This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa File: OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa (raw, json) Hash identifier: yfK0eZGByG4055Lr1MzGeMYuSR5WRcTowVu+x++4W0o= Subject key identifier: 39:55:46:54:E9:10:4E:EA:05:EC:DE:93:FC:22:BB:7D:D2:87:E0:00 Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019B17C5127FF6793BA2AE6C3AA8F78B0694 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa Signing time: Sat 13 Dec 2025 12:52:29 +0000 ROA not before: Sat 13 Dec 2025 12:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203020 IP address blocks: 45.142.24.0/24 maxlen: 24 91.217.72.0/23 maxlen: 32 103.93.40.0/24 maxlen: 32 103.93.41.0/24 maxlen: 32 103.93.43.0/24 maxlen: 24 103.111.0.0/22 maxlen: 32 103.124.164.0/24 maxlen: 32 103.124.166.0/24 maxlen: 32 103.204.120.0/24 maxlen: 32 103.204.122.0/24 maxlen: 32 103.204.123.0/24 maxlen: 32 109.104.132.0/24 maxlen: 32 109.104.133.0/24 maxlen: 32 185.153.124.0/22 maxlen: 32 185.233.124.0/22 maxlen: 32 194.113.94.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:c5:12:7f:f6:79:3b:a2:ae:6c:3a:a8:f7:8b:06:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Dec 13 12:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39554654e9104eea05ecde93fc22bb7dd287e000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7b:28:13:c7:c8:cf:8d:ff:9d:b4:cc:9f:d8: f9:bd:0b:4b:f2:5b:97:55:e5:04:99:d9:97:da:48: 94:4b:ec:a9:4f:e6:86:6b:44:66:8a:d1:e4:cb:e9: 6f:2d:e5:68:ea:d8:97:9f:b3:70:ed:b5:1a:5c:36: 9e:96:68:c3:24:c4:44:9f:31:77:c6:4d:f3:07:50: 56:fe:9e:ac:cf:19:01:78:e7:c5:91:ea:7e:72:6c: 01:a3:f7:8b:df:b3:a2:d2:f4:25:a0:ca:2a:c3:86: 21:d3:b5:94:88:fe:2f:10:3b:7e:67:ec:b3:55:6b: 2a:1a:0a:28:ee:77:40:4f:62:ed:d9:38:6d:7c:a3: 96:da:f9:0e:f9:24:c9:a4:f6:5f:3d:4e:f8:11:79: 61:60:ee:69:af:d0:6d:04:61:2a:17:8f:fe:df:6c: 61:6f:2e:22:ef:e5:1f:ea:7d:c6:7f:f7:51:87:4d: b7:1f:f2:39:72:51:fa:52:79:ce:2e:fa:bf:50:e2: 2c:2b:25:4b:c7:bd:78:14:dd:62:f8:46:5a:dd:8e: 7a:2c:f4:5b:96:f4:4a:e6:0b:90:19:ee:28:bc:d9: 7d:3b:ea:20:01:15:0e:33:d5:ba:03:2b:18:9e:ea: f6:0c:73:d8:58:24:30:4c:f3:d1:c6:f8:04:b1:d9: fc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:46:54:E9:10:4E:EA:05:EC:DE:93:FC:22:BB:7D:D2:87:E0:00 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/OVVGVOkQTuoF7N6T_CK7fdKH4AA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.24.0/24 91.217.72.0/23 103.93.40.0/23 103.93.43.0/24 