This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/oHMk2uIUlmuVWD6zoUKp_Pw4BeQ.roa File: oHMk2uIUlmuVWD6zoUKp_Pw4BeQ.roa (raw, json) Hash identifier: U37VPkA/8ZhfbdU2sc3OOO0vDKofHxnjawyV5t1d6xw= Subject key identifier: A0:73:24:DA:E2:14:96:6B:95:58:3E:B3:A1:42:A9:FC:FC:38:05:E4 Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B017F2A71285EECD08EEFE44047FEFCAB Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/oHMk2uIUlmuVWD6zoUKp_Pw4BeQ.roa Signing time: Tue 09 Dec 2025 05:04:29 +0000 ROA not before: Tue 09 Dec 2025 05:04:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212835 IP address blocks: 87.251.67.0/24 maxlen: 24 130.49.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:01:7f:2a:71:28:5e:ec:d0:8e:ef:e4:40:47:fe:fc:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Dec 9 05:04:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a07324dae214966b95583eb3a142a9fcfc3805e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:29:e6:23:8b:fc:01:91:72:6d:01:df:89: c4:07:6d:bb:6f:da:93:22:bd:dd:32:29:a8:50:02: 95:05:81:a8:2c:ba:35:92:1e:1d:33:29:ad:0a:72: 79:59:4f:99:59:2e:2c:00:49:da:9d:f8:1b:83:34: fb:5b:d9:c9:0b:89:76:17:ce:68:cc:f6:82:9f:cc: 54:0b:f7:78:b1:e4:49:ad:6f:ca:98:eb:b8:9f:9b: 63:5a:37:7d:4e:14:d1:42:ed:42:ba:44:68:15:f6: 6b:6a:c4:41:6a:f5:4e:ee:25:53:13:a4:22:5d:84: 19:8c:d6:ee:ea:fb:8c:67:c3:37:12:2d:29:bc:44: ac:91:33:2d:9e:f9:9d:9e:71:33:89:bc:5e:7c:56: 69:36:a8:aa:a4:24:1f:5e:73:5f:f5:6a:66:1a:dc: c8:35:d9:a0:64:bd:8b:e4:ce:c9:56:ca:e3:47:ee: 32:c5:a1:b3:13:d4:fd:3d:cc:9c:93:bb:1c:81:53: 83:d4:4f:1a:7c:f3:fa:2d:7b:26:f5:7d:b1:ea:b0: 8c:3f:25:ee:3d:a8:ab:79:9a:7f:2f:e2:94:04:de: 7f:98:2c:ef:a9:f0:38:b4:3b:7a:a1:89:c2:bb:ef: 27:41:1d:3f:0a:5c:85:13:87:ec:e2:aa:cf:43:9d: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:73:24:DA:E2:14:96:6B:95:58:3E:B3:A1:42:A9:FC:FC:38:05:E4 X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/oHMk2uIUlmuVWD6zoUKp_Pw4BeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.251.67.0/24 130.49.215.0/24 Signature Algorithm: sha256WithRSAEncryption 78:f1:be:c6:7a:26:d2:fd:bd:0c:9c:4a:e3:16:7e:71:2c:19: ca:18:c9:c5:85:2d:f0:5c:2c:44:ad:83:67:d1:50:0e:b0:be: c9:38:54:c8:24:89:b0:b0:39:ca:4e:9f:cc:d1:c9:5d:33:18: 4e:6a:51:2b:7d:16:1b:55:12:4b:3f:a0:a5:77:f3:53:a5:3c: 2f:4d:62:ed:e0:50:01:5f:2b:c4:8a:78:7b:37:d5:a8:6c:19: c8:c7:50:e1:e4:03:e6:cd:62:0f:fe:a1:e8:78:ff:8d:0d:46: e7:7a:0a:15:de:f6:e3:78:34:93:65:dc:34:3e:50:82:31:fc: e3:35:c0:11:b5:b8:27:14:82:4e:e9:fd:86:f6:8e:9e:05:2f: 68:12:e8:3e:28:a2:b4:0f:62:d4:ef:0d:11:1c:b2:3a:9c:a2: f1:6f:35:6a:3c:62:96:18:ba:c6:10:ce:21:d6:1c:5a:d8:5a: 50:21:26:3d:0e:d9:20:a2:a0:68:aa:1e:1b:9c:f7:8c:36:d8: 35:f0:ea:bf:38:ea:0c:04:d3:5d:90:cf:45:3e:52:0a:b0:a2: 04:17:30:f9:fd:e2:68:d0:32:29:05:35:3b:20:8d:c9:40:1b: 47:90:89:a3:f0:40:31:8f:78:a5:f0:4e:67:96:b8:64:ab:7a: 62:a7:d7:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsBfypxKF7s0I7v5EBH/vyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjUxMjA5MDUwNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDczMjRkYWUyMTQ5NjZiOTU1ODNlYjNhMTQyYTlmY2ZjMzgwNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUsp5iOL/AGRcm0B34nEB227b9qT Ir3dMimoUAKVBYGoLLo1kh4dMymtCnJ5WU+ZWS4sAEnanfgbgzT7W9nJC4l2F85o zPaCn8xUC/d4seRJrW/KmOu4n5tjWjd9ThTRQu1CukRoFfZrasRBavVO7iVTE6Qi XYQZjNbu6vuMZ8M3Ei0pvESskTMtnvmdnnEzibxefFZpNqiqpCQfXnNf9WpmGtzI NdmgZL2L5M7JVsrjR+4yxaGzE9T9Pcyck7scgVOD1E8afPP6LXsm9X2x6rCMPyXu PaireZp/L+KUBN5/mCzvqfA4tDt6oYnCu+8nQR0/ClyFE4fs4qrPQ539WwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKBzJNriFJZrlVg+s6FCqfz8OAXkMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvb0hNazJ1SVVsbXVWV0Q2em9VS3BfUHc0QmVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV/tDAwQA gjHXMA0GCSqGSIb3DQEBCwUAA4IBAQB48b7GeibS/b0MnErjFn5xLBnKGMnFhS3w XCxErYNn0VAOsL7JOFTIJImwsDnKTp/M0cldMxhOalErfRYbVRJLP6Cld/NTpTwv TWLt4FABXyvEinh7N9WobBnIx1Dh5APmzWIP/qHoeP+NDUbnegoV3vbjeDSTZdw0 PlCCMfzjNcARtbgnFIJO6f2G9o6eBS9oEug+KKK0D2LU7w0RHLI6nKLxbzVqPGKW GLrGEM4h1hxa2FpQISY9DtkgoqBoqh4bnPeMNtg18Oq/OOoMBNNdkM9FPlIKsKIE FzD5/eJo0DIpBTU7II3JQBtHkImj8EAxj3il8E5nlrhkq3pip9et -----END CERTIFICATE-----Generated at Thu Dec 11 17:49:05 2025 by rpki-client