This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5P-z9Hc1pQscLaV3bd0oyXZjaE.roa File: o5P-z9Hc1pQscLaV3bd0oyXZjaE.roa (raw, json) Hash identifier: Lqd2Pi1QYyswks2MYM4pbdqsW+aEnYqjoTKkgMBYg1o= Subject key identifier: A3:93:FE:CF:D1:DC:D6:94:2C:70:B6:95:DD:B7:74:A3:25:D9:8D:A1 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B2162075BD37D588A647954DCE7B1C284 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5P-z9Hc1pQscLaV3bd0oyXZjaE.roa Signing time: Mon 15 Dec 2025 09:40:31 +0000 ROA not before: Mon 15 Dec 2025 09:40:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 77.93.133.0/24 maxlen: 24 81.168.65.0/24 maxlen: 24 81.168.87.0/24 maxlen: 24 81.168.96.0/24 maxlen: 24 82.152.70.0/24 maxlen: 24 82.152.92.0/24 maxlen: 24 82.152.122.0/24 maxlen: 24 82.153.53.0/24 maxlen: 24 82.153.86.0/24 maxlen: 24 82.153.91.0/24 maxlen: 24 82.153.255.0/24 maxlen: 24 82.163.24.0/24 maxlen: 24 109.176.20.0/24 maxlen: 24 217.144.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:62:07:5b:d3:7d:58:8a:64:79:54:dc:e7:b1:c2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Dec 15 09:40:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a393fecfd1dcd6942c70b695ddb774a325d98da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:e7:7b:1b:b5:41:dd:eb:90:6d:f5:21:d3: 97:30:d4:c1:5d:78:19:df:e7:9f:9b:66:ba:e4:82: 59:c0:ac:98:88:97:b3:c3:22:03:a3:64:55:7b:22: c4:17:a6:7d:67:4c:24:af:69:33:fb:cf:62:3d:d7: da:96:eb:08:22:9a:2c:66:00:70:65:56:b7:22:ad: e5:40:70:20:68:8c:08:2b:bc:f0:16:63:d7:df:34: 6d:9e:5d:8f:f0:b0:fc:f1:b8:00:58:b5:90:23:a5: 5a:cb:5a:ba:92:7c:b9:33:1a:42:31:52:19:20:27: 97:f7:f0:52:d7:d6:b5:0a:97:30:d2:f3:4c:4c:9c: 72:a3:5a:1a:64:d2:34:62:76:67:22:5b:0b:e2:7c: d6:3f:d7:b1:fc:3e:d5:03:b3:a7:40:c6:a6:00:cd: 32:b8:17:57:68:3a:ed:87:9e:7f:65:60:b5:54:9b: fa:19:b2:73:32:ce:6c:87:4f:14:64:c5:39:35:d0: 98:40:80:6d:de:8b:7e:02:0f:23:8e:15:23:8e:12: 87:74:4a:23:37:05:ed:02:3f:18:8b:14:2a:f4:f2: 2b:50:16:1f:73:68:45:44:ea:1a:3f:e2:ad:dc:dc: b6:4e:64:f5:2f:e2:dd:ab:ad:21:91:a7:54:88:46: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:93:FE:CF:D1:DC:D6:94:2C:70:B6:95:DD:B7:74:A3:25:D9:8D:A1 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/o5P-z9Hc1pQscLaV3bd0oyXZjaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.133.0/24 81.168.65.0/24 81.168.87.0/24 81.168.96.0/24 82.152.70.0/24 82.152.92.0/24 82.152.122.0/24 82.153.53.0/24 82.153.86.0/24 82.153.91.0/24 82.153.255.0/24 82.163.24.0/24 109.176.20.0/24 217.144.156.