This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/oUeKpqWwhPuaDqF3U0V0SJvRbeE.roa File: oUeKpqWwhPuaDqF3U0V0SJvRbeE.roa (raw, json) Hash identifier: h0fyXKNu2SlbYFJMDuIdm5zFUwey+vO92CS5ogVkmeg= Subject key identifier: A1:47:8A:A6:A5:B0:84:FB:9A:0E:A1:77:53:45:74:48:9B:D1:6D:E1 Certificate issuer: /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Certificate serial: 019B663CACDB1159B8ED9C0AD11ABA76B730 Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/oUeKpqWwhPuaDqF3U0V0SJvRbeE.roa Signing time: Sun 28 Dec 2025 18:33:31 +0000 ROA not before: Sun 28 Dec 2025 18:33:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400909 IP address blocks: 195.211.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:3c:ac:db:11:59:b8:ed:9c:0a:d1:1a:ba:76:b7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb Validity Not Before: Dec 28 18:33:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a1478aa6a5b084fb9a0ea177534574489bd16de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:65:f6:50:a4:dc:bb:d3:6d:27:f1:a1:38:97: d4:cf:8e:4d:d2:45:81:1d:00:5e:02:30:50:b5:7b: 74:11:7b:f1:c3:56:af:ba:31:95:95:6d:24:b3:1b: 66:29:1b:78:ab:75:97:c8:a0:b3:55:9f:d4:ce:6c: 2a:c8:08:82:ff:ce:1c:cf:15:f6:89:0f:e0:15:b2: b8:0e:8b:4b:b0:4a:43:6b:01:b9:d2:db:2c:49:17: 0c:61:07:20:df:4c:85:7f:22:b1:1f:ef:4a:4d:e9: f7:87:9c:7a:86:08:f4:51:ed:bd:8f:15:1e:a3:77: 4e:23:af:13:97:92:22:63:12:d4:88:f3:c7:cd:04: d2:35:e1:fb:80:f3:d8:63:a1:80:0d:c6:f7:0a:92: ba:17:18:64:a6:6b:89:a2:2f:25:08:12:ab:c6:a5: 2a:a3:ce:30:b6:29:58:00:cb:fa:81:06:d2:8b:ed: 51:61:89:c4:21:5a:f6:88:e9:d6:69:04:f4:ed:e9: d8:97:12:a6:aa:b8:e1:40:1e:ca:94:2a:2b:7c:68: e4:b6:cf:4b:3a:4b:63:90:9c:be:5a:41:26:7f:8d: f8:b0:45:00:b7:fa:70:1d:da:c3:40:a0:7c:38:55: 7f:97:18:45:8c:f6:bf:96:91:76:8d:fc:00:8a:3a: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:47:8A:A6:A5:B0:84:FB:9A:0E:A1:77:53:45:74:48:9B:D1:6D:E1 X509v3 Authority Key Identifier: keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/oUeKpqWwhPuaDqF3U0V0SJvRbeE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.51.0/24 Signature Algorithm: sha256WithRSAEncryption 04:4a:b1:43:16:64:24:3c:3c:4c:f8:f7:de:1e:76:70:53:a7: 76:e1:e3:69:a4:c5:30:16:a9:13:ee:fa:96:e4:4e:4d:46:90: 1f:84:f7:7b:f9:02:59:6a:ea:0c:35:29:91:e8:9d:d7:c4:6f: cf:8d:9c:20:70:39:ec:f8:f3:9b:4e:bd:fa:bb:02:ca:06:67: 5d:da:3e:ad:2c:38:fb:c8:be:92:58:3c:41:2e:f9:d6:60:ce: e2:0f:17:aa:27:33:47:b2:4d:8d:95:b2:bb:03:5c:dc:2f:44: e0:e4:ce:fb:0d:6e:c3:c7:d2:c7:36:d9:12:d0:40:cb:d6:97: f1:88:83:4c:5d:63:86:bf:85:3f:c0:64:dd:4e:2b:b4:eb:3c: ae:96:19:16:4f:29:d1:d0:c2:00:34:f2:88:d1:47:a5:3a:92: 44:b5:cf:cf:1e:ed:f2:ee:51:22:7a:59:ba:d0:d8:e1:e5:1a: 3b:7e:74:ba:50:c2:9c:47:98:39:4f:d5:eb:3b:08:ae:6e:ba: 37:e6:18:35:f3:e9:73:62:e4:22:0b:99:0a:45:f3:5a:dc:ec: c4:13:36:6e:9a:0a:11:b0:71:0b:d2:2f:10:63:58:56:2f:ff: c8:99:cb:88:13:11:e0:32:34:4d:c5:07:d4:76:1b:23:57:d6: 8e:d8:c5:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtmPKzbEVm47ZwK0Rq6drcwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjk4OTAwMzU1ZmRmNDI1NGMyMDgzMWYyZDdlZTNiZWM0 MjliZGIwHhcNMjUxMjI4MTgzMzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTQ3OGFhNmE1YjA4NGZiOWEwZWExNzc1MzQ1NzQ0ODliZDE2ZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGX2UKTcu9NtJ/GhOJfUz45N0kWB HQBeAjBQtXt0EXvxw1avujGVlW0ksxtmKRt4q3WXyKCzVZ/UzmwqyAiC/84czxX2 iQ/gFbK4DotLsEpDawG50tssSRcMYQcg30yFfyKxH+9KTen3h5x6hgj0Ue29jxUe o3dOI68Tl5IiYxLUiPPHzQTSNeH7gPPYY6GADcb3CpK6FxhkpmuJoi8lCBKrxqUq o84wtilYAMv6gQbSi+1RYYnEIVr2iOnWaQT07enYlxKmqrjhQB7KlCorfGjkts9L OktjkJy+WkEmf434sEUAt/pwHdrDQKB8OFV/lxhFjPa/lpF2jfwAijpd8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKFHiqalsIT7mg6hd1NFdEib0W3hMB8GA1UdIwQY MBaAFA4piQA1X99CVMIIMfLX7jvsQpvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYt M2U0Yjc0ZGQwNThkLzEvb1VlS3BxV3doUHVhRHFGM1UwVjBTSnZSYmVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9jZmVhOWUtYmVlMi00YmNiLThkZWYtM2U0Yjc0ZGQwNThk LzEvRGltSkFEVmYzMEpVd2dneDh0ZnVPLXhDbTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9MzMA0G CSqGSIb3DQEBCwUAA4IBAQAESrFDFmQkPDxM+PfeHnZwU6d24eNppMUwFqkT7vqW 5E5NRpAfhPd7+QJZauoMNSmR6J3XxG/PjZwgcDns+PObTr36uwLKBmdd2j6tLDj7 yL6SWDxBLvnWYM7iDxeqJzNHsk2NlbK7A1zcL0Tg5M77DW7Dx9LHNtkS0EDL1pfx iINMXWOGv4U/wGTdTiu06zyulhkWTynR0MIANPKI0UelOpJEtc/PHu3y7lEielm6 0Njh5Ro7fnS6UMKcR5g5T9XrOwiubro35hg18+lzYuQiC5kKRfNa3OzEEzZumgoR sHEL0i8QY1hWL//ImcuIExHgMjRNxQfUdhsjV9aO2MXe -----END CERTIFICATE-----Generated at Wed Dec 31 00:57:46 2025 by rpki-client