This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/onrnKcPvPLrWOco8c8BgPJ5AdEY.roa File: onrnKcPvPLrWOco8c8BgPJ5AdEY.roa (raw, json) Hash identifier: P3NvJ3ur2KEVKjEMdxQ1GHiTOUfECUozXLAL8qeE1yg= Subject key identifier: A2:7A:E7:29:C3:EF:3C:BA:D6:39:CA:3C:73:C0:60:3C:9E:40:74:46 Certificate issuer: /CN=7741d13a15a987dd60019c0265d2ecec4840944a Certificate serial: 019B2C4B784A49C4B68B28DA92F3E29A1D24 Authority key identifier: 77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/onrnKcPvPLrWOco8c8BgPJ5AdEY.roa Signing time: Wed 17 Dec 2025 12:31:42 +0000 ROA not before: Wed 17 Dec 2025 12:31:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 81.161.62.0/24 maxlen: 24 91.227.193.0/24 maxlen: 24 194.34.104.0/24 maxlen: 24 2a01:fd40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.mft rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:4b:78:4a:49:c4:b6:8b:28:da:92:f3:e2:9a:1d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7741d13a15a987dd60019c0265d2ecec4840944a Validity Not Before: Dec 17 12:31:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a27ae729c3ef3cbad639ca3c73c0603c9e407446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:91:9c:38:0c:65:f5:3d:e1:9a:06:bf:3b: 66:2b:46:75:ac:7d:c2:f0:00:d3:1d:a9:93:19:d8: 70:00:a7:be:7f:d6:d1:dd:44:4b:8f:9f:93:c0:61: e1:15:35:e5:1a:fb:3f:f0:ee:da:77:41:2e:2c:a3: 31:db:98:1e:07:73:f8:08:fa:e1:29:d6:c9:8b:c6: be:41:eb:11:67:21:dd:7e:6e:cb:31:ca:82:32:87: cd:c4:fe:70:df:d5:3b:9e:3d:f2:93:67:dd:c5:2c: 6d:79:2d:7c:01:9e:4c:bf:9c:37:49:61:1f:32:ad: 8a:84:21:08:43:02:bd:7a:63:54:8a:b7:ea:6c:ec: a4:8d:68:15:a0:76:78:6b:4e:83:55:43:77:59:55: 55:85:a8:aa:9e:75:fd:85:cb:c0:45:8e:22:e4:0b: 05:47:80:94:e6:b2:3b:c2:70:cd:0c:22:5c:21:d2: 1d:80:d6:23:78:75:a8:2c:b5:fb:fe:87:76:1a:cd: 7a:8f:96:d5:60:62:72:0d:f2:be:fe:5d:f2:a8:79: 43:96:82:ae:a0:2d:29:be:56:a2:48:ec:9c:b5:13: b1:df:5f:41:92:f2:cd:a9:5d:38:d8:5a:a2:02:20: 6e:32:65:2b:26:48:d6:bf:78:3d:fa:20:10:8d:63: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:7A:E7:29:C3:EF:3C:BA:D6:39:CA:3C:73:C0:60:3C:9E:40:74:46 X509v3 Authority Key Identifier: keyid:77:41:D1:3A:15:A9:87:DD:60:01:9C:02:65:D2:EC:EC:48:40:94:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0HROhWph91gAZwCZdLs7EhAlEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/onrnKcPvPLrWOco8c8BgPJ5AdEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0be9d0-999a-449a-8519-3523e3030be4/1/d0HROhWph91gAZwCZdLs7EhAlEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.62.0/24 