This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/OxqcGrIN2qmtT5lzHhqB0OFCoZ4.roa File: OxqcGrIN2qmtT5lzHhqB0OFCoZ4.roa (raw, json) Hash identifier: 8Tvlr2QGQVpqtwIDYNChtFC5s7qideRYQpxKqT56BmM= Subject key identifier: 3B:1A:9C:1A:B2:0D:DA:A9:AD:4F:99:73:1E:1A:81:D0:E1:42:A1:9E Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019A7C9877BBA0E87C72D8834B414BF5B0D8 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/OxqcGrIN2qmtT5lzHhqB0OFCoZ4.roa Signing time: Thu 13 Nov 2025 09:42:38 +0000 ROA not before: Thu 13 Nov 2025 09:42:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200436 IP address blocks: 5.42.223.0/24 maxlen: 24 194.180.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:98:77:bb:a0:e8:7c:72:d8:83:4b:41:4b:f5:b0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Nov 13 09:42:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b1a9c1ab20ddaa9ad4f99731e1a81d0e142a19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:6c:eb:84:6a:cc:96:2a:60:a7:ff:93:80: 43:41:4f:ef:ba:e5:d4:08:c1:3e:0c:2c:aa:1f:c9: b3:72:e0:65:0b:22:4b:d4:2c:4b:6d:ba:c8:a9:fb: 2d:2b:00:b6:28:1d:5b:c9:6d:15:a1:c4:fb:ce:8b: e2:8c:cd:eb:7c:fc:f2:0a:05:2e:3e:c8:c5:1c:b3: 98:5c:37:ad:f3:56:65:e2:db:c7:2c:bb:c6:51:c0: f5:ae:be:7a:fe:84:0b:ca:df:2d:70:5d:71:0a:8a: 90:9b:73:57:32:c4:ff:e9:d7:e4:88:39:1d:af:93: eb:c6:2e:74:bf:ba:96:87:b8:33:b8:14:08:85:9a: 39:1b:0e:b7:40:12:88:21:2a:c3:d0:e9:32:58:eb: 40:f5:c9:14:51:6d:12:98:40:78:75:aa:54:8f:b0: 42:48:09:22:14:88:78:20:47:c6:e2:06:6a:04:22: 5e:f4:3e:eb:52:e3:71:38:66:33:43:8c:a8:cc:84: 7b:33:3d:53:58:27:72:0e:45:36:30:a0:65:f6:37: 26:e5:15:d9:28:2c:0c:1e:a1:9f:07:12:e0:e1:c9: 59:26:95:3c:b6:6a:72:d8:fa:8c:f9:32:c3:60:88: b4:86:ab:63:65:cb:77:3f:f7:20:a0:d5:f8:36:75: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1A:9C:1A:B2:0D:DA:A9:AD:4F:99:73:1E:1A:81:D0:E1:42:A1:9E X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/OxqcGrIN2qmtT5lzHhqB0OFCoZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.42.223.0/24 194.180.224.0/24 Signature Algorithm: sha256WithRSAEncryption 77:5f:de:b2:35:1e:e8:ee:a9:ac:73:24:d4:95:f8:0f:98:4f: 5e:60:0e:93:66:c9:28:12:c0:d8:48:6c:5a:2d:91:cd:f1:d9: 08:76:12:08:ce:eb:08:cf:af:27:2b:2d:a8:fa:76:38:bb:cd: 70:f6:fb:e3:c6:0c:28:7f:16:6b:4b:dd:5d:3a:9f:48:89:30: 40:45:3e:e8:2f:dd:7c:d9:da:d1:9e:61:f7:98:78:a3:c6:e5: ad:0d:96:cd:21:a0:10:21:75:19:90:5d:60:49:81:f7:ba:97: ae:f5:85:5e:90:da:98:42:a3:aa:67:d3:11:7e:dc:59:12:e6: a7:37:19:fe:fd:09:a4:8a:5b:10:58:da:7a:5e:0b:15:a2:c7: 5a:d0:38:fc:6d:ce:28:e3:d4:08:9d:c9:08:c4:41:06:7a:e7: 22:85:8c:e9:51:36:c6:a6:21:a6:a0:f8:14:18:da:b9:53:df: 28:ec:4b:f6:fd:11:a0:d0:07:78:5f:77:3c:26:a9:2b:b8:7b: 15:32:80:01:e9:8a:56:1c:9b:32:7b:db:0c:fd:1b:fe:27:d0: 29:05:ed:42:0e:e4:a8:80:dd:57:2e:7d:96:3b:ca:3b:ea:01: d3:27:43:0a:fc:e9:b8:b7:ca:ba:c3:b8:b2:03:9b:07:3e:9e: f0:66:26:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZp8mHe7oOh8ctiDS0FL9bDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMTEzMDk0MjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjFhOWMxYWIyMGRkYWE5YWQ0Zjk5NzMxZTFhODFkMGUxNDJhMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJts64RqzJYqYKf/k4BDQU/vuuXU CME+DCyqH8mzcuBlCyJL1CxLbbrIqfstKwC2KB1byW0VocT7zovijM3rfPzyCgUu PsjFHLOYXDet81Zl4tvHLLvGUcD1rr56/oQLyt8tcF1xCoqQm3NXMsT/6dfkiDkd r5Prxi50v7qWh7gzuBQIhZo5Gw63QBKIISrD0OkyWOtA9ckUUW0SmEB4dapUj7BC SAkiFIh4IEfG4gZqBCJe9D7rUuNxOGYzQ4yozIR7Mz1TWCdyDkU2MKBl9jcm5RXZ KCwMHqGfBxLg4clZJpU8tmpy2PqM+TLDYIi0hqtjZct3P/cgoNX4NnUAAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDsanBqyDdqprU+Zcx4agdDhQqGeMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvT3hxY0dySU4ycW10VDVsekhocUIwT0ZDb1o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABSrfAwQA wrTgMA0GCSqGSIb3DQEBCwUAA4IBAQB3X96yNR7o7qmscyTUlfgPmE9eYA6TZsko EsDYSGxaLZHN8dkIdhIIzusIz68nKy2o+nY4u81w9vvjxgwofxZrS91dOp9IiTBA RT7oL9182drRnmH3mHijxuWtDZbNIaAQIXUZkF1gSYH3upeu9YVekNqYQqOqZ9MR ftxZEuanNxn+/QmkilsQWNp6XgsVosda0Dj8bc4o49QInckIxEEGeucihYzpUTbG piGmoPgUGNq5U98o7Ev2/RGg0Ad4X3c8JqkruHsVMoAB6YpWHJsye9sM/Rv+J9Ap Be1CDuSogN1XLn2WO8o76gHTJ0MK/Om4t8q6w7iyA5sHPp7wZibE -----END CERTIFICATE-----Generated at Sat Dec 6 12:28:25 2025 by rpki-client