This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/_oQumNiqQjEmqfG-Z2kvjeREVg8.roa File: _oQumNiqQjEmqfG-Z2kvjeREVg8.roa (raw, json) Hash identifier: ubcPWAcBDBBYn8/decWZtzMXul10trwf3OOXs9omIUY= Subject key identifier: FE:84:2E:98:D8:AA:42:31:26:A9:F1:BE:67:69:2F:8D:E4:44:56:0F Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019AFDC9303658EB01174D8140A8F98B1C3E Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/_oQumNiqQjEmqfG-Z2kvjeREVg8.roa Signing time: Mon 08 Dec 2025 11:46:52 +0000 ROA not before: Mon 08 Dec 2025 11:46:52 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47376 IP address blocks: 91.222.196.0/24 maxlen: 24 91.222.197.0/24 maxlen: 24 103.215.220.0/22 maxlen: 22 103.215.220.0/24 maxlen: 24 103.215.221.0/24 maxlen: 24 103.215.223.0/24 maxlen: 24 185.221.239.0/24 maxlen: 24 195.28.11.0/24 maxlen: 24 195.234.191.0/24 maxlen: 24 195.238.231.0/24 maxlen: 24 195.238.240.0/24 maxlen: 24 195.238.247.0/24 maxlen: 24 2a05:63c0::/29 maxlen: 29 2a05:63c0::/30 maxlen: 30 2a05:63c0::/48 maxlen: 48 2a0f:c040::/29 maxlen: 29 2a10:ef04:1001::/48 maxlen: 48 2a10:ef04:1002::/48 maxlen: 48 2a10:ef04:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:c9:30:36:58:eb:01:17:4d:81:40:a8:f9:8b:1c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Dec 8 11:46:52 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fe842e98d8aa423126a9f1be67692f8de444560f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ec:ab:12:93:59:51:22:5c:d0:1b:16:34:87: 05:92:b7:ab:4f:57:56:fd:e0:21:49:e7:85:36:cd: 3b:c9:f9:12:eb:04:5f:05:5e:30:02:13:23:bc:c5: 05:ba:b1:f1:ad:c3:f5:ce:d3:65:e9:f5:e4:e3:b6: 20:c9:da:7b:20:de:a5:0d:af:f7:6c:4f:a1:2c:68: 95:ac:a7:d6:ce:70:cd:27:19:97:71:f3:91:8c:d8: e1:a6:81:87:29:15:00:ab:c7:bf:a6:89:44:80:7b: c8:ca:01:d8:93:e4:74:32:20:99:80:00:54:a0:a4: d0:92:54:62:25:72:47:c5:34:3b:b1:72:ba:3a:36: 24:d9:d1:83:88:03:86:a6:17:b0:ec:ac:9d:6b:27: e4:da:69:c4:aa:a8:4d:b9:90:2c:be:f2:be:24:d9: ee:49:9d:fe:c0:d8:be:75:13:1e:ef:77:00:a5:cf: 12:b5:2e:76:35:58:d0:e3:eb:ad:14:04:e9:cb:34: 41:dd:33:ea:d0:2b:0f:a5:ef:eb:67:cf:7e:64:68: 0b:73:c1:a2:87:5b:35:eb:62:12:97:52:41:d9:03: fd:5c:f1:6f:fd:fd:1c:45:67:de:32:b2:e0:8f:e6: cf:05:f4:28:d0:18:df:1d:2a:44:e6:41:de:3c:38: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:84:2E:98:D8:AA:42:31:26:A9:F1:BE:67:69:2F:8D:E4:44:56:0F X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/_oQumNiqQjEmqfG-Z2kvjeREVg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.196.0/23 