This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/oJyyYZN3aEY3mfL5n1a4s-7OLSo.roa File: oJyyYZN3aEY3mfL5n1a4s-7OLSo.roa (raw, json) Hash identifier: VFWCw2rY2jvZouyZxNQBHjl3kSzi5T7ckY59fJbMU/4= Subject key identifier: A0:9C:B2:61:93:77:68:46:37:99:F2:F9:9F:56:B8:B3:EE:CE:2D:2A Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B30BB73828726AEEDA4B352F5FA67DBB8 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/oJyyYZN3aEY3mfL5n1a4s-7OLSo.roa Signing time: Thu 18 Dec 2025 09:12:29 +0000 ROA not before: Thu 18 Dec 2025 09:12:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214956 IP address blocks: 195.151.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:bb:73:82:87:26:ae:ed:a4:b3:52:f5:fa:67:db:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 18 09:12:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a09cb261937768463799f2f99f56b8b3eece2d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:50:bf:80:0c:54:a7:38:16:3e:6e:27:14:90: ec:66:7d:e1:b0:5e:ff:a5:10:26:77:dd:83:31:b7: 87:75:4e:df:cd:d0:3a:40:33:9f:70:5d:06:87:d3: 80:3a:44:af:65:99:f0:4d:4c:6e:60:46:d0:18:f5: 1e:eb:bf:0d:b1:dd:a7:90:2d:27:2f:9f:cc:b9:73: c3:16:ff:55:65:16:93:07:3d:ac:e3:04:ac:cf:26: f9:66:01:e2:1f:1a:1c:31:cc:99:41:62:5c:50:c3: a6:24:e2:8f:0e:94:e5:08:01:3f:5a:f1:76:25:28: 08:f4:96:75:4e:45:c3:83:2f:92:ab:12:99:67:18: 67:c1:76:e7:1d:42:28:ad:66:d7:44:ce:88:69:4b: d1:4f:2c:ab:b5:36:d2:24:88:fa:df:ca:fd:f8:c9: e9:43:1c:7a:d6:3c:a9:10:0d:27:d1:4f:24:d4:f5: 24:43:87:e3:e9:55:db:53:00:e6:5b:e6:35:e9:6e: 3e:46:8a:86:6d:c0:51:30:a7:98:94:8c:30:e4:45: c8:35:01:89:9d:34:78:48:25:d0:25:ad:2d:ba:12: 39:68:42:77:53:22:10:d7:9c:59:32:b1:fc:da:7c: e5:92:59:ad:4c:15:1e:b1:95:ca:03:ae:55:46:4d: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9C:B2:61:93:77:68:46:37:99:F2:F9:9F:56:B8:B3:EE:CE:2D:2A X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/oJyyYZN3aEY3mfL5n1a4s-7OLSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.151.168.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:02:b2:9e:bb:4d:bd:5d:e4:8d:88:00:71:7d:db:74:e5:a7: a4:c5:ae:79:0c:4a:f0:a2:df:55:a4:bb:a9:9a:89:da:0e:26: c7:f1:65:09:63:a2:89:51:5d:56:5c:1d:01:41:2f:0f:ae:1a: 30:e3:3b:ed:39:33:e2:c0:0d:9e:75:75:7c:f3:11:29:9c:73: f9:dc:86:50:f9:5e:c8:b3:79:79:f1:a1:49:35:f4:13:08:24: 7c:5b:d4:75:78:fc:d5:25:2b:3d:1d:da:05:c4:e7:3a:22:09: 83:51:9c:a3:ce:d6:aa:eb:1b:17:bc:d9:6f:a9:02:35:da:e8: b1:12:0d:a0:04:14:71:4e:ff:88:ae:79:a8:67:01:28:90:c2: fb:86:de:3b:f9:8b:78:b4:1d:4b:17:c2:88:b9:8b:56:41:34: 10:ef:f3:a4:d2:1a:42:04:9c:0c:99:6f:d1:73:d5:bc:f1:48: 9d:bb:97:27:8f:5a:6a:af:0d:fb:e9:ac:17:80:35:88:4d:9c: b2:17:54:14:7e:ef:cc:f1:5a:ae:40:7a:f3:37:99:0a:b8:6f: a5:21:9d:9e:83:4d:1b:f2:00:e1:24:18:e6:9a:3b:e5:5a:a3: 10:d9:85:df:c4:c9:ef:cb:e8:57:ce:fe:3d:b1:2d:68:df:06: 80:aa:25:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZswu3OChyau7aSzUvX6Z9u4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjE4MDkxMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDljYjI2MTkzNzc2ODQ2Mzc5OWYyZjk5ZjU2YjhiM2VlY2UyZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVC/gAxUpzgWPm4nFJDsZn3hsF7/ pRAmd92DMbeHdU7fzdA6QDOfcF0Gh9OAOkSvZZnwTUxuYEbQGPUe678Nsd2nkC0n L5/MuXPDFv9VZRaTBz2s4wSszyb5ZgHiHxocMcyZQWJcUMOmJOKPDpTlCAE/WvF2 JSgI9JZ1TkXDgy+SqxKZZxhnwXbnHUIorWbXRM6IaUvRTyyrtTbSJIj638r9+Mnp Qxx61jypEA0n0U8k1PUkQ4fj6VXbUwDmW+Y16W4+RoqGbcBRMKeYlIww5EXINQGJ nTR4SCXQJa0tuhI5aEJ3UyIQ15xZMrH82nzlklmtTBUesZXKA65VRk160wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKCcsmGTd2hGN5ny+Z9WuLPuzi0qMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvb0p5eVlaTjNhRVkzbWZMNW4xYTRzLTdPTFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5eoMA0G CSqGSIb3DQEBCwUAA4IBAQB7ArKeu029XeSNiABxfdt05aekxa55DErwot9VpLup monaDibH8WUJY6KJUV1WXB0BQS8Prhow4zvtOTPiwA2edXV88xEpnHP53IZQ+V7I s3l58aFJNfQTCCR8W9R1ePzVJSs9HdoFxOc6IgmDUZyjztaq6xsXvNlvqQI12uix Eg2gBBRxTv+IrnmoZwEokML7ht47+Yt4tB1LF8KIuYtWQTQQ7/Ok0hpCBJwMmW/R c9W88Uidu5cnj1pqrw376awXgDWITZyyF1QUfu/M8VquQHrzN5kKuG+lIZ2eg00b 8gDhJBjmmjvlWqMQ2YXfxMnvy+hXzv49sS1o3waAqiXs -----END CERTIFICATE-----Generated at Sun Dec 21 05:35:47 2025 by rpki-client