This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dlY4L8kI4nllfMjD6ikk1LKsMqk.roa File: dlY4L8kI4nllfMjD6ikk1LKsMqk.roa (raw, json) Hash identifier: hO8nYWuAbhvLrRd/OKPRFCGvAxdDJqFdOnmYdoHGZ6Q= Subject key identifier: 76:56:38:2F:C9:08:E2:79:65:7C:C8:C3:EA:29:24:D4:B2:AC:32:A9 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B03A3909A0131A020FC4B2D13A52CD12E Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dlY4L8kI4nllfMjD6ikk1LKsMqk.roa Signing time: Tue 09 Dec 2025 15:03:29 +0000 ROA not before: Tue 09 Dec 2025 15:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 212.116.228.0/24 maxlen: 24 212.116.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:a3:90:9a:01:31:a0:20:fc:4b:2d:13:a5:2c:d1:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Dec 9 15:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7656382fc908e279657cc8c3ea2924d4b2ac32a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:fc:8e:22:8c:9f:0b:53:67:dd:11:fe:f7: c6:9e:f2:f5:24:3d:a7:32:51:e2:25:99:03:fb:8a: bd:8c:b1:89:10:5d:29:ae:ab:91:cd:ec:c2:23:9e: 12:06:f1:bc:cc:d2:77:c4:20:4a:7a:73:1d:cf:92: 12:94:21:f3:37:3f:0b:96:f3:57:8e:09:d4:86:0b: 43:57:5a:f8:ac:48:50:09:92:a1:c8:55:14:ae:e3: 54:01:0b:5f:10:58:45:e5:57:d0:46:99:1d:e4:a0: 12:ee:34:08:e4:c6:08:40:ef:0e:2b:64:d1:e2:86: 18:65:a1:6d:fb:27:4b:5d:1b:28:37:e8:0a:a5:50: c1:e8:79:95:b7:07:2e:8b:58:65:12:94:ee:66:01: fb:f5:b0:35:38:7d:7a:51:5e:b9:7b:18:52:a7:fd: 73:50:79:4a:40:57:b4:c8:cc:ba:7b:93:10:ce:f8: fd:0b:c2:d9:c2:28:a7:8a:e7:61:2c:0e:4a:5c:ea: 48:81:81:ec:09:b9:9d:a6:da:9c:50:67:f3:1d:4f: 5e:0c:21:0a:1b:29:7f:50:de:ec:84:6c:f3:56:66: f5:47:32:11:e7:55:12:b1:32:31:68:57:b4:ff:dc: ff:40:6d:df:39:11:d4:a5:a1:99:da:88:dd:ca:29: d1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:56:38:2F:C9:08:E2:79:65:7C:C8:C3:EA:29:24:D4:B2:AC:32:A9 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/dlY4L8kI4nllfMjD6ikk1LKsMqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.228.0/23 Signature Algorithm: sha256WithRSAEncryption 62:22:f0:52:4d:27:c7:92:7c:7b:73:4b:9f:f4:e7:d5:03:52: f1:60:35:9f:01:3d:06:04:82:a9:34:fe:1c:30:89:d4:61:19: 03:06:6d:c2:e2:f1:67:34:27:be:c5:0d:07:a4:9b:b5:e8:72: 19:ae:08:8d:4a:f2:bd:56:ea:02:c8:2c:6b:7f:60:db:1f:73: 7c:6f:ff:77:73:8a:11:ac:82:38:7a:3b:89:94:b3:f4:ac:71: 1a:d2:ad:ae:5e:21:43:1c:fe:05:ff:81:1a:6a:06:ac:02:b1: d3:e6:e1:da:b3:34:e3:fc:49:02:1a:50:f2:ca:31:9f:b2:06: 27:b6:fc:05:41:91:31:b2:32:a1:eb:b5:9c:df:36:89:a5:19: 8e:d5:03:64:8d:b0:16:4f:e5:32:8b:fc:09:23:42:0c:f4:e2: 67:4b:53:df:d8:50:47:71:ee:b5:42:60:bb:a3:08:fe:70:c9: 24:f1:83:9d:40:e3:96:94:c4:d3:d8:6f:e5:dd:4e:f1:29:cc: a5:0a:12:bd:7a:21:48:9e:cf:e0:3f:2b:f8:a3:27:ed:8d:da: 7c:34:79:ff:55:a2:46:47:58:ff:12:38:6f:3d:89:8c:32:af: ec:07:c9:4c:b2:2a:46:b9:de:52:77:7f:e0:26:88:15:62:39: fe:59:8a:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsDo5CaATGgIPxLLROlLNEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMjA5MTUwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjU2MzgyZmM5MDhlMjc5NjU3Y2M4YzNlYTI5MjRkNGIyYWMzMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWr8jiKMnwtTZ90R/vfGnvL1JD2n MlHiJZkD+4q9jLGJEF0prquRzezCI54SBvG8zNJ3xCBKenMdz5ISlCHzNz8LlvNX jgnUhgtDV1r4rEhQCZKhyFUUruNUAQtfEFhF5VfQRpkd5KAS7jQI5MYIQO8OK2TR 4oYYZaFt+ydLXRsoN+gKpVDB6HmVtwcui1hlEpTuZgH79bA1OH16UV65exhSp/1z UHlKQFe0yMy6e5MQzvj9C8LZwiiniudhLA5KXOpIgYHsCbmdptqcUGfzHU9eDCEK Gyl/UN7shGzzVmb1RzIR51USsTIxaFe0/9z/QG3fORHUpaGZ2ojdyinRuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZWOC/JCOJ5ZXzIw+opJNSyrDKpMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvZGxZNEw4a0k0bmxsZk1qRDZpa2sxTEtzTXFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1HTkMA0G CSqGSIb3DQEBCwUAA4IBAQBiIvBSTSfHknx7c0uf9OfVA1LxYDWfAT0GBIKpNP4c MInUYRkDBm3C4vFnNCe+xQ0HpJu16HIZrgiNSvK9VuoCyCxrf2DbH3N8b/93c4oR rII4ejuJlLP0rHEa0q2uXiFDHP4F/4EaagasArHT5uHaszTj/EkCGlDyyjGfsgYn tvwFQZExsjKh67Wc3zaJpRmO1QNkjbAWT+Uyi/wJI0IM9OJnS1Pf2FBHce61QmC7 owj+cMkk8YOdQOOWlMTT2G/l3U7xKcylChK9eiFIns/gPyv4oyftjdp8NHn/VaJG R1j/EjhvPYmMMq/sB8lMsipGud5Sd3/gJogVYjn+WYpb -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:48 2025 by rpki-client