This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/o5pLMTSJFFMB0jUj5lW2pSY6bO0.roa File: o5pLMTSJFFMB0jUj5lW2pSY6bO0.roa (raw, json) Hash identifier: Ith7eEpfTVoSvx7vhXb+tIODzV8AAoDagu8eTPct+mE= Subject key identifier: A3:9A:4B:31:34:89:14:53:01:D2:35:23:E6:55:B6:A5:26:3A:6C:ED Certificate issuer: /CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Certificate serial: 019AA6C6C3FCB22EE328819918ECF6FA0E5F Authority key identifier: 9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/o5pLMTSJFFMB0jUj5lW2pSY6bO0.roa Signing time: Fri 21 Nov 2025 14:17:15 +0000 ROA not before: Fri 21 Nov 2025 14:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198584 IP address blocks: 195.18.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.mft rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:c6:c3:fc:b2:2e:e3:28:81:99:18:ec:f6:fa:0e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e56b51edf39ebf0662b2c834d65d1bd1de82522 Validity Not Before: Nov 21 14:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a39a4b313489145301d23523e655b6a5263a6ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:f4:80:89:65:3a:0c:c2:8d:04:ac:2b:30: 23:6a:7d:e0:1c:c9:7c:30:05:94:07:2d:df:06:13: bb:85:b7:8c:07:c0:0e:ce:40:04:6f:0a:15:9f:49: 45:fc:02:e0:e9:13:c7:ea:08:95:7a:98:cb:ff:6d: d4:55:f4:c1:a9:60:63:33:8d:28:c6:af:35:51:ec: 0b:ca:73:e6:43:c8:79:f6:3f:81:b5:27:d4:65:a4: b3:1b:ca:55:d6:9c:20:b4:ec:e0:1a:09:e2:7d:38: be:6c:84:35:10:c6:23:73:1e:96:10:59:81:59:bc: 39:d6:79:b3:59:60:bc:06:6c:6a:4c:fe:76:a7:78: bd:a2:c3:f5:e6:dc:45:10:7d:c5:41:5d:24:6b:66: 33:31:6b:57:fb:71:fc:04:95:de:6c:ba:30:ed:12: fc:3c:77:31:3c:25:4c:fa:7f:90:d8:1f:cf:d2:f4: 5c:51:ca:bf:b1:5d:53:c1:d5:cf:33:d8:17:7b:95: 7c:ac:0d:99:06:2f:1f:05:99:3f:ec:de:45:e6:92: 2a:51:a0:07:59:21:85:45:ac:65:ae:25:5a:18:98: a3:a9:50:5a:3b:2f:fc:61:b0:be:9b:62:9e:79:6e: 5c:8b:15:99:89:f5:9e:80:ed:7e:af:ea:f3:c7:b9: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9A:4B:31:34:89:14:53:01:D2:35:23:E6:55:B6:A5:26:3A:6C:ED X509v3 Authority Key Identifier: keyid:9E:56:B5:1E:DF:39:EB:F0:66:2B:2C:83:4D:65:D1:BD:1D:E8:25:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nla1Ht856_BmKyyDTWXRvR3oJSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/o5pLMTSJFFMB0jUj5lW2pSY6bO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e63f2e-97b0-4de8-87ed-563a14e86d60/1/nla1Ht856_BmKyyDTWXRvR3oJSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.18.10.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b6:da:81:18:0d:92:e5:67:e2:2c:10:ed:c1:30:ef:b7:ab: 95:57:89:bd:02:fd:29:2f:43:ad:db:01:64:b8:86:c1:cd:e1: 8c:0e:76:be:39:d5:e7:d6:cc:5c:73:a6:9c:3c:e3:5a:6f:c5: 83:85:3b:f3:73:97:03:3d:a3:fd:53:16:6e:d6:7e:7a:0e:ea: e7:65:e7:53:55:2d:c1:cd:8b:3a:07:df:98:19:ec:4e:57:54: ac:96:98:9a:84:bd:65:53:b7:a9:dd:9f:20:5a:e2:11:56:bb: 1e:18:ee:07:fa:54:94:54:8b:dc:28:7e:d9:20:29:dc:34:6d: 1f:78:d3:82:d9:99:a3:de:4a:8a:36:83:8f:a1:6d:8d:3b:60: 37:9a:0f:85:d4:1f:67:8c:ee:47:7f:00:2d:5d:de:7a:3e:89: 9d:ef:2c:bb:96:36:7d:f8:86:39:10:32:5b:83:b6:16:8c:83: 35:b4:ad:d2:a3:3f:b2:23:81:d7:85:71:28:18:95:86:65:67: 4e:d0:94:ea:f8:c0:d3:cd:48:e1:82:c9:00:8b:11:10:c6:c6: 56:07:88:95:41:af:a2:78:7f:c5:45:09:1c:49:1e:95:a2:ae: a0:ed:a8:4b:4b:5e:88:a4:fd:d4:d6:4b:5d:5f:b4:04:fd:82: 48:f0:6e:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqmxsP8si7jKIGZGOz2+g5fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTZiNTFlZGYzOWViZjA2NjJiMmM4MzRkNjVkMWJkMWRl ODI1MjIwHhcNMjUxMTIxMTQxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzlhNGIzMTM0ODkxNDUzMDFkMjM1MjNlNjU1YjZhNTI2M2E2Y2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33b0gIllOgzCjQSsKzAjan3gHMl8 MAWUBy3fBhO7hbeMB8AOzkAEbwoVn0lF/ALg6RPH6giVepjL/23UVfTBqWBjM40o xq81UewLynPmQ8h59j+BtSfUZaSzG8pV1pwgtOzgGgnifTi+bIQ1EMYjcx6WEFmB Wbw51nmzWWC8BmxqTP52p3i9osP15txFEH3FQV0ka2YzMWtX+3H8BJXebLow7RL8 PHcxPCVM+n+Q2B/P0vRcUcq/sV1TwdXPM9gXe5V8rA2ZBi8fBZk/7N5F5pIqUaAH WSGFRaxlriVaGJijqVBaOy/8YbC+m2KeeW5cixWZifWegO1+r+rzx7l31wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKOaSzE0iRRTAdI1I+ZVtqUmOmztMB8GA1UdIwQY MBaAFJ5WtR7fOevwZissg01l0b0d6CUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQt NTYzYTE0ZTg2ZDYwLzEvbzVwTE1UU0pGRk1CMGpVajVsVzJwU1k2Yk8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjNmMmUtOTdiMC00ZGU4LTg3ZWQtNTYzYTE0ZTg2ZDYw LzEvbmxhMUh0ODU2X0JtS3l5RFRXWFJ2UjNvSlNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxIKMA0G CSqGSIb3DQEBCwUAA4IBAQBnttqBGA2S5WfiLBDtwTDvt6uVV4m9Av0pL0Ot2wFk uIbBzeGMDna+OdXn1sxcc6acPONab8WDhTvzc5cDPaP9UxZu1n56DurnZedTVS3B zYs6B9+YGexOV1SslpiahL1lU7ep3Z8gWuIRVrseGO4H+lSUVIvcKH7ZICncNG0f eNOC2Zmj3kqKNoOPoW2NO2A3mg+F1B9njO5HfwAtXd56Pomd7yy7ljZ9+IY5EDJb g7YWjIM1tK3Soz+yI4HXhXEoGJWGZWdO0JTq+MDTzUjhgskAixEQxsZWB4iVQa+i eH/FRQkcSR6Voq6g7ahLS16IpP3U1ktdX7QE/YJI8G54 -----END CERTIFICATE-----Generated at Fri Dec 5 06:34:15 2025 by rpki-client