This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/v3OGC84lOHYqgrdCw83-UxOxv3M.roa File: v3OGC84lOHYqgrdCw83-UxOxv3M.roa (raw, json) Hash identifier: 5wTtmtxXrYwzJBtvZnwhrNSczGwxOm6FNH6e0UVFd3s= Subject key identifier: BF:73:86:0B:CE:25:38:76:2A:82:B7:42:C3:CD:FE:53:13:B1:BF:73 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019A78D63DBD7940B377B4AC823A77381A27 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/v3OGC84lOHYqgrdCw83-UxOxv3M.roa Signing time: Wed 12 Nov 2025 16:11:37 +0000 ROA not before: Wed 12 Nov 2025 16:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205220 IP address blocks: 212.16.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:78:d6:3d:bd:79:40:b3:77:b4:ac:82:3a:77:38:1a:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Nov 12 16:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bf73860bce2538762a82b742c3cdfe5313b1bf73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:db:3c:96:42:56:78:23:2b:13:74:6c:e3: 1f:1f:4a:3d:1d:4a:64:2d:76:7f:52:a9:9b:f2:fb: c3:54:09:16:8f:4f:39:04:63:8f:5e:e2:f4:c2:3a: e6:d0:b3:ac:ef:13:5a:4b:2c:a6:3f:66:94:20:6a: 39:5e:7f:ea:35:74:7a:7b:73:18:69:64:98:ae:7d: 0e:09:c8:f3:b3:e0:db:56:6e:71:61:fc:bc:d5:85: 41:86:76:65:e7:57:b3:10:cf:5c:c1:99:7f:73:09: a4:d3:66:c0:aa:a4:12:08:ba:5c:b4:3f:ca:67:dc: b6:94:05:0b:c5:8b:52:0f:ea:22:80:61:3f:d0:99: 6e:7c:ea:a2:5c:93:95:af:b3:18:0d:bc:b3:6c:c7: dc:ca:80:3b:c1:14:37:0a:83:d9:66:ac:32:4c:43: 48:89:8a:da:c3:37:2a:81:61:fe:7b:8d:e6:d9:65: 4c:4e:06:2e:89:7b:c8:c9:24:93:44:48:f9:bb:0e: f4:cd:36:c0:a7:de:74:a4:3c:a2:11:19:95:82:5c: d2:28:01:fa:65:d9:7a:03:50:fd:a8:4b:c0:db:d4: 4b:8f:90:83:4b:61:40:52:b4:81:ca:89:c6:43:ed: cf:d6:f1:d6:0d:a7:5c:35:da:c3:a9:65:c8:17:3b: 60:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:73:86:0B:CE:25:38:76:2A:82:B7:42:C3:CD:FE:53:13:B1:BF:73 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/v3OGC84lOHYqgrdCw83-UxOxv3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.79.0/24 Signature Algorithm: sha256WithRSAEncryption 13:b7:73:76:5c:ef:66:76:57:26:fa:f8:50:e3:8d:11:76:b1: be:f7:56:0d:f0:5f:70:c3:93:04:07:85:2e:ee:a5:ca:56:25: 72:78:b1:9a:47:27:27:a1:98:bf:a4:d2:88:db:76:7e:1e:11: 72:c9:51:c3:30:29:68:f6:ea:8c:e5:ee:a0:06:ca:07:c6:84: 15:7e:59:53:c9:0c:5b:55:e1:f6:db:bd:f9:2c:f8:04:61:8a: 4a:47:41:ce:40:2b:b4:48:ae:84:f7:46:6f:25:75:c1:86:67: 07:65:85:fc:3c:ff:39:58:cc:82:18:27:bc:d6:b9:c4:0a:5d: 6f:1b:f6:04:92:d9:8a:0e:21:66:4e:50:3a:b1:65:9d:ff:91: ca:57:a2:91:2a:b6:7a:8f:90:97:e1:86:52:0c:17:b6:9a:79: 8e:36:cb:f1:be:0e:da:67:4f:6f:d6:ce:3b:cb:64:4e:9d:7b: c7:f7:71:15:1d:35:94:4f:d6:47:40:1b:5d:06:14:fe:e9:84: 3e:4d:16:68:9d:92:52:7a:41:fc:a3:d9:c8:b6:6b:9e:74:12: 06:87:31:e5:82:2d:f5:a4:23:82:6c:1b:eb:d3:59:41:07:63: 0d:43:57:c6:13:1b:6e:9a:d2:b4:ec:fc:ae:43:f4:84:d5:bf: 03:71:ac:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp41j29eUCzd7Ssgjp3OBonMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjUxMTEyMTYxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjczODYwYmNlMjUzODc2MmE4MmI3NDJjM2NkZmU1MzEzYjFiZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLXbPJZCVngjKxN0bOMfH0o9HUpk LXZ/Uqmb8vvDVAkWj085BGOPXuL0wjrm0LOs7xNaSyymP2aUIGo5Xn/qNXR6e3MY aWSYrn0OCcjzs+DbVm5xYfy81YVBhnZl51ezEM9cwZl/cwmk02bAqqQSCLpctD/K Z9y2lAULxYtSD+oigGE/0JlufOqiXJOVr7MYDbyzbMfcyoA7wRQ3CoPZZqwyTENI iYrawzcqgWH+e43m2WVMTgYuiXvIySSTREj5uw70zTbAp950pDyiERmVglzSKAH6 Zdl6A1D9qEvA29RLj5CDS2FAUrSByonGQ+3P1vHWDadcNdrDqWXIFztgvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL9zhgvOJTh2KoK3QsPN/lMTsb9zMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvdjNPR0M4NGxPSFlxZ3JkQ3c4My1VeE94djNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BBPMA0G CSqGSIb3DQEBCwUAA4IBAQATt3N2XO9mdlcm+vhQ440RdrG+91YN8F9ww5MEB4Uu 7qXKViVyeLGaRycnoZi/pNKI23Z+HhFyyVHDMClo9uqM5e6gBsoHxoQVfllTyQxb VeH22735LPgEYYpKR0HOQCu0SK6E90ZvJXXBhmcHZYX8PP85WMyCGCe81rnECl1v G/YEktmKDiFmTlA6sWWd/5HKV6KRKrZ6j5CX4YZSDBe2mnmONsvxvg7aZ09v1s47 y2ROnXvH93EVHTWUT9ZHQBtdBhT+6YQ+TRZonZJSekH8o9nItmuedBIGhzHlgi31 pCOCbBvr01lBB2MNQ1fGExtumtK07PyuQ/SE1b8Dcaxa -----END CERTIFICATE-----Generated at Sat Dec 6 10:04:25 2025 by rpki-client