This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/OpKyWUUF45asysnRnTgjMvj5UEo.roa File: OpKyWUUF45asysnRnTgjMvj5UEo.roa (raw, json) Hash identifier: dG/NrnY4NueXZeuAaFWy5reT48MCWKXtWJgALxpo6BI= Subject key identifier: 3A:92:B2:59:45:05:E3:96:AC:CA:C9:D1:9D:38:23:32:F8:F9:50:4A Certificate issuer: /CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Certificate serial: 019A5BBBAD4C50F4F84D4258F26718528E42 Authority key identifier: A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/OpKyWUUF45asysnRnTgjMvj5UEo.roa Signing time: Fri 07 Nov 2025 00:33:37 +0000 ROA not before: Fri 07 Nov 2025 00:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 33915 IP address blocks: 31.136.0.0/14 maxlen: 14 62.72.192.0/19 maxlen: 19 62.140.128.0/20 maxlen: 20 62.140.140.0/23 maxlen: 23 62.140.156.0/23 maxlen: 23 109.32.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.mft rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5b:bb:ad:4c:50:f4:f8:4d:42:58:f2:67:18:52:8e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f13d680ce480591bf8b37ddca0faeb3bbe744e Validity Not Before: Nov 7 00:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a92b2594505e396accac9d19d382332f8f9504a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:19:b3:ea:4b:61:3f:99:5a:c5:53:c6:27: d2:96:ec:a7:a3:ec:ac:9a:44:8f:d1:a0:b1:48:18: f9:1c:48:db:87:8a:24:e2:0a:85:1f:fe:c4:d6:66: f2:50:82:6d:2d:b1:e9:a3:63:f9:42:56:5c:96:b4: 6f:1d:a8:68:f6:bd:18:31:4e:d6:f0:1b:e0:20:cf: 51:e8:f4:e8:58:9f:65:6f:75:0f:08:58:e9:cb:f0: 9b:21:ab:23:a0:33:6f:00:8e:85:a4:42:dd:31:07: d0:42:13:40:e4:11:a2:18:b6:b2:53:6e:76:dd:b9: 12:5b:ef:7e:d5:76:03:dd:1c:1a:9a:d4:b1:43:07: 64:18:50:4e:33:7c:12:95:cf:86:4f:6f:2d:75:27: e0:6a:2a:05:48:dd:96:ba:54:58:79:51:ca:27:41: 8c:b6:c9:43:47:ad:25:d8:19:bd:bd:f6:68:8e:29: a9:16:e7:3c:4d:fe:f3:a6:dc:79:ed:11:51:f2:62: c6:6d:52:3d:46:00:48:b0:94:7e:a6:a1:82:93:88: 8f:bf:af:f9:b0:d2:88:1c:86:02:eb:5b:59:8c:76: b9:b9:59:1c:e7:0a:c4:43:4f:df:b1:c9:c6:2f:a0: 74:a2:f6:3a:9f:c1:29:a8:a6:a5:6b:42:53:fa:e0: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:92:B2:59:45:05:E3:96:AC:CA:C9:D1:9D:38:23:32:F8:F9:50:4A X509v3 Authority Key Identifier: keyid:A6:F1:3D:68:0C:E4:80:59:1B:F8:B3:7D:DC:A0:FA:EB:3B:BE:74:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pvE9aAzkgFkb-LN93KD66zu-dE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/OpKyWUUF45asysnRnTgjMvj5UEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8d1b02-b0f9-4e0e-a457-30bdb48da521/1/pvE9aAzkgFkb-LN93KD66zu-dE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.136.0.0/14 