This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/oh6kvaZOSBmbjaVeITahmFGVQzc.roa File: oh6kvaZOSBmbjaVeITahmFGVQzc.roa (raw, json) Hash identifier: GEqYSowE9KxizAEw7CElS5g7H7A2mx8ZxjHtCPJ9ECQ= Subject key identifier: A2:1E:A4:BD:A6:4E:48:19:9B:8D:A5:5E:21:36:A1:98:51:95:43:37 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 019AE3247439D9BAEDCA0AA45A0C67CDA5B6 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/oh6kvaZOSBmbjaVeITahmFGVQzc.roa Signing time: Wed 03 Dec 2025 07:36:48 +0000 ROA not before: Wed 03 Dec 2025 07:36:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 60542 IP address blocks: 45.139.9.0/24 maxlen: 24 194.180.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e3:24:74:39:d9:ba:ed:ca:0a:a4:5a:0c:67:cd:a5:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Dec 3 07:36:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a21ea4bda64e48199b8da55e2136a19851954337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:14:2e:03:84:d6:34:c5:a6:94:c4:41:ab: 37:7c:89:b2:e1:36:76:9c:e1:73:7a:ee:77:61:aa: 3b:75:e0:a4:92:f8:2c:44:f3:35:27:bb:b4:17:73: cb:50:9c:1e:32:78:1c:b4:cf:d0:66:e2:99:e5:6c: f4:ce:ef:e7:3c:b9:9a:08:71:63:be:fc:78:00:6a: d6:7c:56:b0:70:35:9b:51:24:5d:e5:5d:c8:2c:b9: 52:bf:4d:44:51:2c:8c:26:c5:8b:c3:e5:32:e8:ec: f2:bd:46:65:52:b3:ae:64:14:7f:48:13:94:d5:da: e4:25:7d:3f:17:90:ea:93:1f:0d:f1:49:19:da:1a: bc:bf:09:fb:22:7f:dd:2d:4e:76:c7:f6:49:88:1e: 44:f6:f8:12:c8:ee:b1:8c:c6:07:11:4a:8c:71:05: 0f:b8:d1:c9:33:bb:16:26:92:c5:05:8d:94:fa:5b: a8:7b:42:dc:36:5b:5a:94:93:2d:9f:5e:cc:a8:22: f6:35:be:11:f1:ab:4f:ee:89:3b:e9:7a:4d:0a:f5: 61:33:f1:35:8f:3f:86:b6:14:81:b1:b6:e3:02:69: 76:f4:3a:43:94:ea:93:5d:71:55:6a:95:25:15:dd: 6d:f0:82:a6:07:d5:92:80:8c:61:7f:46:19:a0:4f: 1e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1E:A4:BD:A6:4E:48:19:9B:8D:A5:5E:21:36:A1:98:51:95:43:37 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/oh6kvaZOSBmbjaVeITahmFGVQzc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.9.0/24 194.180.209.0/24 Signature Algorithm: sha256WithRSAEncryption a8:74:53:63:40:57:10:1c:5f:cd:55:fb:a7:c9:b2:6a:7f:e2: 0b:01:de:0c:1c:25:47:4d:21:18:0b:1f:d5:f0:d4:41:59:bd: 53:6f:2d:2e:81:99:03:65:13:f8:b7:f5:2b:f9:e2:58:e3:c3: 30:ae:08:9a:dc:e4:15:a1:7c:6f:07:58:d5:6b:b9:18:b6:ac: 2c:3f:6d:65:45:62:d1:57:56:7b:64:25:0d:56:4c:96:28:63: 0a:dc:20:ee:2b:f1:f6:39:4f:28:19:ff:0a:44:6a:6b:4b:aa: 45:b0:e7:f0:e1:b7:32:93:c1:8b:f0:55:fc:64:86:4a:f2:61: f8:6d:0a:cc:da:ab:16:fd:89:39:34:c1:0d:0e:81:ed:fc:fc: 8c:8c:ac:12:19:7e:e8:11:7e:ac:4c:7c:d0:6c:72:b5:b0:05: 04:8d:45:89:e4:68:69:6f:ca:29:35:33:42:13:e1:df:6f:83: 92:66:70:c3:df:ba:04:0f:dd:a7:2c:91:72:e7:a3:09:d4:5b: 52:27:41:07:1c:aa:bf:53:e0:49:37:80:fa:87:c2:e0:82:3f: 6a:b5:78:2a:7e:60:b3:c0:b5:e1:e4:cd:7e:bd:77:4a:c5:7d: 72:9d:9c:6c:09:5d:6a:ef:5f:6a:bb:4d:d4:82:fb:f7:a8:21: 98:a1:b5:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrjJHQ52brtygqkWgxnzaW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjUxMjAzMDczNjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjFlYTRiZGE2NGU0ODE5OWI4ZGE1NWUyMTM2YTE5ODUxOTU0MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vUULgOE1jTFppTEQas3fImy4TZ2 nOFzeu53Yao7deCkkvgsRPM1J7u0F3PLUJweMngctM/QZuKZ5Wz0zu/nPLmaCHFj vvx4AGrWfFawcDWbUSRd5V3ILLlSv01EUSyMJsWLw+Uy6OzyvUZlUrOuZBR/SBOU 1drkJX0/F5Dqkx8N8UkZ2hq8vwn7In/dLU52x/ZJiB5E9vgSyO6xjMYHEUqMcQUP uNHJM7sWJpLFBY2U+luoe0LcNltalJMtn17MqCL2Nb4R8atP7ok76XpNCvVhM/E1 jz+GthSBsbbjAml29DpDlOqTXXFVapUlFd1t8IKmB9WSgIxhf0YZoE8egQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKIepL2mTkgZm42lXiE2oZhRlUM3MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvb2g2a3ZhWk9TQm1iamFWZUlUYWhtRkdWUXpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYsJAwQA wrTRMA0GCSqGSIb3DQEBCwUAA4IBAQCodFNjQFcQHF/NVfunybJqf+ILAd4MHCVH TSEYCx/V8NRBWb1Tby0ugZkDZRP4t/Ur+eJY48Mwrgia3OQVoXxvB1jVa7kYtqws P21lRWLRV1Z7ZCUNVkyWKGMK3CDuK/H2OU8oGf8KRGprS6pFsOfw4bcyk8GL8FX8 ZIZK8mH4bQrM2qsW/Yk5NMENDoHt/PyMjKwSGX7oEX6sTHzQbHK1sAUEjUWJ5Ghp b8opNTNCE+Hfb4OSZnDD37oED92nLJFy56MJ1FtSJ0EHHKq/U+BJN4D6h8Lggj9q tXgqfmCzwLXh5M1+vXdKxX1ynZxsCV1q719qu03Ugvv3qCGYobUW -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:08 2025 by rpki-client