This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/oHh9HVxtMu6mNRpoXoeU65t9c7Y.roa File: oHh9HVxtMu6mNRpoXoeU65t9c7Y.roa (raw, json) Hash identifier: G+2g4aHJLaIaMhKuUJAYSptAUkZNd7lrZ4J05sdateo= Subject key identifier: A0:78:7D:1D:5C:6D:32:EE:A6:35:1A:68:5E:87:94:EB:9B:7D:73:B6 Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Certificate serial: 019B034EA7F939382EBAA969078C1E1BD98F Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/oHh9HVxtMu6mNRpoXoeU65t9c7Y.roa Signing time: Tue 09 Dec 2025 13:30:45 +0000 ROA not before: Tue 09 Dec 2025 13:30:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60631 IP address blocks: 62.106.95.0/24 maxlen: 24 146.19.212.0/24 maxlen: 24 217.114.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.mft rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:4e:a7:f9:39:38:2e:ba:a9:69:07:8c:1e:1b:d9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608 Validity Not Before: Dec 9 13:30:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0787d1d5c6d32eea6351a685e8794eb9b7d73b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:ef:0f:54:d9:ad:04:db:c3:dc:36:6b:a8: ec:ca:1d:37:6d:ca:6e:4b:0c:ca:08:2a:16:af:b3: 00:b9:e0:1d:37:fd:81:0a:69:15:28:e6:85:24:b9: 43:19:7c:f8:8f:51:8f:39:ab:3c:c3:b5:dc:fc:a9: 34:63:15:ee:6d:42:a2:a2:80:16:93:7c:2c:1f:f9: 1e:22:dd:d2:00:da:b2:d4:6f:8f:49:43:d8:03:9b: 53:e6:76:16:56:b9:66:d3:96:61:09:8d:7d:d4:4b: a9:94:0c:ca:47:a9:d1:74:69:ec:d3:58:fd:98:b6: 48:01:55:00:30:e9:5d:c4:61:6a:7b:78:df:cf:07: 56:52:0e:39:f6:65:5e:51:25:8a:73:d0:ad:11:92: ec:2e:91:eb:44:73:d0:36:37:94:54:a8:78:3c:0f: b4:04:e7:67:74:e9:a4:8c:59:b7:d8:40:17:17:a5: 14:d4:1a:4a:91:46:ae:c1:20:9d:5e:26:e6:c8:11: fd:65:c3:7e:70:36:9c:31:ff:2e:05:07:b8:e8:07: 3a:17:55:bb:2c:55:f0:9a:4d:9e:9d:2a:24:31:83: e2:45:b1:8a:42:d3:c2:7c:6b:5c:c5:1e:72:78:06: cc:b4:d3:e1:e2:32:78:76:1e:58:20:7c:3e:dc:65: 1f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:78:7D:1D:5C:6D:32:EE:A6:35:1A:68:5E:87:94:EB:9B:7D:73:B6 X509v3 Authority Key Identifier: keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/oHh9HVxtMu6mNRpoXoeU65t9c7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.106.95.0/24 146.19.212.0/24 217.114.40.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5e:c8:67:af:80:74:cd:1f:e6:f9:0e:15:40:8f:c7:d7:a3: 2d:c0:c3:97:d0:76:9d:4a:38:a7:e7:c9:56:ae:97:6e:de:9e: 82:ad:47:2f:95:ef:43:59:8a:94:13:83:78:51:0e:c2:da:e6: aa:e9:61:40:4b:16:65:9a:0c:b5:39:40:dd:ca:2d:08:62:39: 5a:3c:64:1c:3e:a4:5f:bd:05:7b:5c:b3:4c:3c:a5:80:c6:2a: 1d:2a:79:71:39:5c:31:78:f8:ec:cf:ca:68:f3:b7:60:b8:6c: 96:7b:f5:c8:df:45:98:b8:5f:c8:02:c4:f2:f3:f9:0f:21:fc: c3:3f:62:16:be:53:4e:94:dc:9b:d1:4d:0a:38:3c:8a:9c:c2: cb:ed:00:b1:a0:e6:04:0a:2a:2d:e3:a4:ab:51:4b:fb:19:fa: 30:fa:17:58:0a:6f:9c:54:ce:0f:4a:36:d1:9a:48:12:8d:63: a9:ab:d7:9b:a1:a4:f6:81:28:6e:a2:3d:75:7a:73:9a:ae:cb: 82:ed:b8:9f:8d:22:36:85:a7:09:26:72:0e:f3:65:42:22:ce: e1:fd:5b:f7:cf:f8:82:f5:56:dd:eb:56:58:4b:c6:8e:fa:34: b1:5a:19:d1:41:43:37:6a:f1:7d:0e:fe:56:eb:d3:44:fb:fa: 95:86:d2:3f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsDTqf5OTguuqlpB4weG9mPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi OWQ2MDgwHhcNMjUxMjA5MTMzMDQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDc4N2QxZDVjNmQzMmVlYTYzNTFhNjg1ZTg3OTRlYjliN2Q3M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDvD1TZrQTbw9w2a6jsyh03bcpu SwzKCCoWr7MAueAdN/2BCmkVKOaFJLlDGXz4j1GPOas8w7Xc/Kk0YxXubUKiooAW k3wsH/keIt3SANqy1G+PSUPYA5tT5nYWVrlm05ZhCY191EuplAzKR6nRdGns01j9 mLZIAVUAMOldxGFqe3jfzwdWUg459mVeUSWKc9CtEZLsLpHrRHPQNjeUVKh4PA+0 BOdndOmkjFm32EAXF6UU1BpKkUauwSCdXibmyBH9ZcN+cDacMf8uBQe46Ac6F1W7 LFXwmk2enSokMYPiRbGKQtPCfGtcxR5yeAbMtNPh4jJ4dh5YIHw+3GUf8wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKB4fR1cbTLupjUaaF6HlOubfXO2MB8GA1UdIwQY MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt YmM5M2NhNjc5ZTFmLzEvb0hoOUhWeHRNdTZtTlJwb1hvZVU2NXQ5YzdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAPmpfAwQA khPUAwQA2XIoMA0GCSqGSIb3DQEBCwUAA4IBAQBoXshnr4B0zR/m+Q4VQI/H16Mt wMOX0HadSjin58lWrpdu3p6CrUcvle9DWYqUE4N4UQ7C2uaq6WFASxZlmgy1OUDd yi0IYjlaPGQcPqRfvQV7XLNMPKWAxiodKnlxOVwxePjsz8po87dguGyWe/XI30WY uF/IAsTy8/kPIfzDP2IWvlNOlNyb0U0KODyKnMLL7QCxoOYECiot46SrUUv7Gfow +hdYCm+cVM4PSjbRmkgSjWOpq9eboaT2gShuoj11enOarsuC7bifjSI2hacJJnIO 82VCIs7h/Vv3z/iC9Vbd61ZYS8aO+jSxWhnRQUM3avF9Dv5W69NE+/qVhtI/ -----END CERTIFICATE-----Generated at Wed Dec 10 09:00:18 2025 by rpki-client