This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/oOUe1v08rYJd_ISFV2xNAS-3u8c.roa File: oOUe1v08rYJd_ISFV2xNAS-3u8c.roa (raw, json) Hash identifier: Gm6WUJFsHYOXos5+X/JKobdkkBWhDefjJa1VRsWrZKk= Subject key identifier: A0:E5:1E:D6:FD:3C:AD:82:5D:FC:84:85:57:6C:4D:01:2F:B7:BB:C7 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019B4A645D17E5E6BC91047AF75257BBFAA0 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/oOUe1v08rYJd_ISFV2xNAS-3u8c.roa Signing time: Tue 23 Dec 2025 08:47:29 +0000 ROA not before: Tue 23 Dec 2025 08:47:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 91.200.253.0/24 maxlen: 24 110.172.189.0/24 maxlen: 24 114.69.244.0/24 maxlen: 24 114.69.245.0/24 maxlen: 24 114.69.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:64:5d:17:e5:e6:bc:91:04:7a:f7:52:57:bb:fa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Dec 23 08:47:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0e51ed6fd3cad825dfc8485576c4d012fb7bbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b5:58:3b:3b:41:47:80:4a:48:67:39:b4:ca: 12:83:9b:3d:3b:77:5a:a2:5d:66:2d:24:0c:7f:e1: 6d:9e:96:3e:ba:fc:80:ba:ff:49:e5:63:15:94:0f: 49:86:54:ae:5e:0c:ff:52:8b:3d:37:a9:47:9e:13: 25:73:b3:cc:35:60:ce:27:98:47:7a:96:c6:bc:6f: cf:fe:9a:9a:23:f2:6d:ed:7a:89:ef:75:17:70:24: 79:0b:c5:94:d5:30:38:db:e7:01:d6:41:3c:15:71: 5a:b8:59:c6:7a:8d:19:d1:dc:b9:3c:20:16:59:6d: ce:89:a7:db:f0:70:58:e5:a1:37:6d:97:4b:fd:07: 8d:c8:2e:d3:51:ff:44:cf:5d:22:ca:76:69:05:6c: 66:7d:c6:34:60:5d:aa:6f:c4:4d:c4:ff:66:83:76: 84:d2:8f:24:1c:65:f7:43:61:05:81:95:55:7d:89: 24:c0:de:59:75:80:5d:a0:28:2b:73:c9:d3:0d:82: 56:9b:51:85:32:95:5b:fe:34:9b:ea:1b:23:b9:67: 59:9b:b1:de:fe:7f:e9:45:b5:f2:3b:27:b7:19:7c: 60:86:c0:f8:4b:79:e2:7b:7b:8e:2c:f0:40:86:33: b7:f9:c3:3c:c6:cb:10:75:f8:56:c2:fc:55:d2:fd: 7a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:1E:D6:FD:3C:AD:82:5D:FC:84:85:57:6C:4D:01:2F:B7:BB:C7 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/oOUe1v08rYJd_ISFV2xNAS-3u8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.253.0/24 110.172.189.0/24 114.69.244.0/23 114.69.247.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:a4:41:1f:47:a8:d9:98:b9:fa:1b:3e:10:14:21:2c:8d:f0: 4b:b2:90:5e:85:fc:c5:9d:ed:69:2e:66:28:b9:a7:27:cd:b6: 89:ba:9b:39:77:c0:8e:f4:ed:71:9e:dd:e3:21:7e:14:1e:c8: f9:41:1e:54:ff:b0:fc:e2:e4:68:93:9c:cb:46:50:c2:84:11: a2:55:d5:43:21:54:80:0b:3c:71:c9:01:0e:e0:e4:7c:ba:b1: 14:07:94:4f:16:d4:41:ee:8c:ae:9d:c6:d4:8e:c1:28:34:a2: 40:e3:8f:25:30:c8:35:3a:77:f6:03:c8:41:64:45:b3:0e:95: 43:fe:72:03:8b:65:fe:bd:42:ae:c9:59:36:9f:01:bb:e0:a0: 0f:68:74:9d:13:87:94:6f:d1:a5:08:1c:bb:ef:e1:6e:34:be: 0c:30:d2:d0:05:61:68:ce:8f:49:df:a8:ce:8e:b7:14:1f:4c: 09:bc:50:96:85:06:6c:c5:ae:ae:9c:f0:e0:06:05:2c:88:a7: 93:55:fc:7c:a5:91:42:b5:4a:c9:5f:a7:8e:79:67:85:51:38: 0d:a7:54:9a:ec:6e:8f:11:d2:47:59:34:5f:54:45:47:54:94: 7a:ef:15:26:e0:ff:d5:fa:29:97:b0:d5:61:0d:7b:5f:f2:e0: 44:ab:ea:35 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZtKZF0X5ea8kQR691JXu/qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjUxMjIzMDg0NzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGU1MWVkNmZkM2NhZDgyNWRmYzg0ODU1NzZjNGQwMTJmYjdiYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbVYOztBR4BKSGc5tMoSg5s9O3da ol1mLSQMf+FtnpY+uvyAuv9J5WMVlA9JhlSuXgz/Uos9N6lHnhMlc7PMNWDOJ5hH epbGvG/P/pqaI/Jt7XqJ73UXcCR5C8WU1TA42+cB1kE8FXFauFnGeo0Z0dy5PCAW WW3Oiafb8HBY5aE3bZdL/QeNyC7TUf9Ez10iynZpBWxmfcY0YF2qb8RNxP9mg3aE 0o8kHGX3Q2EFgZVVfYkkwN5ZdYBdoCgrc8nTDYJWm1GFMpVb/jSb6hsjuWdZm7He /n/pRbXyOye3GXxghsD4S3nie3uOLPBAhjO3+cM8xssQdfhWwvxV0v16PQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKDlHtb9PK2CXfyEhVdsTQEvt7vHMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvb09VZTF2MDhyWUpkX0lTRlYyeE5BUy0zdThjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8j9AwQA bqy9AwQBckX0AwQAckX3MA0GCSqGSIb3DQEBCwUAA4IBAQB6pEEfR6jZmLn6Gz4Q FCEsjfBLspBehfzFne1pLmYouacnzbaJups5d8CO9O1xnt3jIX4UHsj5QR5U/7D8 4uRok5zLRlDChBGiVdVDIVSACzxxyQEO4OR8urEUB5RPFtRB7oyuncbUjsEoNKJA 448lMMg1Onf2A8hBZEWzDpVD/nIDi2X+vUKuyVk2nwG74KAPaHSdE4eUb9GlCBy7 7+FuNL4MMNLQBWFozo9J36jOjrcUH0wJvFCWhQZsxa6unPDgBgUsiKeTVfx8pZFC tUrJX6eOeWeFUTgNp1Sa7G6PEdJHWTRfVEVHVJR67xUm4P/V+imXsNVhDXtf8uBE q+o1 -----END CERTIFICATE-----Generated at Tue Dec 30 21:05:11 2025 by rpki-client