This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/o_aC0ciJClNGA5KV7O_P3R8hl0E.roa File: o_aC0ciJClNGA5KV7O_P3R8hl0E.roa (raw, json) Hash identifier: BcUpIMH/Rq6gpE/K7kGRGMnVEEvzUZNtMIL3foe8ZBo= Subject key identifier: A3:F6:82:D1:C8:89:0A:53:46:03:92:95:EC:EF:CF:DD:1F:21:97:41 Certificate issuer: /CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Certificate serial: 019B3F9DDFBAC8B0AE03E5B939CEF7DC414E Authority key identifier: 61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/o_aC0ciJClNGA5KV7O_P3R8hl0E.roa Signing time: Sun 21 Dec 2025 06:34:29 +0000 ROA not before: Sun 21 Dec 2025 06:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210513 IP address blocks: 62.3.56.0/24 maxlen: 24 80.173.228.0/23 maxlen: 23 185.65.255.0/24 maxlen: 24 2a12:100::/29 maxlen: 29 2a12:100:10::/48 maxlen: 48 2a12:100:11::/48 maxlen: 48 2a12:100:12::/48 maxlen: 48 2a12:100:13::/48 maxlen: 48 2a12:100:14::/48 maxlen: 48 2a12:100:15::/48 maxlen: 48 2a12:100:16::/48 maxlen: 48 2a12:100:17::/48 maxlen: 48 2a12:100:18::/48 maxlen: 48 2a12:100:19::/48 maxlen: 48 2a12:100:1a::/48 maxlen: 48 2a12:100:1b::/48 maxlen: 48 2a12:100:1c::/48 maxlen: 48 2a12:100:1d::/48 maxlen: 48 2a12:100:1e::/48 maxlen: 48 2a12:100:1f::/48 maxlen: 48 2a12:100:20::/48 maxlen: 48 2a12:100:21::/48 maxlen: 48 2a12:100:22::/48 maxlen: 48 2a12:100:23::/48 maxlen: 48 2a12:100:24::/48 maxlen: 48 2a12:100:25::/48 maxlen: 48 2a12:100:26::/48 maxlen: 48 2a12:100:27::/48 maxlen: 48 2a12:100:28::/48 maxlen: 48 2a12:100:29::/48 maxlen: 48 2a12:100:2a::/48 maxlen: 48 2a12:100:2b::/48 maxlen: 48 2a12:100:2c::/48 maxlen: 48 2a12:100:2d::/48 maxlen: 48 2a12:100:2e::/48 maxlen: 48 2a12:100:2f::/48 maxlen: 48 2a12:100:30::/48 maxlen: 48 2a12:100:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.mft rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:9d:df:ba:c8:b0:ae:03:e5:b9:39:ce:f7:dc:41:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614ca0d09bbd05f4b8a8ac30a329f6715110758c Validity Not Before: Dec 21 06:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3f682d1c8890a5346039295ecefcfdd1f219741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e5:c7:cc:58:87:fc:aa:38:0a:06:2a:ab:9f: 66:ab:00:ec:f8:e2:ac:ed:c1:4c:80:94:7e:84:db: 39:8a:0f:85:60:db:c1:90:34:af:47:a4:91:0a:b3: 05:b5:2b:6c:9e:94:8e:18:0d:af:8e:ef:d4:c9:97: be:00:2e:48:55:f1:ed:be:21:3e:7d:d1:cd:81:99: 4d:5f:41:c2:d3:9e:76:66:b1:aa:2e:3d:a1:e6:c4: 68:c8:8f:4f:84:15:5d:7a:ea:41:fc:66:d5:d1:94: ec:24:b3:51:b1:af:99:cd:d6:63:73:fa:4f:6e:44: 52:e8:75:e6:ce:23:0a:30:4a:32:e5:d4:37:f9:ec: f5:fc:1e:19:40:0e:d0:1d:75:39:5f:68:a4:88:6a: c5:62:97:81:af:05:a7:d4:a6:8c:d2:f9:33:b9:7d: 6c:4e:e8:37:e3:b8:78:88:4d:19:48:2d:2b:2f:7d: 59:22:6e:32:a1:77:b2:eb:79:08:93:08:00:45:41: a5:87:90:42:b8:ed:c4:4f:27:32:71:c4:3c:69:63: bc:34:3a:36:44:84:71:6e:07:38:a5:64:8f:bb:c6: d3:61:3a:41:f2:7f:04:e7:d5:2a:93:86:33:81:1e: 