This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oQwoRoW3KSS5aY2J-l9bG2ZIxzA.roa File: oQwoRoW3KSS5aY2J-l9bG2ZIxzA.roa (raw, json) Hash identifier: I+uGIcQiAilmsC6UbIF4GQdqgtfupaOH8vgJ1XTcJog= Subject key identifier: A1:0C:28:46:85:B7:29:24:B9:69:8D:89:FA:5F:5B:1B:66:48:C7:30 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B08B4DF7A57E96F5BB940AEA18197B977 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oQwoRoW3KSS5aY2J-l9bG2ZIxzA.roa Signing time: Wed 10 Dec 2025 14:40:29 +0000 ROA not before: Wed 10 Dec 2025 14:40:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215242 IP address blocks: 2.56.111.0/24 maxlen: 24 45.88.137.0/24 maxlen: 24 45.94.169.0/24 maxlen: 24 45.132.183.0/24 maxlen: 24 45.138.180.0/24 maxlen: 24 45.151.3.0/24 maxlen: 24 77.83.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:b4:df:7a:57:e9:6f:5b:b9:40:ae:a1:81:97:b9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Dec 10 14:40:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a10c284685b72924b9698d89fa5f5b1b6648c730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:81:e0:15:f5:0d:cc:79:4e:e3:ad:30:30: 2a:5b:7a:b2:57:39:f8:00:75:ee:5f:73:42:2f:df: 63:77:45:9f:12:55:2c:e8:eb:dc:0c:d5:70:5c:41: 9c:ed:d3:ad:07:29:c4:7e:d0:7c:4a:a3:25:39:05: fe:9a:ed:2c:84:d2:c4:99:7f:5c:e7:b4:6a:02:df: 1b:72:40:8e:79:0c:2d:74:ac:2d:5a:2c:11:6b:3d: 34:69:31:81:e9:7c:f8:5a:2c:5a:be:bc:4e:23:64: 5f:bd:99:e2:62:22:c7:42:c3:2c:51:4d:b6:95:52: 4f:b2:bc:7f:de:df:9b:48:50:d5:16:e5:a3:d8:14: 14:24:d3:5f:3f:2f:77:24:ea:e1:79:f3:44:a4:3b: bd:7a:2f:e6:47:b7:bb:3f:94:6d:c0:5f:e1:26:a5: 90:54:da:a7:0e:20:42:d8:56:3f:73:91:4a:5b:37: 1b:c6:50:53:83:63:41:41:08:eb:69:6c:27:f6:51: 9d:c1:92:6b:d7:8e:96:a7:e3:61:e1:ab:70:ea:0d: c3:64:d3:5c:0a:7a:93:7d:d1:cb:18:e4:ba:01:a2: a9:93:b4:a5:4b:9f:91:49:fc:9e:08:82:41:2f:a6: 19:91:6a:b3:70:2f:2d:5b:98:47:3b:4d:a5:15:66: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:0C:28:46:85:B7:29:24:B9:69:8D:89:FA:5F:5B:1B:66:48:C7:30 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/oQwoRoW3KSS5aY2J-l9bG2ZIxzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.111.0/24 45.88.137.0/24 45.94.169.0/24 45.132.183.0/24 45.138.180.0/24 45.151.3.0/24 77.83.37.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:e1:42:91:c7:d9:54:01:16:30:a9:4a:1a:63:59:eb:b0:51: bc:0d:51:45:d7:15:2c:64:0e:27:94:23:99:80:40:65:32:b2: c9:f3:10:c0:19:98:24:03:7c:c6:56:71:0d:39:66:c5:db:68: 6a:88:7a:fb:eb:39:48:93:4a:f0:ed:90:8f:83:55:27:6d:5e: e4:33:5e:f4:fb:f6:9f:d6:5a:3f:05:d6:8b:0c:7a:d5:25:8a: 71:18:9c:25:b8:04:7a:a6:fd:64:d1:36:0e:b9:6c:a6:eb:fb: 7f:51:ad:1a:9f:f6:9c:97:5b:7e:ad:b5:36:0d:82:7d:03:3d: 7a:43:84:fd:bc:a1:4d:fd:4a:2c:53:4f:3e:d9:9a:f1:01:3e: ad:32:bd:93:b0:fb:ea:20:b2:26:28:97:58:ca:45:74:b3:c2: b5:fd:fc:93:a1:93:d0:85:f8:b2:27:cf:3f:79:22:be:39:c4: 8e:15:60:3c:c7:7c:02:7c:1f:03:50:d2:09:e1:18:74:5a:c9: 3f:6d:56:a8:13:af:f8:33:0f:66:e4:1a:66:05:35:a5:ed:0b: 7c:d8:3c:c0:d9:31:e2:74:75:23:1b:64:86:c9:b5:a3:a8:9e: c4:29:bc:e9:5f:bf:45:84:a5:05:a7:1d:d8:da:0e:91:72:18: f2:7b:fd:69 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsItN96V+lvW7lArqGBl7l3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUxMjEwMTQ0MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTBjMjg0Njg1YjcyOTI0Yjk2OThkODlmYTVmNWIxYjY2NDhjNzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8SB4BX1Dcx5TuOtMDAqW3qyVzn4 AHXuX3NCL99jd0WfElUs6OvcDNVwXEGc7dOtBynEftB8SqMlOQX+mu0shNLEmX9c 57RqAt8bckCOeQwtdKwtWiwRaz00aTGB6Xz4WixavrxOI2RfvZniYiLHQsMsUU22 lVJPsrx/3t+bSFDVFuWj2BQUJNNfPy93JOrhefNEpDu9ei/mR7e7P5RtwF/hJqWQ VNqnDiBC2FY/c5FKWzcbxlBTg2NBQQjraWwn9lGdwZJr146Wp+Nh4atw6g3DZNNc CnqTfdHLGOS6AaKpk7SlS5+RSfyeCIJBL6YZkWqzcC8tW5hHO02lFWa5VwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFKEMKEaFtykkuWmNifpfWxtmSMcwMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvb1F3b1JvVzNLU1M1YVkySi1sOWJHMlpJeHpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAAjhvAwQA LViJAwQALV6pAwQALYS3AwQALYq0AwQALZcDAwQATVMlMA0GCSqGSIb3DQEBCwUA A4IBAQBu4UKRx9lUARYwqUoaY1nrsFG8DVFF1xUsZA4nlCOZgEBlMrLJ8xDAGZgk A3zGVnENOWbF22hqiHr76zlIk0rw7ZCPg1UnbV7kM170+/af1lo/BdaLDHrVJYpx GJwluAR6pv1k0TYOuWym6/t/Ua0an/acl1t+rbU2DYJ9Az16Q4T9vKFN/UosU08+ 2ZrxAT6tMr2TsPvqILImKJdYykV0s8K1/fyToZPQhfiyJ88/eSK+OcSOFWA8x3wC fB8DUNIJ4Rh0Wsk/bVaoE6/4Mw9m5BpmBTWl7Qt82DzA2THidHUjG2SGybWjqJ7E KbzpX79FhKUFpx3Y2g6Rchjye/1p -----END CERTIFICATE-----Generated at Mon Dec 15 01:24:47 2025 by rpki-client