This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oKguX96v3_WLR9IADsNr4viB1nU.roa File: oKguX96v3_WLR9IADsNr4viB1nU.roa (raw, json) Hash identifier: BWcgxlHpN5T3m5+uw1F4Aht91ctobSgSZ4n3IDAulT8= Subject key identifier: A0:A8:2E:5F:DE:AF:DF:F5:8B:47:D2:00:0E:C3:6B:E2:F8:81:D6:75 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019A5555462111FAC0C6B8597D5BB3B9F641 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oKguX96v3_WLR9IADsNr4viB1nU.roa Signing time: Wed 05 Nov 2025 18:44:03 +0000 ROA not before: Wed 05 Nov 2025 18:44:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215614 IP address blocks: 185.99.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:55:55:46:21:11:fa:c0:c6:b8:59:7d:5b:b3:b9:f6:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 5 18:44:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0a82e5fdeafdff58b47d2000ec36be2f881d675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8f:d7:b2:96:d9:c3:b7:3f:4a:73:ad:c9:be: 95:6e:86:00:e0:9d:40:f0:ff:90:8c:1f:29:b8:8c: 0b:c3:42:1f:07:92:d7:5c:17:83:1c:a9:3d:6d:fe: 62:d0:e3:83:80:01:6a:0a:e4:36:cd:35:72:3f:78: 57:9d:66:92:1a:9d:77:5f:5e:5c:09:da:5b:16:85: b8:97:10:9d:5c:4b:d7:dd:26:e7:ff:dc:dc:59:d9: 06:df:72:43:89:a9:bf:d8:3a:bd:40:04:ac:62:c2: e4:bd:7d:c9:3b:5b:b7:09:96:46:0d:82:dd:8b:fd: 60:60:d6:0e:aa:9e:80:fb:33:57:a0:4e:ba:e2:6f: a2:42:b7:ff:00:11:49:00:59:de:32:85:9a:a9:4a: f6:2b:95:dd:62:a5:af:94:77:4e:f2:17:89:eb:1a: ff:55:5e:2c:4a:e7:a4:3f:dc:b3:1c:c0:4a:db:94: 62:82:cd:95:bd:da:c7:c7:ca:e7:a0:89:cd:52:74: a6:ff:f0:75:46:32:1c:92:52:78:a7:f7:d1:04:dd: 3c:5b:a4:e0:b3:82:8c:46:8c:36:91:d0:f1:2e:5b: 03:dc:8c:29:c5:ad:8a:87:fe:52:bc:af:82:2d:95: ed:01:25:62:df:70:ae:5e:cf:88:63:27:48:11:92: d9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A8:2E:5F:DE:AF:DF:F5:8B:47:D2:00:0E:C3:6B:E2:F8:81:D6:75 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oKguX96v3_WLR9IADsNr4viB1nU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.99.99.0/24 Signature Algorithm: sha256WithRSAEncryption cd:5c:0f:04:e5:9e:31:9a:7e:55:b9:fc:a9:45:e2:37:39:45: 7d:54:01:19:0c:1d:a1:f0:2f:98:b4:86:85:0b:27:61:c1:31: 9b:b6:00:d5:e7:86:a2:83:ca:44:bd:73:4d:ed:bc:9f:cd:b3: b0:e7:da:37:62:18:c5:ed:2b:2b:5b:d6:f0:45:46:d9:65:03: 68:3f:69:01:04:c4:bd:f4:07:d1:ec:c3:48:e6:0f:93:a8:37: 6e:30:83:5d:06:7b:ac:a6:66:13:a7:f3:35:3d:99:5e:ea:6d: 68:0f:8a:70:32:81:e7:5b:95:6f:3e:04:39:d0:ce:f6:dc:0f: df:ff:6a:fe:67:09:f1:b3:c5:c6:01:be:d1:35:b3:64:75:ef: 5b:1f:52:bc:54:a8:75:60:f4:7e:1f:1f:3e:4b:3d:4b:b0:1f: f6:00:ae:26:d3:5a:88:5c:b0:c7:9d:a9:2c:1a:2a:56:ee:85: b0:92:2c:66:fb:e1:40:e9:0a:2e:85:d7:3a:29:66:1e:75:4f: 01:22:d9:50:c7:de:df:bc:39:54:1b:af:f3:11:7b:99:27:69: 7b:35:a1:30:c8:1e:3a:70:e7:cc:7f:c4:26:fe:00:51:8c:b4: 98:5c:21:d5:7d:bb:f0:a5:f5:c3:b4:7f:50:c7:9e:25:af:13: e9:41:f7:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpVVUYhEfrAxrhZfVuzufZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTA1MTg0NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGE4MmU1ZmRlYWZkZmY1OGI0N2QyMDAwZWMzNmJlMmY4ODFkNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI/XspbZw7c/SnOtyb6VboYA4J1A 8P+QjB8puIwLw0IfB5LXXBeDHKk9bf5i0OODgAFqCuQ2zTVyP3hXnWaSGp13X15c CdpbFoW4lxCdXEvX3Sbn/9zcWdkG33JDiam/2Dq9QASsYsLkvX3JO1u3CZZGDYLd i/1gYNYOqp6A+zNXoE664m+iQrf/ABFJAFneMoWaqUr2K5XdYqWvlHdO8heJ6xr/ VV4sSuekP9yzHMBK25Rigs2VvdrHx8rnoInNUnSm//B1RjIcklJ4p/fRBN08W6Tg s4KMRow2kdDxLlsD3Iwpxa2Kh/5SvK+CLZXtASVi33CuXs+IYydIEZLZOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCoLl/er9/1i0fSAA7Da+L4gdZ1MB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvb0tndVg5NnYzX1dMUjlJQURzTnI0dmlCMW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWNjMA0G CSqGSIb3DQEBCwUAA4IBAQDNXA8E5Z4xmn5VufypReI3OUV9VAEZDB2h8C+YtIaF CydhwTGbtgDV54aig8pEvXNN7byfzbOw59o3YhjF7SsrW9bwRUbZZQNoP2kBBMS9 9AfR7MNI5g+TqDduMINdBnuspmYTp/M1PZle6m1oD4pwMoHnW5VvPgQ50M723A/f /2r+Zwnxs8XGAb7RNbNkde9bH1K8VKh1YPR+Hx8+Sz1LsB/2AK4m01qIXLDHnaks GipW7oWwkixm++FA6Qouhdc6KWYedU8BItlQx97fvDlUG6/zEXuZJ2l7NaEwyB46 cOfMf8Qm/gBRjLSYXCHVfbvwpfXDtH9Qx54lrxPpQffz -----END CERTIFICATE-----Generated at Sat Dec 6 03:15:22 2025 by rpki-client