This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OXxT_glWr4g79EEDXB7mGQocscM.roa File: OXxT_glWr4g79EEDXB7mGQocscM.roa (raw, json) Hash identifier: meRPoWY2R5HOyVC152XQHCdXxKU/4LwvT9R3y0JE3h8= Subject key identifier: 39:7C:53:FE:09:56:AF:88:3B:F4:41:03:5C:1E:E6:19:0A:1C:B1:C3 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B07B5366AE2078A6B913D8529D662E1A8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OXxT_glWr4g79EEDXB7mGQocscM.roa Signing time: Wed 10 Dec 2025 10:01:15 +0000 ROA not before: Wed 10 Dec 2025 10:01:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56755 IP address blocks: 45.148.118.0/23 maxlen: 24 45.148.119.0/24 maxlen: 24 94.177.122.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:36:6a:e2:07:8a:6b:91:3d:85:29:d6:62:e1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Dec 10 10:01:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=397c53fe0956af883bf441035c1ee6190a1cb1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7c:4f:57:57:86:e6:8d:47:e2:fb:04:9b:2c: f7:91:17:32:ab:1d:f4:3d:a1:bf:8a:da:5b:13:fa: f2:57:31:f4:ec:4e:09:d4:96:30:bf:bc:5e:8b:23: f2:30:2b:03:9e:3f:d0:38:8a:ba:ff:d4:7f:b5:7a: 9c:df:19:ba:df:e1:0a:03:67:ae:3f:2c:db:d0:3e: d3:36:7b:8f:61:ae:e4:55:ce:67:9d:26:29:62:58: 6d:f4:3f:86:a1:3e:c4:e8:31:3d:7e:45:de:50:4d: ed:bf:84:31:7f:d3:df:a5:44:a8:ee:f3:10:c8:82: ea:ba:30:b3:5f:c9:f4:43:9b:c8:dd:40:88:1e:20: 72:5b:1b:aa:7a:ff:d6:5f:5c:74:6d:43:4b:e5:61: 61:9e:1b:2b:92:03:95:7f:1a:c0:1d:79:a6:29:d5: 0e:0d:29:eb:a1:3c:dc:4b:14:50:e8:22:e1:be:1e: a5:29:39:d0:41:c4:2e:64:b5:e0:7e:df:da:98:ce: db:13:96:d9:00:22:b4:3e:36:ba:f7:b1:84:bd:06: 03:3c:6b:a8:be:6b:fb:52:6d:3b:eb:cc:3e:21:74: da:59:55:bb:57:2d:37:a1:51:5f:4a:bd:0f:35:0b: 46:d3:00:a8:45:2c:36:9d:43:44:8b:29:98:b8:a2: be:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:53:FE:09:56:AF:88:3B:F4:41:03:5C:1E:E6:19:0A:1C:B1:C3 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OXxT_glWr4g79EEDXB7mGQocscM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.118.0/23 94.177.122.0/24 139.28.99.0/24 Signature Algorithm: sha256WithRSAEncryption a8:5c:2d:a3:00:e1:b6:6b:8c:79:c4:f0:fa:69:83:a9:c4:3f: 16:9b:ee:e7:c5:33:5a:e1:ef:a2:59:36:c4:58:a5:e0:7d:9d: 52:cb:b9:ba:0b:06:0d:35:46:84:8a:57:e2:e0:0d:7d:fe:8e: bc:a5:97:ec:ca:5a:c7:63:13:0c:38:78:de:66:0c:b6:c6:f1: 63:ff:46:4e:5b:d8:6d:f0:11:b9:a8:24:6c:37:e8:8c:bc:0b: ba:69:d5:a7:79:eb:46:0f:1e:d3:51:14:de:d3:d3:ec:48:68: b3:1e:ae:8d:7e:79:d9:40:ed:22:63:e6:d4:28:e9:ae:b3:2e: 27:04:61:d3:93:fa:ba:f3:1f:bf:de:e8:23:ed:a7:09:2b:4a: 8e:cb:24:f6:af:77:83:3b:ca:84:07:63:90:0c:dd:03:c3:ef: 59:f7:05:da:96:75:97:cd:ff:73:c2:df:c0:6c:d7:f0:3d:37: f2:e7:e3:9f:21:34:1a:95:d9:c2:fb:6f:40:d8:02:3f:45:d3: 41:00:56:1e:2c:53:9e:66:8e:29:c1:df:94:2f:5c:7f:03:b4: 9c:55:32:2c:42:98:db:0d:e1:a2:c2:95:c6:cf:4d:10:3b:da: 45:d7:35:2d:02:27:d5:9d:15:7e:ca:d6:8f:b5:d7:dd:8e:e3: bd:73:df:4e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsHtTZq4geKa5E9hSnWYuGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjUxMjEwMTAwMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTdjNTNmZTA5NTZhZjg4M2JmNDQxMDM1YzFlZTYxOTBhMWNiMWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3xPV1eG5o1H4vsEmyz3kRcyqx30 PaG/itpbE/ryVzH07E4J1JYwv7xeiyPyMCsDnj/QOIq6/9R/tXqc3xm63+EKA2eu Pyzb0D7TNnuPYa7kVc5nnSYpYlht9D+GoT7E6DE9fkXeUE3tv4Qxf9PfpUSo7vMQ yILqujCzX8n0Q5vI3UCIHiByWxuqev/WX1x0bUNL5WFhnhsrkgOVfxrAHXmmKdUO DSnroTzcSxRQ6CLhvh6lKTnQQcQuZLXgft/amM7bE5bZACK0Pja697GEvQYDPGuo vmv7Um0768w+IXTaWVW7Vy03oVFfSr0PNQtG0wCoRSw2nUNEiymYuKK+XQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDl8U/4JVq+IO/RBA1we5hkKHLHDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvT1h4VF9nbFdyNGc3OUVFRFhCN21HUW9jc2NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZR2AwQA XrF6AwQAixxjMA0GCSqGSIb3DQEBCwUAA4IBAQCoXC2jAOG2a4x5xPD6aYOpxD8W m+7nxTNa4e+iWTbEWKXgfZ1Sy7m6CwYNNUaEilfi4A19/o68pZfsylrHYxMMOHje Zgy2xvFj/0ZOW9ht8BG5qCRsN+iMvAu6adWneetGDx7TURTe09PsSGizHq6NfnnZ QO0iY+bUKOmusy4nBGHTk/q68x+/3ugj7acJK0qOyyT2r3eDO8qEB2OQDN0Dw+9Z 9wXalnWXzf9zwt/AbNfwPTfy5+OfITQaldnC+29A2AI/RdNBAFYeLFOeZo4pwd+U L1x/A7ScVTIsQpjbDeGiwpXGz00QO9pF1zUtAifVnRV+ytaPtdfdjuO9c99O -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:04 2025 by rpki-client