This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OfvLe5P_EZDmvqktotnid8wbMRU.roa File: OfvLe5P_EZDmvqktotnid8wbMRU.roa (raw, json) Hash identifier: 2/CgTsIk8Ir3nK9Rb/T89lnIO2epsXKgeibAOiGCEkQ= Subject key identifier: 39:FB:CB:7B:93:FF:11:90:E6:BE:A9:2D:A2:D9:E2:77:CC:1B:31:15 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019ABFFC53ABE413C4E64E01A5403C63718E Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OfvLe5P_EZDmvqktotnid8wbMRU.roa Signing time: Wed 26 Nov 2025 11:46:16 +0000 ROA not before: Wed 26 Nov 2025 11:46:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201021 IP address blocks: 46.38.141.0/24 maxlen: 24 185.143.74.0/24 maxlen: 24 185.143.75.0/24 maxlen: 24 212.16.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:fc:53:ab:e4:13:c4:e6:4e:01:a5:40:3c:63:71:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Nov 26 11:46:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39fbcb7b93ff1190e6bea92da2d9e277cc1b3115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1b:d3:4e:9e:8c:8e:0c:70:56:fe:ef:10:5c: 06:9f:ac:59:92:eb:32:7d:3f:07:2e:97:97:d3:00: 98:9c:df:ff:15:a5:17:69:e4:aa:60:0b:07:9f:cd: f0:f7:6a:31:6b:67:53:f6:a8:a5:03:43:f7:a6:f3: 82:10:16:55:c6:1f:c5:dd:63:59:39:b3:c9:bb:db: 5d:69:b2:1a:fd:67:d8:54:77:dd:55:95:71:cf:30: 84:d6:f5:7e:6a:5e:12:24:b1:19:02:7e:f3:62:a0: 2d:f5:d2:43:c8:85:a3:af:7c:fc:b4:76:48:a5:93: 6a:86:4e:cb:1a:5f:4c:a5:81:8f:cf:a5:cb:db:32: a1:b7:d7:d9:0b:41:8c:0d:c2:29:ef:7b:26:bf:d4: 46:e9:d7:92:1b:61:be:fa:d8:19:2a:c2:ff:31:69: 7a:48:d0:74:04:b5:1b:ed:b6:ca:14:46:e6:e4:ce: b6:17:82:6d:c6:37:4e:a9:5c:b0:a2:39:27:1f:20: 86:16:2e:e3:3c:39:75:c5:14:ff:59:d9:d8:68:b3: 4c:c4:19:57:a9:f9:00:65:58:67:f6:79:dd:60:d4: 90:a2:42:21:b9:1b:43:ae:59:38:24:ce:78:c3:ea: 50:e9:e3:61:0c:93:d9:0a:50:4d:e1:53:f9:3d:25: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:FB:CB:7B:93:FF:11:90:E6:BE:A9:2D:A2:D9:E2:77:CC:1B:31:15 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/OfvLe5P_EZDmvqktotnid8wbMRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.141.0/24 185.143.74.0/23 212.16.85.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a4:29:0f:c2:93:fe:e4:3f:40:3a:35:14:51:16:13:f5:b8: ef:d4:42:a4:4a:01:14:1c:8c:a6:fc:1e:75:e4:96:12:36:82: ea:04:92:2c:72:55:4b:92:b1:05:79:33:0f:3d:cd:9c:b0:f9: 21:0c:46:86:52:64:cf:c3:23:12:5f:2c:66:a5:2b:1d:a2:ee: b5:ce:ae:0f:4c:c5:7d:92:2a:0d:0e:84:df:4e:c4:53:92:5f: 50:a5:58:88:bd:41:c0:a2:9c:49:c3:cf:cb:ff:37:35:b9:40: c5:3c:10:dc:0b:c8:0b:2c:74:2b:cb:af:0c:cf:89:85:54:81: 77:64:cc:43:54:71:0e:b5:9d:7c:36:57:c8:c1:13:59:33:d1: 16:c6:be:f0:bc:4f:05:37:89:6e:a1:4b:f8:3a:19:17:a3:3b: d1:49:a0:b6:f1:77:07:c6:75:fb:19:66:c8:61:3a:f3:54:b2: 81:b8:6f:47:57:6d:89:31:bf:21:54:6c:cb:9e:a8:26:23:6f: 18:30:3c:4b:e2:4e:be:e8:e2:f5:66:d9:67:2d:3a:77:0b:69: d7:15:93:3f:b6:09:86:8c:41:63:48:d3:1f:e9:b3:2c:9c:a1: 15:1a:52:eb:ff:e1:b3:aa:6f:47:8c:0d:25:d7:04:e4:c0:9e: 0c:65:0b:99 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZq//FOr5BPE5k4BpUA8Y3GOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMTI2MTE0NjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWZiY2I3YjkzZmYxMTkwZTZiZWE5MmRhMmQ5ZTI3N2NjMWIzMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhvTTp6MjgxwVv7vEFwGn6xZkusy fT8HLpeX0wCYnN//FaUXaeSqYAsHn83w92oxa2dT9qilA0P3pvOCEBZVxh/F3WNZ ObPJu9tdabIa/WfYVHfdVZVxzzCE1vV+al4SJLEZAn7zYqAt9dJDyIWjr3z8tHZI pZNqhk7LGl9MpYGPz6XL2zKht9fZC0GMDcIp73smv9RG6deSG2G++tgZKsL/MWl6 SNB0BLUb7bbKFEbm5M62F4JtxjdOqVywojknHyCGFi7jPDl1xRT/WdnYaLNMxBlX qfkAZVhn9nndYNSQokIhuRtDrlk4JM54w+pQ6eNhDJPZClBN4VP5PSU+dQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDn7y3uT/xGQ5r6pLaLZ4nfMGzEVMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvT2Z2TGU1UF9FWkRtdnFrdG90bmlkOHdiTVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaNAwQB uY9KAwQA1BBVMA0GCSqGSIb3DQEBCwUAA4IBAQAzpCkPwpP+5D9AOjUUURYT9bjv 1EKkSgEUHIym/B515JYSNoLqBJIsclVLkrEFeTMPPc2csPkhDEaGUmTPwyMSXyxm pSsdou61zq4PTMV9kioNDoTfTsRTkl9QpViIvUHAopxJw8/L/zc1uUDFPBDcC8gL LHQry68Mz4mFVIF3ZMxDVHEOtZ18NlfIwRNZM9EWxr7wvE8FN4luoUv4OhkXozvR SaC28XcHxnX7GWbIYTrzVLKBuG9HV22JMb8hVGzLnqgmI28YMDxL4k6+6OL1Ztln LTp3C2nXFZM/tgmGjEFjSNMf6bMsnKEVGlLr/+Gzqm9HjA0l1wTkwJ4MZQuZ -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:38 2025 by rpki-client