This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/o715x5kcExne_D_D3zYLFnEa5s0.roa File: o715x5kcExne_D_D3zYLFnEa5s0.roa (raw, json) Hash identifier: /1ud4mPQXWjniwbnuJIk+aU9+DH9Jasow43KC86v9gE= Subject key identifier: A3:BD:79:C7:99:1C:13:19:DE:FC:3F:C3:DF:36:0B:16:71:1A:E6:CD Certificate issuer: /CN=70e5b30272e43053208978dbe44bfee10a5d007e Certificate serial: 019AD8FD4501EF500606B2516F3AE9E40C6F Authority key identifier: 70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/o715x5kcExne_D_D3zYLFnEa5s0.roa Signing time: Mon 01 Dec 2025 08:17:48 +0000 ROA not before: Mon 01 Dec 2025 08:17:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16003 IP address blocks: 31.172.74.0/24 maxlen: 24 31.172.78.0/24 maxlen: 24 79.132.137.0/24 maxlen: 24 79.132.139.0/24 maxlen: 24 81.85.76.0/24 maxlen: 24 103.75.125.0/24 maxlen: 24 103.75.126.0/24 maxlen: 24 162.248.161.0/24 maxlen: 24 185.18.52.0/22 maxlen: 22 185.18.52.0/24 maxlen: 24 217.194.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.mft rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:fd:45:01:ef:50:06:06:b2:51:6f:3a:e9:e4:0c:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70e5b30272e43053208978dbe44bfee10a5d007e Validity Not Before: Dec 1 08:17:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3bd79c7991c1319defc3fc3df360b16711ae6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:98:4a:27:86:1b:d4:1f:40:f2:3a:c2:9c: a8:87:6a:7f:a5:94:d8:0c:29:04:55:41:50:1a:45: a4:8a:c0:5f:d7:56:c5:97:cc:ee:52:bf:1d:08:e9: ba:e5:5a:1a:af:c1:0e:b8:91:0a:89:51:00:14:ec: 99:87:ff:87:72:ea:ca:32:67:43:b2:57:a6:43:c2: 80:b4:f5:88:32:a5:36:54:df:ea:3e:88:c0:6c:60: b2:9b:10:94:ac:4c:89:f6:d7:46:8e:96:e6:b9:2d: ec:8f:7e:ac:ae:6b:dd:cb:d0:c1:07:81:40:bc:2f: 3a:2b:b5:4b:60:3f:3b:da:25:26:d3:e6:be:8d:08: d5:01:e7:b5:97:40:1b:8c:54:42:d0:f7:27:a1:5e: 49:36:96:43:80:f6:55:d3:3d:a6:8e:88:6c:7e:6c: e3:6f:94:e4:6c:b6:ca:62:0f:98:ff:e3:44:af:f7: 7e:1f:97:15:00:42:5d:32:50:6c:ad:8b:b1:c9:d5: d6:bd:07:57:f7:8e:f2:8e:28:0b:ea:97:29:ae:bd: 1b:2c:bd:4c:d8:de:38:5d:e0:bf:4d:ba:b1:4a:ff: 90:c2:65:d0:11:e8:9e:79:34:3b:2a:2e:f2:22:b7: cd:cc:56:59:e4:61:1f:cd:f6:aa:6e:6e:99:1a:11: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:79:C7:99:1C:13:19:DE:FC:3F:C3:DF:36:0B:16:71:1A:E6:CD X509v3 Authority Key Identifier: keyid:70:E5:B3:02:72:E4:30:53:20:89:78:DB:E4:4B:FE:E1:0A:5D:00:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/o715x5kcExne_D_D3zYLFnEa5s0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/22f1d5-f269-4f4f-bf8a-1fbc641b50b1/1/cOWzAnLkMFMgiXjb5Ev-4QpdAH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.74.0/24 31.172.78.0/24 79.132.137.0/24 79.132.139.0/24 81.85.76.0/24 103.75.125.0-103.75.126.255 162.248.161.0/24 185.18.52.0/22 217.194.148.