This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/OnTLDt3Nc2PgiE0wfBx1gh_wnCQ.roa File: OnTLDt3Nc2PgiE0wfBx1gh_wnCQ.roa (raw, json) Hash identifier: P3A8SEYJNBvqfSywrf4GPl+VIksmqFOkn5T1DwyuNHI= Subject key identifier: 3A:74:CB:0E:DD:CD:73:63:E0:88:4D:30:7C:1C:75:82:1F:F0:9C:24 Certificate issuer: /CN=ffe70693454bc33485dec69d219d0502654ac04a Certificate serial: 019A76B3AB911F6ECFE5891F3B12C565D6BF Authority key identifier: FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/OnTLDt3Nc2PgiE0wfBx1gh_wnCQ.roa Signing time: Wed 12 Nov 2025 06:14:37 +0000 ROA not before: Wed 12 Nov 2025 06:14:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205847 IP address blocks: 5.181.56.0/24 maxlen: 24 5.181.57.0/24 maxlen: 24 5.181.58.0/23 maxlen: 23 5.181.58.0/24 maxlen: 24 5.181.59.0/24 maxlen: 24 91.223.67.0/24 maxlen: 24 2a0c:a740:100::/48 maxlen: 48 2a0c:a741::/38 maxlen: 38 2a0c:a741:1000::/38 maxlen: 38 2a0c:a741:2000::/38 maxlen: 38 2a0c:a741:2400::/38 maxlen: 38 2a0c:a741:3000::/38 maxlen: 38 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.mft rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:b3:ab:91:1f:6e:cf:e5:89:1f:3b:12:c5:65:d6:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe70693454bc33485dec69d219d0502654ac04a Validity Not Before: Nov 12 06:14:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3a74cb0eddcd7363e0884d307c1c75821ff09c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:82:17:29:b9:25:15:64:be:10:93:3f:93:db: 33:11:ab:c8:8c:79:94:84:81:7a:3c:2d:8b:bb:1e: e1:85:4c:c4:30:c1:54:c0:b4:4c:8e:0e:c4:1a:a2: b7:e8:8e:bb:bb:46:74:6c:4e:f8:16:b5:f5:40:8f: f3:63:46:24:95:87:b7:a7:44:d3:d1:15:69:e2:7e: 6b:83:8e:6a:f4:e7:df:44:60:79:24:c2:be:90:86: db:b2:f2:cf:c5:f7:0f:cf:91:55:39:29:7b:bb:37: 0f:cc:1d:de:b7:54:da:69:d0:fb:6d:27:81:2c:e9: 81:ca:64:81:68:fd:4c:b2:cf:08:f1:f7:3d:22:2e: a1:6a:7b:b5:29:c1:3b:98:ed:91:72:ca:8d:48:a5: f7:fa:7d:6f:f8:56:69:c3:55:2c:eb:8e:2b:03:5c: 0f:84:ae:31:b0:87:83:3b:cc:7b:dd:90:d5:b6:57: 6a:b5:3a:09:95:b3:c5:94:bd:b5:0b:0b:04:9d:cf: 48:5c:d0:06:eb:59:f2:bc:f9:59:1a:37:66:27:bd: b0:46:90:63:6f:85:d0:e9:a3:57:d1:86:0a:92:b1: cc:f2:d6:37:f5:69:24:ee:3f:fb:1e:29:33:cc:32: 63:e2:43:46:f5:58:59:36:b9:78:c9:3f:f4:b5:73: 28:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:74:CB:0E:DD:CD:73:63:E0:88:4D:30:7C:1C:75:82:1F:F0:9C:24 X509v3 Authority Key Identifier: keyid:FF:E7:06:93:45:4B:C3:34:85:DE:C6:9D:21:9D:05:02:65:4A:C0:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-cGk0VLwzSF3sadIZ0FAmVKwEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/OnTLDt3Nc2PgiE0wfBx1gh_wnCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/03e4f7-10f3-4114-a1e5-3502658ae6f5/1/_-cGk0VLwzSF3sadIZ0FAmVKwEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.56.0/22 