This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/O2UvZNyDNPq0iLGaWebRkaZfbJI.roa File: O2UvZNyDNPq0iLGaWebRkaZfbJI.roa (raw, json) Hash identifier: 6j0Qfnvw7tTrKl0Fn/jwk5u2TfP+r3Xj1LMHsqnEg/Y= Subject key identifier: 3B:65:2F:64:DC:83:34:FA:B4:88:B1:9A:59:E6:D1:91:A6:5F:6C:92 Certificate issuer: /CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Certificate serial: 019B004F352490AFE5016EA0209F39B4FBE1 Authority key identifier: BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/O2UvZNyDNPq0iLGaWebRkaZfbJI.roa Signing time: Mon 08 Dec 2025 23:32:29 +0000 ROA not before: Mon 08 Dec 2025 23:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49223 IP address blocks: 45.14.24.0/22 maxlen: 22 109.108.224.0/19 maxlen: 19 109.108.224.0/20 maxlen: 20 109.108.240.0/20 maxlen: 20 141.138.96.0/19 maxlen: 19 178.74.192.0/18 maxlen: 18 178.74.192.0/19 maxlen: 19 178.74.240.0/20 maxlen: 20 185.16.124.0/22 maxlen: 22 185.43.236.0/22 maxlen: 22 185.77.100.0/22 maxlen: 22 185.86.0.0/22 maxlen: 22 185.119.212.0/22 maxlen: 22 185.181.36.0/22 maxlen: 22 193.106.20.0/22 maxlen: 22 193.148.88.0/22 maxlen: 22 213.226.92.0/22 maxlen: 22 217.30.192.0/20 maxlen: 20 2a04:100::/29 maxlen: 29 2a04:100::/36 maxlen: 36 2a04:100:1000::/36 maxlen: 36 2a04:100:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.mft rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:00:4f:35:24:90:af:e5:01:6e:a0:20:9f:39:b4:fb:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb7ccb1a6e3bcab6319d317f62c74bf1e1f41473 Validity Not Before: Dec 8 23:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b652f64dc8334fab488b19a59e6d191a65f6c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:08:cd:17:62:65:7d:f2:49:f9:b2:4c:c7: f5:16:10:6d:c6:6a:ac:4f:6e:aa:fb:d7:2e:01:1b: 72:85:67:20:85:53:75:f9:fb:79:2c:b9:e2:f1:14: 11:43:fe:da:2b:0a:23:67:37:af:14:63:a2:f6:34: 49:66:67:01:a9:b2:b8:98:47:6c:e4:73:0a:80:e6: 8e:58:65:e5:ba:21:7f:dd:dd:23:ee:16:91:18:77: 4e:50:13:9c:51:19:25:85:66:b7:4b:e4:e5:1d:85: 4d:59:41:b0:05:a5:80:c9:a1:db:a1:f9:98:7a:47: 9b:cb:6a:6a:50:98:8e:5d:b3:91:b7:7f:e1:41:2e: 61:19:d1:87:97:50:1e:0e:83:3d:60:24:b1:20:93: 29:f8:5b:3f:b1:e2:2f:92:8a:06:80:00:d6:03:b8: 0a:ac:ff:da:77:14:de:41:ea:8a:19:bb:00:61:0a: a2:9a:cc:3d:dc:24:0f:b8:0f:f4:db:56:fc:8b:d3: 07:74:78:70:6a:40:d9:85:9b:bb:1a:b9:a1:f4:fa: c1:a0:38:2f:b9:6e:89:1b:5a:71:7a:9e:71:bd:f3: bd:ca:30:30:90:c7:7e:63:ca:3f:58:9f:3f:1c:0e: 9c:5e:c7:57:37:7a:d7:0f:6e:a8:ca:66:11:f0:90: c4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:65:2F:64:DC:83:34:FA:B4:88:B1:9A:59:E6:D1:91:A6:5F:6C:92 X509v3 Authority Key Identifier: keyid:BB:7C:CB:1A:6E:3B:CA:B6:31:9D:31:7F:62:C7:4B:F1:E1:F4:14:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3zLGm47yrYxnTF_YsdL8eH0FHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/O2UvZNyDNPq0iLGaWebRkaZfbJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/1bf7b0-4518-4141-bd6c-64b0e614d004/1/u3zLGm47yrYxnTF_YsdL8eH0FHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.24.0/22 