62.72.192.0/19 62.140.128.0/20 62.140.156.0/23 109.32.0.0/13 Signature Algorithm: sha256WithRSAEncryption 68:c1:83:ee:84:a5:fa:09:14:a4:9e:b3:ad:ac:75:a0:f8:38: 6b:93:7f:18:b9:6c:f8:de:c2:d6:bb:02:fe:65:71:98:7b:76: fa:48:04:12:e4:c6:05:6f:0e:d0:be:45:ad:02:c3:1a:21:b3: d5:c4:6e:41:80:ae:72:15:84:64:6e:5f:b6:d1:dc:f3:96:c6: a9:89:75:c2:b2:96:cb:d9:ec:48:e8:4b:d0:a1:14:21:4b:09: 05:42:94:05:a9:85:bd:c7:b6:a7:bf:57:68:ba:cd:19:97:1c: dc:f3:ae:6c:e5:6b:dd:3a:da:0e:61:5e:71:cb:2e:1f:09:24: 76:c1:15:db:72:5a:35:a5:fc:55:94:90:35:8b:9e:c5:58:0b: 09:28:1d:1f:40:09:9a:3d:bd:46:5e:24:b7:26:0e:36:8f:96: 39:b5:8c:c6:98:52:0e:f0:02:f7:68:6a:85:29:a1:ac:88:63: 0f:18:a3:6a:05:c7:41:fc:48:90:d3:61:82:2a:d5:f6:64:62: 3b:63:a8:7d:f6:ef:8e:34:ca:bb:dd:b0:78:1a:31:85:4d:4a: d0:f5:ab:b2:d1:81:f2:c5:3d:05:eb:23:95:20:ed:7d:28:c1: fc:6e:35:5a:35:c3:97:4a:31:98:51:81:b9:c2:d0:40:82:70: ac:cb:1b:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZpbu61MUPT4TUJY8mcYUo5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2ZjEzZDY4MGNlNDgwNTkxYmY4YjM3ZGRjYTBmYWViM2Ji ZTc0NGUwHhcNMjUxMTA3MDAzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTkyYjI1OTQ1MDVlMzk2YWNjYWM5ZDE5ZDM4MjMzMmY4Zjk1MDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tUZs+pLYT+ZWsVTxifSluyno+ys mkSP0aCxSBj5HEjbh4ok4gqFH/7E1mbyUIJtLbHpo2P5QlZclrRvHaho9r0YMU7W 8BvgIM9R6PToWJ9lb3UPCFjpy/CbIasjoDNvAI6FpELdMQfQQhNA5BGiGLayU252 3bkSW+9+1XYD3RwamtSxQwdkGFBOM3wSlc+GT28tdSfgaioFSN2WulRYeVHKJ0GM tslDR60l2Bm9vfZojimpFuc8Tf7zptx57RFR8mLGbVI9RgBIsJR+pqGCk4iPv6/5 sNKIHIYC61tZjHa5uVkc5wrEQ0/fscnGL6B0ovY6n8EpqKala0JT+uBgawIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFDqSsllFBeOWrMrJ0Z04IzL4+VBKMB8GA1UdIwQY MBaAFKbxPWgM5IBZG/izfdyg+us7vnROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTct MzBiZGI0OGRhNTIxLzEvT3BLeVdVVUY0NWFzeXNuUm5UZ2pNdmo1VUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZDFiMDItYjBmOS00ZTBlLWE0NTctMzBiZGI0OGRhNTIx LzEvcHZFOWFBemtnRmtiLUxOOTNLRDY2enUtZEU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcAwMCH4gDBAU+ SMADBAQ+jIADBAE+jJwDAwNtIDANBgkqhkiG9w0BAQsFAAOCAQEAaMGD7oSl+gkU pJ6zrax1oPg4a5N/GLls+N7C1rsC/mVxmHt2+kgEEuTGBW8O0L5FrQLDGiGz1cRu QYCuchWEZG5fttHc85bGqYl1wrKWy9nsSOhL0KEUIUsJBUKUBamFvce2p79XaLrN GZcc3POubOVr3TraDmFeccsuHwkkdsEV23JaNaX8VZSQNYuexVgLCSgdH0AJmj29 Rl4ktyYONo+WObWMxphSDvAC92hqhSmhrIhjDxijagXHQfxIkNNhgirV9mRiO2Oo ffbvjjTKu92weBoxhU1K0PWrstGB8sU9BesjlSDtfSjB/G41WjXDl0oxmFGBucLQ QIJwrMsbqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:18 2025 by rpki-client