This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/owIvWHDre_4kd6aYQOhEOtM3qCM.roa File: owIvWHDre_4kd6aYQOhEOtM3qCM.roa (raw, json) Hash identifier: HJss+q7Sccoo3NUZCD/2N3LKGtcsu7OqO+VNFsT4oXQ= Subject key identifier: A3:02:2F:58:70:EB:7B:FE:24:77:A6:98:40:E8:44:3A:D3:37:A8:23 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019AA0D9EFBE0E75099A3118A5A6C6A35597 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/owIvWHDre_4kd6aYQOhEOtM3qCM.roa Signing time: Thu 20 Nov 2025 10:40:28 +0000 ROA not before: Thu 20 Nov 2025 10:40:28 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.120.245.0/24 maxlen: 24 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 178.215.239.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 193.222.98.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.115.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 15:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a0:d9:ef:be:0e:75:09:9a:31:18:a5:a6:c6:a3:55:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Nov 20 10:40:28 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3022f5870eb7bfe2477a69840e8443ad337a823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:ba:e9:58:6a:77:89:c2:8c:cc:b1:72:de: 3b:39:2e:02:51:9c:8b:3d:6d:44:09:b1:db:1c:27: 4a:0b:59:a0:0c:de:fd:9c:5e:34:f2:c6:6d:33:f0: 06:dd:68:f7:a6:9a:47:3e:26:c2:60:bc:83:dd:a5: 1d:c2:2b:97:b4:2e:1a:86:bd:87:6a:62:74:58:94: 44:d4:4d:b4:5a:a6:b9:d6:31:dd:47:d6:e1:2f:98: 62:dd:dc:3e:ae:70:83:9f:49:0e:d9:28:5e:0e:18: e7:47:ad:c9:44:c5:ac:3e:e3:bf:cd:67:5e:46:a0: b2:0d:6a:55:84:59:85:3c:ea:e5:87:63:2d:12:19: b8:68:db:7a:49:31:f6:48:0f:e3:f0:e7:83:91:e4: a5:ed:18:9d:ad:e9:8a:dc:9d:87:88:ad:25:8c:8b: ae:33:e9:93:e8:57:9e:00:05:b6:e4:38:d1:e1:33: 2b:bf:f8:b3:38:55:72:9d:f6:5d:8b:e0:f0:84:a4: ef:d5:71:54:eb:4f:3f:df:f2:e5:d4:54:33:ef:7d: 19:6b:a4:6b:67:4e:e1:22:38:6c:63:e8:6c:4c:85: 94:16:96:88:7a:3a:c6:2a:c0:3f:89:2d:23:98:cb: eb:1e:e8:4c:52:17:2c:b7:c1:52:30:76:9d:49:3a: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:02:2F:58:70:EB:7B:FE:24:77:A6:98:40:E8:44:3A:D3:37:A8:23 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/owIvWHDre_4kd6aYQOhEOtM3qCM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.120.245.0/24 87.121.132.0/22 87.121.165.0/24 91.92.27.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 178.215.239.0/24 185.222.160.0/24 193.25.216.0/24 193.222.98.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.115.41.0/24 Signature Algorithm: sha256WithRSAEncryption 45:78:33:c0:53:6d:da:5b:8a:90:f3:20:3b:36:9c:43:da:01: 7f:b2:f7:ca:e4:38:11:bf:44:b1:a5:13:53:c2:49:15:5c:0b: 40:65:27:3f:56:fe:a9:0b:33:dc:4d:1c:ac:2b:87:19:cc:07: 05:6f:1b:b8:a4:10:1b:bb:3b:60:7e:35:58:c9:e0:8b:1c:b6: 0b:85:ac:a4:e6:1a:68:e0:a0:cd:a4:82:d6:b5:a2:18:67:1f: 3b:63:7f:43:d8:e3:38:73:05:6b:86:0f:38:e6:41:d0:11:7b: 40:40:5a:db:8a:b6:1b:fc:13:28:cb:2e:a6:2e:a2:e3:e3:22: a5:e1:28:17:a5:9b:2b:16:42:6f:48:13:5e:68:59:39:6c:6b: 32:2d:24:fc:6b:50:d7:15:5c:e7:df:c4:59:a8:a9:03:d6:c9: 45:63:55:cc:be:49:ce:7b:6a:7b:53:21:79:1e:b6:b8:b2:2c: 37:cd:ff:18:89:30:c3:ad:ff:19:86:79:c0:57:ba:af:6b:fb: 1c:81:26:5f:0c:b1:97:a7:1a:aa:db:7f:96:9a:7d:e6:af:a7: 42:f8:5d:5c:27:40:02:75:44:76:ff:e1:f1:ab:33:fa:ca:4e: 43:9f:64:7d:13:9f:62:7b:37:77:21:7b:a2:93:7e:ea:19:c6: 51:5e:1e:12 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgISAZqg2e++DnUJmjEYpabGo1WXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMTIwMTA0MDI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzAyMmY1ODcwZWI3YmZlMjQ3N2E2OTg0MGU4NDQzYWQzMzdhODIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFq66Vhqd4nCjMyxct47OS4CUZyL PW1ECbHbHCdKC1mgDN79nF408sZtM/AG3Wj3pppHPibCYLyD3aUdwiuXtC4ahr2H amJ0WJRE1E20Wqa51jHdR9bhL5hi3dw+rnCDn0kO2SheDhjnR63JRMWsPuO/zWde RqCyDWpVhFmFPOrlh2MtEhm4aNt6STH2SA/j8OeDkeSl7RidremK3J2HiK0ljIuu M+mT6FeeAAW25DjR4TMrv/izOFVynfZdi+DwhKTv1XFU608/3/Ll1FQz730Za6Rr Z07hIjhsY+hsTIWUFpaIejrGKsA/iS0jmMvrHuhMUhcst8FSMHadSTp8/wIDAQAB o4ICnjCCApowHQYDVR0OBBYEFKMCL1hw63v+JHemmEDoRDrTN6gjMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvb3dJdldIRHJlXzRrZDZhWVFPaEVPdE0zcUNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBAFV2YIDBABXeFcDBABXeH4DBABX eKYDBABXePUDBAJXeYQDBABXeaUDBABbXBsDBANbXPgDBAFcd8QDBABc+TIDBABd e20DBACy1+8DBAC53qADBADBGdgDBADB3mIDBADCH94DBADCN7oDBADCqa8DBADU cykwDQYJKoZIhvcNAQELBQADggEBAEV4M8BTbdpbipDzIDs2nEPaAX+y98rkOBG/ RLGlE1PCSRVcC0BlJz9W/qkLM9xNHKwrhxnMBwVvG7ikEBu7O2B+NVjJ4IsctguF rKTmGmjgoM2kgta1ohhnHztjf0PY4zhzBWuGDzjmQdARe0BAWtuKthv8EyjLLqYu ouPjIqXhKBelmysWQm9IE15oWTlsazItJPxrUNcVXOffxFmoqQPWyUVjVcy+Sc57 antTIXketriyLDfN/xiJMMOt/xmGecBXuq9r+xyBJl8MsZenGqrbf5aafeavp0L4 XVwnQAJ1RHb/4fGrM/rKTkOfZH0Tn2J7N3che6KTfuoZxlFeHhI= -----END CERTIFICATE-----Generated at Fri Nov 21 00:18:29 2025 by rpki-client