This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oyc_MK3iBTx9MTrilWBCF56Awzc.roa File: oyc_MK3iBTx9MTrilWBCF56Awzc.roa (raw, json) Hash identifier: 7JWliU0gImie4wEtuXo9e02yJCNRmavHu6LjNoyajfc= Subject key identifier: A3:27:3F:30:AD:E2:05:3C:7D:31:3A:E2:95:60:42:17:9E:80:C3:37 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B25E65268B674DCDF1DAD7A5C97734D6F Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oyc_MK3iBTx9MTrilWBCF56Awzc.roa Signing time: Tue 16 Dec 2025 06:43:29 +0000 ROA not before: Tue 16 Dec 2025 06:43:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.80.156.0/24 maxlen: 24 62.106.89.0/24 maxlen: 24 91.190.106.0/24 maxlen: 24 2a10:7403::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:e6:52:68:b6:74:dc:df:1d:ad:7a:5c:97:73:4d:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Dec 16 06:43:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3273f30ade2053c7d313ae2956042179e80c337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:90:6c:58:43:94:19:ec:62:a3:50:b2:13: 23:39:07:09:a2:0f:c9:33:fd:a8:4d:3d:26:dd:fd: 11:b1:1d:c2:7f:ef:81:9d:78:15:5d:1b:93:54:2e: d9:8a:bb:71:9f:da:26:9a:f4:8b:1b:8e:58:9d:a6: 26:ea:57:a4:53:1f:af:96:95:3f:1b:f6:fe:9b:24: 73:5d:17:25:c5:56:0a:bc:85:b6:52:6a:44:d8:cc: b1:8f:5f:c7:99:37:86:cc:80:0d:f8:21:83:88:fd: 01:94:49:17:43:3d:c9:e5:b5:02:eb:5a:26:5f:b8: a8:3f:5f:15:a2:92:ba:45:12:9a:c9:a6:c1:f9:70: 11:5c:20:2b:2b:62:06:a2:9d:4a:97:d4:12:ac:fd: 27:11:ed:51:d5:b6:06:30:f8:d0:82:5c:de:5f:9c: a7:81:bd:ce:43:22:98:fe:3f:29:e6:d3:15:54:14: aa:6f:a7:09:d4:29:04:70:d1:35:71:d0:0d:b4:ce: 87:bf:e1:ea:e7:64:c4:47:37:82:13:45:12:22:72: 08:15:b2:0f:56:21:fb:7f:30:6a:72:50:cf:9f:29: ae:26:cd:32:cb:a0:bd:3b:68:fb:96:20:35:e0:16: df:4d:43:f9:77:2e:b8:c2:40:0d:32:f9:75:26:d0: 91:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:27:3F:30:AD:E2:05:3C:7D:31:3A:E2:95:60:42:17:9E:80:C3:37 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/oyc_MK3iBTx9MTrilWBCF56Awzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.156.0/24 62.106.89.0/24 91.190.106.0/24 IPv6: 2a10:7403::/32 Signature Algorithm: sha256WithRSAEncryption 28:10:fb:0e:01:37:da:38:35:09:8f:3b:bb:d5:b3:73:79:8c: 19:b3:d4:13:52:1d:4f:b6:b7:b8:7a:65:3c:13:8c:54:18:f7: cd:6a:3a:6c:32:15:0b:85:f9:77:e1:bb:8d:3f:5c:93:1a:40: 7c:e3:2b:8a:95:3d:f2:16:fd:ef:5e:33:83:25:b3:1f:ec:23: 13:40:bf:cf:78:e8:b5:dc:40:7e:b7:41:79:7c:e0:1b:b1:1f: 6c:39:81:f8:d0:f2:c7:d1:15:96:e4:25:1f:79:db:07:12:c9: 5c:89:45:0a:3d:48:db:c2:d6:5d:e7:1c:68:7a:71:ba:5c:24: 1e:1c:96:36:67:b3:69:90:17:38:10:54:f3:1f:b7:9e:fc:8d: 1d:1e:22:d1:22:b4:20:00:64:67:27:2a:fd:96:c9:99:f6:8a: 54:66:6c:09:8c:1f:a5:51:1a:58:c7:82:c7:31:12:52:11:89: 0a:1b:24:44:d0:df:60:fa:46:83:f7:ed:61:f6:c3:50:56:b6: cc:0e:ea:c0:59:52:db:bb:c8:fc:2f:98:01:2d:96:ea:31:4f: 74:1a:ba:f4:93:4f:ca:c7:2b:fb:ed:7e:88:1c:5c:ef:a8:1f: 4c:6f:bc:bc:69:be:47:27:a4:f4:00:df:db:fd:63:ea:07:26: 75:cd:61:e9 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZsl5lJotnTc3x2telyXc01vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjUxMjE2MDY0MzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzI3M2YzMGFkZTIwNTNjN2QzMTNhZTI5NTYwNDIxNzllODBjMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlWQbFhDlBnsYqNQshMjOQcJog/J M/2oTT0m3f0RsR3Cf++BnXgVXRuTVC7Zirtxn9ommvSLG45YnaYm6lekUx+vlpU/ G/b+myRzXRclxVYKvIW2UmpE2Myxj1/HmTeGzIAN+CGDiP0BlEkXQz3J5bUC61om X7ioP18VopK6RRKayabB+XARXCArK2IGop1Kl9QSrP0nEe1R1bYGMPjQglzeX5yn gb3OQyKY/j8p5tMVVBSqb6cJ1CkEcNE1cdANtM6Hv+Hq52TERzeCE0USInIIFbIP ViH7fzBqclDPnymuJs0yy6C9O2j7liA14BbfTUP5dy64wkANMvl1JtCRLwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKMnPzCt4gU8fTE64pVgQheegMM3MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvb3ljX01LM2lCVHg5TVRyaWxXQkNGNTZBd3pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVCcAwQA PmpZAwQAW75qMA0EAgACMAcDBQAqEHQDMA0GCSqGSIb3DQEBCwUAA4IBAQAoEPsO ATfaODUJjzu71bNzeYwZs9QTUh1Ptre4emU8E4xUGPfNajpsMhULhfl34buNP1yT GkB84yuKlT3yFv3vXjODJbMf7CMTQL/PeOi13EB+t0F5fOAbsR9sOYH40PLH0RWW 5CUfedsHEslciUUKPUjbwtZd5xxoenG6XCQeHJY2Z7NpkBc4EFTzH7ee/I0dHiLR IrQgAGRnJyr9lsmZ9opUZmwJjB+lURpYx4LHMRJSEYkKGyRE0N9g+kaD9+1h9sNQ VrbMDurAWVLbu8j8L5gBLZbqMU90Grr0k0/Kxyv77X6IHFzvqB9Mb7y8ab5HJ6T0 AN/b/WPqByZ1zWHp -----END CERTIFICATE-----Generated at Sat Dec 20 06:08:13 2025 by rpki-client