This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oobaF7DyWiN4E1WdKXTNPF91cQk.roa File: oobaF7DyWiN4E1WdKXTNPF91cQk.roa (raw, json) Hash identifier: sbT0Mt3LgR4pYaPbfvpCg/iW0VKi8aS7w7Lgp3vjZhY= Subject key identifier: A2:86:DA:17:B0:F2:5A:23:78:13:55:9D:29:74:CD:3C:5F:75:71:09 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3A3A261527BBDCCE98B96B2027F9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oobaF7DyWiN4E1WdKXTNPF91cQk.roa Signing time: Fri 19 Dec 2025 08:32:31 +0000 ROA not before: Fri 19 Dec 2025 08:32:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 14293 IP address blocks: 151.243.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:3a:3a:26:15:27:bb:dc:ce:98:b9:6b:20:27:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a286da17b0f25a237813559d2974cd3c5f757109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:45:2d:4d:b6:ea:3d:30:21:c7:67:40:7b:af: 5e:ea:26:fd:df:90:57:95:cf:b2:25:71:12:72:93: 00:46:c1:cf:8a:8e:88:34:05:e5:f2:bb:24:db:03: 51:09:e9:d1:5e:bb:f4:c0:e1:6d:e6:67:9f:e5:c9: bb:b8:18:59:5b:c6:5c:02:05:8a:39:da:12:a8:86: b2:45:35:1c:48:66:4d:00:4f:d0:84:8d:08:d9:da: 9a:e1:fe:ff:4b:00:54:e1:b8:a4:bd:cf:ba:f4:84: b4:07:36:6c:43:f3:76:81:48:50:3e:ff:65:f7:74: 51:3c:38:f3:4e:be:1c:28:cb:e6:14:0e:f0:1b:2b: ee:81:27:89:78:4f:9b:3c:3a:46:ce:4f:53:8e:8a: 40:c8:75:88:1d:13:75:96:9d:7e:e6:5a:17:99:da: c3:b7:2a:bf:d4:00:da:ed:3b:bc:f8:e0:12:f6:1f: 66:95:d3:6f:90:06:eb:e6:3d:2a:71:01:25:e8:59: ed:54:c7:b1:f3:bd:41:4f:78:17:19:0e:c8:72:02: 7a:3f:37:2c:9e:9d:84:a1:32:ba:9d:c2:c0:4e:fd: ff:7c:77:41:ea:34:37:ec:a2:56:7d:af:13:6b:4c: df:35:cf:e9:e9:ab:5c:e3:05:28:73:80:41:51:82: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:86:DA:17:B0:F2:5A:23:78:13:55:9D:29:74:CD:3C:5F:75:71:09 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oobaF7DyWiN4E1WdKXTNPF91cQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.170.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:2f:6c:cc:8e:0b:94:70:34:2b:60:06:32:ed:6c:54:3e:18: 09:1c:f1:52:17:a8:c0:b4:04:11:ff:a5:91:09:d1:a6:d1:c2: fc:c3:2d:cd:02:e9:82:cb:e2:eb:50:6f:1c:0a:53:ff:cb:be: 5e:88:fb:1e:d3:e1:d9:f9:7b:e5:ae:a8:e5:fa:80:d0:1d:b8: d9:4c:54:21:b1:b1:30:a7:32:d1:92:40:51:d0:40:7b:8b:a9: 5a:f4:20:cc:23:43:7b:f9:79:b6:19:01:0e:d5:a8:04:d9:74: 7b:50:d3:33:7b:23:c4:20:16:eb:b0:64:38:72:5e:c8:f5:02: 2c:a9:7a:84:bf:9d:24:bd:39:35:88:f9:06:58:06:39:7c:b4: c9:bb:ac:1c:b6:ea:af:40:8c:e4:9e:90:89:f9:a6:57:34:57: 88:6c:e0:8d:bf:80:65:85:f5:6d:fd:a3:bb:2b:6f:58:0e:a7: fd:ab:5a:57:e9:d9:fe:44:80:f1:ce:54:3e:dc:02:b3:d8:e7: d4:d7:ab:8a:48:bd:84:06:39:9c:83:6b:4a:4f:28:4b:cd:5e: e0:b5:24:22:6c:2f:d8:84:40:29:b4:2d:6c:e5:69:f5:c0:0c: a3:92:4e:24:ca:0e:1a:9f:83:7c:18:6d:a3:4b:1e:ac:42:95: 7d:37:ca:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs1vTo6JhUnu9zOmLlrICf5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjg2ZGExN2IwZjI1YTIzNzgxMzU1OWQyOTc0Y2QzYzVmNzU3MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EUtTbbqPTAhx2dAe69e6ib935BX lc+yJXEScpMARsHPio6INAXl8rsk2wNRCenRXrv0wOFt5mef5cm7uBhZW8ZcAgWK OdoSqIayRTUcSGZNAE/QhI0I2dqa4f7/SwBU4bikvc+69IS0BzZsQ/N2gUhQPv9l 93RRPDjzTr4cKMvmFA7wGyvugSeJeE+bPDpGzk9TjopAyHWIHRN1lp1+5loXmdrD tyq/1ADa7Tu8+OAS9h9mldNvkAbr5j0qcQEl6FntVMex871BT3gXGQ7IcgJ6Pzcs np2EoTK6ncLATv3/fHdB6jQ37KJWfa8Ta0zfNc/p6atc4wUoc4BBUYInzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKKG2hew8lojeBNVnSl0zTxfdXEJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb29iYUY3RHlXaU40RTFXZEtYVE5QRjkxY1FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OqMA0G CSqGSIb3DQEBCwUAA4IBAQCML2zMjguUcDQrYAYy7WxUPhgJHPFSF6jAtAQR/6WR CdGm0cL8wy3NAumCy+LrUG8cClP/y75eiPse0+HZ+Xvlrqjl+oDQHbjZTFQhsbEw pzLRkkBR0EB7i6la9CDMI0N7+Xm2GQEO1agE2XR7UNMzeyPEIBbrsGQ4cl7I9QIs qXqEv50kvTk1iPkGWAY5fLTJu6wctuqvQIzknpCJ+aZXNFeIbOCNv4BlhfVt/aO7 K29YDqf9q1pX6dn+RIDxzlQ+3AKz2OfU16uKSL2EBjmcg2tKTyhLzV7gtSQibC/Y hEAptC1s5Wn1wAyjkk4kyg4an4N8GG2jSx6sQpV9N8pj -----END CERTIFICATE-----Generated at Sat Dec 20 11:09:43 2025 by rpki-client