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c0:68:5e:79:97:97:1f:f7:46:55:35:87:fc:23:4e:03:1a: 98:3d:56:a6:bb:97:91:f4:a6:20:f3:b2:21:4a:6e:2d:e1:85: f6:15:b4:c7:8b:8e:94:00:60:3e:9a:6d:47:e4:93:ae:f7:36: ef:55:97:4b:e0:eb:7b:56:81:ae:85:37:eb:d4:1f:77:85:54: 3e:a3:ae:3e:c9:1a:1a:0b:f1:35:51:15:2f:d9:f8:b2:21:a4: e3:65:a2:84:82:03:a9:93:4f:88:57:4b:ac:ce:10:08:ad:9a: fe:f1:94:d5:9a:4a:3e:85:73:69:7b:99:de:a4:ba:16:3d:72: 3d:5d:a5:ba:95:18:3e:b4:fc:32:61:cb:27:5e:32:b4:c2:04: 3b:ba:bb:d8:8f:d0:2a:85:1e:51:49:1f:a2:7e:71:fb:77:1a: 18:c6:ef:6b:2a:65:f6:a0:e2:ff:66:86:a5:cb:14:f2:0e:d5: 8b:69:d3:62:14:2a:0e:b3:e4:86:92:c2:69:3b:3f:45:2f:b8: 85:cc:b7:c2:0c:69:49:53:24:9f:82:2a:5c:a6:0a:1d:43:e6: 7d:f5:67:10:a1:66:55:60:7c:42:ed:86:eb:0e:8b:be:2a:1e: e3:07:31:e3:2d:b7:9b:9d:66:e4:c2:2d:49:f2:93:e6:6e:20: 43:94:79:50 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZrY/UUB71AGBrJRbzrp5AxvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZTViMzAyNzJlNDMwNTMyMDg5NzhkYmU0NGJmZWUxMGE1 ZDAwN2UwHhcNMjUxMjAxMDgxNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2JkNzljNzk5MWMxMzE5ZGVmYzNmYzNkZjM2MGIxNjcxMWFlNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSGYSieGG9QfQPI6wpyoh2p/pZTY DCkEVUFQGkWkisBf11bFl8zuUr8dCOm65Voar8EOuJEKiVEAFOyZh/+HcurKMmdD slemQ8KAtPWIMqU2VN/qPojAbGCymxCUrEyJ9tdGjpbmuS3sj36srmvdy9DBB4FA vC86K7VLYD872iUm0+a+jQjVAee1l0AbjFRC0PcnoV5JNpZDgPZV0z2mjohsfmzj b5TkbLbKYg+Y/+NEr/d+H5cVAEJdMlBsrYuxydXWvQdX947yjigL6pcprr0bLL1M 2N44XeC/TbqxSv+QwmXQEeieeTQ7Ki7yIrfNzFZZ5GEfzfaqbm6ZGhHXKwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFKO9eceZHBMZ3vw/w982CxZxGubNMB8GA1UdIwQY MBaAFHDlswJy5DBTIIl42+RL/uEKXQB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEt MWZiYzY0MWI1MGIxLzEvbzcxNXg1a2NFeG5lX0RfRDN6WUxGbkVhNXMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yMmYxZDUtZjI2OS00ZjRmLWJmOGEtMWZiYzY0MWI1MGIx LzEvY09XekFuTGtNRk1naVhqYjVFdi00UXBkQUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAH6xKAwQA H6xOAwQAT4SJAwQAT4SLAwQAUVVMMAwDBABnS30DBABnS34DBACi+KEDBAK5EjQD BADZwpQwDQYJKoZIhvcNAQELBQADggEBAJTAaF55l5cf90ZVNYf8I04DGpg9Vqa7 l5H0piDzsiFKbi3hhfYVtMeLjpQAYD6abUfkk673Nu9Vl0vg63tWga6FN+vUH3eF VD6jrj7JGhoL8TVRFS/Z+LIhpONlooSCA6mTT4hXS6zOEAitmv7xlNWaSj6Fc2l7 md6kuhY9cj1dpbqVGD60/DJhyydeMrTCBDu6u9iP0CqFHlFJH6J+cft3GhjG72sq Zfag4v9mhqXLFPIO1Ytp02IUKg6z5IaSwmk7P0UvuIXMt8IMaUlTJJ+CKlymCh1D 5n31ZxChZlVgfELthusOi74qHuMHMeMtt5udZuTCLUnyk+ZuIEOUeVA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:47:37 2025 by rpki-client