This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/ogPQoPSabyv8on770Elj1zJ6-J0.roa File: ogPQoPSabyv8on770Elj1zJ6-J0.roa (raw, json) Hash identifier: zvAjfTV3Azot7+N3ib1/beOBlCWsw2CmUnTbiVG6HT4= Subject key identifier: A2:03:D0:A0:F4:9A:6F:2B:FC:A2:7E:FB:D0:49:63:D7:32:7A:F8:9D Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654 Certificate serial: 019B30CF97F276F5575000C3151E9A3281F3 Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/ogPQoPSabyv8on770Elj1zJ6-J0.roa Signing time: Thu 18 Dec 2025 09:34:29 +0000 ROA not before: Thu 18 Dec 2025 09:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28707 IP address blocks: 62.213.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:cf:97:f2:76:f5:57:50:00:c3:15:1e:9a:32:81:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654 Validity Not Before: Dec 18 09:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a203d0a0f49a6f2bfca27efbd04963d7327af89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a7:ab:a2:8d:0f:15:b2:55:eb:0e:3b:ac:ad: 40:9d:68:d4:13:3a:66:d8:2f:1b:c0:81:02:51:d6: ce:b5:08:df:0a:f3:dd:29:ad:f7:1f:94:8d:00:18: 7d:5f:0c:5f:00:19:60:77:19:b3:3f:a9:31:ba:b8: 05:97:45:37:90:a9:0c:5c:bb:96:85:ee:36:17:78: f6:ec:cc:78:5a:08:cc:d6:b5:c9:42:41:2d:d8:01: e2:39:d3:7e:a3:75:08:de:83:25:10:11:0c:bf:ec: 97:57:c6:ac:05:6e:e9:1c:95:27:8d:49:64:f2:35: 42:f1:36:5b:30:ed:e2:fa:61:1b:d5:35:c6:8b:bd: 52:6a:db:23:3b:02:80:e1:e9:0a:5e:92:91:82:f6: 4c:e5:17:8a:5a:02:d3:73:e0:59:84:31:2c:b7:53: 20:28:97:30:7d:27:74:e9:03:1f:9a:7a:1c:50:5b: 5c:a6:31:23:54:a4:c5:c5:14:48:f0:55:bf:50:2d: 7c:b4:ef:d6:50:38:7e:53:b1:c9:bc:43:ec:14:d3: dd:a0:d5:9b:2a:c8:9b:59:36:89:df:e7:58:5b:9d: 5d:17:fe:28:52:5b:ea:b9:8b:fc:eb:56:b3:40:8e: 31:88:c3:56:54:2d:b6:bd:a3:73:8f:cc:ff:b7:b1: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:03:D0:A0:F4:9A:6F:2B:FC:A2:7E:FB:D0:49:63:D7:32:7A:F8:9D X509v3 Authority Key Identifier: keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/ogPQoPSabyv8on770Elj1zJ6-J0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.213.192.0/19 Signature Algorithm: sha256WithRSAEncryption 40:8f:b1:85:94:04:5a:cb:19:a3:26:25:cb:9a:60:e8:22:fa: 79:ca:dc:0a:f5:5e:e6:d7:5e:fe:15:8a:e3:e9:64:c8:75:5e: 93:1a:d1:67:e2:0a:f0:65:b2:d6:20:64:b6:d2:ee:fd:5e:81: d2:91:e9:7f:bd:c0:d1:30:63:94:11:e1:d2:16:3d:8e:02:a0: 30:82:20:2a:fa:af:1c:f8:99:3e:8a:b7:df:df:ea:73:15:ba: a7:e8:56:d8:db:92:6d:e4:39:6a:e7:0b:32:60:20:a3:ac:b6: 8f:63:3d:6d:28:ca:5f:ef:3c:73:ce:1a:21:6b:11:f2:b7:b2: 64:6c:28:5a:3c:ce:56:08:0f:f4:d7:f7:e4:68:11:1e:72:ae: 06:6b:31:e2:03:13:57:84:0c:ff:4c:e1:a1:0f:0b:99:58:e1: 44:19:71:3d:2b:79:4c:d1:05:18:22:24:00:7b:92:72:c7:4f: ad:f7:9d:9b:9c:34:4d:57:13:79:6f:9d:f4:f7:28:7b:e1:04: 62:41:a4:64:93:db:92:e1:59:60:b8:35:cd:f1:4c:15:47:0d: 92:49:65:fe:90:b3:c8:f1:f4:04:de:34:3a:43:a4:de:49:1f: d8:08:82:c5:4a:01:46:d5:88:36:54:41:b8:b4:c3:52:f0:32: 4e:8c:c2:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZswz5fydvVXUADDFR6aMoHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGE1NTNlMDVmMDMxOWJmNDUyZmEyMDZjMTRjY2RhODcz MDQ2NTQwHhcNMjUxMjE4MDkzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjAzZDBhMGY0OWE2ZjJiZmNhMjdlZmJkMDQ5NjNkNzMyN2FmODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqeroo0PFbJV6w47rK1AnWjUEzpm 2C8bwIECUdbOtQjfCvPdKa33H5SNABh9XwxfABlgdxmzP6kxurgFl0U3kKkMXLuW he42F3j27Mx4WgjM1rXJQkEt2AHiOdN+o3UI3oMlEBEMv+yXV8asBW7pHJUnjUlk 8jVC8TZbMO3i+mEb1TXGi71SatsjOwKA4ekKXpKRgvZM5ReKWgLTc+BZhDEst1Mg KJcwfSd06QMfmnocUFtcpjEjVKTFxRRI8FW/UC18tO/WUDh+U7HJvEPsFNPdoNWb KsibWTaJ3+dYW51dF/4oUlvquYv861azQI4xiMNWVC22vaNzj8z/t7EGbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKID0KD0mm8r/KJ++9BJY9cyevidMB8GA1UdIwQY MBaAFD2KVT4F8DGb9FL6IGwUzNqHMEZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1Mjct MGZiNDgyM2Y1Yjg3LzEvb2dQUW9QU2FieXY4b243NzBFbGoxeko2LUowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MmNlNTQtZTQ5Yy00MTFjLTg1MjctMGZiNDgyM2Y1Yjg3 LzEvUFlwVlBnWHdNWnYwVXZvZ2JCVE0yb2N3UmxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFPtXAMA0G CSqGSIb3DQEBCwUAA4IBAQBAj7GFlARayxmjJiXLmmDoIvp5ytwK9V7m117+FYrj 6WTIdV6TGtFn4grwZbLWIGS20u79XoHSkel/vcDRMGOUEeHSFj2OAqAwgiAq+q8c +Jk+irff3+pzFbqn6FbY25Jt5Dlq5wsyYCCjrLaPYz1tKMpf7zxzzhohaxHyt7Jk bChaPM5WCA/01/fkaBEecq4GazHiAxNXhAz/TOGhDwuZWOFEGXE9K3lM0QUYIiQA e5Jyx0+t952bnDRNVxN5b5309yh74QRiQaRkk9uS4VlguDXN8UwVRw2SSWX+kLPI 8fQE3jQ6Q6TeSR/YCILFSgFG1Yg2VEG4tMNS8DJOjMJ6 -----END CERTIFICATE-----Generated at Sun Dec 21 08:13:10 2025 by rpki-client