06:0f:b0:25:54:a2:1a:96:5a:67:45:96:16:3e:28: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F6:82:D1:C8:89:0A:53:46:03:92:95:EC:EF:CF:DD:1F:21:97:41 X509v3 Authority Key Identifier: keyid:61:4C:A0:D0:9B:BD:05:F4:B8:A8:AC:30:A3:29:F6:71:51:10:75:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/o_aC0ciJClNGA5KV7O_P3R8hl0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/4786c2-11a1-48a4-ba80-7944976599d8/1/YUyg0Ju9BfS4qKwwoyn2cVEQdYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.56.0/24 80.173.228.0/23 185.65.255.0/24 IPv6: 2a12:100::/29 Signature Algorithm: sha256WithRSAEncryption 8f:8c:8c:76:5c:a3:43:a2:86:ac:8d:b6:64:a5:e4:3f:3d:a8: 3f:b8:a9:8a:f7:7e:56:91:c7:59:ee:18:ab:a9:a1:34:8f:4a: 20:ab:e8:a0:3a:e7:bf:b4:4c:da:ae:89:a1:62:4a:a1:e1:54: e6:44:77:a7:f6:a8:8f:32:e4:24:ca:e0:62:48:34:ce:0a:b2: 88:fd:87:d1:22:fc:9e:2b:5d:2a:34:6b:7d:6e:a6:fd:6d:56: c5:f9:b5:97:f6:55:f1:04:cc:96:22:2a:02:6d:44:46:ce:52: 94:30:5c:b3:07:79:eb:b0:50:45:aa:b9:51:b8:03:e2:80:ea: 6f:5f:53:3b:c7:83:05:eb:42:d5:7e:20:f4:f2:4b:61:86:24: 67:57:b4:1a:ec:73:aa:e4:58:86:d9:97:0e:9c:c5:11:4f:02: 65:6f:ed:51:97:81:6c:52:53:fa:8f:51:5d:cf:8d:38:a7:8d: 9f:5f:6b:72:db:3a:d1:db:fd:c4:61:2a:45:ab:1b:73:2d:59: 0f:01:7c:2e:28:bc:5c:c2:3a:4f:ff:61:9f:74:e1:e2:e2:be: 3e:74:af:8f:58:3b:60:ab:c2:20:98:2a:c2:f1:6f:2e:b9:eb: 19:77:f3:bf:05:f1:65:5f:69:70:56:d4:52:e8:18:e8:bb:1c: cf:4c:1c:b5 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZs/nd+6yLCuA+W5Oc733EFOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGNhMGQwOWJiZDA1ZjRiOGE4YWMzMGEzMjlmNjcxNTEx MDc1OGMwHhcNMjUxMjIxMDYzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2Y2ODJkMWM4ODkwYTUzNDYwMzkyOTVlY2VmY2ZkZDFmMjE5NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieXHzFiH/Ko4CgYqq59mqwDs+OKs 7cFMgJR+hNs5ig+FYNvBkDSvR6SRCrMFtStsnpSOGA2vju/UyZe+AC5IVfHtviE+ fdHNgZlNX0HC0552ZrGqLj2h5sRoyI9PhBVdeupB/GbV0ZTsJLNRsa+ZzdZjc/pP bkRS6HXmziMKMEoy5dQ3+ez1/B4ZQA7QHXU5X2ikiGrFYpeBrwWn1KaM0vkzuX1s Tug347h4iE0ZSC0rL31ZIm4yoXey63kIkwgARUGlh5BCuO3ETycyccQ8aWO8NDo2 RIRxbgc4pWSPu8bTYTpB8n8E59Uqk4YzgR4GD7AlVKIallpnRZYWPihAmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKP2gtHIiQpTRgOSlezvz90fIZdBMB8GA1UdIwQY MBaAFGFMoNCbvQX0uKisMKMp9nFREHWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAt Nzk0NDk3NjU5OWQ4LzEvb19hQzBjaUpDbE5HQTVLVjdPX1AzUjhobDBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80Nzg2YzItMTFhMS00OGE0LWJhODAtNzk0NDk3NjU5OWQ4 LzEvWVV5ZzBKdTlCZlM0cUt3d295bjJjVkVRZFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAPgM4AwQB UK3kAwQAuUH/MA0EAgACMAcDBQMqEgEAMA0GCSqGSIb3DQEBCwUAA4IBAQCPjIx2 XKNDooasjbZkpeQ/Pag/uKmK935WkcdZ7hirqaE0j0ogq+igOue/tEzaromhYkqh 4VTmRHen9qiPMuQkyuBiSDTOCrKI/YfRIvyeK10qNGt9bqb9bVbF+bWX9lXxBMyW IioCbURGzlKUMFyzB3nrsFBFqrlRuAPigOpvX1M7x4MF60LVfiD08kthhiRnV7Qa 7HOq5FiG2ZcOnMURTwJlb+1Rl4FsUlP6j1Fdz404p42fX2ty2zrR2/3EYSpFqxtz LVkPAXwuKLxcwjpP/2GfdOHi4r4+dK+PWDtgq8IgmCrC8W8uuesZd/O/BfFlX2lw VtRS6BjouxzPTBy1 -----END CERTIFICATE-----Generated at Mon Dec 29 02:20:24 2025 by rpki-client