103.111.0.0/22 103.124.164.0/24 103.124.166.0/24 103.204.120.0/24 103.204.122.0/23 109.104.132.0/23 185.153.124.0/22 185.233.124.0/22 194.113.94.0/23 Signature Algorithm: sha256WithRSAEncryption 97:d8:89:e6:6b:4d:5c:41:b4:4b:2c:7d:c3:9d:fb:6e:cd:76: fd:42:16:da:6d:4a:e6:f1:f0:29:d1:9b:8d:70:c2:e0:ba:17: 79:40:3c:3e:de:16:08:08:5d:c8:b4:46:8c:ac:52:ac:43:d4: d4:c3:3b:77:0d:bd:42:07:ed:87:de:ad:48:56:16:62:1e:7d: db:ab:f8:ec:b6:5f:6a:0e:8a:e3:e5:69:ab:71:08:9d:d2:9e: 10:aa:f4:39:c2:e8:2f:d8:2b:0d:d6:56:24:f6:e6:11:67:19: 52:98:d0:a0:b3:76:a5:a0:67:5b:55:db:7e:e3:f2:bd:1d:53: be:6c:cd:b6:9b:ee:fc:6c:a7:1d:9f:3d:15:84:84:3c:18:14: e8:f7:2e:ae:e6:04:7e:2e:64:77:ce:9f:ac:b9:bb:a5:e5:8d: 1d:82:a6:1d:77:67:76:c5:60:33:69:a5:be:5b:dc:4e:fa:fa: f8:62:6e:70:67:e8:14:c1:e3:81:47:8d:a1:62:ee:ee:af:1b: 9c:ce:e5:ec:b9:d1:b5:2b:0a:83:06:47:1c:af:16:3e:7a:28: 47:81:a6:65:e4:b5:b9:a1:26:69:6a:2a:c4:1b:ae:da:5a:48: 31:44:cb:26:0e:df:b2:40:77:5c:84:4e:94:f6:12:5f:55:a9: ec:55:0e:c4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZsXxRJ/9nk7oq5sOqj3iwaUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjUxMjEzMTI1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTU1NDY1NGU5MTA0ZWVhMDVlY2RlOTNmYzIyYmI3ZGQyODdlMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHsoE8fIz43/nbTMn9j5vQtL8luX VeUEmdmX2kiUS+ypT+aGa0RmitHky+lvLeVo6tiXn7Nw7bUaXDaelmjDJMREnzF3 xk3zB1BW/p6szxkBeOfFkep+cmwBo/eL37Oi0vQloMoqw4Yh07WUiP4vEDt+Z+yz VWsqGgoo7ndAT2Lt2ThtfKOW2vkO+STJpPZfPU74EXlhYO5pr9BtBGEqF4/+32xh by4i7+Uf6n3Gf/dRh023H/I5clH6UnnOLvq/UOIsKyVLx714FN1i+EZa3Y56LPRb lvRK5guQGe4ovNl9O+ogARUOM9W6AysYnur2DHPYWCQwTPPRxvgEsdn8AwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFDlVRlTpEE7qBezek/wiu33Sh+AAMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvT1ZWR1ZPa1FUdW9GN042VF9DSzdmZEtINEFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQALY4YAwQB W9lIAwQBZ10oAwQAZ10rAwQCZ28AAwQAZ3ykAwQAZ3ymAwQAZ8x4AwQBZ8x6AwQB bWiEAwQCuZl8AwQCuel8AwQBwnFeMA0GCSqGSIb3DQEBCwUAA4IBAQCX2Inma01c QbRLLH3DnftuzXb9QhbabUrm8fAp0ZuNcMLguhd5QDw+3hYICF3ItEaMrFKsQ9TU wzt3Db1CB+2H3q1IVhZiHn3bq/jstl9qDorj5WmrcQid0p4QqvQ5wugv2CsN1lYk 9uYRZxlSmNCgs3aloGdbVdt+4/K9HVO+bM22m+78bKcdnz0VhIQ8GBTo9y6u5gR+ LmR3zp+subul5Y0dgqYdd2d2xWAzaaW+W9xO+vr4Ym5wZ+gUweOBR42hYu7urxuc zuXsudG1KwqDBkccrxY+eihHgaZl5LW5oSZpairEG67aWkgxRMsmDt+yQHdchE6U 9hJfVansVQ7E -----END CERTIFICATE-----Generated at Tue Dec 16 18:40:45 2025 by rpki-client