This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/qOEolEE9uMcBNXoTUw5TLrPNiDM.roa File: qOEolEE9uMcBNXoTUw5TLrPNiDM.roa (raw, json) Hash identifier: MYoK4dnDI+q5Om3y0iVNPCH+9cmGDl4Z1Ew7BNHE8zg= Subject key identifier: A8:E1:28:94:41:3D:B8:C7:01:35:7A:13:53:0E:53:2E:B3:CD:88:33 Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Certificate serial: 019B4A8E788193D1C4F1529169902886B2C5 Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/qOEolEE9uMcBNXoTUw5TLrPNiDM.roa Signing time: Tue 23 Dec 2025 09:33:29 +0000 ROA not before: Tue 23 Dec 2025 09:33:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21263 IP address blocks: 45.155.112.0/22 maxlen: 24 77.81.52.0/22 maxlen: 24 81.27.112.0/20 maxlen: 24 146.255.112.0/22 maxlen: 24 161.51.240.0/21 maxlen: 24 185.124.224.0/22 maxlen: 24 185.162.220.0/22 maxlen: 24 185.198.140.0/22 maxlen: 24 185.231.72.0/22 maxlen: 24 188.137.184.0/21 maxlen: 24 212.62.192.0/19 maxlen: 24 217.11.144.0/20 maxlen: 24 217.24.192.0/20 maxlen: 24 217.31.208.0/20 maxlen: 24 2a02:590::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:8e:78:81:93:d1:c4:f1:52:91:69:90:28:86:b2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9 Validity Not Before: Dec 23 09:33:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a8e12894413db8c701357a13530e532eb3cd8833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:75:c1:ef:2a:c9:19:8f:81:ea:b4:22:25:49: fe:2f:67:5b:7a:53:15:6f:a7:66:77:95:7f:4b:39: cc:29:78:fa:0e:59:33:f7:f9:59:77:23:d0:47:c0: d6:1e:1d:e1:b4:af:79:c8:2e:51:0f:db:5e:da:93: cf:fa:a9:35:fd:cf:01:b6:ab:c8:63:0e:eb:f5:af: 8f:cb:14:66:82:9f:e3:f5:d8:51:a6:73:72:67:f2: 7f:17:74:d9:ad:52:ec:5f:86:c0:1c:af:3c:8c:a6: 92:60:e9:6c:0e:99:4c:6b:1f:b4:0f:d3:b7:85:f5: c9:1d:16:1b:10:49:b2:d8:95:9b:4b:54:d9:79:8e: b0:6a:43:69:9d:02:2d:ae:bb:65:70:b5:26:39:ff: 77:a9:45:3c:6d:31:5b:f5:b5:cd:10:7f:63:8c:0c: 27:a5:83:5e:03:32:a9:f6:04:cd:ec:c4:e3:72:b8: b2:25:05:04:b2:e4:f2:db:ca:92:76:3b:a6:f9:c8: 8e:97:f7:a1:82:62:80:53:ac:c0:dc:8e:ca:10:e5: a3:4a:c5:79:09:63:9f:c3:b3:06:5d:98:bc:64:e9: dd:8d:68:c1:ff:b3:d6:b9:0c:a2:13:3f:fe:8c:0b: 89:06:96:f3:d7:07:88:fb:ec:1d:32:2e:57:8d:ab: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E1:28:94:41:3D:B8:C7:01:35:7A:13:53:0E:53:2E:B3:CD:88:33 X509v3 Authority Key Identifier: keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/qOEolEE9uMcBNXoTUw5TLrPNiDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.112.0/22 77.81.52.0/22 81.27.112.0/20 146.255.112.0/22 161.51.240.0/21 