103.215.220.0/22 185.221.239.0/24 195.28.11.0/24 195.234.191.0/24 195.238.231.0/24 195.238.240.0/24 195.238.247.0/24 IPv6: 2a05:63c0::/29 2a0f:c040::/29 2a10:ef04:1001::-2a10:ef04:1003:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 54:30:97:c8:bd:67:f6:f3:d3:75:e1:54:b1:a8:cc:7b:f3:cb: da:4e:b1:14:67:12:1a:5e:3f:b9:dc:d0:c4:55:67:a3:a7:45: 15:37:8c:21:a6:16:bd:5b:2e:06:ad:da:6b:1f:9d:74:b3:4f: 7f:86:cf:0c:7a:32:a3:21:7c:fc:9b:e4:f8:69:28:a6:13:d3: 8c:cd:fe:1d:cd:4c:21:a8:cd:05:4a:a0:84:bc:38:28:2e:43: 92:4e:84:83:19:02:a6:7c:6a:ab:2c:1d:fa:64:56:83:c2:08: a8:4c:3e:e7:cd:ef:b3:e6:d3:33:53:c1:c7:6b:aa:79:fa:df: df:33:c9:d4:50:24:a4:ae:5e:2b:92:c6:0f:f6:49:75:48:9d: 90:cb:43:7b:4d:36:ed:9b:6c:70:d9:c4:a3:2d:f4:3b:c1:30: a3:24:0b:67:ce:a4:48:3a:4f:1a:f9:49:56:72:91:84:15:0d: c9:3c:f8:e7:cd:49:52:4c:cb:17:4f:d8:4a:a7:2b:35:6b:f2: 78:a3:fa:ce:4a:af:fb:4b:85:3a:06:a5:f8:c3:e7:f9:d5:65: 02:dc:51:57:10:a9:3e:8f:87:49:fe:84:3f:23:0f:d7:7c:39: 01:73:b4:1a:96:1c:b0:71:fb:d9:fa:09:ba:10:06:e6:46:a2: 59:1a:4c:35 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZr9yTA2WOsBF02BQKj5ixw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjUxMjA4MTE0NjUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTg0MmU5OGQ4YWE0MjMxMjZhOWYxYmU2NzY5MmY4ZGU0NDQ1NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweyrEpNZUSJc0BsWNIcFkrerT1dW /eAhSeeFNs07yfkS6wRfBV4wAhMjvMUFurHxrcP1ztNl6fXk47Ygydp7IN6lDa/3 bE+hLGiVrKfWznDNJxmXcfORjNjhpoGHKRUAq8e/polEgHvIygHYk+R0MiCZgABU oKTQklRiJXJHxTQ7sXK6OjYk2dGDiAOGphew7Kydayfk2mnEqqhNuZAsvvK+JNnu SZ3+wNi+dRMe73cApc8StS52NVjQ4+utFATpyzRB3TPq0CsPpe/rZ89+ZGgLc8Gi h1s162ISl1JB2QP9XPFv/f0cRWfeMrLgj+bPBfQo0BjfHSpE5kHePDimOQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFP6ELpjYqkIxJqnxvmdpL43kRFYPMB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvX29RdW1OaXFRakVtcWZHLVoya3ZqZVJFVmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA2BAIAATAwAwQBW97EAwQC Z9fcAwQAud3vAwQAwxwLAwQAw+q/AwQAw+7nAwQAw+7wAwQAw+73MCgEAgACMCID BQMqBWPAAwUDKg/AQDASAwcAKhDvBBABAwcCKhDvBBAAMA0GCSqGSIb3DQEBCwUA A4IBAQBUMJfIvWf289N14VSxqMx788vaTrEUZxIaXj+53NDEVWejp0UVN4whpha9 Wy4GrdprH510s09/hs8MejKjIXz8m+T4aSimE9OMzf4dzUwhqM0FSqCEvDgoLkOS ToSDGQKmfGqrLB36ZFaDwgioTD7nze+z5tMzU8HHa6p5+t/fM8nUUCSkrl4rksYP 9kl1SJ2Qy0N7TTbtm2xw2cSjLfQ7wTCjJAtnzqRIOk8a+UlWcpGEFQ3JPPjnzUlS TMsXT9hKpys1a/J4o/rOSq/7S4U6BqX4w+f51WUC3FFXEKk+j4dJ/oQ/Iw/XfDkB c7QalhywcfvZ+gm6EAbmRqJZGkw1 -----END CERTIFICATE-----Generated at Fri Dec 12 05:15:20 2025 by rpki-client