This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/03ow7Dc2lnWCoVaeZRSpYs4zpac.roa File: 03ow7Dc2lnWCoVaeZRSpYs4zpac.roa (raw, json) Hash identifier: hu8UrK2ZA8s91ytmOHbTQuFlg+aaKVbgiAK/MIh6Ii4= Subject key identifier: D3:7A:30:EC:37:36:96:75:82:A1:56:9E:65:14:A9:62:CE:33:A5:A7 Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Certificate serial: 019ADC46A3D25B3C3C3941A14D0AE57011B7 Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/03ow7Dc2lnWCoVaeZRSpYs4zpac.roa Signing time: Mon 01 Dec 2025 23:36:48 +0000 ROA not before: Mon 01 Dec 2025 23:36:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41745 IP address blocks: 138.124.2.0/24 maxlen: 24 138.124.3.0/24 maxlen: 24 138.124.4.0/24 maxlen: 24 138.124.10.0/24 maxlen: 24 138.124.15.0/24 maxlen: 24 138.124.16.0/24 maxlen: 24 138.124.19.0/24 maxlen: 24 138.124.20.0/24 maxlen: 24 138.124.30.0/24 maxlen: 24 138.124.31.0/24 maxlen: 24 138.124.68.0/24 maxlen: 24 138.124.69.0/24 maxlen: 24 138.124.70.0/24 maxlen: 24 138.124.71.0/24 maxlen: 24 138.124.72.0/24 maxlen: 24 138.124.73.0/24 maxlen: 24 138.124.74.0/24 maxlen: 24 138.124.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dc:46:a3:d2:5b:3c:3c:39:41:a1:4d:0a:e5:70:11:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c Validity Not Before: Dec 1 23:36:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d37a30ec3736967582a1569e6514a962ce33a5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:de:9a:80:13:b7:74:34:15:9d:ed:d9:37: 76:c6:31:77:70:14:e6:12:c7:b8:3d:5d:09:38:3b: 12:1f:ca:7e:bf:d4:89:ad:20:48:9b:9a:10:9c:33: 36:a6:57:5a:19:4c:eb:f6:6e:24:39:3b:83:07:5b: 14:f8:7c:ae:64:e5:03:f4:35:ea:68:9b:95:4a:76: e1:7f:e8:b1:59:89:ab:36:d8:bc:5d:b6:ff:a1:c3: ef:b2:c5:76:4c:17:cd:0c:67:f8:7a:fb:1b:16:b1: 82:4e:2a:7c:e4:4a:47:18:29:56:f1:4d:1b:07:82: 54:84:46:5d:62:d7:35:52:cd:38:f9:cc:60:e2:f8: 0e:9a:62:9a:31:70:45:ed:39:87:86:46:1b:09:d1: 56:44:3c:05:c9:8e:90:3d:e3:8a:20:7a:7b:e6:a5: 78:6d:29:55:c9:6f:4c:8b:11:45:c4:40:18:0c:e9: 7f:fb:ad:3e:2b:79:58:d5:e8:7b:4a:ef:45:01:0a: 2a:1c:a7:af:6e:c8:ec:60:0e:0e:b5:18:80:9f:ab: 09:dc:45:b3:c8:3b:bf:60:73:03:9d:a9:f6:dc:d3: 84:2a:1c:59:3f:8c:7a:19:f7:c5:c3:ca:85:53:dc: 32:86:27:88:d1:7f:49:29:4d:ba:9c:69:70:cc:fd: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:30:EC:37:36:96:75:82:A1:56:9E:65:14:A9:62:CE:33:A5:A7 X509v3 Authority Key Identifier: keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/03ow7Dc2lnWCoVaeZRSpYs4zpac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.2.0-138.124.4.255 138.124.10.0/24 138.124.15.0-138.124.16.255 138.124.19.0-138.124.20.255 