This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OVc7y0Sb5QWyI2VEVsyaide8Pys.roa File: OVc7y0Sb5QWyI2VEVsyaide8Pys.roa (raw, json) Hash identifier: wFZKpw530DJxbLltjTvEyqpDuCWJKTSYmDn/ymSCSno= Subject key identifier: 39:57:3B:CB:44:9B:E5:05:B2:23:65:44:56:CC:9A:89:D7:BC:3F:2B Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019AD4AE10685B26F99AC35CBFADE89FCEE0 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OVc7y0Sb5QWyI2VEVsyaide8Pys.roa Signing time: Sun 30 Nov 2025 12:12:48 +0000 ROA not before: Sun 30 Nov 2025 12:12:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 62.192.110.0/24 maxlen: 24 194.231.151.0/24 maxlen: 24 194.231.152.0/24 maxlen: 24 194.231.153.0/24 maxlen: 24 194.231.154.0/24 maxlen: 24 194.231.198.0/24 maxlen: 24 194.231.201.0/24 maxlen: 24 194.231.202.0/23 maxlen: 24 194.231.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d4:ae:10:68:5b:26:f9:9a:c3:5c:bf:ad:e8:9f:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Nov 30 12:12:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39573bcb449be505b223654456cc9a89d7bc3f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1d:d0:1c:b2:59:de:80:7b:97:13:40:b9:ef: 91:78:d9:8c:96:cc:ec:61:61:09:b8:f2:3a:0d:f4: 45:91:cf:ff:62:b3:bd:ab:24:e6:03:58:27:df:44: 16:65:0b:f9:cb:c3:b4:e6:07:34:43:aa:fc:e0:7b: 9a:d6:dd:0d:4e:6e:9c:a3:bd:dc:61:e7:4f:7c:a0: cd:73:dd:62:8f:9f:e9:0c:f4:77:91:82:c7:b5:ea: 1b:82:7d:d5:2c:89:53:45:ce:12:7e:ea:b8:2c:8b: de:a5:7b:5a:74:06:07:21:ee:ff:b3:86:fe:99:dd: a0:00:1e:62:e1:9a:6c:86:ad:bc:5a:01:b9:3c:e3: 2a:1e:05:fa:8c:8b:49:d6:26:78:a9:3a:26:3d:58: b1:9f:a1:06:84:da:76:ca:c1:da:0b:38:6a:65:98: 6c:49:68:50:54:7b:71:2b:e1:55:ce:ff:67:31:8a: 4b:cc:37:22:35:0b:c7:d8:9a:dc:6f:a1:44:6a:6f: ab:fa:19:78:1f:36:43:6d:ca:67:c6:07:e1:b9:13: ea:f1:ba:ac:b2:11:b1:66:3f:6f:dc:1f:a5:f2:58: 0e:cf:de:3a:30:5f:8b:8b:bb:2b:56:a4:53:79:84: 81:56:40:af:5a:44:b9:fa:0f:df:d9:9a:6e:c7:5c: cb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:57:3B:CB:44:9B:E5:05:B2:23:65:44:56:CC:9A:89:D7:BC:3F:2B X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/OVc7y0Sb5QWyI2VEVsyaide8Pys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.110.0/24 194.231.151.0-194.231.154.255 194.231.198.0/24 194.231.201.0-194.231.203.255 194.231.212.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:b9:45:a0:94:1c:cc:d8:ba:ca:58:62:36:28:4a:b0:e4:0e: c1:ec:f4:bf:22:a8:3a:26:a3:bf:fb:de:4b:41:64:a4:15:6e: 02:e5:01:8d:b5:f3:84:83:36:91:44:b0:57:41:11:a4:41:b5: 3a:2e:aa:fe:19:8d:4b:f9:95:a0:a5:07:f1:fe:70:0d:a0:33: 2d:fa:8c:30:43:a9:f8:c7:20:27:e7:25:08:c8:1c:32:7d:5a: 93:02:e5:83:fe:2f:0e:7b:a9:1f:de:4b:5c:14:d7:57:e7:0d: d3:5b:6d:26:98:b5:91:69:a0:cc:05:58:c0:68:39:20:04:6b: 45:5b:67:83:4e:35:db:16:84:9f:7f:6c:6c:0b:8b:04:43:3d: b3:f4:72:ba:94:4e:39:7b:13:37:52:bb:59:ab:2f:74:ad:12: 85:82:b2:04:7f:1a:90:5e:76:66:11:13:b1:07:c2:95:ba:96: eb:9a:45:16:26:25:e5:fc:ea:74:5f:61:13:ee:f2:0b:b5:7a: bd:88:50:28:a1:13:c9:a6:44:42:96:9b:22:30:d5:c5:91:46: ef:7f:31:45:78:ef:08:f8:b7:5f:00:99:e5:f9:aa:51:61:00: 31:73:de:64:65:aa:79:4d:d6:b7:be:b4:a5:55:d4:62:4c:cc: 23:57:fd:bf -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZrUrhBoWyb5msNcv63on87gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjUxMTMwMTIxMjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTU3M2JjYjQ0OWJlNTA1YjIyMzY1NDQ1NmNjOWE4OWQ3YmMzZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx3QHLJZ3oB7lxNAue+ReNmMlszs YWEJuPI6DfRFkc//YrO9qyTmA1gn30QWZQv5y8O05gc0Q6r84Hua1t0NTm6co73c YedPfKDNc91ij5/pDPR3kYLHteobgn3VLIlTRc4Sfuq4LIvepXtadAYHIe7/s4b+ md2gAB5i4Zpshq28WgG5POMqHgX6jItJ1iZ4qTomPVixn6EGhNp2ysHaCzhqZZhs SWhQVHtxK+FVzv9nMYpLzDciNQvH2Jrcb6FEam+r+hl4HzZDbcpnxgfhuRPq8bqs shGxZj9v3B+l8lgOz946MF+Li7srVqRTeYSBVkCvWkS5+g/f2Zpux1zLRwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFDlXO8tEm+UFsiNlRFbMmonXvD8rMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvT1ZjN3kwU2I1UVd5STJWRVZzeWFpZGU4UHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAPsBuMAwD BADC55cDBADC55oDBADC58YwDAMEAMLnyQMEAsLnyAMEAMLn1DANBgkqhkiG9w0B AQsFAAOCAQEASrlFoJQczNi6ylhiNihKsOQOwez0vyKoOiajv/veS0FkpBVuAuUB jbXzhIM2kUSwV0ERpEG1Oi6q/hmNS/mVoKUH8f5wDaAzLfqMMEOp+McgJ+clCMgc Mn1akwLlg/4vDnupH95LXBTXV+cN01ttJpi1kWmgzAVYwGg5IARrRVtng0412xaE n39sbAuLBEM9s/RyupROOXsTN1K7WasvdK0ShYKyBH8akF52ZhETsQfClbqW65pF FiYl5fzqdF9hE+7yC7V6vYhQKKETyaZEQpabIjDVxZFG738xRXjvCPi3XwCZ5fmq UWEAMXPeZGWqeU3Wt760pVXUYkzMI1f9vw== -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:35 2025 by rpki-client