This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/oHkLUmhmvrubjwuP6K7P3C4T_28.roa File: oHkLUmhmvrubjwuP6K7P3C4T_28.roa (raw, json) Hash identifier: 3PcQHi8oCuBtUwDU0ao0Tbto62+5dCG/YxFTuMxLsW4= Subject key identifier: A0:79:0B:52:68:66:BE:BB:9B:8F:0B:8F:E8:AE:CF:DC:2E:13:FF:6F Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B5548246856AF1647B7A50E022ACF05C9 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/oHkLUmhmvrubjwuP6K7P3C4T_28.roa Signing time: Thu 25 Dec 2025 11:32:29 +0000 ROA not before: Thu 25 Dec 2025 11:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.249.192.0/21 maxlen: 24 89.249.199.0/24 maxlen: 24 89.249.203.0/24 maxlen: 24 89.249.205.0/24 maxlen: 24 89.249.206.0/23 maxlen: 24 89.249.206.0/24 maxlen: 24 212.42.192.0/20 maxlen: 24 212.42.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:48:24:68:56:af:16:47:b7:a5:0e:02:2a:cf:05:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Dec 25 11:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0790b526866bebb9b8f0b8fe8aecfdc2e13ff6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:11:6b:fb:25:ae:16:9a:03:d5:25:8e:6f: 85:c6:47:d9:25:41:10:82:02:3f:54:da:4b:08:e4: 66:9f:29:ed:aa:3d:a1:71:e0:06:fa:0c:40:5b:ea: 8b:ac:b3:46:f3:ce:e3:76:f3:ae:d4:95:36:da:c6: 45:6b:79:43:a1:b4:b3:53:29:16:3a:c0:2b:24:68: 13:45:74:86:9b:1b:a8:2b:8d:1a:69:28:2f:84:e9: 0b:81:03:b9:c3:59:9e:4b:ac:7c:36:7c:2a:9e:17: b8:f5:7d:de:93:c4:4a:c5:56:af:26:b4:72:9d:bf: f9:00:3d:b4:45:06:43:a5:d2:65:1c:79:e8:d5:a2: 7d:a3:fe:e0:70:39:67:55:81:85:4b:c0:e1:5e:11: ed:4e:a5:46:9b:4d:ec:a9:4a:86:5c:c8:0e:92:2b: a2:60:bb:37:d0:73:e0:e4:e7:80:36:50:a3:a3:f1: b5:81:5d:ba:a8:b2:e3:d9:0d:e5:28:0a:a6:70:06: 50:77:53:b5:c4:89:a0:4c:b9:7f:c0:4c:d2:13:89: 2f:ba:99:42:51:cc:13:b8:1b:80:e6:c5:25:a7:e4: be:25:f3:6e:0d:13:da:b4:a2:9f:2f:0a:57:c9:94: b1:89:a9:17:8c:5b:ba:d4:13:71:91:0a:62:17:e2: 51:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:79:0B:52:68:66:BE:BB:9B:8F:0B:8F:E8:AE:CF:DC:2E:13:FF:6F X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/oHkLUmhmvrubjwuP6K7P3C4T_28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.192.0/21 89.249.203.0/24 89.249.205.0-89.249.207.255 212.42.192.0/19 Signature Algorithm: sha256WithRSAEncryption 46:58:eb:42:dc:79:ab:a7:f1:f2:22:6d:78:9d:e8:b2:ed:75: 96:c6:ab:fb:fc:85:e8:70:41:4a:73:de:16:b8:91:cf:57:d5: 58:1f:5d:3b:38:39:dd:28:1d:69:84:e5:3d:28:3f:6a:66:1a: 42:c9:8d:37:af:e2:e0:22:73:e9:4c:c1:78:51:a5:7a:ba:e7: c7:bf:ee:47:d0:d5:e7:c5:a0:93:47:a7:3d:7d:ee:c9:76:97: ca:5d:05:ae:f8:c8:da:85:c0:e0:b8:cf:dd:02:a1:73:93:f0: e1:97:f6:ec:13:08:28:59:97:c6:b3:cc:6b:ac:1a:7a:9a:49: 6c:d4:f6:99:ba:02:ab:e2:2c:f5:50:1a:d3:c7:b4:35:13:09: 21:d4:87:6e:ca:79:6f:8f:aa:5f:50:c5:94:93:c3:2f:a7:3a: 1f:e5:91:47:02:c7:d0:74:10:7b:5d:24:1e:0f:d0:ce:96:67: c3:fc:df:49:38:d3:95:fc:aa:49:2b:24:4d:2c:08:2d:7b:d2: a5:f8:7b:d4:6d:7d:74:fa:65:3a:b8:ed:88:2d:ac:ef:93:db: 0a:97:1d:57:f5:00:72:3a:25:2b:21:14:5a:44:e3:c4:8a:8b: d1:98:9e:1c:2f:3f:a7:6f:96:0c:e4:44:d6:68:3f:46:12:4b: 92:4d:eb:5f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZtVSCRoVq8WR7elDgIqzwXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjUxMjI1MTEzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDc5MGI1MjY4NjZiZWJiOWI4ZjBiOGZlOGFlY2ZkYzJlMTNmZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04YRa/slrhaaA9Uljm+FxkfZJUEQ ggI/VNpLCORmnyntqj2hceAG+gxAW+qLrLNG887jdvOu1JU22sZFa3lDobSzUykW OsArJGgTRXSGmxuoK40aaSgvhOkLgQO5w1meS6x8Nnwqnhe49X3ek8RKxVavJrRy nb/5AD20RQZDpdJlHHno1aJ9o/7gcDlnVYGFS8DhXhHtTqVGm03sqUqGXMgOkiui YLs30HPg5OeANlCjo/G1gV26qLLj2Q3lKAqmcAZQd1O1xImgTLl/wEzSE4kvuplC UcwTuBuA5sUlp+S+JfNuDRPatKKfLwpXyZSxiakXjFu61BNxkQpiF+JRAwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKB5C1JoZr67m48Lj+iuz9wuE/9vMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvb0hrTFVtaG12cnViand1UDZLN1AzQzRUXzI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDWfnAAwQA WfnLMAwDBABZ+c0DBARZ+cADBAXUKsAwDQYJKoZIhvcNAQELBQADggEBAEZY60Lc eaun8fIibXid6LLtdZbGq/v8hehwQUpz3ha4kc9X1VgfXTs4Od0oHWmE5T0oP2pm GkLJjTev4uAic+lMwXhRpXq658e/7kfQ1efFoJNHpz197sl2l8pdBa74yNqFwOC4 z90CoXOT8OGX9uwTCChZl8azzGusGnqaSWzU9pm6AqviLPVQGtPHtDUTCSHUh27K eW+Pql9QxZSTwy+nOh/lkUcCx9B0EHtdJB4P0M6WZ8P830k405X8qkkrJE0sCC17 0qX4e9RtfXT6ZTq47YgtrO+T2wqXHVf1AHI6JSshFFpE48SKi9GYnhwvP6dvlgzk RNZoP0YSS5JN618= -----END CERTIFICATE-----Generated at Fri Dec 26 19:45:46 2025 by rpki-client