138.124.30.0/23 138.124.68.0-138.124.74.255 138.124.125.0/24 Signature Algorithm: sha256WithRSAEncryption 49:f3:ed:bc:6b:ea:72:51:f9:7a:d6:d8:de:1c:d7:39:e7:27: 9b:af:06:47:48:4f:89:f7:32:01:ee:a3:02:e7:93:96:45:03: af:04:2b:b1:5e:f0:b6:1c:b2:39:27:e8:50:96:4a:32:68:37: b4:77:13:52:1f:eb:d9:f6:be:13:44:56:8b:7d:f4:71:64:d6: 91:ce:32:72:5d:a5:3d:15:cf:e1:90:b1:2d:55:34:30:f1:54: c6:32:f7:a6:e2:83:65:ee:06:8e:3e:d4:1a:d7:55:ee:6d:47: 0e:e5:ed:d2:56:76:bb:2d:d8:e3:2d:2f:93:d5:a3:62:91:22: fa:d0:ef:3d:32:41:99:c5:08:cd:90:f7:dc:16:a9:ad:6e:dd: 25:15:df:ee:16:e8:22:df:02:bc:9a:69:a8:aa:9a:23:ee:cd: 7e:8e:e8:cb:05:c1:3d:31:17:56:f0:77:c1:6f:37:f6:df:90: 9e:6f:d3:f9:02:d6:5a:54:db:f3:62:32:44:90:47:36:01:d7: 6d:0e:01:ae:26:e3:76:46:b4:74:fc:40:a6:f0:bb:c9:7f:0f: 35:08:16:99:8f:fe:08:6a:3d:fc:9d:b4:75:1b:d0:8d:3f:79: 25:85:eb:82:c6:73:7a:1b:49:e8:82:04:bc:0e:88:cf:79:2c: 7a:f8:4d:2b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZrcRqPSWzw8OUGhTQrlcBG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhOGYwNWUzODQzNTE3Y2YwOTcxYzJiZjljZGRkZGQ2Mjcx N2U1MmMwHhcNMjUxMjAxMjMzNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzdhMzBlYzM3MzY5Njc1ODJhMTU2OWU2NTE0YTk2MmNlMzNhNWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRzemoATt3Q0FZ3t2Td2xjF3cBTm Ese4PV0JODsSH8p+v9SJrSBIm5oQnDM2pldaGUzr9m4kOTuDB1sU+HyuZOUD9DXq aJuVSnbhf+ixWYmrNti8Xbb/ocPvssV2TBfNDGf4evsbFrGCTip85EpHGClW8U0b B4JUhEZdYtc1Us04+cxg4vgOmmKaMXBF7TmHhkYbCdFWRDwFyY6QPeOKIHp75qV4 bSlVyW9MixFFxEAYDOl/+60+K3lY1eh7Su9FAQoqHKevbsjsYA4OtRiAn6sJ3EWz yDu/YHMDnan23NOEKhxZP4x6GffFw8qFU9wyhieI0X9JKU26nGlwzP3zAQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFNN6MOw3NpZ1gqFWnmUUqWLOM6WnMB8GA1UdIwQY MBaAFNqPBeOENRfPCXHCv5zd3dYnF+UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgt ZTAxZTk0MTI0Njc0LzEvMDNvdzdEYzJsbldDb1ZhZVpSU3BZczR6cGFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iOTg4NGItNmZjNS00YjNlLWIxZTgtZTAxZTk0MTI0Njc0 LzEvMm84RjQ0UTFGODhKY2NLX25OM2QxaWNYNVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBAGKfAID BACKfAQDBACKfAowDAMEAIp8DwMEAIp8EDAMAwQAinwTAwQAinwUAwQBinweMAwD BAKKfEQDBACKfEoDBACKfH0wDQYJKoZIhvcNAQELBQADggEBAEnz7bxr6nJR+XrW 2N4c1znnJ5uvBkdIT4n3MgHuowLnk5ZFA68EK7Fe8LYcsjkn6FCWSjJoN7R3E1If 69n2vhNEVot99HFk1pHOMnJdpT0Vz+GQsS1VNDDxVMYy96big2XuBo4+1BrXVe5t Rw7l7dJWdrst2OMtL5PVo2KRIvrQ7z0yQZnFCM2Q99wWqa1u3SUV3+4W6CLfArya aaiqmiPuzX6O6MsFwT0xF1bwd8FvN/bfkJ5v0/kC1lpU2/NiMkSQRzYB120OAa4m 43ZGtHT8QKbwu8l/DzUIFpmP/ghqPfydtHUb0I0/eSWF64LGc3obSeiCBLwOiM95 LHr4TSs= -----END CERTIFICATE-----Generated at Sat Dec 6 06:43:03 2025 by rpki-client