This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa File: nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa (raw, json) Hash identifier: WWP6Qvn5sb0v16R7y7lOMfY54UvOgjr7TyOI6hQ1twA= Subject key identifier: 9C:76:E0:0A:BC:0A:31:F4:01:3D:99:12:98:DC:BF:70:5A:65:DD:2E Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019AF6A91DB684D1B07505A7273B322C5F9B Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa Signing time: Sun 07 Dec 2025 02:34:29 +0000 ROA not before: Sun 07 Dec 2025 02:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44208 IP address blocks: 31.170.48.0/20 maxlen: 24 37.49.148.0/24 maxlen: 24 94.74.128.0/18 maxlen: 24 94.74.136.0/24 maxlen: 24 94.74.147.0/24 maxlen: 24 94.74.152.0/22 maxlen: 24 94.74.158.0/24 maxlen: 24 94.74.164.0/24 maxlen: 24 94.74.165.0/24 maxlen: 24 94.74.166.0/23 maxlen: 23 94.74.168.0/23 maxlen: 24 94.74.182.0/24 maxlen: 24 94.74.187.0/24 maxlen: 24 94.74.190.0/24 maxlen: 24 94.74.191.0/24 maxlen: 24 109.203.176.0/22 maxlen: 24 176.46.134.0/24 maxlen: 24 176.46.139.0/24 maxlen: 24 176.46.141.0/24 maxlen: 24 176.46.144.0/24 maxlen: 24 176.46.147.0/24 maxlen: 24 176.46.148.0/24 maxlen: 24 176.46.149.0/24 maxlen: 24 176.46.152.0/24 maxlen: 24 176.46.153.0/24 maxlen: 24 176.46.154.0/24 maxlen: 24 176.46.155.0/24 maxlen: 24 176.46.156.0/24 maxlen: 24 176.46.157.0/24 maxlen: 24 176.46.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:a9:1d:b6:84:d1:b0:75:05:a7:27:3b:32:2c:5f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Dec 7 02:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9c76e00abc0a31f4013d991298dcbf705a65dd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:d1:26:12:1d:b7:81:d2:ba:d8:82:6e:8e: dd:38:1b:ea:da:e4:e3:ca:70:04:c2:88:16:3c:05: 3c:f4:8d:81:c7:04:8b:83:09:d8:90:eb:5e:4e:09: da:4f:bb:5c:68:a3:65:06:44:50:a8:67:de:29:cf: 22:f2:07:42:3a:22:75:04:6d:d9:08:59:5e:39:96: d2:e5:00:40:64:bc:43:46:57:75:a3:52:14:50:48: 45:95:a1:89:26:53:df:3d:85:8f:39:e0:c1:15:76: 46:56:70:1b:b4:1f:8b:52:23:08:13:8c:51:42:d1: 1a:42:52:57:a1:ca:5c:fe:f6:78:6a:5d:20:2b:c3: 03:29:33:29:b5:1f:b1:6e:2b:1a:d7:ae:ad:bf:5e: cb:2d:9c:f4:87:eb:51:8a:e1:b5:69:c2:8b:38:e9: 2c:50:0d:27:e9:5a:58:0d:80:ae:4e:48:3f:b1:10: 7d:b5:6b:78:35:ae:3f:62:7b:39:39:94:65:c1:d6: 58:3f:fd:ff:e1:fe:18:83:fe:8e:43:f9:9a:92:90: 20:3f:8c:f0:4c:14:ff:18:4e:28:78:22:26:50:2b: d1:4d:a5:b5:2a:c4:7b:f3:78:b2:aa:80:7a:0e:99: e4:8e:86:7d:38:36:38:46:74:b0:68:be:31:5c:ad: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:76:E0:0A:BC:0A:31:F4:01:3D:99:12:98:DC:BF:70:5A:65:DD:2E