This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/r0yowQ0MWThSBRK1q8ONFB2RDK8.roa File: r0yowQ0MWThSBRK1q8ONFB2RDK8.roa (raw, json) Hash identifier: tHX6xuYO4eeNxuNoLS1hAWvoHLR3aatnfZ492PX6iU4= Subject key identifier: AF:4C:A8:C1:0D:0C:59:38:52:05:12:B5:AB:C3:8D:14:1D:91:0C:AF Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B36BBB4E4E772D464F59624FEC4ABA7DC Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/r0yowQ0MWThSBRK1q8ONFB2RDK8.roa Signing time: Fri 19 Dec 2025 13:10:29 +0000 ROA not before: Fri 19 Dec 2025 13:10:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213529 IP address blocks: 147.45.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:bb:b4:e4:e7:72:d4:64:f5:96:24:fe:c4:ab:a7:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Dec 19 13:10:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=af4ca8c10d0c5938520512b5abc38d141d910caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:76:4f:a2:0a:d2:f0:1b:2b:3e:e5:a1:79: ed:3d:d4:8c:5a:51:b8:7b:e8:58:43:17:2f:fc:55: ac:f7:71:d0:98:43:66:ee:b7:85:3b:dd:c0:d6:1b: eb:ce:5d:00:9c:73:7e:a8:64:7f:40:52:ca:8e:b7: dd:4f:7d:bf:d5:09:6c:80:01:8b:37:65:0a:8d:e0: cc:03:a5:bc:11:2e:27:fe:d8:c8:56:b7:f4:cb:6d: 26:85:de:25:c3:99:25:08:c7:6e:ed:b0:e7:d7:05: e0:4c:55:23:d7:10:df:bd:22:55:4d:7f:7f:e9:af: c6:d9:1c:0a:73:eb:6a:5b:0a:47:3e:67:ab:b5:11: f0:74:fa:38:b5:d9:f3:f5:5d:95:9b:5b:78:67:a7: 3b:52:a5:ff:13:62:7d:43:5a:cd:65:cc:2b:ad:d3: 8d:f1:7e:74:ab:96:bc:8b:10:de:c4:f3:0a:06:7d: ad:eb:ca:eb:dd:2e:2b:31:0f:5c:e4:07:99:59:b8: 44:f6:27:8a:64:44:70:37:94:27:3b:8c:6c:37:db: a2:0e:0e:f2:b4:db:a0:e7:c8:5b:ee:f5:71:85:82: ec:5a:ff:bd:e6:fd:c5:1c:e6:31:e5:77:83:53:35: f4:d2:02:d2:e2:f7:d3:66:47:f0:33:a3:64:bb:12: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4C:A8:C1:0D:0C:59:38:52:05:12:B5:AB:C3:8D:14:1D:91:0C:AF X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/r0yowQ0MWThSBRK1q8ONFB2RDK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.216.0/24 Signature Algorithm: sha256WithRSAEncryption 63:31:c8:05:0e:f3:7a:31:2c:bb:d5:d1:d2:6a:05:79:b1:74: db:ca:f2:1f:3f:c3:98:2e:1b:23:f4:79:1b:82:54:2b:6e:20: b6:bd:86:09:1e:2f:70:36:e8:75:63:29:df:39:36:ba:c2:7a: da:1d:64:b0:be:31:99:e5:0c:31:a9:99:db:16:26:d9:3b:68: 37:00:12:c6:c2:25:7a:68:52:f7:30:77:22:7f:07:66:8c:ba: 39:57:3c:48:65:47:e4:eb:de:9c:90:d5:e4:23:fb:68:8d:10: 18:37:4d:2f:62:be:26:af:b4:1a:fc:cb:6d:c8:f1:b8:7a:56: 5d:78:53:b5:2f:0f:e0:f2:a1:dc:d4:00:66:ee:6a:0c:c6:7b: 7b:9f:59:2d:c2:df:d3:fc:a8:08:5f:99:d1:08:18:32:20:b8: 6f:d9:4f:94:ff:ea:51:70:46:86:74:ff:f2:6e:11:ae:e2:a5: 06:b9:61:93:c3:bf:df:b2:36:09:9c:5c:bb:d7:25:b8:e1:9e: ed:b0:a6:97:33:b5:a2:06:3d:29:e3:63:07:76:bd:6c:c9:7e: 8b:15:6e:a8:44:a7:a8:35:ce:3d:a2:5d:d3:b7:9c:0d:18:f7: 7c:e6:75:95:37:b6:7c:21:cc:83:b3:52:b1:97:56:b7:67:66: 77:c9:68:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs2u7Tk53LUZPWWJP7Eq6fcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjUxMjE5MTMxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjRjYThjMTBkMGM1OTM4NTIwNTEyYjVhYmMzOGQxNDFkOTEwY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mB2T6IK0vAbKz7loXntPdSMWlG4 e+hYQxcv/FWs93HQmENm7reFO93A1hvrzl0AnHN+qGR/QFLKjrfdT32/1QlsgAGL N2UKjeDMA6W8ES4n/tjIVrf0y20mhd4lw5klCMdu7bDn1wXgTFUj1xDfvSJVTX9/ 6a/G2RwKc+tqWwpHPmertRHwdPo4tdnz9V2Vm1t4Z6c7UqX/E2J9Q1rNZcwrrdON 8X50q5a8ixDexPMKBn2t68rr3S4rMQ9c5AeZWbhE9ieKZERwN5QnO4xsN9uiDg7y tNug58hb7vVxhYLsWv+95v3FHOYx5XeDUzX00gLS4vfTZkfwM6NkuxKBTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK9MqMENDFk4UgUStavDjRQdkQyvMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvcjB5b3dRME1XVGhTQlJLMXE4T05GQjJSREs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky3YMA0G CSqGSIb3DQEBCwUAA4IBAQBjMcgFDvN6MSy71dHSagV5sXTbyvIfP8OYLhsj9Hkb glQrbiC2vYYJHi9wNuh1YynfOTa6wnraHWSwvjGZ5QwxqZnbFibZO2g3ABLGwiV6 aFL3MHcifwdmjLo5VzxIZUfk696ckNXkI/tojRAYN00vYr4mr7Qa/MttyPG4elZd eFO1Lw/g8qHc1ABm7moMxnt7n1ktwt/T/KgIX5nRCBgyILhv2U+U/+pRcEaGdP/y bhGu4qUGuWGTw7/fsjYJnFy71yW44Z7tsKaXM7WiBj0p42MHdr1syX6LFW6oRKeo Nc49ol3Tt5wNGPd85nWVN7Z8IcyDs1Kxl1a3Z2Z3yWhF -----END CERTIFICATE-----Generated at Sat Dec 20 01:38:26 2025 by rpki-client