This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/o3aC-XC83IX1xlbwuX29XHHjTjY.roa File: o3aC-XC83IX1xlbwuX29XHHjTjY.roa (raw, json) Hash identifier: JUTr5QLU/dwhs9eMYZjtJgqO991h7XFz+S/6EjomRb0= Subject key identifier: A3:76:82:F9:70:BC:DC:85:F5:C6:56:F0:B9:7D:BD:5C:71:E3:4E:36 Certificate issuer: /CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Certificate serial: 019B271DC7D915C25258EDFD18E1C15F9344 Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/o3aC-XC83IX1xlbwuX29XHHjTjY.roa Signing time: Tue 16 Dec 2025 12:23:41 +0000 ROA not before: Tue 16 Dec 2025 12:23:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29119 IP address blocks: 185.184.172.0/23 maxlen: 23 185.184.172.0/24 maxlen: 24 185.184.173.0/24 maxlen: 24 185.184.174.0/23 maxlen: 23 185.191.252.0/23 maxlen: 23 185.191.254.0/23 maxlen: 23 185.236.244.0/24 maxlen: 24 185.236.245.0/24 maxlen: 24 185.236.246.0/24 maxlen: 24 185.236.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:1d:c7:d9:15:c2:52:58:ed:fd:18:e1:c1:5f:93:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0 Validity Not Before: Dec 16 12:23:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a37682f970bcdc85f5c656f0b97dbd5c71e34e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:7b:18:34:db:dc:27:26:39:dd:8d:71:72: b6:73:df:50:4c:be:ca:df:4e:7b:ea:81:e5:23:d8: e5:3e:f2:7e:b8:ad:bb:27:aa:e1:e0:5b:50:de:09: 58:3d:7e:94:51:fb:bc:a4:83:15:31:3c:40:f6:ee: c1:1c:7a:95:9d:73:3e:e6:3c:bf:99:21:ef:b2:ce: f8:d9:f7:85:ac:97:00:78:b1:11:53:5e:72:5b:91: f0:61:a9:68:8f:49:f2:64:56:09:1a:3b:b2:18:36: 44:ae:39:0c:d9:7a:d5:32:39:59:19:df:cd:53:cb: cf:7f:a7:fa:8a:99:87:b4:7c:99:07:64:3e:8a:89: 67:86:95:58:1f:45:2b:07:57:e2:85:cf:ef:47:c1: c6:71:a0:54:12:96:73:5a:dc:db:79:e1:59:f4:4d: 81:87:4f:5f:52:41:ff:96:43:fc:1e:7b:f5:42:8d: 07:e0:e1:93:07:11:c6:13:b4:d3:46:0b:a6:d7:e7: 21:39:ed:74:58:25:3c:94:26:00:93:e6:ba:aa:2b: d5:82:da:7f:f0:ba:a0:5e:4b:83:1d:76:2f:3e:e7: bb:53:2a:3e:c9:5b:45:b1:b6:0f:df:05:6d:32:f7: 53:cc:96:35:5f:a4:cb:5c:66:91:e7:97:a9:55:22: f1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:76:82:F9:70:BC:DC:85:F5:C6:56:F0:B9:7D:BD:5C:71:E3:4E:36 X509v3 Authority Key Identifier: keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/o3aC-XC83IX1xlbwuX29XHHjTjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.184.172.0/22 185.191.252.0/22 185.236.244.0/22 Signature Algorithm: sha256WithRSAEncryption 64:a5:31:f3:0a:75:b6:8e:19:22:94:6f:80:44:84:97:30:9e: 0e:cb:f4:e9:11:b4:13:c9:69:50:64:2a:55:22:5e:59:58:a4: 6a:c5:38:20:cb:c7:f8:d5:b3:46:5a:32:43:2a:1e:be:12:61: cc:7b:89:75:95:25:5f:81:d2:8b:4e:bd:79:b7:7a:f3:22:da: 57:8c:ba:04:7b:36:59:2e:c1:59:5c:8f:3a:50:93:f4:17:d4: 15:8b:e6:7f:96:8f:61:e7:5d:0c:00:5d:4e:cf:41:a4:b7:7d: 21:5c:5b:d9:fc:4d:f6:d5:d0:0a:d2:2a:d5:67:77:43:a3:be: 2d:8e:70:55:ea:ee:17:7a:99:33:39:b5:b1:a0:63:2a:94:ea: b3:5a:39:e5:85:a9:33:91:c2:1c:c5:5e:97:3d:49:9b:d1:b9: b3:da:ea:ae:05:ed:3f:b7:62:dc:54:db:49:56:55:49:e7:5b: 81:c4:6f:61:bf:de:e1:b2:6e:56:91:3c:6f:bf:2d:80:1a:21: 28:cc:d7:b8:88:12:43:bd:62:db:ef:90:e7:2d:0d:71:1a:e1: d9:41:26:1e:58:44:0a:73:57:ae:a9:95:ff:66:f0:77:a9:1b: 5c:d5:54:57:f7:a5:28:6a:3f:53:74:73:f6:7b:13:11:78:02: a9:c4:0f:7a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsnHcfZFcJSWO39GOHBX5NEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGY4YmY4ZDAxMmEyNWNjY2VlMjEwNjgwM2Q3MDY0MzIw ZWQwZjAwHhcNMjUxMjE2MTIyMzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzc2ODJmOTcwYmNkYzg1ZjVjNjU2ZjBiOTdkYmQ1YzcxZTM0ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5p7GDTb3CcmOd2NcXK2c99QTL7K 30576oHlI9jlPvJ+uK27J6rh4FtQ3glYPX6UUfu8pIMVMTxA9u7BHHqVnXM+5jy/ mSHvss742feFrJcAeLERU15yW5HwYaloj0nyZFYJGjuyGDZErjkM2XrVMjlZGd/N U8vPf6f6ipmHtHyZB2Q+iolnhpVYH0UrB1fihc/vR8HGcaBUEpZzWtzbeeFZ9E2B h09fUkH/lkP8Hnv1Qo0H4OGTBxHGE7TTRgum1+chOe10WCU8lCYAk+a6qivVgtp/ 8LqgXkuDHXYvPue7Uyo+yVtFsbYP3wVtMvdTzJY1X6TLXGaR55epVSLxTwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKN2gvlwvNyF9cZW8Ll9vVxx4042MB8GA1UdIwQY MBaAFCCPi/jQEqJczO4hBoA9cGQyDtDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEt ODA1NWVjMTBmZjBhLzEvbzNhQy1YQzgzSVgxeGxid3VYMjlYSEhqVGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wZWY1OGEtNTY2Zi00OGJjLWI3ZGEtODA1NWVjMTBmZjBh LzEvSUktTC1OQVNvbHpNN2lFR2dEMXdaRElPMFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCubisAwQC ub/8AwQCuez0MA0GCSqGSIb3DQEBCwUAA4IBAQBkpTHzCnW2jhkilG+ARISXMJ4O y/TpEbQTyWlQZCpVIl5ZWKRqxTggy8f41bNGWjJDKh6+EmHMe4l1lSVfgdKLTr15 t3rzItpXjLoEezZZLsFZXI86UJP0F9QVi+Z/lo9h510MAF1Oz0Gkt30hXFvZ/E32 1dAK0irVZ3dDo74tjnBV6u4XepkzObWxoGMqlOqzWjnlhakzkcIcxV6XPUmb0bmz 2uquBe0/t2LcVNtJVlVJ51uBxG9hv97hsm5WkTxvvy2AGiEozNe4iBJDvWLb75Dn LQ1xGuHZQSYeWEQKc1euqZX/ZvB3qRtc1VRX96Uoaj9TdHP2exMReAKpxA96 -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:11 2025 by rpki-client