This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-mTgsrfOwqRFz9Pe6xypl0EKGSY.roa File: 1-mTgsrfOwqRFz9Pe6xypl0EKGSY.roa (raw, json) Hash identifier: qWmGuxYUoX7Fu3JAT9SBMtinQbcFTAmmRwc5y8dppW4= Subject key identifier: FA:64:E0:B2:B7:CE:C2:A4:45:CF:D3:DE:EB:1C:A9:97:41:0A:19:26 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B03227ACB3A7B5F64B84698D783B59D99 Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-mTgsrfOwqRFz9Pe6xypl0EKGSY.roa Signing time: Tue 09 Dec 2025 12:42:29 +0000 ROA not before: Tue 09 Dec 2025 12:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42337 IP address blocks: 62.220.112.0/21 maxlen: 21 62.220.113.0/24 maxlen: 24 62.220.116.0/24 maxlen: 24 62.220.118.0/23 maxlen: 24 81.12.0.0/21 maxlen: 24 81.12.32.0/21 maxlen: 24 81.12.40.0/21 maxlen: 24 81.12.54.0/23 maxlen: 24 81.12.56.0/23 maxlen: 24 81.12.60.0/22 maxlen: 24 81.12.64.0/18 maxlen: 24 81.12.95.0/24 maxlen: 24 87.107.16.0/21 maxlen: 24 87.107.28.0/22 maxlen: 24 87.107.32.0/23 maxlen: 23 87.107.36.0/22 maxlen: 24 87.107.44.0/22 maxlen: 24 87.107.48.0/23 maxlen: 23 87.107.56.0/21 maxlen: 24 87.107.64.0/22 maxlen: 24 87.107.72.0/21 maxlen: 24 87.107.80.0/21 maxlen: 24 87.107.92.0/22 maxlen: 24 87.107.100.0/22 maxlen: 24 87.107.136.0/21 maxlen: 24 87.107.148.0/22 maxlen: 24 87.107.156.0/22 maxlen: 24 87.107.176.0/21 maxlen: 24 87.107.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:22:7a:cb:3a:7b:5f:64:b8:46:98:d7:83:b5:9d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Dec 9 12:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fa64e0b2b7cec2a445cfd3deeb1ca997410a1926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:80:25:44:1f:87:e9:31:41:11:25:d7:f9:95: 39:1b:2d:0d:ba:0c:20:51:2a:77:18:36:90:11:2b: c1:11:4c:3d:64:fa:06:ff:db:66:f9:25:ef:7b:ba: a5:21:ea:35:0e:80:da:78:84:7a:4a:30:11:e7:68: db:40:f3:05:6a:de:ef:2a:3c:38:e7:01:e5:e4:4d: 14:3a:a7:f6:8c:66:79:a3:80:38:9c:60:8f:46:e8: 22:ba:66:74:6a:33:91:8d:be:c1:49:69:49:14:0d: 56:63:38:4f:39:1d:b6:b4:b2:08:be:55:46:a9:4f: a1:9e:f0:a3:31:1c:55:2a:e9:1f:13:d3:94:4d:c6: 71:d8:9f:8b:7c:cd:f9:ce:fa:6a:dc:21:ef:61:d7: c0:90:07:85:d4:f3:02:47:0f:58:43:d9:68:4b:5d: f4:3d:5c:a1:2a:fa:95:d8:14:79:16:9a:7e:e8:f2: 64:22:b6:9e:73:bc:9a:aa:52:01:3e:d5:e9:bc:b5: 7a:bd:2d:b9:fd:8f:f0:91:08:88:e2:d4:51:7e:04: 25:33:99:1b:e0:ef:a9:05:44:25:41:9c:02:99:dd: 7a:2a:f6:9d:33:2a:8b:2b:49:42:fa:c3:44:33:bc: 6e:1f:2b:69:a2:3b:db:c5:51:48:db:39:91:d0:f3: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:64:E0:B2:B7:CE:C2:A4:45:CF:D3:DE:EB:1C:A9:97:41:0A:19:26 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/1-mTgsrfOwqRFz9Pe6xypl0EKGSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.112.0/21 81.12.0.0/21 81.12.32.0/20 81.12.54.0-81.12.57.255 81.12.60.0-81.12.127.255 