlen: 24 2a00:aea0:100::/40 maxlen: 40 2a00:aea0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:9d:74:fa:bd:57:47:98:5a:0a:46:63:c7:93:cc:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a Validity Not Before: Dec 4 13:46:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=de9d1696be3daf6a32fa6a8e778d2b02fbe65b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:49:1a:b8:0f:b7:4e:a2:fb:1e:8b:83:5a:08: 9d:9c:d1:47:53:d4:38:7e:b2:e4:75:f1:4c:e5:57: 0e:dc:6b:9f:61:ec:bc:e6:c9:a5:ea:a0:28:d6:d1: 99:31:fb:b6:23:6b:0f:d1:72:95:d1:5e:f1:92:0e: c6:08:23:94:4c:a1:cd:cf:3f:46:3f:9a:9a:2b:94: d9:63:48:e0:a4:6f:e6:3c:32:ec:b5:b2:c2:6f:f6: 1e:54:cd:82:d0:24:17:68:ba:7a:68:0b:ca:70:85: b3:e3:5d:ec:53:a6:ed:bc:87:45:16:75:98:ab:b3: d0:73:57:97:c4:de:a0:b5:a6:21:a8:0b:ad:09:f9: 07:57:f1:e9:db:af:f0:1d:54:07:b5:a1:47:71:d1: 3d:dc:98:e6:25:71:5b:25:e4:56:84:5e:9c:5c:49: d5:c2:8a:ee:c1:12:80:f2:46:6e:a5:dd:53:53:e1: f7:68:eb:f0:a8:c2:72:38:ca:e5:94:f6:9d:4d:5a: 66:60:6f:fa:d6:30:12:b0:2c:05:ee:9b:c8:b8:67: d3:41:9a:9c:53:9a:57:37:c0:cc:5a:b6:a5:76:c9: e7:ea:9c:34:e3:4e:b8:c2:2c:d1:a5:80:79:1d:83: 88:47:f5:ab:7b:a6:f4:48:70:22:08:e3:63:5b:fa: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:9D:16:96:BE:3D:AF:6A:32:FA:6A:8E:77:8D:2B:02:FB:E6:5B:7C X509v3 Authority Key Identifier: keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/3p0Wlr49r2oy-mqOd40rAvvmW3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.64.0/20 159.253.176.0-159.253.181.255 185.153.131.0/24 IPv6: 2a00:aea0:100::-2a00:aea0:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5e:d1:88:10:a0:b3:f7:18:85:eb:81:d8:6f:c2:21:28:18:2c: 6b:24:3c:18:1b:93:1f:84:b4:7c:52:2e:03:c4:b1:f5:e0:0d: 55:8c:7a:1e:3d:c0:fc:67:c2:3f:9c:5a:d5:91:d3:75:c5:8d: 9a:68:89:51:f4:e3:52:dd:e9:8a:36:90:9b:d5:b0:1f:97:d8: 6a:09:a5:f4:d2:92:2f:8b:5e:e9:bc:9c:7e:ea:c3:9c:a8:a3: 33:d8:66:59:9b:44:93:80:7e:d2:7f:1d:a9:18:16:b7:c3:a9: e4:a8:b5:22:84:b7:f1:73:14:9b:7c:e6:f0:d2:de:40:41:d4: 77:47:af:61:10:53:2f:4f:9a:02:51:d4:16:e5:53:72:1b:ba: c0:19:9d:80:40:41:71:63:e5:da:20:2c:43:8f:d8:4d:15:34: d8:5c:7e:74:42:75:e1:aa:44:3b:50:f9:19:61:91:c0:7d:1b: f8:07:0a:32:5e:dd:85:93:35:73:0e:5b:31:5d:01:7b:f7:de: 5b:9a:03:31:64:0d:17:98:5f:67:67:4f:e3:c2:7b:a1:3e:fb: 8c:e0:97:a5:96:64:dd:c5:51:65:e7:e8:66:b2:f9:4d:bb:e0: ae:b3:40:bb:d9:10:b6:7e:93:8f:58:14:3f:a2:65:ab:17:eb: fa:14:03:79 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZrpnXT6vVdHmFoKRmPHk8ydMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwNTEyMmY0ZGVhN2RmMzkyN2Q0MDExYjMwODdkNGQwNjdm OWQxOWEwHhcNMjUxMjA0MTM0NjQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTlkMTY5NmJlM2RhZjZhMzJmYTZhOGU3NzhkMmIwMmZiZTY1YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30kauA+3TqL7HouDWgidnNFHU9Q4 frLkdfFM5VcO3GufYey85sml6qAo1tGZMfu2I2sP0XKV0V7xkg7GCCOUTKHNzz9G P5qaK5TZY0jgpG/mPDLstbLCb/YeVM2C0CQXaLp6aAvKcIWz413sU6btvIdFFnWY q7PQc1eXxN6gtaYhqAutCfkHV/Hp26/wHVQHtaFHcdE93JjmJXFbJeRWhF6cXEnV woruwRKA8kZupd1TU+H3aOvwqMJyOMrllPadTVpmYG/61jASsCwF7pvIuGfTQZqc U5pXN8DMWraldsnn6pw04064wizRpYB5HYOIR/Wre6b0SHAiCONjW/oCrwIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFN6dFpa+Pa9qMvpqjneNKwL75lt8MB8GA1UdIwQY MBaAFFBRIvTep985J9QBGzCH1NBn+dGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQt ZDNmMjRhZTdiODdiLzEvM3AwV2xyNDlyMm95LW1xT2Q0MHJBdnZtVzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQtZDNmMjRhZTdiODdi LzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAgBAIAATAaAwQEH95AMAwD BASf/bADBAGf/bQDBAC5mYMwGAQCAAIwEjAQAwYAKgCuoAEDBgAqAK6gAjANBgkq hkiG9w0BAQsFAAOCAQEAXtGIEKCz9xiF64HYb8IhKBgsayQ8GBuTH4S0fFIuA8Sx 9eANVYx6Hj3A/GfCP5xa1ZHTdcWNmmiJUfTjUt3pijaQm9WwH5fYagml9NKSL4te 6bycfurDnKijM9hmWZtEk4B+0n8dqRgWt8Op5Ki1IoS38XMUm3zm8NLeQEHUd0ev YRBTL0+aAlHUFuVTchu6wBmdgEBBcWPl2iAsQ4/YTRU02Fx+dEJ14apEO1D5GWGR wH0b+AcKMl7dhZM1cw5bMV0Be/feW5oDMWQNF5hfZ2dP48J7oT77jOCXpZZk3cVR ZefoZrL5TbvgrrNAu9kQtn6Tj1gUP6Jlqxfr+hQDeQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:06:34 2025 by rpki-client