This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/o_4WpooR2o68mC2wEWl2MvZBybM.roa File: o_4WpooR2o68mC2wEWl2MvZBybM.roa (raw, json) Hash identifier: 4FHJqgyudIjKxPmy2ppPrc08/tIIXWaBsvzrgtw4zOw= Subject key identifier: A3:FE:16:A6:8A:11:DA:8E:BC:98:2D:B0:11:69:76:32:F6:41:C9:B3 Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 019B0E4DABC0D5D4B8B34EC4AAE72BED536E Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/o_4WpooR2o68mC2wEWl2MvZBybM.roa Signing time: Thu 11 Dec 2025 16:45:29 +0000 ROA not before: Thu 11 Dec 2025 16:45:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44066 IP address blocks: 80.91.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:4d:ab:c0:d5:d4:b8:b3:4e:c4:aa:e7:2b:ed:53:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Dec 11 16:45:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3fe16a68a11da8ebc982db011697632f641c9b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:60:d0:22:6d:d0:d4:50:d4:52:45:65:9d:32: 9f:d8:54:6b:83:ea:ac:fc:cc:d3:c5:41:74:31:4a: 05:b3:14:99:67:72:32:09:cf:4c:0c:ca:80:4e:f5: c7:88:7e:14:be:23:13:7e:b7:35:30:c8:cc:ff:17: df:86:a6:ba:f2:fd:b9:3c:bb:54:a4:6f:5c:b5:f0: c3:06:44:27:46:00:f0:6b:50:ca:31:2f:82:9e:f9: ea:c4:6f:5d:74:03:ce:fd:f7:fe:1a:61:09:7b:06: f6:50:27:9e:71:52:1b:4c:7c:c0:ed:6e:b8:85:65: 0e:4c:0a:62:b7:93:81:54:9f:0e:49:2c:85:51:b5: 0c:81:88:4c:18:93:8f:ab:c7:f9:65:a4:19:b9:3d: 2c:c0:c5:73:70:e7:2f:ac:c5:5c:0e:71:21:12:6e: 48:65:f0:45:5d:92:8f:7c:64:13:0e:f9:51:da:cf: a1:96:05:bf:af:23:02:a2:89:4c:4a:5b:3a:b5:5b: 3f:44:43:c2:d9:b9:f2:c7:c8:5c:fd:d2:81:d3:78: 37:37:c1:f0:53:c2:75:c5:ca:09:39:ca:10:d6:e6: 8e:59:4b:d3:a0:2d:e5:65:ce:e4:d4:43:96:ea:8b: 63:20:b2:f2:27:af:1b:7b:f4:ae:f3:0d:5e:81:3a: ef:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:FE:16:A6:8A:11:DA:8E:BC:98:2D:B0:11:69:76:32:F6:41:C9:B3 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/o_4WpooR2o68mC2wEWl2MvZBybM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.91.79.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:03:4c:1c:eb:4a:c2:05:cf:f0:ad:78:b1:bc:06:98:8f:10: f7:57:34:97:bb:a9:c8:ca:e5:55:26:70:96:c0:2e:59:06:07: 02:32:86:fa:10:45:e2:8c:b2:4f:f8:fa:6e:de:f8:23:12:67: fb:7c:cc:c7:e3:41:4d:3a:5d:52:2b:72:0d:55:a8:3c:9e:8f: 1f:d1:50:30:ae:7d:72:3b:8f:e2:47:0c:cd:92:9d:4b:bd:99: a9:f0:de:28:08:fb:f3:54:b4:44:a6:fb:b6:83:11:57:42:db: 0b:d4:30:52:23:8c:2a:43:69:cf:24:e3:08:0b:68:6a:d7:b0: 9e:b9:b9:97:dc:81:d9:e5:7b:14:0a:43:ba:09:bd:fc:f3:4c: 06:34:6c:cf:94:06:e7:ce:57:f8:5e:c9:65:a6:c3:53:9d:b8: 4e:2f:df:29:95:97:fd:e0:64:c4:8f:a1:a4:c6:04:08:ee:d0: ca:65:24:2b:f3:4f:4e:ff:79:71:4f:6d:fb:cb:b2:e3:fe:63: 56:b8:56:69:77:3e:db:71:80:ba:e7:b2:59:74:96:7a:f4:8b: 7a:1c:91:92:69:55:6e:df:d6:fe:cb:0d:a1:a5:f7:31:05:83: f9:cc:f8:48:83:b2:74:ab:12:e3:7b:b2:d3:e2:26:63:00:7c: 6e:1a:a1:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsOTavA1dS4s07Equcr7VNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjUxMjExMTY0NTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2ZlMTZhNjhhMTFkYThlYmM5ODJkYjAxMTY5NzYzMmY2NDFjOWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2DQIm3Q1FDUUkVlnTKf2FRrg+qs /MzTxUF0MUoFsxSZZ3IyCc9MDMqATvXHiH4UviMTfrc1MMjM/xffhqa68v25PLtU pG9ctfDDBkQnRgDwa1DKMS+CnvnqxG9ddAPO/ff+GmEJewb2UCeecVIbTHzA7W64 hWUOTApit5OBVJ8OSSyFUbUMgYhMGJOPq8f5ZaQZuT0swMVzcOcvrMVcDnEhEm5I ZfBFXZKPfGQTDvlR2s+hlgW/ryMCoolMSls6tVs/REPC2bnyx8hc/dKB03g3N8Hw U8J1xcoJOcoQ1uaOWUvToC3lZc7k1EOW6otjILLyJ68be/Su8w1egTrv2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKP+FqaKEdqOvJgtsBFpdjL2QcmzMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvb180V3Bvb1IybzY4bUMyd0VXbDJNdlpCeWJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFtPMA0G CSqGSIb3DQEBCwUAA4IBAQAvA0wc60rCBc/wrXixvAaYjxD3VzSXu6nIyuVVJnCW wC5ZBgcCMob6EEXijLJP+Ppu3vgjEmf7fMzH40FNOl1SK3INVag8no8f0VAwrn1y O4/iRwzNkp1LvZmp8N4oCPvzVLREpvu2gxFXQtsL1DBSI4wqQ2nPJOMIC2hq17Ce ubmX3IHZ5XsUCkO6Cb3880wGNGzPlAbnzlf4XsllpsNTnbhOL98plZf94GTEj6Gk xgQI7tDKZSQr809O/3lxT237y7Lj/mNWuFZpdz7bcYC657JZdJZ69It6HJGSaVVu 39b+yw2hpfcxBYP5zPhIg7J0qxLje7LT4iZjAHxuGqGd -----END CERTIFICATE-----Generated at Thu Dec 11 23:20:11 2025 by rpki-client