This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/o5m1uFw5rs_EeSEFk1hux3YAIU4.roa File: o5m1uFw5rs_EeSEFk1hux3YAIU4.roa (raw, json) Hash identifier: wTW4ivT11e40D7I5riMLJL+NO9rFHoJd/dKX+ZIDA6g= Subject key identifier: A3:99:B5:B8:5C:39:AE:CF:C4:79:21:05:93:58:6E:C7:76:00:21:4E Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Certificate serial: 019AFFC7B66F2F0A9A5B7168777E8675F9D9 Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/o5m1uFw5rs_EeSEFk1hux3YAIU4.roa Signing time: Mon 08 Dec 2025 21:04:29 +0000 ROA not before: Mon 08 Dec 2025 21:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35489 IP address blocks: 45.133.100.0/24 maxlen: 24 45.133.101.0/24 maxlen: 24 193.8.4.0/23 maxlen: 23 193.8.4.0/24 maxlen: 24 193.8.5.0/24 maxlen: 24 193.8.6.0/24 maxlen: 24 193.8.7.0/24 maxlen: 24 2a0c:7cc0::/29 maxlen: 29 2a0c:7cc0::/48 maxlen: 48 2a0c:7cc2:297::/48 maxlen: 48 2a0c:7cc7::/32 maxlen: 32 2a0c:7cc7::/48 maxlen: 48 2a0c:7cc7:ff00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ff:c7:b6:6f:2f:0a:9a:5b:71:68:77:7e:86:75:f9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75 Validity Not Before: Dec 8 21:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a399b5b85c39aecfc479210593586ec77600214e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4f:eb:fd:70:93:58:2c:36:2d:a4:b2:86:ae: 93:86:40:92:65:1c:d7:23:83:ab:43:0c:cc:68:dd: 79:06:9c:54:57:67:54:b0:49:36:40:94:65:f8:81: ba:6a:58:91:ba:0b:a5:37:ae:0b:e3:f6:a1:50:f2: ac:fc:86:dd:f7:97:b2:fd:af:76:c5:66:a2:1b:fe: ab:be:01:fa:ba:99:e1:22:fe:c1:69:fe:99:7e:29: 81:e6:de:fd:e8:9f:f5:f6:13:c5:b3:df:f3:05:3e: be:37:fd:7d:ed:ae:48:d2:42:1f:63:14:11:ae:36: 36:8e:66:7c:0e:90:da:fc:e6:bb:93:94:42:9e:5a: c8:ec:85:de:57:67:0c:b4:49:8c:b6:ef:c2:64:fc: 43:0f:c4:f6:e9:65:52:4d:77:d7:b2:f5:ed:fc:fd: 75:9e:d3:f0:d2:d0:3c:8a:7e:7c:b3:52:ab:85:ad: 69:47:3c:84:02:75:da:12:02:59:f7:7b:ba:3c:43: 5e:03:fb:50:a8:45:e9:50:fe:ca:dd:06:9b:dc:8b: 8e:4b:ec:1e:e6:19:b5:b7:da:9a:ff:3c:b5:98:50: a5:85:cf:da:99:f6:b9:99:c1:90:df:60:de:1b:d6: f0:97:f9:c4:60:9d:aa:4a:15:09:0a:3b:5a:56:1a: 7d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:B5:B8:5C:39:AE:CF:C4:79:21:05:93:58:6E:C7:76:00:21:4E X509v3 Authority Key Identifier: keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/o5m1uFw5rs_EeSEFk1hux3YAIU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.100.0/23 193.8.4.0/22 IPv6: 2a0c:7cc0::/29 Signature Algorithm: sha256WithRSAEncryption 28:db:af:20:97:38:72:2b:55:55:0e:40:c7:d9:53:3a:bb:00: 1d:99:73:12:85:bf:5b:fb:60:0a:c5:da:10:ea:c0:c0:41:8f: 12:bd:30:49:78:d9:8e:6e:79:21:d2:d2:b1:16:6d:a2:66:ba: 18:23:f2:0e:d4:3d:a5:e8:ca:07:75:ac:5b:87:69:a1:14:18: d4:23:b9:6e:f1:00:45:16:19:6a:c7:74:12:e8:8a:cc:d1:6f: 4d:b5:d0:df:83:c7:9b:34:7f:bd:3f:f9:b0:b1:20:7f:a2:b1: 0e:86:d0:11:11:f9:2c:88:fe:da:90:15:08:a4:cd:86:e8:f2: 5e:b4:66:7e:ac:77:8c:92:bb:a3:f3:1f:fe:d4:8f:51:16:63: bd:43:35:45:84:44:6f:df:29:55:04:bf:7d:f1:23:0b:ef:b1: f9:d9:2d:a0:a2:eb:d8:23:a8:87:f2:a8:b4:84:e7:3e:dc:01: f6:1a:f6:9e:9a:b9:37:5a:9a:72:91:d8:e5:01:49:0e:31:d2: d4:2d:86:bf:c3:b0:e5:19:d3:0d:4c:c7:19:30:03:49:3f:29: ee:88:f2:c2:2b:28:c3:60:7c:1d:ee:b8:99:11:b7:db:dd:36: 0f:9f:b9:d2:3e:28:46:a0:da:23:98:7a:eb:22:40:45:ac:9c: 3d:9b:bc:d3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZr/x7ZvLwqaW3Fod36GdfnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw M2RjNzUwHhcNMjUxMjA4MjEwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzk5YjViODVjMzlhZWNmYzQ3OTIxMDU5MzU4NmVjNzc2MDAyMTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE/r/XCTWCw2LaSyhq6ThkCSZRzX I4OrQwzMaN15BpxUV2dUsEk2QJRl+IG6aliRugulN64L4/ahUPKs/Ibd95ey/a92 xWaiG/6rvgH6upnhIv7Baf6ZfimB5t796J/19hPFs9/zBT6+N/197a5I0kIfYxQR rjY2jmZ8DpDa/Oa7k5RCnlrI7IXeV2cMtEmMtu/CZPxDD8T26WVSTXfXsvXt/P11 ntPw0tA8in58s1Krha1pRzyEAnXaEgJZ93u6PENeA/tQqEXpUP7K3Qab3IuOS+we 5hm1t9qa/zy1mFClhc/amfa5mcGQ32DeG9bwl/nEYJ2qShUJCjtaVhp9XQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKOZtbhcOa7PxHkhBZNYbsd2ACFOMB8GA1UdIwQY MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt ZGVlMjkyZWE4N2EzLzEvbzVtMXVGdzVyc19FZVNFRmsxaHV4M1lBSVU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLYVkAwQC wQgEMA0EAgACMAcDBQMqDHzAMA0GCSqGSIb3DQEBCwUAA4IBAQAo268glzhyK1VV DkDH2VM6uwAdmXMShb9b+2AKxdoQ6sDAQY8SvTBJeNmObnkh0tKxFm2iZroYI/IO 1D2l6MoHdaxbh2mhFBjUI7lu8QBFFhlqx3QS6IrM0W9NtdDfg8ebNH+9P/mwsSB/ orEOhtAREfksiP7akBUIpM2G6PJetGZ+rHeMkruj8x/+1I9RFmO9QzVFhERv3ylV BL998SML77H52S2gouvYI6iH8qi0hOc+3AH2Gvaemrk3WppykdjlAUkOMdLULYa/ w7DlGdMNTMcZMANJPynuiPLCKyjDYHwd7riZEbfb3TYPn7nSPihGoNojmHrrIkBF rJw9m7zT -----END CERTIFICATE-----Generated at Thu Dec 11 22:42:13 2025 by rpki-client