109.108.224.0/19 141.138.96.0/19 178.74.192.0/18 185.16.124.0/22 185.43.236.0/22 185.77.100.0/22 185.86.0.0/22 185.119.212.0/22 185.181.36.0/22 193.106.20.0/22 193.148.88.0/22 213.226.92.0/22 217.30.192.0/20 IPv6: 2a04:100::/29 Signature Algorithm: sha256WithRSAEncryption b7:09:8f:74:f8:71:26:58:0e:68:ef:12:f6:de:27:02:1a:18: 01:41:f8:fd:35:21:88:13:d3:7c:21:ca:16:73:6b:66:2b:70: 00:25:e3:7b:54:c2:96:80:9d:2c:d4:6d:f1:aa:47:26:57:33: a0:55:eb:b7:78:ff:17:db:1a:3b:d1:57:a1:e6:c4:c1:5e:7b: 8d:e3:25:2c:5d:be:ff:0c:c5:56:14:8b:5e:32:a3:fc:e8:f0: 08:4e:ef:ca:0f:bf:e8:c7:2c:5e:4c:8c:15:cb:9f:9f:62:89: f9:f4:62:f0:03:63:c0:d4:ce:9e:20:ae:29:b4:d7:d3:54:c3: f4:f4:dd:14:7b:59:eb:86:40:16:82:46:24:a9:01:f3:ad:02: fc:2e:a1:b2:cc:83:c6:45:ce:7b:6c:9a:fb:96:ff:e3:48:34: a2:32:6e:f2:c1:fd:44:69:f4:12:ba:de:98:fa:46:48:62:b1: 3a:f6:96:7d:92:58:50:9a:67:f9:8a:6e:58:09:78:f8:be:41: dc:ad:4b:b8:a7:51:70:57:3b:da:2e:f1:8c:ec:36:25:43:3b: 2d:ba:4d:ba:25:e7:e0:a6:89:44:b7:a7:8b:e2:5e:d8:b8:5d: f7:61:47:92:d0:7e:46:ab:8b:e8:7c:1d:2a:00:c4:90:53:f6: 81:17:f1:50 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZsATzUkkK/lAW6gIJ85tPvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiN2NjYjFhNmUzYmNhYjYzMTlkMzE3ZjYyYzc0YmYxZTFm NDE0NzMwHhcNMjUxMjA4MjMzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjY1MmY2NGRjODMzNGZhYjQ4OGIxOWE1OWU2ZDE5MWE2NWY2YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P4IzRdiZX3ySfmyTMf1FhBtxmqs T26q+9cuARtyhWcghVN1+ft5LLni8RQRQ/7aKwojZzevFGOi9jRJZmcBqbK4mEds 5HMKgOaOWGXluiF/3d0j7haRGHdOUBOcURklhWa3S+TlHYVNWUGwBaWAyaHbofmY ekeby2pqUJiOXbORt3/hQS5hGdGHl1AeDoM9YCSxIJMp+Fs/seIvkooGgADWA7gK rP/adxTeQeqKGbsAYQqimsw93CQPuA/021b8i9MHdHhwakDZhZu7Grmh9PrBoDgv uW6JG1pxep5xvfO9yjAwkMd+Y8o/WJ8/HA6cXsdXN3rXD26oymYR8JDExQIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFDtlL2TcgzT6tIixmlnm0ZGmX2ySMB8GA1UdIwQY MBaAFLt8yxpuO8q2MZ0xf2LHS/Hh9BRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMt NjRiMGU2MTRkMDA0LzEvTzJVdlpOeUROUHEwaUxHYVdlYlJrYVpmYkpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xYmY3YjAtNDUxOC00MTQxLWJkNmMtNjRiMGU2MTRkMDA0 LzEvdTN6TEdtNDd5cll4blRGX1lzZEw4ZUgwRkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCLQ4YAwQF bWzgAwQFjYpgAwQGskrAAwQCuRB8AwQCuSvsAwQCuU1kAwQCuVYAAwQCuXfUAwQC ubUkAwQCwWoUAwQCwZRYAwQC1eJcAwQE2R7AMA0EAgACMAcDBQMqBAEAMA0GCSqG SIb3DQEBCwUAA4IBAQC3CY90+HEmWA5o7xL23icCGhgBQfj9NSGIE9N8IcoWc2tm K3AAJeN7VMKWgJ0s1G3xqkcmVzOgVeu3eP8X2xo70Veh5sTBXnuN4yUsXb7/DMVW FIteMqP86PAITu/KD7/oxyxeTIwVy5+fYon59GLwA2PA1M6eIK4ptNfTVMP09N0U e1nrhkAWgkYkqQHzrQL8LqGyzIPGRc57bJr7lv/jSDSiMm7ywf1EafQSut6Y+kZI YrE69pZ9klhQmmf5im5YCXj4vkHcrUu4p1FwVzvaLvGM7DYlQzstuk26JefgpolE t6eL4l7YuF33YUeS0H5Gq4vofB0qAMSQU/aBF/FQ -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:31 2025 by rpki-client