This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/OwCZF0T7cuiO0bzm9gpsrlp-iqg.roa File: OwCZF0T7cuiO0bzm9gpsrlp-iqg.roa (raw, json) Hash identifier: 2EnFWrT+AFUt7JddKEdfFndTYaCRqX2SZcB6fsF93Q4= Subject key identifier: 3B:00:99:17:44:FB:72:E8:8E:D1:BC:E6:F6:0A:6C:AE:5A:7E:8A:A8 Certificate issuer: /CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Certificate serial: 019AFE0F57D3B2B6328453E8DEA37F553EDA Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/OwCZF0T7cuiO0bzm9gpsrlp-iqg.roa Signing time: Mon 08 Dec 2025 13:03:29 +0000 ROA not before: Mon 08 Dec 2025 13:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207728 IP address blocks: 31.10.5.0/24 maxlen: 24 31.210.170.0/23 maxlen: 24 31.210.172.0/24 maxlen: 24 31.210.173.0/24 maxlen: 24 46.28.234.0/24 maxlen: 24 62.204.42.0/24 maxlen: 24 85.136.180.0/24 maxlen: 24 85.136.181.0/24 maxlen: 24 85.136.182.0/24 maxlen: 24 85.136.183.0/24 maxlen: 24 87.236.177.0/24 maxlen: 24 93.88.74.0/24 maxlen: 24 93.88.75.0/24 maxlen: 24 103.65.230.0/24 maxlen: 24 103.65.231.0/24 maxlen: 24 104.192.42.0/24 maxlen: 24 138.226.220.0/24 maxlen: 24 138.226.221.0/24 maxlen: 24 138.226.222.0/24 maxlen: 24 138.226.223.0/24 maxlen: 24 148.227.170.0/24 maxlen: 24 185.162.8.0/24 maxlen: 24 185.162.9.0/24 maxlen: 24 185.162.11.0/24 maxlen: 24 185.204.52.0/24 maxlen: 24 185.204.54.0/24 maxlen: 24 185.204.55.0/24 maxlen: 24 194.146.127.0/24 maxlen: 24 2a12:9cc0::/48 maxlen: 48 2a12:9cc0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:0f:57:d3:b2:b6:32:84:53:e8:de:a3:7f:55:3e:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869 Validity Not Before: Dec 8 13:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b00991744fb72e88ed1bce6f60a6cae5a7e8aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:2f:52:93:66:bc:5a:6d:70:cf:8a:2d:6e: 03:7a:00:4b:fb:83:51:02:64:51:66:a6:39:79:f8: a2:5f:fc:98:99:d9:ba:d0:b0:c7:b2:e2:90:50:00: 29:99:46:93:ac:ed:ba:50:dd:84:3f:db:63:ce:79: df:e5:dd:dc:df:39:16:97:f4:e2:9f:7c:ce:0c:72: 91:96:9b:f7:31:6d:80:06:05:fc:d0:e6:b0:1f:4d: c9:35:78:7c:b9:84:70:c5:2e:36:6d:66:21:ab:15: 8f:20:98:aa:5a:ab:74:b6:4e:aa:e8:2f:e5:3d:b8: eb:0a:88:cf:cf:58:53:ff:02:dc:6c:96:35:c8:08: d0:47:3c:83:d7:ea:2f:65:e1:80:a3:9d:19:d7:81: c5:dc:d4:6c:a6:70:fe:2d:b3:de:2b:10:e2:6a:fc: d5:c6:49:9c:be:60:3a:5a:93:74:e1:83:ed:95:86: 4f:42:5f:a8:e4:b4:7b:a9:30:be:9d:2e:43:80:17: 1a:4d:7a:82:84:f0:82:91:2e:4f:8b:5d:a1:ce:23: ca:be:4e:5a:e6:35:cd:96:c7:98:91:44:dc:7b:8b: 5a:cb:19:15:32:96:01:7e:e5:76:22:05:da:1b:28: 52:bf:44:8a:e0:fb:67:54:c1:7f:e2:a1:78:9e:11: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:00:99:17:44:FB:72:E8:8E:D1:BC:E6:F6:0A:6C:AE:5A:7E:8A:A8 X509v3 Authority Key Identifier: keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/OwCZF0T7cuiO0bzm9gpsrlp-iqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.10.5.0/24 31.210.170.0-31.210.173.255 