91.223.67.0/24 IPv6: 2a0c:a740:100::/48 2a0c:a741::/38 2a0c:a741:1000::/38 2a0c:a741:2000::/37 2a0c:a741:3000::/38 Signature Algorithm: sha256WithRSAEncryption 8e:3e:32:be:35:de:03:ac:1c:8b:52:55:67:a0:22:3e:1e:75: f7:0c:82:84:04:74:7c:64:e1:b2:8b:4c:ff:7c:96:3a:e4:ba: 7f:7d:72:43:af:a3:18:cf:a1:65:a8:d1:b5:8a:9d:bb:27:19: a8:ff:96:a7:31:fe:eb:a2:16:9d:43:0d:8f:06:1d:81:59:7e: 1c:9f:0c:f7:c8:20:ce:31:f2:30:02:09:a7:f5:0e:96:33:e8: 18:6e:85:9c:b7:ac:da:8d:f3:7e:6f:0e:ac:a3:a7:13:c8:f0: 69:25:6f:e0:36:4d:55:dc:ab:78:c6:78:b6:68:11:dd:e4:c3: bd:45:7c:cc:51:e4:ca:c1:ff:3e:0f:bf:ef:22:b6:86:8a:7b: f5:c0:d5:7a:b9:62:8f:08:8a:81:59:c0:e0:fd:2e:3e:0c:c0: 28:bc:b6:36:16:a6:18:1b:08:e8:78:99:ac:5e:6c:8e:73:97: cd:c1:51:b5:f1:2c:47:f8:6d:e5:9b:23:0b:c7:ee:30:0a:bf: 8b:c7:4f:c1:52:b7:7b:4c:79:0f:43:7b:cf:8c:e3:8c:79:5f: 36:4d:ed:31:e2:1d:a7:d9:97:bf:96:99:6d:6b:de:a9:22:af: c7:c7:c3:60:74:b7:f8:ad:f6:a1:a2:d7:de:9d:25:93:e2:4d: c6:d3:42:3d -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZp2s6uRH27P5YkfOxLFZda/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTcwNjkzNDU0YmMzMzQ4NWRlYzY5ZDIxOWQwNTAyNjU0 YWMwNGEwHhcNMjUxMTEyMDYxNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTc0Y2IwZWRkY2Q3MzYzZTA4ODRkMzA3YzFjNzU4MjFmZjA5YzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oIXKbklFWS+EJM/k9szEavIjHmU hIF6PC2Lux7hhUzEMMFUwLRMjg7EGqK36I67u0Z0bE74FrX1QI/zY0YklYe3p0TT 0RVp4n5rg45q9OffRGB5JMK+kIbbsvLPxfcPz5FVOSl7uzcPzB3et1TaadD7bSeB LOmBymSBaP1Mss8I8fc9Ii6hanu1KcE7mO2RcsqNSKX3+n1v+FZpw1Us644rA1wP hK4xsIeDO8x73ZDVtldqtToJlbPFlL21CwsEnc9IXNAG61nyvPlZGjdmJ72wRpBj b4XQ6aNX0YYKkrHM8tY39Wkk7j/7HikzzDJj4kNG9VhZNrl4yT/0tXMoxwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFDp0yw7dzXNj4IhNMHwcdYIf8JwkMB8GA1UdIwQY MBaAFP/nBpNFS8M0hd7GnSGdBQJlSsBKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUt MzUwMjY1OGFlNmY1LzEvT25UTER0M05jMlBnaUUwd2ZCeDFnaF93bkNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wM2U0ZjctMTBmMy00MTE0LWExZTUtMzUwMjY1OGFlNmY1 LzEvXy1jR2swVkx3elNGM3NhZElaMEZBbVZLd0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTASBAIAATAMAwQCBbU4AwQA W99DMC8EAgACMCkDBwAqDKdAAQADBgIqDKdBAAMGAioMp0EQAwYDKgynQSADBgIq DKdBMDANBgkqhkiG9w0BAQsFAAOCAQEAjj4yvjXeA6wci1JVZ6AiPh519wyChAR0 fGThsotM/3yWOuS6f31yQ6+jGM+hZajRtYqduycZqP+WpzH+66IWnUMNjwYdgVl+ HJ8M98ggzjHyMAIJp/UOljPoGG6FnLes2o3zfm8OrKOnE8jwaSVv4DZNVdyreMZ4 tmgR3eTDvUV8zFHkysH/Pg+/7yK2hop79cDVerlijwiKgVnA4P0uPgzAKLy2Nham GBsI6HiZrF5sjnOXzcFRtfEsR/ht5ZsjC8fuMAq/i8dPwVK3e0x5D0N7z4zjjHlf Nk3tMeIdp9mXv5aZbWveqSKvx8fDYHS3+K32oaLX3p0lk+JNxtNCPQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:58:03 2025 by rpki-client