This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/OxjIWHBmVxRhcCGFgYQ3NOGLzic.roa File: OxjIWHBmVxRhcCGFgYQ3NOGLzic.roa (raw, json) Hash identifier: tdZzj+SI+CsrR/Kd+vNJoKmJO/5s4n7ueG0mTybXs60= Subject key identifier: 3B:18:C8:58:70:66:57:14:61:70:21:85:81:84:37:34:E1:8B:CE:27 Certificate issuer: /CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Certificate serial: 019A5B85A9EEAF26F1DC3A4A336C8FD1CC29 Authority key identifier: D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/OxjIWHBmVxRhcCGFgYQ3NOGLzic.roa Signing time: Thu 06 Nov 2025 23:34:37 +0000 ROA not before: Thu 06 Nov 2025 23:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43260 IP address blocks: 185.85.72.0/24 maxlen: 24 185.85.73.0/24 maxlen: 24 185.85.74.0/24 maxlen: 24 185.85.75.0/24 maxlen: 24 185.160.28.0/24 maxlen: 24 185.160.29.0/24 maxlen: 24 185.160.30.0/24 maxlen: 24 185.160.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.mft rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:5b:85:a9:ee:af:26:f1:dc:3a:4a:33:6c:8f:d1:cc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1e013ec8a5c56df241a9b2563d111f8e543bf91 Validity Not Before: Nov 6 23:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b18c858706657146170218581843734e18bce27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5f:07:2c:07:01:db:3b:1b:3b:19:9a:cb:b2: 48:2e:0e:55:6f:a6:00:ab:38:ac:5c:d8:cd:18:1f: fe:68:6a:9d:07:61:01:f3:c6:17:bb:77:95:3b:ca: a2:d6:14:77:9e:49:86:4e:fd:8f:26:1c:d7:5b:e6: 60:7d:d0:da:e4:15:3a:f4:71:d5:b5:c1:0c:59:4e: c8:bb:dc:e8:0c:9c:e7:17:8b:ff:45:b7:d0:7c:82: ce:cd:0e:3e:c8:a7:40:74:2c:4f:72:75:49:fa:3d: df:40:67:dc:68:d1:cd:f5:bd:71:b3:9d:9e:67:1f: 98:38:f9:d6:97:32:f5:c3:30:c1:1f:47:80:fa:8b: 7a:0f:2a:b6:ad:c0:18:63:c8:d3:a7:a0:c8:43:7c: 7a:ca:12:6a:4d:62:4f:1d:60:79:2e:f0:4a:46:67: 1e:3b:f7:69:01:83:36:e7:91:c1:3e:71:93:4e:ef: 54:35:d3:d3:32:4b:bd:4f:90:b7:e3:21:38:c5:88: 7f:5c:16:80:4a:57:cc:b8:87:d1:df:71:6c:78:34: ca:e6:82:2a:bd:5c:45:8b:71:82:c2:86:4f:44:56: 01:26:a4:b8:b5:57:30:9c:18:c2:89:44:2b:38:88: f8:76:de:6c:d1:a5:70:e6:3a:ea:f6:c0:8c:9c:73: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:18:C8:58:70:66:57:14:61:70:21:85:81:84:37:34:E1:8B:CE:27 X509v3 Authority Key Identifier: keyid:D1:E0:13:EC:8A:5C:56:DF:24:1A:9B:25:63:D1:11:F8:E5:43:BF:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0eAT7IpcVt8kGpslY9ER-OVDv5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/OxjIWHBmVxRhcCGFgYQ3NOGLzic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e41ef4-dc1e-4469-bd2d-440528c1e49e/1/0eAT7IpcVt8kGpslY9ER-OVDv5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.85.72.0/22 