This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/oyDxBVtF1LjTnCQDciTh8zuFqYQ.roa File: oyDxBVtF1LjTnCQDciTh8zuFqYQ.roa (raw, json) Hash identifier: pYXg+Vf94Nw+ugeuc3FGDfBMx7ld+TJ8OE/NCWTXTOo= Subject key identifier: A3:20:F1:05:5B:45:D4:B8:D3:9C:24:03:72:24:E1:F3:3B:85:A9:84 Certificate issuer: /CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Certificate serial: 019AB69BD10CF8EFAE7EB4B42F66ABB0FFEE Authority key identifier: B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/oyDxBVtF1LjTnCQDciTh8zuFqYQ.roa Signing time: Mon 24 Nov 2025 16:04:16 +0000 ROA not before: Mon 24 Nov 2025 16:04:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52025 IP address blocks: 185.121.24.0/24 maxlen: 32 185.121.25.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.mft rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:9b:d1:0c:f8:ef:ae:7e:b4:b4:2f:66:ab:b0:ff:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b607604501de3609768c5ba7c4cca9c56b61f9d5 Validity Not Before: Nov 24 16:04:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a320f1055b45d4b8d39c24037224e1f33b85a984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:ce:8c:d1:92:c5:b5:c7:7f:44:f9:58:1a: 0d:26:0f:00:71:31:a8:e8:da:1a:44:81:be:b7:c0: 91:cd:be:be:c0:63:44:4e:c3:fb:51:bb:36:82:f7: ed:74:ec:cf:31:60:f4:bc:35:20:21:7b:0d:26:87: e2:68:59:9d:a8:43:ed:e2:36:e0:14:11:7e:c8:a7: 29:87:3f:4a:69:d2:43:18:d4:ce:be:bc:96:e6:19: dd:83:71:65:f3:93:35:79:06:21:0f:4f:aa:35:e4: 78:3e:c4:a5:4d:dd:8a:7e:40:1d:37:59:df:fb:9e: 44:ed:bf:51:d2:b0:a1:f5:b2:5f:05:05:a7:3d:cf: d3:c2:a3:cd:87:dd:38:a3:b6:7c:9c:9b:46:87:39: 3a:17:7d:5f:ae:06:ee:51:7b:cd:1f:8a:66:6f:f0: 96:73:77:c0:12:71:16:72:8b:8d:53:01:fc:ec:db: 42:c3:63:4c:f9:d1:ab:ae:32:41:73:29:21:87:46: 4b:61:41:c4:76:18:f4:b0:31:1e:91:e9:b0:4c:aa: 6c:54:11:7a:50:c9:e4:f1:00:b2:20:7f:56:11:19: 85:bb:c3:e6:43:12:f1:ca:e4:e3:e6:b1:a4:ef:49: 31:c3:cf:df:09:ae:43:99:8b:30:83:04:9f:95:eb: a4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:20:F1:05:5B:45:D4:B8:D3:9C:24:03:72:24:E1:F3:3B:85:A9:84 X509v3 Authority Key Identifier: keyid:B6:07:60:45:01:DE:36:09:76:8C:5B:A7:C4:CC:A9:C5:6B:61:F9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgdgRQHeNgl2jFunxMypxWth-dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/oyDxBVtF1LjTnCQDciTh8zuFqYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d0f619-b2d3-4422-a618-b9dd51082655/1/tgdgRQHeNgl2jFunxMypxWth-dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:6a:18:ca:34:67:a4:ff:b6:4a:4e:29:f9:07:66:3c:1f:2d: