This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0PoCv1SPu7CHpUcMBUTbvp6m-z4.roa File: 0PoCv1SPu7CHpUcMBUTbvp6m-z4.roa (raw, json) Hash identifier: 4BhEaToJUPea6Wq7xPG2QqkdomRfr5Rx4NMWEBuFhAY= Subject key identifier: D0:FA:02:BF:54:8F:BB:B0:87:A5:47:0C:05:44:DB:BE:9E:A6:FB:3E Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B315611916425CB277BD5CE61CCD8A530 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0PoCv1SPu7CHpUcMBUTbvp6m-z4.roa Signing time: Thu 18 Dec 2025 12:01:22 +0000 ROA not before: Thu 18 Dec 2025 12:01:22 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9123 IP address blocks: 62.76.233.0/24 maxlen: 24 193.108.115.0/24 maxlen: 24 193.124.47.0/24 maxlen: 24 194.87.43.0/24 maxlen: 24 194.87.56.0/24 maxlen: 24 194.87.76.0/24 maxlen: 24 194.87.84.0/24 maxlen: 24 194.87.86.0/24 maxlen: 24 194.87.104.0/24 maxlen: 24 194.87.118.0/24 maxlen: 24 194.87.131.0/24 maxlen: 24 194.87.133.0/24 maxlen: 24 194.87.138.0/24 maxlen: 24 194.87.140.0/24 maxlen: 24 194.87.143.0/24 maxlen: 24 194.87.151.0/24 maxlen: 24 194.87.161.0/24 maxlen: 24 194.87.187.0/24 maxlen: 24 194.87.190.0/24 maxlen: 24 194.87.201.0/24 maxlen: 24 194.87.215.0/24 maxlen: 24 194.87.226.0/24 maxlen: 24 194.135.36.0/24 maxlen: 24 195.58.34.0/24 maxlen: 24 195.58.36.0/24 maxlen: 24 195.58.37.0/24 maxlen: 24 195.58.61.0/24 maxlen: 24 195.133.25.0/24 maxlen: 24 195.133.27.0/24 maxlen: 24 195.133.30.0/24 maxlen: 24 195.133.50.0/24 maxlen: 24 195.133.73.0/24 maxlen: 24 195.133.194.0/24 maxlen: 24 212.192.220.0/24 maxlen: 24 212.193.24.0/24 maxlen: 24 212.193.26.0/24 maxlen: 24 212.193.27.0/24 maxlen: 24 212.193.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:11:91:64:25:cb:27:7b:d5:ce:61:cc:d8:a5:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 18 12:01:22 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d0fa02bf548fbbb087a5470c0544dbbe9ea6fb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:70:8e:81:a2:88:d5:67:08:98:95:79:e3: bc:43:d1:f6:86:51:53:15:0b:e9:7b:01:90:6d:3e: 38:6f:d2:e8:77:ee:5f:98:cc:36:57:15:9a:68:f4: 64:01:8e:3e:d7:5b:cd:ae:f2:bf:5e:3b:b3:6c:e6: 22:18:22:30:27:59:7a:86:6a:59:20:35:c6:5c:de: c7:38:c3:10:03:83:a8:cb:97:b7:5b:b7:5d:36:91: 45:fa:cd:d8:d0:81:e4:84:18:9f:db:cc:d7:1f:02: 56:7c:b0:a1:74:f8:e1:62:dd:25:99:56:68:b7:15: 48:2a:c5:77:c3:c9:85:aa:57:66:2d:9d:11:12:df: cf:3d:fb:ef:5d:48:47:c1:83:d0:73:77:5f:ba:ea: e3:b9:9b:03:7f:b8:78:14:14:87:64:07:3e:74:a8: 57:46:e3:24:4f:99:93:db:d0:31:40:66:ba:8d:0f: 9f:de:68:8e:86:6d:a7:ee:5e:a7:ff:43:73:1c:40: 15:cb:64:b7:0b:8f:96:12:4b:6c:51:0e:5a:68:11: 5b:9a:3c:ce:fb:e8:cf:29:a1:eb:04:37:93:82:29: 80:b0:80:cc:2c:50:04:69:ab:10:16:67:8b:58:6e: fd:ed:e9:f1:5d:3d:47:c5:95:2a:fc:77:f6:96:98: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FA:02:BF:54:8F:BB:B0:87:A5:47:0C:05:44:DB:BE:9E:A6:FB:3E X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0PoCv1SPu7CHpUcMBUTbvp6m-z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.233.0/24 193.108.115.0/24 193.124.47.0/24 