This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oJrJLanZB8YL87q9FPSNWhsonGg.roa File: oJrJLanZB8YL87q9FPSNWhsonGg.roa (raw, json) Hash identifier: xXHOASVE8raptCjzRAjFLcY9kAI9E7Hu3/bvJidpZYU= Subject key identifier: A0:9A:C9:2D:A9:D9:07:C6:0B:F3:BA:BD:14:F4:8D:5A:1B:28:9C:68 Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56 Certificate serial: 019A7DD45103FF453C63D03B17DF0E0294A9 Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oJrJLanZB8YL87q9FPSNWhsonGg.roa Signing time: Thu 13 Nov 2025 15:27:37 +0000 ROA not before: Thu 13 Nov 2025 15:27:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62300 IP address blocks: 195.14.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:d4:51:03:ff:45:3c:63:d0:3b:17:df:0e:02:94:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56 Validity Not Before: Nov 13 15:27:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a09ac92da9d907c60bf3babd14f48d5a1b289c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0b:2a:35:dc:24:70:d2:c8:0d:a5:7d:c9:8b: 11:57:31:7f:06:94:c6:14:52:0e:eb:44:13:21:3e: 4f:c4:eb:db:6a:f7:b6:c4:5d:91:4c:67:fd:2d:76: de:ff:e3:22:a9:31:00:f1:9c:4c:d8:51:40:71:cc: db:a2:b3:1a:7b:29:80:72:ac:76:67:88:7c:92:65: 9c:07:04:85:aa:b5:6b:7a:e9:de:09:9a:58:19:ef: 47:59:2c:eb:71:ae:a1:c2:b2:24:a9:90:dd:e7:10: ca:ab:0c:e9:fc:9f:a8:36:1d:c0:88:97:80:96:d5: 82:27:fb:f4:e5:55:6a:40:80:cc:05:79:33:50:00: 0f:a6:7f:f1:ae:7f:0d:b8:62:02:ed:ad:d9:c5:b1: 64:1e:49:2a:86:5f:6b:7b:6a:2a:b8:be:7d:a1:c4: 0e:df:20:4c:bc:8d:b2:91:fa:fc:3b:a0:e9:98:e9: 87:92:49:75:31:68:d3:42:7b:7c:4c:39:e3:d4:24: 20:5c:f8:7f:30:9a:d7:60:7d:2a:0e:b4:a5:b6:14: db:56:ab:f1:b8:ce:45:59:3b:3f:d4:a4:d6:15:2d: 29:67:dd:bf:e2:df:5d:db:be:94:26:02:6a:f8:f7: 97:c7:a2:83:04:f8:e9:18:02:c3:be:3e:f0:ce:e7: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9A:C9:2D:A9:D9:07:C6:0B:F3:BA:BD:14:F4:8D:5A:1B:28:9C:68 X509v3 Authority Key Identifier: keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/oJrJLanZB8YL87q9FPSNWhsonGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.14.118.0/24 Signature Algorithm: sha256WithRSAEncryption 73:6e:9e:61:91:62:d0:eb:d1:d2:42:a3:50:25:54:6d:eb:c5: b8:ba:2c:33:47:23:27:87:52:cb:2b:86:6e:d0:e6:d8:13:25: d7:f4:62:f8:d6:c3:8e:2e:06:ac:5b:4d:1a:ca:dc:af:9e:64: bd:f0:94:c9:91:eb:96:7a:81:9a:41:45:56:18:f9:aa:b7:6f: 7b:63:80:4d:fc:e7:78:46:47:71:00:0f:e2:43:9d:b7:11:2a: 4f:4d:b8:2c:f9:43:75:16:86:68:f0:49:84:02:5a:9d:97:58: df:e3:b3:6a:98:e4:a7:dc:e4:6f:bf:4f:b2:c7:2f:6d:20:c4: cd:d9:33:7a:94:31:89:a0:be:19:4c:06:a3:51:7a:dd:fa:4f: 15:e1:48:e6:1e:22:af:a7:e2:26:81:fc:54:93:94:5a:c1:96: 49:bb:01:11:ba:e4:b7:9f:de:c1:23:22:79:5a:44:2b:26:66: 5d:5f:d7:4e:67:2d:9c:78:34:a6:f4:b5:13:ca:5e:5e:6f:a8: 32:42:74:21:54:fb:f3:71:22:25:80:ff:09:7a:dc:86:df:d4: d9:99:84:72:50:15:2c:64:ec:63:0a:80:cf:23:bb:0f:af:88: 2e:39:4d:d1:3c:12:60:7d:cb:d6:80:0b:67:57:10:22:3c:7a: 06:2d:77:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp91FED/0U8Y9A7F98OApSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0 ZjVlNTYwHhcNMjUxMTEzMTUyNzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDlhYzkyZGE5ZDkwN2M2MGJmM2JhYmQxNGY0OGQ1YTFiMjg5YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQsqNdwkcNLIDaV9yYsRVzF/BpTG FFIO60QTIT5PxOvbave2xF2RTGf9LXbe/+MiqTEA8ZxM2FFAcczborMaeymAcqx2 Z4h8kmWcBwSFqrVreuneCZpYGe9HWSzrca6hwrIkqZDd5xDKqwzp/J+oNh3AiJeA ltWCJ/v05VVqQIDMBXkzUAAPpn/xrn8NuGIC7a3ZxbFkHkkqhl9re2oquL59ocQO 3yBMvI2ykfr8O6DpmOmHkkl1MWjTQnt8TDnj1CQgXPh/MJrXYH0qDrSlthTbVqvx uM5FWTs/1KTWFS0pZ92/4t9d276UJgJq+PeXx6KDBPjpGALDvj7wzufUDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCayS2p2QfGC/O6vRT0jVobKJxoMB8GA1UdIwQY MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt YmE5OGYxMTIyMTIxLzEvb0pySkxhblpCOFlMODdxOUZQU05XaHNvbkdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww52MA0G CSqGSIb3DQEBCwUAA4IBAQBzbp5hkWLQ69HSQqNQJVRt68W4uiwzRyMnh1LLK4Zu 0ObYEyXX9GL41sOOLgasW00aytyvnmS98JTJkeuWeoGaQUVWGPmqt297Y4BN/Od4 RkdxAA/iQ523ESpPTbgs+UN1FoZo8EmEAlqdl1jf47NqmOSn3ORvv0+yxy9tIMTN 2TN6lDGJoL4ZTAajUXrd+k8V4UjmHiKvp+ImgfxUk5RawZZJuwERuuS3n97BIyJ5 WkQrJmZdX9dOZy2ceDSm9LUTyl5eb6gyQnQhVPvzcSIlgP8JetyG39TZmYRyUBUs ZOxjCoDPI7sPr4guOU3RPBJgfcvWgAtnVxAiPHoGLXdr -----END CERTIFICATE-----Generated at Fri Dec 5 20:11:34 2025 by rpki-client