This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/oaQDmcPYSkml0RRQKrO-Em73IK4.roa File: oaQDmcPYSkml0RRQKrO-Em73IK4.roa (raw, json) Hash identifier: bHgFTubSxlxLmOgCBCM51N98J0JO+nt18DnWZQ7MMJs= Subject key identifier: A1:A4:03:99:C3:D8:4A:49:A5:D1:14:50:2A:B3:BE:12:6E:F7:20:AE Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Certificate serial: 019A839AE4023DBE5F781906FCDB5024886C Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/oaQDmcPYSkml0RRQKrO-Em73IK4.roa Signing time: Fri 14 Nov 2025 18:22:37 +0000 ROA not before: Fri 14 Nov 2025 18:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212994 IP address blocks: 185.39.28.0/23 maxlen: 24 185.237.216.0/24 maxlen: 24 185.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:9a:e4:02:3d:be:5f:78:19:06:fc:db:50:24:88:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83 Validity Not Before: Nov 14 18:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a1a40399c3d84a49a5d114502ab3be126ef720ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:9e:06:4b:fb:e6:2a:fc:2a:a1:fb:81:66: 09:82:5f:05:be:c2:b7:b1:a2:76:f1:fb:49:08:87: a5:25:73:fd:f8:dd:4b:c0:a9:7e:4f:a8:52:f6:d9: ee:ae:5d:47:cf:47:93:76:44:04:6f:a6:54:8b:1b: 94:7b:eb:bd:c1:bc:ff:a4:75:b3:d7:9e:9c:63:37: 1d:5e:89:7e:18:39:72:e8:c8:2f:b9:b8:35:db:a5: fc:26:c9:f5:d7:0c:3a:d6:07:aa:cc:1b:08:54:83: 2d:62:28:4d:36:e7:eb:69:20:8f:ca:10:07:10:71: f9:1e:91:07:df:2a:46:b1:bd:61:f9:d4:d6:1e:c3: 8a:72:cf:54:3d:e9:cf:33:cf:09:49:f8:e0:4a:0d: c4:99:27:d5:e7:bb:e1:ea:d3:e2:83:2a:fe:1f:b1: b0:5d:39:df:cb:3d:e9:26:f8:45:5f:2a:96:29:d6: 97:6a:e9:c9:cf:18:fe:1c:a6:51:d3:e6:19:42:41: 49:a4:df:b8:cf:03:e2:98:04:b5:bd:fe:58:b9:12: 31:e2:ea:9e:4c:20:21:0d:63:aa:ed:35:15:f7:18: 02:7c:86:c0:33:95:23:6f:c1:7c:18:68:a7:0f:0f: 03:ef:1d:f7:e6:fc:38:89:16:05:c9:38:8a:05:b9: 5c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A4:03:99:C3:D8:4A:49:A5:D1:14:50:2A:B3:BE:12:6E:F7:20:AE X509v3 Authority Key Identifier: keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/oaQDmcPYSkml0RRQKrO-Em73IK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.28.0/23 185.237.216.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:d4:39:22:86:bb:3d:27:1c:c3:0f:79:09:73:11:9f:f0:62: 13:5f:5e:03:1c:ea:05:42:1c:4a:9e:e7:07:9b:23:4e:e1:1f: 62:bb:79:44:35:13:7c:51:36:2d:8b:d4:c2:86:a9:cc:fb:bf: f5:45:75:28:b7:66:dd:7f:7a:2e:7e:b7:14:68:6f:2b:cd:5f: 6b:c0:a5:17:c4:f3:2f:b7:e6:5c:79:87:67:54:93:b2:ef:32: 30:e0:35:84:a1:6c:ce:e2:e8:45:5b:84:68:72:f6:44:b5:ca: 70:98:9b:37:92:d8:87:c5:37:5d:0c:5f:bd:c5:b5:6b:dd:eb: 82:28:ad:83:c9:c5:f7:92:ca:4e:e9:d7:e7:d6:df:31:e2:95: fe:c4:41:67:2c:a6:56:f5:a7:32:a3:77:b4:83:1b:17:3b:f8: 2f:96:58:71:37:45:e8:ef:68:4f:0c:47:94:c4:02:22:46:ba: 8a:86:fe:0d:d6:c0:d4:a6:e9:b9:52:ad:5b:84:70:d7:9c:3a: 19:b3:af:2b:bc:c7:86:26:f7:e1:7a:08:2c:50:3b:dd:9a:85: 5a:73:eb:b1:ba:7b:97:fe:52:f3:c9:89:9b:45:8b:e1:e1:03: 98:7c:f3:6d:73:56:f0:53:5e:0a:da:fb:8b:7b:8b:43:0c:cc: 83:2b:ef:fe -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZqDmuQCPb5feBkG/NtQJIhsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk NjlhODMwHhcNMjUxMTE0MTgyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWE0MDM5OWMzZDg0YTQ5YTVkMTE0NTAyYWIzYmUxMjZlZjcyMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4yeBkv75ir8KqH7gWYJgl8FvsK3 saJ28ftJCIelJXP9+N1LwKl+T6hS9tnurl1Hz0eTdkQEb6ZUixuUe+u9wbz/pHWz 156cYzcdXol+GDly6Mgvubg126X8Jsn11ww61geqzBsIVIMtYihNNufraSCPyhAH EHH5HpEH3ypGsb1h+dTWHsOKcs9UPenPM88JSfjgSg3EmSfV57vh6tPigyr+H7Gw XTnfyz3pJvhFXyqWKdaXaunJzxj+HKZR0+YZQkFJpN+4zwPimAS1vf5YuRIx4uqe TCAhDWOq7TUV9xgCfIbAM5Ujb8F8GGinDw8D7x335vw4iRYFyTiKBblcswIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFKGkA5nD2EpJpdEUUCqzvhJu9yCuMB8GA1UdIwQY MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw LTA4Mjc5NDU1Zjk0MS8xL29hUURtY1BZU2ttbDBSUlFLck8tRW03M0lLNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMwLTA4Mjc5NDU1Zjk0 MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAG5JxwD BAG57dgwDQYJKoZIhvcNAQELBQADggEBAFvUOSKGuz0nHMMPeQlzEZ/wYhNfXgMc 6gVCHEqe5webI07hH2K7eUQ1E3xRNi2L1MKGqcz7v/VFdSi3Zt1/ei5+txRobyvN X2vApRfE8y+35lx5h2dUk7LvMjDgNYShbM7i6EVbhGhy9kS1ynCYmzeS2IfFN10M X73FtWvd64IorYPJxfeSyk7p1+fW3zHilf7EQWcsplb1pzKjd7SDGxc7+C+WWHE3 RejvaE8MR5TEAiJGuoqG/g3WwNSm6blSrVuEcNecOhmzryu8x4Ym9+F6CCxQO92a hVpz67G6e5f+UvPJiZtFi+HhA5h8821zVvBTXgra+4t7i0MMzIMr7/4= -----END CERTIFICATE-----Generated at Sun Dec 7 07:31:53 2025 by rpki-client