This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/cOs24FhoGZM9PTE3k6F7MX_fRFM.roa File: cOs24FhoGZM9PTE3k6F7MX_fRFM.roa (raw, json) Hash identifier: r+fC3eiKZ2cPJuMKmV4L8chEvIxZUqi8OBjCXltKUes= Subject key identifier: 70:EB:36:E0:58:68:19:93:3D:3D:31:37:93:A1:7B:31:7F:DF:44:53 Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B6753E434A48E82EBC7642ECEEED6FF3A Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/cOs24FhoGZM9PTE3k6F7MX_fRFM.roa Signing time: Sun 28 Dec 2025 23:38:29 +0000 ROA not before: Sun 28 Dec 2025 23:38:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 81.22.142.0/23 maxlen: 24 89.185.0.0/22 maxlen: 22 109.72.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 14:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:53:e4:34:a4:8e:82:eb:c7:64:2e:ce:ee:d6:ff:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Dec 28 23:38:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70eb36e0586819933d3d313793a17b317fdf4453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:ea:ff:b4:b1:e7:6b:3f:a5:ba:0d:36:82: be:d5:82:46:86:a6:ad:6e:53:66:5e:ba:dd:c2:b4: 02:94:ab:de:e1:87:24:ee:e9:76:09:5a:9c:47:36: 36:55:e2:b0:d2:a6:2d:bb:5e:c0:67:9f:2e:48:37: cc:6a:5f:dd:88:84:6c:95:15:a1:93:a6:6b:11:5f: 7c:83:82:1e:0d:72:72:61:a4:6b:e9:49:60:63:84: a1:e0:16:0f:03:81:90:92:ef:7b:0d:dd:07:ef:7e: 79:9d:2f:6c:2c:f1:dd:c9:4f:89:96:6b:f4:ce:64: 0c:29:4f:44:34:97:01:80:86:1a:c3:c4:45:93:55: df:2c:f7:0e:6a:d3:ac:99:a3:30:db:0b:26:c1:f6: 41:7c:78:33:90:90:6d:db:bb:53:3f:f8:64:4e:2a: f4:b8:16:90:73:dd:1a:15:9d:78:51:99:0b:26:1e: 9d:81:a2:88:62:14:e9:1e:9f:74:21:3b:b3:24:fb: 80:a3:0f:bc:e6:08:35:60:4b:1e:b1:25:cd:e6:68: 53:0f:89:30:3c:f5:9a:8d:af:ee:18:58:9a:76:e7: 09:3f:58:44:44:c6:b1:d9:c8:88:75:6d:4c:8a:03: c4:d5:ca:97:1f:f8:e5:be:72:a4:e6:9a:8c:77:70: d6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EB:36:E0:58:68:19:93:3D:3D:31:37:93:A1:7B:31:7F:DF:44:53 X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/cOs24FhoGZM9PTE3k6F7MX_fRFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.142.0/23 89.185.0.0/22 109.72.116.0/22 Signature Algorithm: sha256WithRSAEncryption 63:31:ea:0d:41:83:77:74:a5:0e:93:9c:63:38:df:dd:cf:66: 4f:55:88:31:ac:73:3e:5a:52:7c:29:5c:04:06:c1:43:58:53: 02:e3:34:c3:a1:fd:df:52:88:76:af:2e:70:20:62:fa:e2:bf: 3d:30:f1:59:ff:bd:0b:52:57:ec:86:74:9b:a0:33:25:1e:3b: e3:4e:01:04:5c:15:c4:63:6f:07:11:ef:79:b4:ef:47:29:2a: 1c:3e:b2:8b:c0:95:58:9f:bf:b7:55:c2:db:37:30:ac:1a:ea: 3a:fe:12:db:52:1c:f7:74:ce:51:30:dd:e4:63:b2:c0:2f:85: 01:ae:10:98:8e:c7:84:a1:43:c4:69:f6:e7:25:58:d4:a2:74: 66:1f:03:d9:8d:dc:fd:75:e9:7d:f8:73:ec:96:c7:13:63:35: fb:e2:7d:0a:9e:70:ea:31:f4:3e:79:af:6e:60:95:71:61:d9: 6d:77:9f:36:17:13:28:6b:58:2c:41:d0:b7:66:a9:88:e0:8a: 20:20:89:13:7b:81:5e:9d:26:5c:29:93:4d:26:6a:46:56:28: fc:fe:ab:d4:56:6f:2d:d8:fa:ac:5a:99:c1:30:53:07:d4:72: 08:70:45:79:da:4c:64:50:d7:6a:10:e1:ef:a3:3e:4e:a5:92: 15:e5:60:3f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZtnU+Q0pI6C68dkLs7u1v86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjUxMjI4MjMzODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGViMzZlMDU4NjgxOTkzM2QzZDMxMzc5M2ExN2IzMTdmZGY0NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVbq/7Sx52s/pboNNoK+1YJGhqat blNmXrrdwrQClKve4Yck7ul2CVqcRzY2VeKw0qYtu17AZ58uSDfMal/diIRslRWh k6ZrEV98g4IeDXJyYaRr6UlgY4Sh4BYPA4GQku97Dd0H7355nS9sLPHdyU+Jlmv0 zmQMKU9ENJcBgIYaw8RFk1XfLPcOatOsmaMw2wsmwfZBfHgzkJBt27tTP/hkTir0 uBaQc90aFZ14UZkLJh6dgaKIYhTpHp90ITuzJPuAow+85gg1YEsesSXN5mhTD4kw PPWaja/uGFiaducJP1hERMax2ciIdW1MigPE1cqXH/jlvnKk5pqMd3DWfwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHDrNuBYaBmTPT0xN5OhezF/30RTMB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvY09zMjRGaG9HWk05UFRFM2s2RjdNWF9mUkZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBURaOAwQC WbkAAwQCbUh0MA0GCSqGSIb3DQEBCwUAA4IBAQBjMeoNQYN3dKUOk5xjON/dz2ZP VYgxrHM+WlJ8KVwEBsFDWFMC4zTDof3fUoh2ry5wIGL64r89MPFZ/70LUlfshnSb oDMlHjvjTgEEXBXEY28HEe95tO9HKSocPrKLwJVYn7+3VcLbNzCsGuo6/hLbUhz3 dM5RMN3kY7LAL4UBrhCYjseEoUPEafbnJVjUonRmHwPZjdz9del9+HPslscTYzX7 4n0KnnDqMfQ+ea9uYJVxYdltd582FxMoa1gsQdC3ZqmI4IogIIkTe4FenSZcKZNN JmpGVij8/qvUVm8t2PqsWpnBMFMH1HIIcEV52kxkUNdqEOHvoz5OpZIV5WA/ -----END CERTIFICATE-----Generated at Tue Dec 30 21:06:02 2025 by rpki-client