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:ee:6a:a8:40:17:df:a2:38:97:fc:e6:98:46:96:43:c1:07: dd:4d:32:21:8c:eb:53:53:10:97:8d:80:7c:5c:24:aa:17:a2: 4c:7d:bf:fa:7a:60:d1:cc:a6:55:df:0c:71:a9:b6:97:e9:73: b1:f5:f0:e8:f4:91:2c:ee:d3:dd:ec:45:e3:70:49:a2:05:9e: 74:37:25:da:74:b5:c3:14:64:18:4f:bf:14:f4:98:04:b3:1d: f5:0d:cc:53:ac:4b:c5:9c:43:31:17:2b:60:a0:d1:36:78:cf: 5d:ad:6c:12:1c:1b:bd:2b:61:71:1e:d1:53:98:2e:8b:46:41: 60:ea:be:1a:a0:da:08:91:b6:f4:f3:e4:6a:2a:bd:50:4b:4a: 44:c4:eb:26:66:54:4b:17:fd:d8:ab:89:45:1f:9e:9d:53:d8: 7b:44:a1:b4:0a:e5:6f:13:48:79:28:6f:a2:30:00:2c:57:92: f1:7c:cf:c5:3b:7e:65:15:a4:32:9c:e8:24:88:f3:6d:c9:e9: e4:a1:f2:cd:2e:b3:1e:04:0d:d5:d9:a9:69:24:13:3e:ce:a0: ee:cb:91:18:38:f4:eb:bb:0f:d6:14:81:84:83:9d:f0:6e:66: 7f:42:26:d4:24:80:c9:06:3b:a9:67:52:2b:93:9f:73:4d:2d: 39:14:ff:d5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZshYgdb031YimR5VNznscKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMjE1MDk0MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzkzZmVjZmQxZGNkNjk0MmM3MGI2OTVkZGI3NzRhMzI1ZDk4ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAbnexu1Qd3rkG31IdOXMNTBXXgZ 3+efm2a65IJZwKyYiJezwyIDo2RVeyLEF6Z9Z0wkr2kz+89iPdfalusIIposZgBw ZVa3Iq3lQHAgaIwIK7zwFmPX3zRtnl2P8LD88bgAWLWQI6Vay1q6kny5MxpCMVIZ ICeX9/BS19a1Cpcw0vNMTJxyo1oaZNI0YnZnIlsL4nzWP9ex/D7VA7OnQMamAM0y uBdXaDrth55/ZWC1VJv6GbJzMs5sh08UZMU5NdCYQIBt3ot+Ag8jjhUjjhKHdEoj NwXtAj8YixQq9PIrUBYfc2hFROoaP+Kt3Ny2TmT1L+Ldq60hkadUiEZ7UQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFKOT/s/R3NaULHC2ld23dKMl2Y2hMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvbzVQLXo5SGMxcFFzY0xhVjNiZDBveVhaamFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQATV2FAwQA UahBAwQAUahXAwQAUahgAwQAUphGAwQAUphcAwQAUph6AwQAUpk1AwQAUplWAwQA UplbAwQAUpn/AwQAUqMYAwQAbbAUAwQA2ZCcMA0GCSqGSIb3DQEBCwUAA4IBAQCf 7mqoQBffojiX/OaYRpZDwQfdTTIhjOtTUxCXjYB8XCSqF6JMfb/6emDRzKZV3wxx qbaX6XOx9fDo9JEs7tPd7EXjcEmiBZ50NyXadLXDFGQYT78U9JgEsx31DcxTrEvF nEMxFytgoNE2eM9drWwSHBu9K2FxHtFTmC6LRkFg6r4aoNoIkbb08+RqKr1QS0pE xOsmZlRLF/3Yq4lFH56dU9h7RKG0CuVvE0h5KG+iMAAsV5LxfM/FO35lFaQynOgk iPNtyenkofLNLrMeBA3V2alpJBM+zqDuy5EYOPTruw/WFIGEg53wbmZ/QibUJIDJ BjupZ1Irk59zTS05FP/V -----END CERTIFICATE-----Generated at Tue Dec 16 11:44:38 2025 by rpki-client