185.160.28.0/22 Signature Algorithm: sha256WithRSAEncryption 75:a7:a5:70:96:18:4a:c0:97:c6:d1:9e:8f:23:08:7f:e1:d8: 1c:91:99:5a:54:fd:34:c6:c5:3e:6f:43:66:43:90:7b:c2:52: 77:db:5d:8f:b0:b3:eb:4a:7a:5c:73:4f:93:8c:91:ff:21:de: 87:2d:e9:d5:45:71:7c:92:fd:74:00:4a:c6:d1:91:57:c5:65: f6:41:05:cb:f8:f6:d4:60:9c:4c:c7:16:a8:26:37:f1:30:bc: 9d:2f:5d:8e:38:9f:6c:7b:c8:42:d2:a6:c8:ec:6a:d0:6c:31: c3:18:48:82:d3:5a:34:0d:0d:f3:bb:51:fe:0c:97:62:93:b3: 21:c0:ad:2e:aa:22:c9:1d:7d:e9:5b:42:c0:96:b0:a3:63:0d: 7d:2c:31:20:91:50:95:07:c3:0a:aa:e2:06:a2:d7:b7:cb:24: 3a:5e:77:4b:fe:fd:4c:2a:53:58:c9:05:ae:07:4b:a4:98:8b: 69:a1:7f:27:47:83:85:fe:91:4f:97:b4:d9:6f:b6:4b:b3:9e: 14:37:8e:3e:d1:13:62:bb:9e:ee:02:11:72:88:1e:e8:ee:d2: 86:56:75:ad:56:44:b2:3f:11:6d:d9:e4:78:31:d3:c8:16:a4: 0d:d3:32:d5:46:7f:77:e7:53:75:8d:28:d1:b0:66:47:27:ec: 1f:d2:43:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZpbhanurybx3DpKM2yP0cwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZTAxM2VjOGE1YzU2ZGYyNDFhOWIyNTYzZDExMWY4ZTU0 M2JmOTEwHhcNMjUxMTA2MjMzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjE4Yzg1ODcwNjY1NzE0NjE3MDIxODU4MTg0MzczNGUxOGJjZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF8HLAcB2zsbOxmay7JILg5Vb6YA qzisXNjNGB/+aGqdB2EB88YXu3eVO8qi1hR3nkmGTv2PJhzXW+ZgfdDa5BU69HHV tcEMWU7Iu9zoDJznF4v/RbfQfILOzQ4+yKdAdCxPcnVJ+j3fQGfcaNHN9b1xs52e Zx+YOPnWlzL1wzDBH0eA+ot6Dyq2rcAYY8jTp6DIQ3x6yhJqTWJPHWB5LvBKRmce O/dpAYM255HBPnGTTu9UNdPTMku9T5C34yE4xYh/XBaASlfMuIfR33FseDTK5oIq vVxFi3GCwoZPRFYBJqS4tVcwnBjCiUQrOIj4dt5s0aVw5jrq9sCMnHO0KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDsYyFhwZlcUYXAhhYGENzThi84nMB8GA1UdIwQY MBaAFNHgE+yKXFbfJBqbJWPREfjlQ7+RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQt NDQwNTI4YzFlNDllLzEvT3hqSVdIQm1WeFJoY0NHRmdZUTNOT0dMemljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9lNDFlZjQtZGMxZS00NDY5LWJkMmQtNDQwNTI4YzFlNDll LzEvMGVBVDdJcGNWdDhrR3BzbFk5RVItT1ZEdjVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuVVIAwQC uaAcMA0GCSqGSIb3DQEBCwUAA4IBAQB1p6VwlhhKwJfG0Z6PIwh/4dgckZlaVP00 xsU+b0NmQ5B7wlJ3212PsLPrSnpcc0+TjJH/Id6HLenVRXF8kv10AErG0ZFXxWX2 QQXL+PbUYJxMxxaoJjfxMLydL12OOJ9se8hC0qbI7GrQbDHDGEiC01o0DQ3zu1H+ DJdik7MhwK0uqiLJHX3pW0LAlrCjYw19LDEgkVCVB8MKquIGote3yyQ6XndL/v1M KlNYyQWuB0ukmItpoX8nR4OF/pFPl7TZb7ZLs54UN44+0RNiu57uAhFyiB7o7tKG VnWtVkSyPxFt2eR4MdPIFqQN0zLVRn9351N1jSjRsGZHJ+wf0kPc -----END CERTIFICATE-----Generated at Fri Dec 5 07:02:16 2025 by rpki-client