This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/gxxzGRgNcbxCmxZFrswOqqb1KS8.roa File: gxxzGRgNcbxCmxZFrswOqqb1KS8.roa (raw, json) Hash identifier: VVdiy0X/oEC6HeuOVniqFjhpZkCnMjCtWNipcDXTF0M= Subject key identifier: 83:1C:73:19:18:0D:71:BC:42:9B:16:45:AE:CC:0E:AA:A6:F5:29:2F Certificate issuer: /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Certificate serial: 019AD8F07354CE311D285B5B27158CCDEE41 Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/gxxzGRgNcbxCmxZFrswOqqb1KS8.roa Signing time: Mon 01 Dec 2025 08:03:48 +0000 ROA not before: Mon 01 Dec 2025 08:03:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12312 IP address blocks: 62.26.0.0/15 maxlen: 23 62.144.0.0/16 maxlen: 16 62.144.0.0/19 maxlen: 19 62.144.32.0/19 maxlen: 19 62.144.64.0/19 maxlen: 19 62.144.96.0/19 maxlen: 19 62.144.128.0/17 maxlen: 17 62.246.0.0/16 maxlen: 16 79.140.176.0/20 maxlen: 20 80.83.96.0/20 maxlen: 20 185.210.52.0/23 maxlen: 23 194.112.16.0/20 maxlen: 20 195.52.0.0/16 maxlen: 23 195.63.0.0/16 maxlen: 16 195.63.0.0/17 maxlen: 17 195.63.128.0/18 maxlen: 18 195.63.192.0/18 maxlen: 18 195.78.160.0/19 maxlen: 19 195.185.0.0/16 maxlen: 16 212.172.0.0/16 maxlen: 16 2001:4090::/32 maxlen: 32 2001:4091::/32 maxlen: 32 2a01:5c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:f0:73:54:ce:31:1d:28:5b:5b:27:15:8c:cd:ee:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413 Validity Not Before: Dec 1 08:03:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=831c7319180d71bc429b1645aecc0eaaa6f5292f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:96:1f:62:93:7f:50:6b:78:c0:09:6c:86:4e: 2f:ad:e5:59:9d:da:74:80:f4:f4:21:7c:f9:fd:5b: b9:82:08:7e:c7:ee:4d:d2:34:ad:3e:0a:da:ec:f3: 85:ab:b6:c8:74:2a:f9:22:65:40:39:dc:4e:ea:dc: ed:be:84:3b:aa:01:e2:5e:ac:5c:e2:6f:36:2d:6c: 10:f5:e0:c6:06:7c:83:33:fd:57:e8:c7:79:df:0e: d5:16:11:f4:39:0f:08:3b:a1:8c:16:6c:39:0f:0c: 6f:61:06:02:f2:77:dc:44:3c:cf:55:57:de:55:f6: 36:13:6a:a3:e1:0c:7a:c1:ff:a4:f9:d1:a6:15:3c: ef:ff:aa:eb:22:ee:d7:3a:9f:fb:70:02:35:c2:cf: 05:f0:0a:5c:eb:44:31:9e:78:80:de:8c:5c:e8:ea: ab:24:22:2d:42:89:79:0c:20:24:cb:cf:24:18:34: ed:d9:85:8c:38:9d:15:d3:c9:58:3e:c5:85:bc:f3: a4:48:cb:f2:65:be:f3:64:90:91:c0:f8:3c:bd:93: 8a:0b:9c:ea:79:6d:14:fa:b7:a8:ec:9f:a8:e1:1f: 84:cd:9f:e0:49:e8:0a:af:e6:13:c0:60:79:e7:8b: 26:23:30:6d:af:4a:62:6c:94:78:70:a7:41:e9:be: 7d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1C:73:19:18:0D:71:BC:42:9B:16:45:AE:CC:0E:AA:A6:F5:29:2F X509v3 Authority Key Identifier: keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/gxxzGRgNcbxCmxZFrswOqqb1KS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.26.0.0/15 62.144.0.0/16 62.246.0.0/16 79.140.176.0/20 