87.107.16.0/21 87.107.28.0-87.107.33.255 87.107.36.0/22 87.107.44.0-87.107.49.255 87.107.56.0-87.107.67.255 87.107.72.0-87.107.87.255 87.107.92.0/22 87.107.100.0/22 87.107.136.0/21 87.107.148.0/22 87.107.156.0/22 87.107.176.0-87.107.187.255 Signature Algorithm: sha256WithRSAEncryption d1:53:66:15:40:e2:6b:de:32:84:f2:58:fe:af:cd:21:39:c4: 7c:b8:08:a0:87:c9:7b:6c:4e:94:b2:5c:45:24:da:87:2a:3e: 16:fd:d1:35:32:6f:30:a6:c5:67:de:b1:ac:89:8f:f4:03:a4: 02:b2:be:fb:f0:da:5a:3c:91:cd:87:85:00:5c:34:d0:b8:29: bc:e1:ef:b1:e3:9d:09:be:7f:a5:d8:c6:87:5d:c3:54:33:49: 13:48:9c:74:7e:e6:fd:b5:62:3e:59:4c:00:e6:05:ab:09:93: a5:7a:7b:d1:fe:54:e8:c8:b2:17:ae:d8:c5:b0:f1:16:7e:5a: 3e:7e:41:78:86:fa:8a:c3:7b:99:56:ca:05:70:7e:1b:e9:37: 0f:39:5e:86:f8:cf:25:7a:f2:42:3f:ff:f2:e3:a6:04:09:37: 69:de:e9:29:a6:27:4e:b4:cb:15:3b:a5:7d:ea:c9:da:88:4b: 64:52:0b:e5:14:53:ce:e0:2d:59:03:fb:88:8a:f8:a7:de:23: dd:a0:df:5e:8a:ac:7e:c5:69:e7:65:b0:c0:79:03:bc:cf:ce: ad:15:e6:7c:ce:af:c0:90:f4:5e:9c:27:5b:6f:50:7d:ae:21: b5:53:f7:10:25:06:98:03:91:e4:bf:d5:7b:6f:c1:2b:6d:01: f7:a5:73:82 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgISAZsDInrLOntfZLhGmNeDtZ2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjUxMjA5MTI0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTY0ZTBiMmI3Y2VjMmE0NDVjZmQzZGVlYjFjYTk5NzQxMGExOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooAlRB+H6TFBESXX+ZU5Gy0Nugwg USp3GDaQESvBEUw9ZPoG/9tm+SXve7qlIeo1DoDaeIR6SjAR52jbQPMFat7vKjw4 5wHl5E0UOqf2jGZ5o4A4nGCPRugiumZ0ajORjb7BSWlJFA1WYzhPOR22tLIIvlVG qU+hnvCjMRxVKukfE9OUTcZx2J+LfM35zvpq3CHvYdfAkAeF1PMCRw9YQ9loS130 PVyhKvqV2BR5Fpp+6PJkIraec7yaqlIBPtXpvLV6vS25/Y/wkQiI4tRRfgQlM5kb 4O+pBUQlQZwCmd16KvadMyqLK0lC+sNEM7xuHytpojvbxVFI2zmR0PNUkwIDAQAB o4ICpzCCAqMwHQYDVR0OBBYEFPpk4LK3zsKkRc/T3uscqZdBChkmMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvMS1tVGdzcmZPd3FSRno5UGU2eHlwbDBFS0dTWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjYvNjM3NjBjLWUyMWItNGJhZi1hOWE0LTc2YjMzZTRjZTgy MS8xL0FIZGRsSEc0WFpZXzcyMG9OWkRpMlVMZFhDRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCBuwYIKwYBBQUHAQcBAf8EgaswgagwgaUEAgABMIGeAwQD PtxwAwQDUQwAAwQEUQwgMAwDBAFRDDYDBAFRDDgwDAMEAlEMPAMEB1EMAAMEA1dr EDAMAwQCV2scAwQBV2sgAwQCV2skMAwDBAJXaywDBAFXazAwDAMEA1drOAMEAldr QDAMAwQDV2tIAwQDV2tQAwQCV2tcAwQCV2tkAwQDV2uIAwQCV2uUAwQCV2ucMAwD BARXa7ADBAJXa7gwDQYJKoZIhvcNAQELBQADggEBANFTZhVA4mveMoTyWP6vzSE5 xHy4CKCHyXtsTpSyXEUk2ocqPhb90TUybzCmxWfesayJj/QDpAKyvvvw2lo8kc2H hQBcNNC4Kbzh77HjnQm+f6XYxoddw1QzSRNInHR+5v21Yj5ZTADmBasJk6V6e9H+ VOjIsheu2MWw8RZ+Wj5+QXiG+orDe5lWygVwfhvpNw85Xob4zyV68kI///LjpgQJ N2ne6SmmJ060yxU7pX3qydqIS2RSC+UUU87gLVkD+4iK+KfeI92g316KrH7Faedl sMB5A7zPzq0V5nzOr8CQ9F6cJ1tvUH2uIbVT9xAlBpgDkeS/1XtvwSttAfelc4I= -----END CERTIFICATE-----Generated at Wed Dec 10 11:58:51 2025 by rpki-client