This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa
File: pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa (raw, json)
Hash identifier: Odu/JQE+NuqQnFtuUP1vj2iDoVgw37fFgQfUJkGsevc=
Subject key identifier: A4:6E:12:68:31:8B:F2:8C:55:58:CF:E5:5F:93:15:BE:6F:10:71:AC
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 019B501D34CB034B7EF7569625F940A29745
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa
Signing time: Wed 24 Dec 2025 11:27:29 +0000
ROA not before: Wed 24 Dec 2025 11:27:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 62.72.161.0/24 maxlen: 24
62.72.162.0/23 maxlen: 23
62.72.164.0/22 maxlen: 22
62.72.164.0/23 maxlen: 23
62.72.170.0/24 maxlen: 24
62.72.171.0/24 maxlen: 24
62.72.187.0/24 maxlen: 24
62.72.191.0/24 maxlen: 24
81.21.1.0/24 maxlen: 24
81.21.2.0/23 maxlen: 23
81.21.4.0/22 maxlen: 24
176.57.56.0/24 maxlen: 24
176.57.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:50:1d:34:cb:03:4b:7e:f7:56:96:25:f9:40:a2:97:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Dec 24 11:27:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a46e1268318bf28c5558cfe55f9315be6f1071ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:7b:1e:eb:e0:61:13:2e:12:45:40:95:a4:
ad:54:ee:8a:68:61:ac:34:f3:a0:d5:53:be:3b:94:
a5:12:a8:e6:e4:bc:ae:e2:c6:ae:bb:f3:a0:2a:30:
50:80:2e:f8:9c:0d:ee:75:2e:f1:06:c1:d3:80:7f:
ea:05:8f:8b:ce:12:de:02:7f:6e:cc:1e:07:6a:ab:
cc:6b:8e:ee:64:a6:57:72:bd:53:ff:1a:25:51:67:
f4:ec:fb:82:a8:1b:3b:26:15:a6:ed:c4:38:e7:f0:
f0:4e:f2:23:66:03:3c:f5:5f:ed:e8:14:76:9c:bb:
93:fb:68:99:dc:12:f3:6b:21:b7:47:32:ff:23:35:
98:b8:7d:b3:2b:2e:5d:de:a3:c5:58:2b:82:a2:3a:
b6:56:dc:6f:88:05:d9:bc:5d:8d:4e:39:08:69:b9:
7b:75:07:df:63:18:00:e7:ef:b8:73:61:7f:0f:9e:
5a:5e:f7:6b:18:8e:14:30:bd:0e:27:b5:29:5a:b4:
ab:b9:52:37:10:de:47:e8:43:6f:2d:f6:3a:6c:a1:
0c:0c:c6:37:f3:09:b0:43:44:e5:75:af:b2:f6:7d:
fe:3f:18:76:f0:12:77:63:32:3a:65:36:c5:e8:79:
72:fa:dd:9d:fb:e2:4b:14:f7:c6:3a:78:04:91:13:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6E:12:68:31:8B:F2:8C:55:58:CF:E5:5F:93:15:BE:6F:10:71:AC
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/pG4SaDGL8oxVWM_lX5MVvm8Qcaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.72.161.0-62.72.167.255
62.72.170.0/23
62.72.187.0/24
62.72.191.0/24
81.21.1.0-81.21.7.255
176.57.56.0/24
176.57.63.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:38:a3:82:9e:16:a4:fd:2a:77:16:f5:9e:54:12:29:7a:43:
61:f7:05:74:73:d9:59:16:9f:ff:b2:17:7d:1c:b9:b7:fe:12:
40:bf:c4:ed:e6:43:31:f8:e3:94:da:41:b5:06:1a:b2:f8:aa:
61:b0:9b:83:16:bb:67:4c:bf:74:3d:90:ad:f2:30:54:86:7c:
c4:aa:ad:ee:35:5a:5f:2e:01:d2:3c:c2:73:72:e5:5e:b3:04:
f1:c2:71:69:81:18:9a:7f:cd:31:66:3a:8a:f4:a2:a3:b2:a9:
62:20:04:9c:4b:11:3f:f3:72:8d:c2:e3:ac:5a:b9:e3:92:f4:
c0:d0:98:02:c4:1b:be:9b:5f:c2:ba:bf:a4:11:72:a9:ec:c3:
88:6e:12:84:92:a3:c2:22:6d:56:a7:0b:89:3c:e7:46:d3:a5:
a4:ab:2f:42:5b:f5:09:da:57:65:6f:27:1b:70:9c:25:c6:eb:
19:c3:6f:a7:b8:38:83:08:93:a1:1f:9a:ec:be:89:c6:30:f1:
66:7e:e9:16:8e:2e:6b:a7:8d:34:bb:69:b6:64:57:bb:14:a5:
69:46:73:46:ee:d5:4e:42:aa:b5:17:71:cd:4d:59:7a:21:11:
58:ac:fd:e2:ab:ca:e9:e4:da:69:ac:b9:f5:fc:17:03:18:b9:
ee:a9:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 26 00:46:20 2025 by rpki-client