This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/o6YvhzQz6UhqvJTcu-UF42mz3ig.roa File: o6YvhzQz6UhqvJTcu-UF42mz3ig.roa (raw, json) Hash identifier: 6XXEZvyPqyJcYG7at6PCliQ8gKNA9ce9A/pGbF+nx9g= Subject key identifier: A3:A6:2F:87:34:33:E9:48:6A:BC:94:DC:BB:E5:05:E3:69:B3:DE:28 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019A98AFEE5C662E900B54C5B200D84DE15C Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/o6YvhzQz6UhqvJTcu-UF42mz3ig.roa Signing time: Tue 18 Nov 2025 20:37:37 +0000 ROA not before: Tue 18 Nov 2025 20:37:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.249.192.0/21 maxlen: 24 89.249.203.0/24 maxlen: 24 89.249.205.0/24 maxlen: 24 89.249.206.0/23 maxlen: 24 212.42.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 27 Nov 2025 17:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:98:af:ee:5c:66:2e:90:0b:54:c5:b2:00:d8:4d:e1:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Nov 18 20:37:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3a62f873433e9486abc94dcbbe505e369b3de28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:33:9b:fa:99:5a:c9:8a:ff:71:c2:3f:e1: fd:27:76:83:a9:7e:69:29:fe:7b:18:d8:1b:5d:cd: 67:d0:fd:e8:08:06:40:fc:46:3e:88:5c:40:fa:3b: 86:98:ee:6e:e6:c9:fe:a5:83:37:71:d9:7c:89:5a: 03:93:ef:b7:b2:63:8a:de:cd:f3:40:c3:af:c6:4d: 05:28:d4:94:30:ad:33:26:61:56:5a:38:64:c1:6b: 46:1b:49:0b:d6:52:06:47:8d:7a:25:15:c7:56:1d: c4:04:8c:36:b8:e2:45:c2:5f:33:11:e0:1f:51:23: 0d:55:cb:e8:b2:ca:a7:9b:94:20:5a:d0:bf:28:1b: e3:c0:0b:64:47:8c:42:24:a4:49:ae:fc:42:98:4a: b7:b9:35:47:7e:cd:ff:2d:06:66:de:34:29:c2:8f: a3:4a:80:95:aa:ce:39:d7:4d:20:48:c7:0d:b7:be: 33:44:31:ff:a8:66:98:29:89:af:86:77:97:6a:5d: 7f:bf:27:32:e1:a2:d5:69:85:9f:c6:fa:2e:a3:ea: 4f:0c:eb:77:b6:a8:c2:23:04:a7:2f:cf:88:2c:71: ed:c9:89:ca:e9:ec:77:d6:46:82:76:da:f9:86:82: 99:81:ac:b3:71:9f:6f:4d:31:df:8f:f8:3c:fc:d9: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:2F:87:34:33:E9:48:6A:BC:94:DC:BB:E5:05:E3:69:B3:DE:28 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/o6YvhzQz6UhqvJTcu-UF42mz3ig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/21 89.249.203.0/24 89.249.205.0-89.249.207.255 212.42.192.0/20 Signature Algorithm: sha256WithRSAEncryption 3b:b4:70:fa:e0:50:9c:31:36:b3:a7:10:94:9f:0c:99:ea:05: c2:d9:0e:ed:9c:76:2b:6b:64:37:13:ea:82:75:85:4a:71:45: 6e:84:49:00:69:74:e8:df:58:be:54:5a:da:08:62:d2:51:48: b3:3c:17:aa:72:97:6e:1c:f8:f3:c2:35:61:8d:99:15:19:95: b4:ed:08:7b:5a:03:af:c0:8b:a5:bb:f4:90:2f:3d:f1:b8:f8: ec:70:bc:60:84:ba:5d:bb:7c:6e:fd:85:8a:f3:2c:f4:71:64: 15:22:c4:9d:ec:a0:6d:e6:d8:8e:b0:2a:88:8c:a5:cb:ee:16: ea:2a:d6:67:7b:3d:c6:51:85:15:dd:84:12:a5:6c:10:fa:43: ab:56:d5:23:4f:b4:e8:4f:57:1a:14:a6:50:ec:21:5c:9a:4c: 53:5d:e9:5c:a5:8b:75:75:bb:0a:8f:da:a1:88:9c:b4:e6:02: 3a:98:f6:04:b7:fb:2b:2d:1c:08:d1:7e:4d:fd:f4:a2:fe:83: 35:b8:68:6a:13:d9:33:14:1f:59:10:db:60:11:2d:c7:57:8c: 9f:13:fa:6a:76:c6:76:13:45:82:55:a0:8e:ca:38:a2:0f:9e: 8c:96:4b:b8:c4:31:2c:49:f6:94:c0:e9:79:9f:69:44:1e:09: 38:61:e7:96 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZqYr+5cZi6QC1TFsgDYTeFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMTE4MjAzNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2E2MmY4NzM0MzNlOTQ4NmFiYzk0ZGNiYmU1MDVlMzY5YjNkZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSkzm/qZWsmK/3HCP+H9J3aDqX5p Kf57GNgbXc1n0P3oCAZA/EY+iFxA+juGmO5u5sn+pYM3cdl8iVoDk++3smOK3s3z QMOvxk0FKNSUMK0zJmFWWjhkwWtGG0kL1lIGR416JRXHVh3EBIw2uOJFwl8zEeAf USMNVcvossqnm5QgWtC/KBvjwAtkR4xCJKRJrvxCmEq3uTVHfs3/LQZm3jQpwo+j SoCVqs45100gSMcNt74zRDH/qGaYKYmvhneXal1/vycy4aLVaYWfxvouo+pPDOt3 tqjCIwSnL8+ILHHtyYnK6ex31kaCdtr5hoKZgayzcZ9vTTHfj/g8/Nnz4wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKOmL4c0M+lIaryU3LvlBeNps94oMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvbzZZdmh6UXo2VWhxdkpUY3UtVUY0Mm16M2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDWfnAAwQA WfnLMAwDBABZ+c0DBARZ+cADBATUKsAwDQYJKoZIhvcNAQELBQADggEBADu0cPrg UJwxNrOnEJSfDJnqBcLZDu2cditrZDcT6oJ1hUpxRW6ESQBpdOjfWL5UWtoIYtJR SLM8F6pyl24c+PPCNWGNmRUZlbTtCHtaA6/Ai6W79JAvPfG4+OxwvGCEul27fG79 hYrzLPRxZBUixJ3soG3m2I6wKoiMpcvuFuoq1md7PcZRhRXdhBKlbBD6Q6tW1SNP tOhPVxoUplDsIVyaTFNd6Vyli3V1uwqP2qGInLTmAjqY9gS3+ystHAjRfk399KL+ gzW4aGoT2TMUH1kQ22ARLcdXjJ8T+mp2xnYTRYJVoI7KOKIPnoyWS7jEMSxJ9pTA 6XmfaUQeCThh55Y= -----END CERTIFICATE-----Generated at Thu Nov 27 01:06:32 2025 by rpki-client