df:3c:47:97:86:4b:86:04:73:7b:86:63:e0:09:6e:52:dd:43: 45:63:a6:e6:31:7a:df:c7:fc:1b:d2:cc:f1:3f:e5:75:18:42: af:43:51:27:d0:a9:ba:10:9e:23:58:19:cf:25:20:54:35:03: cd:1d:59:2b:77:ef:ce:ea:8a:80:b7:6b:9a:1d:32:64:aa:d9: 6c:99:9f:85:5d:d0:53:a1:79:e0:d9:df:88:9b:97:fb:dd:6a: f9:d5:9d:00:45:20:89:65:df:13:b1:ea:a5:c4:1c:85:f6:b9: fb:b7:9b:ca:ad:c9:e9:60:83:1a:26:19:e0:89:49:b3:80:c1: 5d:9a:3e:f5:74:2b:8b:44:af:55:65:a7:a2:40:51:b0:90:44: 8f:f5:ca:bb:ba:7e:43:e1:7c:11:73:72:a0:b0:ac:46:d6:15: 78:59:2c:a3:3d:fa:36:00:ee:b2:c9:5f:36:dd:e8:66:6e:e6: 41:d7:5d:48:9c:e3:6c:8d:6e:5d:4c:70:3d:c0:1e:60:24:a3: f2:ad:06:38:96:b8:54:1d:63:22:84:49:9c:9d:54:e9:07:91: d2:ea:c9:10:29:ee:86:95:f0:cb:68:1a:62:38:7b:7a:75:cd: 34:34:b9:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq2m9EM+O+ufrS0L2arsP/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MDc2MDQ1MDFkZTM2MDk3NjhjNWJhN2M0Y2NhOWM1NmI2 MWY5ZDUwHhcNMjUxMTI0MTYwNDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzIwZjEwNTViNDVkNGI4ZDM5YzI0MDM3MjI0ZTFmMzNiODVhOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTXOjNGSxbXHf0T5WBoNJg8AcTGo 6NoaRIG+t8CRzb6+wGNETsP7Ubs2gvftdOzPMWD0vDUgIXsNJofiaFmdqEPt4jbg FBF+yKcphz9KadJDGNTOvryW5hndg3Fl85M1eQYhD0+qNeR4PsSlTd2KfkAdN1nf +55E7b9R0rCh9bJfBQWnPc/TwqPNh904o7Z8nJtGhzk6F31frgbuUXvNH4pmb/CW c3fAEnEWcouNUwH87NtCw2NM+dGrrjJBcykhh0ZLYUHEdhj0sDEekemwTKpsVBF6 UMnk8QCyIH9WERmFu8PmQxLxyuTj5rGk70kxw8/fCa5DmYswgwSfleukvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMg8QVbRdS405wkA3Ik4fM7hamEMB8GA1UdIwQY MBaAFLYHYEUB3jYJdoxbp8TMqcVrYfnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgt YjlkZDUxMDgyNjU1LzEvb3lEeEJWdEYxTGpUbkNRRGNpVGg4enVGcVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kMGY2MTktYjJkMy00NDIyLWE2MTgtYjlkZDUxMDgyNjU1 LzEvdGdkZ1JRSGVOZ2wyakZ1bnhNeXB4V3RoLWRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXkYMA0G CSqGSIb3DQEBCwUAA4IBAQBdahjKNGek/7ZKTin5B2Y8Hy3fPEeXhkuGBHN7hmPg CW5S3UNFY6bmMXrfx/wb0szxP+V1GEKvQ1En0Km6EJ4jWBnPJSBUNQPNHVkrd+/O 6oqAt2uaHTJkqtlsmZ+FXdBToXng2d+Im5f73Wr51Z0ARSCJZd8TseqlxByF9rn7 t5vKrcnpYIMaJhngiUmzgMFdmj71dCuLRK9VZaeiQFGwkESP9cq7un5D4XwRc3Kg sKxG1hV4WSyjPfo2AO6yyV823ehmbuZB111InONsjW5dTHA9wB5gJKPyrQY4lrhU HWMihEmcnVTpB5HS6skQKe6GlfDLaBpiOHt6dc00NLlf -----END CERTIFICATE-----Generated at Fri Nov 28 08:34:46 2025 by rpki-client