185.124.224.0/22 185.162.220.0/22 185.198.140.0/22 185.231.72.0/22 188.137.184.0/21 212.62.192.0/19 217.11.144.0/20 217.24.192.0/20 217.31.208.0/20 IPv6: 2a02:590::/29 Signature Algorithm: sha256WithRSAEncryption 54:bb:56:06:0e:55:14:88:1c:65:ad:5c:85:11:24:d7:0b:32: fa:df:cd:28:91:b8:22:29:8b:ff:4f:87:2f:75:f7:72:74:48: 6c:f7:2a:d8:ce:0d:be:e6:74:28:0d:be:41:d0:b3:81:5f:98: d8:fa:3f:1f:5e:7b:e4:46:3b:5e:51:01:69:ff:aa:71:05:1a: ea:14:6b:36:df:e5:6f:69:6d:24:39:d9:0a:bb:b9:b1:c4:ae: 85:f2:86:5a:ab:00:9a:05:44:cc:ca:08:39:6e:ec:3d:06:b9: 32:ee:60:9e:44:64:53:7a:d2:2b:13:43:ef:d3:50:2b:b0:a1: c8:b9:58:6a:7c:78:a0:b4:07:2c:c9:d8:18:f7:07:2f:7a:55: 11:9a:f5:b5:45:44:59:7f:ef:86:11:3c:13:0b:9c:fd:03:71: bb:2b:51:4e:fe:8e:ef:b6:9e:89:f1:b0:80:b5:a3:48:52:1d: e9:43:dd:90:b9:0a:d6:c1:1e:32:c9:c5:3e:71:66:05:49:57: 57:6e:d3:92:06:e4:ac:cf:29:b4:af:a1:11:37:36:60:aa:4d: b1:a8:b6:36:c1:2f:d9:05:38:87:43:c5:07:43:9b:52:95:dd: dc:82:9a:b3:ab:5a:5b:55:18:19:85:1d:9b:c7:3f:e2:fb:12: 39:3a:d7:7a -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZtKjniBk9HE8VKRaZAohrLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1 ZDI3YjkwHhcNMjUxMjIzMDkzMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOGUxMjg5NDQxM2RiOGM3MDEzNTdhMTM1MzBlNTMyZWIzY2Q4ODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHXB7yrJGY+B6rQiJUn+L2dbelMV b6dmd5V/SznMKXj6Dlkz9/lZdyPQR8DWHh3htK95yC5RD9te2pPP+qk1/c8BtqvI Yw7r9a+PyxRmgp/j9dhRpnNyZ/J/F3TZrVLsX4bAHK88jKaSYOlsDplMax+0D9O3 hfXJHRYbEEmy2JWbS1TZeY6wakNpnQItrrtlcLUmOf93qUU8bTFb9bXNEH9jjAwn pYNeAzKp9gTN7MTjcriyJQUEsuTy28qSdjum+ciOl/ehgmKAU6zA3I7KEOWjSsV5 CWOfw7MGXZi8ZOndjWjB/7PWuQyiEz/+jAuJBpbz1weI++wdMi5XjasI2wIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFKjhKJRBPbjHATV6E1MOUy6zzYgzMB8GA1UdIwQY MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt ODEzYzVhYWI3ODNlLzEvcU9Fb2xFRTl1TWNCTlhvVFV3NVRMclBOaURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQCLZtwAwQC TVE0AwQEURtwAwQCkv9wAwQDoTPwAwQCuXzgAwQCuaLcAwQCucaMAwQCuedIAwQD vIm4AwQF1D7AAwQE2QuQAwQE2RjAAwQE2R/QMA0EAgACMAcDBQMqAgWQMA0GCSqG SIb3DQEBCwUAA4IBAQBUu1YGDlUUiBxlrVyFESTXCzL6380okbgiKYv/T4cvdfdy dEhs9yrYzg2+5nQoDb5B0LOBX5jY+j8fXnvkRjteUQFp/6pxBRrqFGs23+VvaW0k OdkKu7mxxK6F8oZaqwCaBUTMygg5buw9Brky7mCeRGRTetIrE0Pv01ArsKHIuVhq fHigtAcsydgY9wcvelURmvW1RURZf++GETwTC5z9A3G7K1FO/o7vtp6J8bCAtaNI Uh3pQ92QuQrWwR4yycU+cWYFSVdXbtOSBuSszym0r6ERNzZgqk2xqLY2wS/ZBTiH Q8UHQ5tSld3cgpqzq1pbVRgZhR2bxz/i+xI5Otd6 -----END CERTIFICATE-----Generated at Mon Dec 29 16:25:44 2025 by rpki-client