This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa File: OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa (raw, json) Hash identifier: rilwxKs37kLhwVeNVD/MIAohgiQxYvRftQXfpAgpDb0= Subject key identifier: 38:16:10:64:34:35:39:B4:44:EE:1A:24:53:D0:F8:02:FF:1A:B9:0D Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B0D8F3CBA8B83C4A984DB454E8FCF7C9B Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa Signing time: Thu 11 Dec 2025 13:17:29 +0000 ROA not before: Thu 11 Dec 2025 13:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45691 IP address blocks: 185.217.5.0/24 maxlen: 24 193.56.180.0/24 maxlen: 24 2a12:f8c2:200::/40 maxlen: 40 2a12:f8c3:4000::/36 maxlen: 36 2a12:f8c6::/32 maxlen: 48 2a12:f8c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:8f:3c:ba:8b:83:c4:a9:84:db:45:4e:8f:cf:7c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Dec 11 13:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38161064343539b444ee1a2453d0f802ff1ab90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:86:a6:cf:a1:b3:dc:e8:7b:38:ad:e5:54: 60:0c:dc:54:79:1e:ec:8c:17:47:6c:8b:d8:a5:36: 99:c5:bb:fe:fa:d3:a9:ce:30:29:61:92:f3:6e:60: 24:cf:40:2a:e9:19:ff:43:7c:70:71:09:b4:72:6a: 0d:3d:b6:4d:8d:9b:20:5b:43:37:70:de:7a:89:07: 2b:a7:91:d6:f9:29:d0:2c:50:d3:90:41:dd:32:c0: 1e:22:75:2c:4c:c5:d0:ab:cc:53:c9:43:db:65:54: 64:81:00:52:d0:e5:a9:43:b9:5d:ad:cd:ba:6f:16: 0b:e7:af:b2:7d:3a:ac:24:01:58:14:a5:cb:1d:89: eb:3d:78:22:06:f9:ba:f2:66:a6:fe:d6:21:e3:40: 9e:12:97:d7:da:23:d9:67:0a:35:b1:03:da:a5:22: a2:af:55:26:a9:69:23:a0:a4:98:cd:ae:70:75:9d: f8:64:89:a9:a0:94:46:27:aa:67:c1:4a:10:d3:8c: 31:35:99:d0:d4:8d:1e:88:c4:47:11:e4:27:57:93: 36:21:86:3a:f1:85:a0:84:44:63:d3:5d:85:62:c0: 5b:f7:1e:8e:c2:06:57:35:ec:ca:21:65:bf:bb:f3: e4:6a:e5:ee:c5:74:21:bf:a4:57:8b:1a:f1:19:7e: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:10:64:34:35:39:B4:44:EE:1A:24:53:D0:F8:02:FF:1A:B9:0D X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/OBYQZDQ1ObRE7hokU9D4Av8auQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.5.0/24 193.56.180.0/24 IPv6: 2a12:f8c2:200::/40 2a12:f8c3:4000::/36 2a12:f8c6::/31 Signature Algorithm: sha256WithRSAEncryption 2d:e3:c6:1e:e6:15:f1:a9:21:9c:82:a5:bf:b8:02:51:58:de: b3:fe:8e:b3:2f:98:d0:8b:fa:1a:f9:10:c3:4f:fc:0e:27:29: a3:f3:dc:fd:13:34:96:2e:97:9d:ce:89:f5:33:ff:71:d6:e6: f6:1e:1b:fc:99:6a:2d:bc:e4:6e:65:03:c4:6c:56:0a:bc:a9: b8:a1:50:b8:df:c1:0c:b1:70:ca:63:9d:8b:69:c1:4e:1d:a0: 21:d4:4c:eb:a9:97:37:52:31:b5:79:1b:13:7f:4c:36:df:98: 8f:ba:36:c3:49:5c:84:11:7e:c8:b6:dc:3b:ba:f1:d7:20:62: 01:b2:45:98:77:0c:26:6b:d1:9e:6d:f2:b9:6b:bc:80:d3:72: 6e:09:dd:20:8f:52:7d:a1:99:8a:1b:8e:ea:de:04:f4:d9:a2: 0a:49:fd:3a:3f:af:84:c5:d7:81:a1:af:cb:cb:4f:f5:81:16: c4:16:2a:a6:e3:de:a1:16:49:ad:38:f2:2d:d8:36:dc:ec:aa: 1f:92:1e:17:dc:c0:8b:3a:a0:7f:37:d3:c8:49:fa:45:ea:fa: c9:d2:c5:cc:8c:fb:8d:d5:4a:24:b6:5e:eb:90:90:87:38:b4: 11:99:18:5d:fb:a5:26:d0:17:c7:1e:7d:1e:d7:7e:dd:cf:6b: 8b:33:86:86 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZsNjzy6i4PEqYTbRU6Pz3ybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjUxMjExMTMxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE2MTA2NDM0MzUzOWI0NDRlZTFhMjQ1M2QwZjgwMmZmMWFiOTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Q+Gps+hs9zoezit5VRgDNxUeR7s jBdHbIvYpTaZxbv++tOpzjApYZLzbmAkz0Aq6Rn/Q3xwcQm0cmoNPbZNjZsgW0M3 cN56iQcrp5HW+SnQLFDTkEHdMsAeInUsTMXQq8xTyUPbZVRkgQBS0OWpQ7ldrc26 bxYL56+yfTqsJAFYFKXLHYnrPXgiBvm68mam/tYh40CeEpfX2iPZZwo1sQPapSKi r1UmqWkjoKSYza5wdZ34ZImpoJRGJ6pnwUoQ04wxNZnQ1I0eiMRHEeQnV5M2IYY6 8YWghERj012FYsBb9x6OwgZXNezKIWW/u/PkauXuxXQhv6RXixrxGX57iwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFDgWEGQ0NTm0RO4aJFPQ+AL/GrkNMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvT0JZUVpEUTFPYlJFN2hva1U5RDRBdjhhdVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQAudkFAwQA wTi0MB0EAgACMBcDBgAqEvjCAgMGBCoS+MNAAwUBKhL4xjANBgkqhkiG9w0BAQsF AAOCAQEALePGHuYV8akhnIKlv7gCUVjes/6Osy+Y0Iv6GvkQw0/8Dicpo/Pc/RM0 li6Xnc6J9TP/cdbm9h4b/JlqLbzkbmUDxGxWCrypuKFQuN/BDLFwymOdi2nBTh2g IdRM66mXN1IxtXkbE39MNt+Yj7o2w0lchBF+yLbcO7rx1yBiAbJFmHcMJmvRnm3y uWu8gNNybgndII9SfaGZihuO6t4E9NmiCkn9Oj+vhMXXgaGvy8tP9YEWxBYqpuPe oRZJrTjyLdg23OyqH5IeF9zAizqgfzfTyEn6Rer6ydLFzIz7jdVKJLZe65CQhzi0 EZkYXfulJtAXxx59Htd+3c9rizOGhg== -----END CERTIFICATE-----Generated at Tue Dec 16 01:09:13 2025 by rpki-client