This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xruqwNquafx6aZYM3D0DNR4CZPA.roa File: xruqwNquafx6aZYM3D0DNR4CZPA.roa (raw, json) Hash identifier: yyrCOymjfiU6NgJaKiuHu+t8xFK4YmgFc2F0WyQhZLU= Subject key identifier: C6:BB:AA:C0:DA:AE:69:FC:7A:69:96:0C:DC:3D:03:35:1E:02:64:F0 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019AB597CC877247076BBCACB4A977807A89 Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xruqwNquafx6aZYM3D0DNR4CZPA.roa Signing time: Mon 24 Nov 2025 11:20:15 +0000 ROA not before: Mon 24 Nov 2025 11:20:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 62.72.162.0/23 maxlen: 23 62.72.164.0/22 maxlen: 22 62.72.164.0/23 maxlen: 23 62.72.168.0/24 maxlen: 24 62.72.171.0/24 maxlen: 24 81.21.2.0/23 maxlen: 23 81.21.4.0/22 maxlen: 24 176.57.56.0/24 maxlen: 24 176.57.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 11:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b5:97:cc:87:72:47:07:6b:bc:ac:b4:a9:77:80:7a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Nov 24 11:20:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c6bbaac0daae69fc7a69960cdc3d03351e0264f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:6e:20:5e:11:2f:07:f7:07:b1:49:19:03: 6a:ba:63:6c:63:85:7e:b9:8f:af:66:fd:0d:d2:99: 67:16:35:76:9a:17:3f:90:3b:2a:a1:31:80:91:c6: dc:fd:97:25:56:51:5a:ab:b6:ad:b7:54:c1:02:45: 1d:2d:1e:a3:3c:fe:5a:6a:73:01:57:09:3d:f2:d1: 28:4d:ad:43:ec:28:a8:a5:1a:4f:a9:89:f3:06:7b: e4:50:f3:1e:a1:0f:22:26:8c:23:ca:9c:ca:dd:b3: d8:d7:c4:0a:87:e2:89:73:98:45:bc:ed:dc:d9:f9: 60:63:3f:c2:f4:b7:bb:25:d1:66:2b:4f:ad:17:d8: 17:e2:8b:26:fe:02:5f:36:36:cc:53:22:9c:35:1d: a7:73:0c:a4:5d:6f:3c:2b:f4:af:84:bc:bf:91:10: 5c:9f:6b:43:4f:7f:93:90:14:65:8e:75:43:55:a7: 60:a8:1d:89:a4:b1:71:bd:0c:8d:0b:b1:78:70:3e: f4:57:e2:7e:a4:89:16:b1:b9:70:3a:ff:20:96:31: 72:ff:18:17:46:7a:a6:e0:75:7b:93:76:59:21:63: 49:57:60:97:f9:d7:e3:1e:ad:d0:40:84:78:05:1d: fe:f0:f0:2c:f6:ad:9d:3a:cd:f4:bb:dd:53:23:be: cf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BB:AA:C0:DA:AE:69:FC:7A:69:96:0C:DC:3D:03:35:1E:02:64:F0 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/xruqwNquafx6aZYM3D0DNR4CZPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.72.162.0-62.72.168.255 62.72.171.0/24 81.21.2.0-81.21.7.255 176.57.56.0/24 176.57.63.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:ce:8a:18:eb:10:6f:b5:72:21:50:44:72:f6:25:dd:ee:5e: 57:2b:91:03:3e:ce:1b:1f:7e:a2:6d:aa:8a:57:ce:28:fb:0e: 74:78:82:5c:43:21:a7:d3:90:0b:9b:71:b9:46:83:c7:b1:4a: 28:c1:e9:af:bf:68:4f:8a:f8:ca:fc:f4:10:a3:da:ea:aa:f9: 65:0c:3e:66:26:a2:33:b1:9d:4a:ed:b8:d8:04:1e:c4:63:b6: 02:3e:7a:6b:0a:12:75:7a:17:e9:85:ed:0f:e3:cc:8c:59:58: 07:e6:19:69:5b:fb:c2:db:2f:7c:af:94:30:fa:72:89:ce:10: dd:f2:6d:d5:26:f0:72:ee:18:f0:0e:af:26:75:d0:02:0d:20: 12:dd:bb:17:b7:d3:16:fe:51:73:5f:2f:87:c2:cb:1f:23:0a: 79:42:a8:1d:40:4b:df:58:18:b6:a8:30:91:af:6e:30:90:be: f5:96:22:3c:7d:3d:85:33:be:cc:f8:97:6c:8c:5a:33:73:61: b0:4b:ca:ab:af:26:34:7f:5a:21:ea:ed:da:51:6d:40:f4:85: a3:a2:33:74:f9:12:23:32:93:76:b4:df:f6:d6:6b:70:4b:c7: 5f:e5:2a:72:94:58:85:b5:48:8f:75:f6:b6:41:33:0e:a1:da: f0:ff:9d:02 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZq1l8yHckcHa7ystKl3gHqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjUxMTI0MTEyMDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmJiYWFjMGRhYWU2OWZjN2E2OTk2MGNkYzNkMDMzNTFlMDI2NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzVuIF4RLwf3B7FJGQNqumNsY4V+ uY+vZv0N0plnFjV2mhc/kDsqoTGAkcbc/ZclVlFaq7att1TBAkUdLR6jPP5aanMB Vwk98tEoTa1D7CiopRpPqYnzBnvkUPMeoQ8iJowjypzK3bPY18QKh+KJc5hFvO3c 2flgYz/C9Le7JdFmK0+tF9gX4osm/gJfNjbMUyKcNR2ncwykXW88K/SvhLy/kRBc n2tDT3+TkBRljnVDVadgqB2JpLFxvQyNC7F4cD70V+J+pIkWsblwOv8gljFy/xgX Rnqm4HV7k3ZZIWNJV2CX+dfjHq3QQIR4BR3+8PAs9q2dOs30u91TI77PPQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMa7qsDarmn8emmWDNw9AzUeAmTwMB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEveHJ1cXdOcXVhZng2YVpZTTNEMEROUjRDWlBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAE+SKID BAA+SKgDBAA+SKswDAMEAVEVAgMEA1EVAAMEALA5OAMEALA5PzANBgkqhkiG9w0B AQsFAAOCAQEAbs6KGOsQb7VyIVBEcvYl3e5eVyuRAz7OGx9+om2qilfOKPsOdHiC XEMhp9OQC5txuUaDx7FKKMHpr79oT4r4yvz0EKPa6qr5ZQw+ZiaiM7GdSu242AQe xGO2Aj56awoSdXoX6YXtD+PMjFlYB+YZaVv7wtsvfK+UMPpyic4Q3fJt1Sbwcu4Y 8A6vJnXQAg0gEt27F7fTFv5Rc18vh8LLHyMKeUKoHUBL31gYtqgwka9uMJC+9ZYi PH09hTO+zPiXbIxaM3NhsEvKq68mNH9aIert2lFtQPSFo6IzdPkSIzKTdrTf9tZr cEvHX+UqcpRYhbVIj3X2tkEzDqHa8P+dAg== -----END CERTIFICATE-----Generated at Mon Nov 24 19:15:46 2025 by rpki-client