X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/nHbgCrwKMfQBPZkSmNy_cFpl3S4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.170.48.0/20 37.49.148.0/24 94.74.128.0/18 109.203.176.0/22 176.46.134.0/24 176.46.139.0/24 176.46.141.0/24 176.46.144.0/24 176.46.147.0-176.46.149.255 176.46.152.0-176.46.158.255 Signature Algorithm: sha256WithRSAEncryption 90:e8:d1:f1:33:78:d7:e7:83:1c:0c:96:39:7c:28:9f:8e:4d: 6b:2f:9c:33:c2:ce:4e:a2:8a:8c:f3:83:3e:40:9c:b7:75:49: 6c:76:38:31:58:ce:0a:40:47:0f:79:4c:39:20:d8:4d:9f:9f: 5e:25:d9:d4:ea:df:6a:bc:fa:ff:7d:81:f2:95:05:f7:38:85: 70:20:8b:6d:60:39:6f:67:00:da:81:b2:e0:e8:f0:5d:0a:69: 18:e2:5c:a2:34:fb:03:02:36:e2:01:a3:c2:c3:59:0b:f3:e6: 57:e3:0a:8f:7c:b5:0a:df:86:01:43:90:c1:eb:54:b6:d6:99: 9a:63:ab:58:2b:d8:46:78:02:24:9d:29:1d:85:89:e2:c0:2f: ed:c2:99:1b:92:1d:46:4b:d2:17:68:7c:09:7a:80:67:d5:d0: 74:97:b7:ac:19:57:7e:44:49:e2:17:64:c4:bc:62:0b:40:6c: b8:6c:a2:a9:88:6d:8a:be:f8:de:b0:54:50:0f:35:6c:d5:17: 37:49:72:5d:38:f6:dd:9e:cb:2b:31:17:81:ce:8f:4d:8b:ed: 20:79:6e:c3:01:51:c8:87:6b:63:44:7e:37:51:6f:d6:7f:00: 41:19:3f:84:35:bd:d5:90:06:1c:55:2e:99:ee:40:7c:8f:04: 31:83:e1:2d -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZr2qR22hNGwdQWnJzsyLF+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjUxMjA3MDIzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yzc2ZTAwYWJjMGEzMWY0MDEzZDk5MTI5OGRjYmY3MDVhNjVkZDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UDRJhIdt4HSutiCbo7dOBvq2uTj ynAEwogWPAU89I2BxwSLgwnYkOteTgnaT7tcaKNlBkRQqGfeKc8i8gdCOiJ1BG3Z CFleOZbS5QBAZLxDRld1o1IUUEhFlaGJJlPfPYWPOeDBFXZGVnAbtB+LUiMIE4xR QtEaQlJXocpc/vZ4al0gK8MDKTMptR+xbisa166tv17LLZz0h+tRiuG1acKLOOks UA0n6VpYDYCuTkg/sRB9tWt4Na4/Yns5OZRlwdZYP/3/4f4Yg/6OQ/makpAgP4zw TBT/GE4oeCImUCvRTaW1KsR783iyqoB6DpnkjoZ9ODY4RnSwaL4xXK3l2QIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFJx24Aq8CjH0AT2ZEpjcv3BaZd0uMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvbkhiZ0Nyd0tNZlFCUFprU21OeV9jRnBsM1M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQEH6owAwQA JTGUAwQGXkqAAwQCbcuwAwQAsC6GAwQAsC6LAwQAsC6NAwQAsC6QMAwDBACwLpMD BAGwLpQwDAMEA7AumAMEALAunjANBgkqhkiG9w0BAQsFAAOCAQEAkOjR8TN41+eD HAyWOXwon45Nay+cM8LOTqKKjPODPkCct3VJbHY4MVjOCkBHD3lMOSDYTZ+fXiXZ 1Orfarz6/32B8pUF9ziFcCCLbWA5b2cA2oGy4OjwXQppGOJcojT7AwI24gGjwsNZ C/PmV+MKj3y1Ct+GAUOQwetUttaZmmOrWCvYRngCJJ0pHYWJ4sAv7cKZG5IdRkvS F2h8CXqAZ9XQdJe3rBlXfkRJ4hdkxLxiC0BsuGyiqYhtir743rBUUA81bNUXN0ly XTj23Z7LKzEXgc6PTYvtIHluwwFRyIdrY0R+N1Fv1n8AQRk/hDW91ZAGHFUume5A fI8EMYPhLQ== -----END CERTIFICATE-----Generated at Sun Dec 7 23:10:22 2025 by rpki-client