This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/OL7bdyUVEQ9n74sRfjL-q6YMa-A.roa File: OL7bdyUVEQ9n74sRfjL-q6YMa-A.roa (raw, json) Hash identifier: 6ACUpv6Ry/cr+OGcfoflzNUyyCZ1Fe7hIcPBGSoFNQI= Subject key identifier: 38:BE:DB:77:25:15:11:0F:67:EF:8B:11:7E:32:FE:AB:A6:0C:6B:E0 Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019A96FDF87DE603BE5C3D23F654AA163B54 Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/OL7bdyUVEQ9n74sRfjL-q6YMa-A.roa Signing time: Tue 18 Nov 2025 12:43:37 +0000 ROA not before: Tue 18 Nov 2025 12:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212667 IP address blocks: 85.235.81.0/24 maxlen: 24 91.241.180.0/24 maxlen: 24 91.241.181.0/24 maxlen: 24 176.103.82.0/24 maxlen: 24 192.109.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:fd:f8:7d:e6:03:be:5c:3d:23:f6:54:aa:16:3b:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Nov 18 12:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=38bedb772515110f67ef8b117e32feaba60c6be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:c1:ee:0e:40:ba:67:11:1e:61:26:85:2a: b0:94:a8:18:d0:89:b7:48:bf:80:de:2e:22:20:15: 10:56:92:b3:7a:ca:fe:fa:52:ca:bb:df:04:db:c3: 66:76:6e:c3:9d:1f:f4:89:a1:a3:51:0d:f8:4a:d4: 0d:a1:53:ec:ad:80:7e:32:92:26:69:98:4e:5b:95: 21:d7:75:ad:cd:e4:c4:93:e8:54:be:06:92:9d:e7: de:d8:d5:75:af:03:de:a5:aa:fc:1e:3b:63:41:49: f0:84:4d:19:ca:90:c1:2b:88:1a:73:c8:e9:d3:d5: 1a:d4:73:df:4b:19:4d:c8:6d:cf:ed:86:c3:c0:10: e9:22:22:24:0a:0a:80:4a:35:7a:f6:e0:11:ac:aa: d7:40:d7:31:43:dc:df:c9:85:f7:27:1d:30:c7:9a: c2:0a:24:2e:77:ce:66:8d:2d:34:92:5a:ae:62:a0: e6:79:61:76:95:8c:56:29:27:be:51:26:4e:39:57: 29:37:b1:73:c3:20:65:af:96:ac:ec:e9:5d:1f:88: 62:22:b4:7d:11:29:84:ce:bf:0a:0c:76:ec:8f:33: 26:db:8d:94:3f:a8:d1:aa:85:9c:7a:db:93:08:bb: 79:20:78:42:62:bb:6f:bc:50:d7:f1:b4:d3:e8:8b: f7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:DB:77:25:15:11:0F:67:EF:8B:11:7E:32:FE:AB:A6:0C:6B:E0 X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/OL7bdyUVEQ9n74sRfjL-q6YMa-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.235.81.0/24 91.241.180.0/23 176.103.82.0/24 192.109.97.0/24 Signature Algorithm: sha256WithRSAEncryption 26:b1:85:a8:0f:88:05:e3:89:74:f0:18:68:86:af:54:37:4c: 0d:c0:74:88:9e:16:31:cd:e3:18:bc:6d:f0:ed:4d:9c:09:cc: e5:d9:74:b1:ff:52:38:66:92:e0:fa:9e:44:2e:3b:ea:5d:0f: 51:cd:dd:d7:c3:40:e3:09:df:6a:fb:75:65:57:b4:80:7b:84: ac:ee:dd:b7:3b:b3:65:b9:f9:ef:a2:cb:70:6e:cc:c2:58:c1: 2c:db:e4:7d:76:e6:37:d7:bd:1f:ee:a4:c7:ab:a1:92:31:70: 59:d2:44:7d:63:e7:90:3c:b5:47:e4:65:04:63:a3:f6:09:8a: 5e:46:17:c8:9f:ee:58:23:01:30:65:96:55:20:b8:0c:b8:86: 96:78:1b:1e:db:ce:4c:fc:8a:0b:a5:b0:f9:55:ae:6e:9a:f7: 39:76:c9:4a:c6:e0:20:b2:b7:ce:6b:ba:72:46:ff:d2:f9:79: e5:7a:6c:23:88:63:7b:52:86:97:e5:c5:14:73:34:45:88:84: 83:25:93:f7:6d:b3:73:1b:af:00:59:b4:e5:9c:72:77:4b:46: e3:5c:fd:12:89:5f:6a:38:83:0f:8b:28:36:c4:16:13:66:97: b4:34:80:12:34:d0:44:cf:f9:af:90:71:1f:00:6b:d8:95:74: 39:24:1f:a4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqW/fh95gO+XD0j9lSqFjtUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMTE4MTI0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOGJlZGI3NzI1MTUxMTBmNjdlZjhiMTE3ZTMyZmVhYmE2MGM2YmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7jB7g5AumcRHmEmhSqwlKgY0Im3 SL+A3i4iIBUQVpKzesr++lLKu98E28Nmdm7DnR/0iaGjUQ34StQNoVPsrYB+MpIm aZhOW5Uh13WtzeTEk+hUvgaSnefe2NV1rwPepar8HjtjQUnwhE0ZypDBK4gac8jp 09Ua1HPfSxlNyG3P7YbDwBDpIiIkCgqASjV69uARrKrXQNcxQ9zfyYX3Jx0wx5rC CiQud85mjS00klquYqDmeWF2lYxWKSe+USZOOVcpN7FzwyBlr5as7OldH4hiIrR9 ESmEzr8KDHbsjzMm242UP6jRqoWcetuTCLt5IHhCYrtvvFDX8bTT6Iv3cwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDi+23clFREPZ++LEX4y/qumDGvgMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvT0w3YmR5VVZFUTluNzRzUmZqTC1xNllNYS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVetRAwQB W/G0AwQAsGdSAwQAwG1hMA0GCSqGSIb3DQEBCwUAA4IBAQAmsYWoD4gF44l08Bho hq9UN0wNwHSInhYxzeMYvG3w7U2cCczl2XSx/1I4ZpLg+p5ELjvqXQ9Rzd3Xw0Dj Cd9q+3VlV7SAe4Ss7t23O7NlufnvostwbszCWMEs2+R9duY3170f7qTHq6GSMXBZ 0kR9Y+eQPLVH5GUEY6P2CYpeRhfIn+5YIwEwZZZVILgMuIaWeBse285M/IoLpbD5 Va5umvc5dslKxuAgsrfOa7pyRv/S+XnlemwjiGN7UoaX5cUUczRFiISDJZP3bbNz G68AWbTlnHJ3S0bjXP0SiV9qOIMPiyg2xBYTZpe0NIASNNBEz/mvkHEfAGvYlXQ5 JB+k -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:09 2025 by rpki-client