This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/RVDRQlrN44t-sHhv8uePpq3gIpQ.roa File: RVDRQlrN44t-sHhv8uePpq3gIpQ.roa (raw, json) Hash identifier: MUS+jPgR3ZDIgTXHg+S1rHojwuN1giKLoPE+nWa/5ho= Subject key identifier: 45:50:D1:42:5A:CD:E3:8B:7E:B0:78:6F:F2:E7:8F:A6:AD:E0:22:94 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019A5601660F8F927B4C6CC6E8073D14C48A Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/RVDRQlrN44t-sHhv8uePpq3gIpQ.roa Signing time: Wed 05 Nov 2025 21:52:03 +0000 ROA not before: Wed 05 Nov 2025 21:52:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 212.116.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 14:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:56:01:66:0f:8f:92:7b:4c:6c:c6:e8:07:3d:14:c4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Nov 5 21:52:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4550d1425acde38b7eb0786ff2e78fa6ade02294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:37:f7:ab:2f:b8:b5:3f:82:b0:58:c0:3b: 02:57:f3:1f:d2:a5:40:b5:27:88:c2:a5:74:41:6c: 42:1b:31:1e:04:69:25:f3:d4:0f:15:13:24:7c:bf: 6c:8d:fc:2e:6b:81:2b:52:ef:e6:bb:1c:39:f4:62: 05:f6:d5:cb:2b:61:05:e9:b9:57:2d:c2:60:e2:14: 9f:f1:12:74:7b:c7:29:ea:fe:dc:59:d2:82:b6:f7: 25:f2:4a:f9:2e:88:84:69:d7:ea:81:d7:5a:f2:76: a0:70:46:10:f8:31:92:48:14:09:2d:85:a8:c9:7b: 1d:5b:71:ad:9e:c4:df:0b:4d:ca:c0:f9:27:f8:78: fb:15:e1:54:ca:c4:30:07:56:e0:89:d6:36:98:ae: b5:ed:0d:a0:a1:2d:a3:da:d2:ae:4e:df:e5:37:41: 65:7d:65:03:59:4f:00:43:f1:a3:f0:d7:82:6d:12: c6:97:3c:d6:3c:61:5d:13:b2:5b:36:0d:b7:53:3b: 71:77:d2:d4:a7:1a:35:b2:19:2b:33:67:6e:01:98: d8:1f:cf:f9:07:d5:27:3c:79:b7:2b:10:36:35:5b: 4d:38:36:6f:05:89:39:c7:19:86:03:51:2b:e4:f6: 0e:cd:c6:fc:de:d4:9e:c4:9a:c9:64:d1:08:96:c9: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:50:D1:42:5A:CD:E3:8B:7E:B0:78:6F:F2:E7:8F:A6:AD:E0:22:94 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/RVDRQlrN44t-sHhv8uePpq3gIpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.227.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5a:b5:db:44:b7:9f:48:ac:85:47:ea:ec:54:c7:30:e2:0a: a9:e9:2a:9c:b9:c6:2f:9c:d2:73:87:a5:46:22:60:2a:29:d3: a2:8d:5e:e4:ec:96:81:14:28:ba:10:b3:e5:49:13:54:1e:3f: 5f:4a:19:ad:98:79:46:52:a1:b1:ae:02:80:49:9a:ea:4c:1e: 2e:59:70:ad:78:33:47:e7:fb:99:dc:71:b3:50:55:55:f3:91: e8:95:17:b3:a7:e0:f8:07:3d:a8:9c:38:14:d8:47:fd:41:2a: 6a:3d:1a:f8:aa:7b:28:d6:f1:23:52:31:bd:57:19:eb:08:ef: ad:f5:f3:e4:da:68:60:e4:21:a8:54:4f:db:f5:41:f2:28:7b: a1:d7:31:ee:d8:13:fd:1a:07:2c:19:9f:5e:e3:d8:25:a6:67: ca:d3:a4:6d:98:fc:34:0a:e9:9a:ba:f6:df:e7:2e:6b:3e:6b: 93:98:09:3d:59:b1:65:76:60:a9:fc:6f:93:31:08:9e:03:ce: fa:0a:c3:80:77:26:cd:8a:c0:54:c6:44:ca:da:52:ed:16:7d: 1c:cd:07:55:06:1d:0f:9f:52:52:7d:ca:a0:0b:78:f6:fe:69: fc:78:c2:80:e7:29:45:77:2d:69:86:4e:57:1a:39:72:e7:17: 7d:60:68:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpWAWYPj5J7TGzG6Ac9FMSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMTA1MjE1MjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTUwZDE0MjVhY2RlMzhiN2ViMDc4NmZmMmU3OGZhNmFkZTAyMjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj8396svuLU/grBYwDsCV/Mf0qVA tSeIwqV0QWxCGzEeBGkl89QPFRMkfL9sjfwua4ErUu/muxw59GIF9tXLK2EF6blX LcJg4hSf8RJ0e8cp6v7cWdKCtvcl8kr5LoiEadfqgdda8nagcEYQ+DGSSBQJLYWo yXsdW3GtnsTfC03KwPkn+Hj7FeFUysQwB1bgidY2mK617Q2goS2j2tKuTt/lN0Fl fWUDWU8AQ/Gj8NeCbRLGlzzWPGFdE7JbNg23Uztxd9LUpxo1shkrM2duAZjYH8/5 B9UnPHm3KxA2NVtNODZvBYk5xxmGA1Er5PYOzcb83tSexJrJZNEIlsnuQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVQ0UJazeOLfrB4b/Lnj6at4CKUMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvUlZEUlFsck40NHQtc0hodjh1ZVBwcTNnSXBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTjMA0G CSqGSIb3DQEBCwUAA4IBAQAgWrXbRLefSKyFR+rsVMcw4gqp6SqcucYvnNJzh6VG ImAqKdOijV7k7JaBFCi6ELPlSRNUHj9fShmtmHlGUqGxrgKASZrqTB4uWXCteDNH 5/uZ3HGzUFVV85HolRezp+D4Bz2onDgU2Ef9QSpqPRr4qnso1vEjUjG9VxnrCO+t 9fPk2mhg5CGoVE/b9UHyKHuh1zHu2BP9GgcsGZ9e49glpmfK06RtmPw0Cumauvbf 5y5rPmuTmAk9WbFldmCp/G+TMQieA876CsOAdybNisBUxkTK2lLtFn0czQdVBh0P n1JSfcqgC3j2/mn8eMKA5ylFdy1phk5XGjly5xd9YGg7 -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:34 2025 by rpki-client