46.28.234.0/24 62.204.42.0/24 85.136.180.0/22 87.236.177.0/24 93.88.74.0/23 103.65.230.0/23 104.192.42.0/24 138.226.220.0/22 148.227.170.0/24 185.162.8.0/23 185.162.11.0/24 185.204.52.0/24 185.204.54.0/23 194.146.127.0/24 IPv6: 2a12:9cc0::/47 Signature Algorithm: sha256WithRSAEncryption 19:df:23:cf:8e:a0:45:af:54:ce:b3:cc:90:11:41:8e:aa:56: 66:37:7e:8b:bf:e8:41:af:39:57:a1:56:68:89:98:bd:98:08: 91:de:58:40:c9:9f:b7:6b:be:aa:3a:1c:7e:25:5f:b8:d8:90: 14:1c:fe:62:95:8d:5f:cf:c5:79:01:7b:3d:4c:33:b5:3f:bd: 0d:0a:e3:4a:e1:01:14:f0:c1:cc:4c:a6:18:90:6b:e8:e3:46: 07:77:f0:84:ae:1b:69:9f:16:f1:89:b8:46:41:79:bb:be:37: 80:53:eb:24:b5:99:5e:ca:fb:10:0a:c8:14:ae:97:a4:72:a3: 9d:de:cb:61:00:b9:27:14:12:a7:6e:f5:d3:3b:41:2e:b0:91: 59:10:d6:dd:03:e2:f1:b5:94:4e:c5:f5:1a:54:6f:84:a3:25: 9a:5e:41:13:6d:bc:39:aa:8b:97:09:c3:a6:4d:b0:f3:8d:2f: 7a:88:fd:41:37:6c:bb:04:0c:ce:e7:7f:b7:8c:06:d4:ec:be: d6:2e:57:42:38:92:05:45:04:47:5c:12:1e:0f:7d:8e:9e:2b: 69:05:b8:05:7b:59:1e:b9:00:39:2b:46:7c:77:04:7f:c6:96: 4c:1d:31:08:28:3d:cd:fe:20:9e:cb:3d:bc:7a:5d:c5:fc:34: 22:ad:67:86 -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZr+D1fTsrYyhFPo3qN/VT7aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWQxZjY3YTQxY2EyZTQwNTAxN2NiZTQ4YmFmZmYxNzMz ZTM4NjkwHhcNMjUxMjA4MTMwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjAwOTkxNzQ0ZmI3MmU4OGVkMWJjZTZmNjBhNmNhZTVhN2U4YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+YvUpNmvFptcM+KLW4DegBL+4NR AmRRZqY5efiiX/yYmdm60LDHsuKQUAApmUaTrO26UN2EP9tjznnf5d3c3zkWl/Ti n3zODHKRlpv3MW2ABgX80OawH03JNXh8uYRwxS42bWYhqxWPIJiqWqt0tk6q6C/l PbjrCojPz1hT/wLcbJY1yAjQRzyD1+ovZeGAo50Z14HF3NRspnD+LbPeKxDiavzV xkmcvmA6WpN04YPtlYZPQl+o5LR7qTC+nS5DgBcaTXqChPCCkS5Pi12hziPKvk5a 5jXNlseYkUTce4tayxkVMpYBfuV2IgXaGyhSv0SK4PtnVMF/4qF4nhGh2QIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFDsAmRdE+3LojtG85vYKbK5afoqoMB8GA1UdIwQY MBaAFBSdH2ekHKLkBQF8vki6//FzPjhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDkt NTQ4NTY4MmEwNWY1LzEvT3dDWkYwVDdjdWlPMGJ6bTlncHNybHAtaXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9iNTA5MGEtZWM1OC00NmRiLTlkZDktNTQ4NTY4MmEwNWY1 LzEvRkowZlo2UWNvdVFGQVh5LVNMcl84WE0tT0drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGUBggrBgEFBQcBBwEB/wSBhDCBgTBuBAIAATBoAwQAHwoF MAwDBAEf0qoDBAEf0qwDBAAuHOoDBAA+zCoDBAJViLQDBABX7LEDBAFdWEoDBAFn QeYDBABowCoDBAKK4twDBACU46oDBAG5oggDBAC5ogsDBAC5zDQDBAG5zDYDBADC kn8wDwQCAAIwCQMHASoSnMAAADANBgkqhkiG9w0BAQsFAAOCAQEAGd8jz46gRa9U zrPMkBFBjqpWZjd+i7/oQa85V6FWaImYvZgIkd5YQMmft2u+qjocfiVfuNiQFBz+ YpWNX8/FeQF7PUwztT+9DQrjSuEBFPDBzEymGJBr6ONGB3fwhK4baZ8W8Ym4RkF5 u743gFPrJLWZXsr7EArIFK6XpHKjnd7LYQC5JxQSp2710ztBLrCRWRDW3QPi8bWU TsX1GlRvhKMlml5BE228OaqLlwnDpk2w840veoj9QTdsuwQMzud/t4wG1Oy+1i5X QjiSBUUER1wSHg99jp4raQW4BXtZHrkAOStGfHcEf8aWTB0xCCg9zf4gnss9vHpd xfw0Iq1nhg== -----END CERTIFICATE-----Generated at Sat Dec 13 08:37:58 2025 by rpki-client