91.227.193.0/24 194.34.104.0/24 IPv6: 2a01:fd40::/32 Signature Algorithm: sha256WithRSAEncryption 3d:d1:68:94:b3:51:76:b1:bb:e9:dc:f8:87:d3:44:23:76:2c: 2f:dd:cc:1c:4e:89:9b:7d:e4:9f:08:cd:93:c1:2a:29:e6:56: c6:45:ee:b6:5b:b0:cf:16:3b:2e:92:b3:d6:f0:18:b4:a0:ac: c2:89:ed:d4:66:e0:0d:a0:5c:c1:84:e6:6f:d1:9a:7d:67:72: e5:0d:01:09:a5:4d:a3:35:eb:b8:b7:0e:c1:31:ff:3f:60:71: 0a:17:77:96:86:c0:c6:ed:5d:ff:4a:b3:23:4d:b7:2e:f1:e8: a5:ab:ec:0f:be:78:33:6e:8d:20:79:91:1e:bd:23:bb:d1:58: c1:c2:6b:0e:03:b6:95:81:ee:2e:1a:0f:ae:50:9e:71:4d:a8: 91:a6:43:6a:99:20:e8:d5:a0:43:62:80:8c:58:d7:8b:58:ae: df:8d:49:c5:44:5e:96:6d:00:45:bc:d6:3d:1b:6f:14:f0:80: 4c:5d:42:3f:16:6e:3d:7a:65:77:4a:0b:87:36:87:2e:bf:d9: 36:dd:ca:f1:38:4b:e8:30:fa:ab:d8:72:2e:61:7f:2e:ef:b9: 17:e0:35:0b:9b:6b:92:83:5b:47:f1:60:a4:93:4d:cd:a1:fe: b4:1a:60:0d:bf:d0:79:15:9c:ef:b8:70:b0:26:9c:ac:e5:4d: 2c:6a:cf:15 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZssS3hKScS2iyjakvPimh0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDFkMTNhMTVhOTg3ZGQ2MDAxOWMwMjY1ZDJlY2VjNDg0 MDk0NGEwHhcNMjUxMjE3MTIzMTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjdhZTcyOWMzZWYzY2JhZDYzOWNhM2M3M2MwNjAzYzllNDA3NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxqRnDgMZfU94ZoGvztmK0Z1rH3C 8ADTHamTGdhwAKe+f9bR3URLj5+TwGHhFTXlGvs/8O7ad0EuLKMx25geB3P4CPrh KdbJi8a+QesRZyHdfm7LMcqCMofNxP5w39U7nj3yk2fdxSxteS18AZ5Mv5w3SWEf Mq2KhCEIQwK9emNUirfqbOykjWgVoHZ4a06DVUN3WVVVhaiqnnX9hcvARY4i5AsF R4CU5rI7wnDNDCJcIdIdgNYjeHWoLLX7/od2Gs16j5bVYGJyDfK+/l3yqHlDloKu oC0pvlaiSOyctROx319BkvLNqV042FqiAiBuMmUrJkjWv3g9+iAQjWPO5QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKJ65ynD7zy61jnKPHPAYDyeQHRGMB8GA1UdIwQY MBaAFHdB0ToVqYfdYAGcAmXS7OxIQJRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTkt MzUyM2UzMDMwYmU0LzEvb25ybktjUHZQTHJXT2NvOGM4QmdQSjVBZEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wYmU5ZDAtOTk5YS00NDlhLTg1MTktMzUyM2UzMDMwYmU0 LzEvZDBIUk9oV3BoOTFnQVp3Q1pkTHM3RWhBbEVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAUaE+AwQA W+PBAwQAwiJoMA0EAgACMAcDBQAqAf1AMA0GCSqGSIb3DQEBCwUAA4IBAQA90WiU s1F2sbvp3PiH00Qjdiwv3cwcTombfeSfCM2TwSop5lbGRe62W7DPFjsukrPW8Bi0 oKzCie3UZuANoFzBhOZv0Zp9Z3LlDQEJpU2jNeu4tw7BMf8/YHEKF3eWhsDG7V3/ SrMjTbcu8eilq+wPvngzbo0geZEevSO70VjBwmsOA7aVge4uGg+uUJ5xTaiRpkNq mSDo1aBDYoCMWNeLWK7fjUnFRF6WbQBFvNY9G28U8IBMXUI/Fm49emV3SguHNocu v9k23crxOEvoMPqr2HIuYX8u77kX4DULm2uSg1tH8WCkk03Nof60GmANv9B5FZzv uHCwJpys5U0sas8V -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:13 2025 by rpki-client