194.87.43.0/24 194.87.56.0/24 194.87.76.0/24 194.87.84.0/24 194.87.86.0/24 194.87.104.0/24 194.87.118.0/24 194.87.131.0/24 194.87.133.0/24 194.87.138.0/24 194.87.140.0/24 194.87.143.0/24 194.87.151.0/24 194.87.161.0/24 194.87.187.0/24 194.87.190.0/24 194.87.201.0/24 194.87.215.0/24 194.87.226.0/24 194.135.36.0/24 195.58.34.0/24 195.58.36.0/23 195.58.61.0/24 195.133.25.0/24 195.133.27.0/24 195.133.30.0/24 195.133.50.0/24 195.133.73.0/24 195.133.194.0/24 212.192.220.0/24 212.193.24.0/24 212.193.26.0/23 212.193.30.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:cc:47:ee:d2:bc:48:d8:37:87:7f:37:8f:96:90:a7:86:02: bd:aa:d6:43:a2:26:de:8e:9e:ee:fa:31:6e:49:10:2f:91:ba: ae:ef:a6:b4:8e:8d:05:9b:af:36:85:4e:90:cb:ee:f2:54:9e: 34:90:ec:dc:8e:cf:ee:07:cf:d7:cb:ec:61:dd:e0:52:ca:9c: c3:dd:4e:d3:9e:86:bf:bd:79:25:0f:24:87:98:48:bf:04:70: a2:0e:f6:43:d1:0d:6c:72:19:35:4f:5a:7c:7c:8a:2e:9c:5f: f0:a6:3c:88:aa:ff:db:8e:62:cb:79:67:92:f9:42:ff:c0:3e: 2d:62:cc:d4:4f:46:ec:97:b8:5f:e0:88:53:a0:65:4c:eb:bc: 80:79:fb:81:93:b1:c7:08:76:ab:6e:b6:31:64:e4:71:ae:06: 3a:67:41:1b:e6:b3:ea:e9:65:fb:fb:78:6d:5b:e5:59:c5:20: 3e:b7:b6:f9:37:0c:ff:4b:a5:85:53:b2:40:99:7b:5e:3c:bf: dc:9d:c4:fe:9f:7e:f0:6e:92:38:b5:5e:6f:79:5d:ac:d5:7d: 85:f2:66:da:8e:6e:b2:f9:8e:28:a8:90:e2:44:f3:0e:11:b4: 5b:cc:30:31:ed:e8:4a:18:f5:64:e8:66:e7:3a:66:3c:26:44: 9b:66:90:e3 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgISAZsxVhGRZCXLJ3vVzmHM2KUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjE4MTIwMTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZhMDJiZjU0OGZiYmIwODdhNTQ3MGMwNTQ0ZGJiZTllYTZmYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvdwjoGiiNVnCJiVeeO8Q9H2hlFT FQvpewGQbT44b9Lod+5fmMw2VxWaaPRkAY4+11vNrvK/XjuzbOYiGCIwJ1l6hmpZ IDXGXN7HOMMQA4Ooy5e3W7ddNpFF+s3Y0IHkhBif28zXHwJWfLChdPjhYt0lmVZo txVIKsV3w8mFqldmLZ0REt/PPfvvXUhHwYPQc3dfuurjuZsDf7h4FBSHZAc+dKhX RuMkT5mT29AxQGa6jQ+f3miOhm2n7l6n/0NzHEAVy2S3C4+WEktsUQ5aaBFbmjzO ++jPKaHrBDeTgimAsIDMLFAEaasQFmeLWG797enxXT1HxZUq/Hf2lpjTBQIDAQAB o4IC4DCCAtwwHQYDVR0OBBYEFND6Ar9Uj7uwh6VHDAVE276epvs+MB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvMFBvQ3YxU1B1N0NIcFVjTUJVVGJ2cDZtLXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH1BggrBgEFBQcBBwEB/wSB5TCB4jCB3wQCAAEwgdgDBAA+ TOkDBADBbHMDBADBfC8DBADCVysDBADCVzgDBADCV0wDBADCV1QDBADCV1YDBADC V2gDBADCV3YDBADCV4MDBADCV4UDBADCV4oDBADCV4wDBADCV48DBADCV5cDBADC V6EDBADCV7sDBADCV74DBADCV8kDBADCV9cDBADCV+IDBADChyQDBADDOiIDBAHD OiQDBADDOj0DBADDhRkDBADDhRsDBADDhR4DBADDhTIDBADDhUkDBADDhcIDBADU wNwDBADUwRgDBAHUwRoDBADUwR4wDQYJKoZIhvcNAQELBQADggEBAAzMR+7SvEjY N4d/N4+WkKeGAr2q1kOiJt6Onu76MW5JEC+Ruq7vprSOjQWbrzaFTpDL7vJUnjSQ 7NyOz+4Hz9fL7GHd4FLKnMPdTtOehr+9eSUPJIeYSL8EcKIO9kPRDWxyGTVPWnx8 ii6cX/CmPIiq/9uOYst5Z5L5Qv/APi1izNRPRuyXuF/giFOgZUzrvIB5+4GTsccI dqtutjFk5HGuBjpnQRvms+rpZfv7eG1b5VnFID63tvk3DP9LpYVTskCZe148v9yd xP6ffvBukji1Xm95XazVfYXyZtqObrL5jiiokOJE8w4RtFvMMDHt6EoY9WToZuc6 ZjwmRJtmkOM= -----END CERTIFICATE-----Generated at Fri Dec 19 19:48:23 2025 by rpki-client