80.83.96.0/20 185.210.52.0/23 194.112.16.0/20 195.52.0.0/16 195.63.0.0/16 195.78.160.0/19 195.185.0.0/16 212.172.0.0/16 IPv6: 2001:4090::/31 2a01:5c8::/32 Signature Algorithm: sha256WithRSAEncryption 27:0f:60:f2:59:fe:12:57:38:4a:fe:cc:1e:85:58:db:be:db: c8:bc:af:90:47:70:5c:55:85:24:10:fa:28:b9:1b:25:7b:23: cf:f1:12:85:28:eb:1f:3f:e8:8a:0a:d2:2a:1c:89:66:4b:4f: 5b:cb:86:57:1a:03:43:16:3d:8e:58:15:d6:30:4a:e1:b4:e9: 14:c5:3c:39:08:c6:23:ee:ed:cf:f6:3b:bb:50:4b:54:28:b0: a1:2d:e6:43:69:13:ea:8b:08:bb:7f:d9:6c:57:1b:6a:cc:0c: e7:fd:ba:ea:fa:d4:e3:11:70:f7:7b:5a:39:6f:3f:7d:82:ac: 2e:00:77:d8:a2:15:df:b2:c5:cf:77:7a:eb:4e:e9:14:aa:d3: 30:21:d2:1e:e8:22:1e:1e:06:ea:b8:8a:08:ae:6c:a0:43:5f: 4c:db:79:d7:0a:09:c0:a3:0d:58:76:68:cf:11:27:01:1d:09: a3:66:88:a7:92:aa:dd:b3:20:0d:61:6e:1f:db:35:d0:d8:c3: fb:8c:43:4d:9c:17:48:40:97:45:68:a0:20:5b:d2:c1:09:df: f7:8a:e4:f6:6c:08:62:70:5d:c4:1a:38:8f:ca:80:d4:5e:ea: d7:13:6c:28:7d:b4:04:25:5b:88:40:ea:bc:e1:50:2f:e3:ca: 47:29:33:e9 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgISAZrY8HNUzjEdKFtbJxWMze5BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMWQ3MmFjMDgyNmUwOWJjMGQxN2RkZWU4YmE4N2Q5NzMx ZGQ0MTMwHhcNMjUxMjAxMDgwMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzFjNzMxOTE4MGQ3MWJjNDI5YjE2NDVhZWNjMGVhYWE2ZjUyOTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpYfYpN/UGt4wAlshk4vreVZndp0 gPT0IXz5/Vu5ggh+x+5N0jStPgra7POFq7bIdCr5ImVAOdxO6tztvoQ7qgHiXqxc 4m82LWwQ9eDGBnyDM/1X6Md53w7VFhH0OQ8IO6GMFmw5DwxvYQYC8nfcRDzPVVfe VfY2E2qj4Qx6wf+k+dGmFTzv/6rrIu7XOp/7cAI1ws8F8Apc60QxnniA3oxc6Oqr JCItQol5DCAky88kGDTt2YWMOJ0V08lYPsWFvPOkSMvyZb7zZJCRwPg8vZOKC5zq eW0U+reo7J+o4R+EzZ/gSegKr+YTwGB554smIzBtr0pibJR4cKdB6b59rwIDAQAB o4ICWjCCAlYwHQYDVR0OBBYEFIMccxkYDXG8QpsWRa7MDqqm9SkvMB8GA1UdIwQY MBaAFAodcqwIJuCbwNF93ui6h9lzHdQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTct OTU4MTEyYTQ4OWE0LzEvZ3h4ekdSZ05jYnhDbXhaRnJzd09xcWIxS1M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC82MzQxZGEtMmIzNC00ZDQ1LTljMTctOTU4MTEyYTQ4OWE0 LzEvQ2gxeXJBZ200SnZBMFgzZTZMcUgyWE1kMUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBHBAIAATBBAwMBPhoDAwA+ kAMDAD72AwQET4ywAwQEUFNgAwQBudI0AwQEwnAQAwMAwzQDAwDDPwMEBcNOoAMD AMO5AwMA1KwwFAQCAAIwDgMFASABQJADBQAqAQXIMA0GCSqGSIb3DQEBCwUAA4IB AQAnD2DyWf4SVzhK/swehVjbvtvIvK+QR3BcVYUkEPoouRsleyPP8RKFKOsfP+iK CtIqHIlmS09by4ZXGgNDFj2OWBXWMErhtOkUxTw5CMYj7u3P9ju7UEtUKLChLeZD aRPqiwi7f9lsVxtqzAzn/brq+tTjEXD3e1o5bz99gqwuAHfYohXfssXPd3rrTukU qtMwIdIe6CIeHgbquIoIrmygQ19M23nXCgnAow1YdmjPEScBHQmjZoinkqrdsyAN YW4f2zXQ2MP7jENNnBdIQJdFaKAgW9LBCd/3iuT2bAhicF3EGjiPyoDUXurXE2wo fbQEJVuIQOq84VAv48pHKTPp -----END CERTIFICATE-----Generated at Sat Dec 6 14:06:18 2025 by rpki-client