This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/O0-go45iEHrpCNxo4yPQ-3JotBA.roa File: O0-go45iEHrpCNxo4yPQ-3JotBA.roa (raw, json) Hash identifier: oV0cXxFcNNkUj+E/35qA+ydPvFVnE57H517+W25mlhE= Subject key identifier: 3B:4F:A0:A3:8E:62:10:7A:E9:08:DC:68:E3:23:D0:FB:72:68:B4:10 Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02 Certificate serial: 019A58751156471546955BF52E3559AC8196 Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/O0-go45iEHrpCNxo4yPQ-3JotBA.roa Signing time: Thu 06 Nov 2025 09:17:38 +0000 ROA not before: Thu 06 Nov 2025 09:17:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199246 IP address blocks: 185.4.132.0/22 maxlen: 24 185.138.40.0/22 maxlen: 24 2a02:c500::/29 maxlen: 48 2a07:8c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:58:75:11:56:47:15:46:95:5b:f5:2e:35:59:ac:81:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02 Validity Not Before: Nov 6 09:17:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b4fa0a38e62107ae908dc68e323d0fb7268b410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a8:26:e5:57:05:ee:fa:17:2d:db:d7:5d:b5: 7e:ef:8e:ff:8e:c0:7d:4a:19:64:83:9e:8d:60:55: 75:78:c5:43:58:86:dc:44:56:28:ae:29:ea:3d:66: aa:94:79:61:25:e5:a9:e2:31:95:a0:64:78:df:ee: c0:4d:15:e9:ce:cd:3c:63:c3:2b:d9:94:ff:70:94: 2e:34:7b:59:c4:43:63:b5:d3:2f:88:43:e6:fa:6c: e6:4b:69:ac:00:26:ac:ac:f0:85:9f:c3:8c:69:6c: d2:eb:45:dc:fa:56:b9:a0:3a:ca:52:bb:37:b6:2f: 9d:62:f2:af:23:f7:ae:db:b6:ec:da:71:ad:da:9e: 81:68:ea:dd:84:5d:03:d3:5b:33:ea:3c:a2:03:b4: 68:0a:e2:3f:f2:ec:12:19:64:a6:dc:67:63:87:f4: 74:f0:6f:f7:59:7f:ab:2b:87:db:9f:80:bc:47:80: 45:b3:1f:15:2f:44:0b:4e:f8:40:dc:4c:94:a0:2a: fd:bb:dc:bd:5d:5a:9d:9f:a3:01:11:97:af:1b:89: 8a:38:c0:91:04:76:42:73:eb:e0:b6:55:b6:52:f7: 1a:21:80:35:a2:d7:15:59:44:4e:f3:64:d0:aa:e5: 8b:67:71:1b:89:2d:b9:5d:fe:82:f1:6d:9a:06:65: d6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4F:A0:A3:8E:62:10:7A:E9:08:DC:68:E3:23:D0:FB:72:68:B4:10 X509v3 Authority Key Identifier: keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/O0-go45iEHrpCNxo4yPQ-3JotBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.132.0/22 185.138.40.0/22 IPv6: 2a02:c500::/29 2a07:8c0::/29 Signature Algorithm: sha256WithRSAEncryption 5d:ba:40:b2:88:92:22:a7:d8:94:60:fc:f7:04:e4:d4:ba:4b: f3:f1:da:de:5e:5c:77:98:9d:3c:5f:66:ab:63:b5:63:d0:dc: 0b:e9:d5:9d:ce:5c:de:0a:f6:9e:92:bc:e0:05:41:53:1c:d1: 30:56:3e:fb:3c:03:74:09:8b:e8:69:80:36:0c:c5:b5:87:f0: a7:82:3e:6f:0b:34:7f:87:9c:52:40:e9:16:83:48:6d:21:bd: bc:bb:fb:54:0e:8a:0e:ca:33:cf:23:f1:a3:4d:86:c6:f7:a4: 83:4c:01:7e:86:d5:ca:8b:d2:d0:d2:4b:f6:8d:2b:ab:00:9c: d4:e5:2f:d0:a6:76:6a:ff:b1:34:43:21:cb:8a:65:e1:4b:bb: 22:9b:cc:59:17:f4:6e:75:bc:66:00:b2:fd:1b:0e:f5:82:da: bd:8f:93:cf:e8:17:65:b5:54:45:eb:d2:31:c6:c0:fd:fd:78: 89:23:80:a2:84:bf:33:c1:4d:7b:ee:93:d7:cf:f1:f4:19:62: 8b:e7:70:e2:a0:d9:c9:80:10:bb:57:d1:4f:e1:56:5d:21:4d: d6:bd:d6:27:1e:0d:94:7d:3e:e3:d5:ae:a0:90:0f:cf:6b:ad: 86:39:a7:87:eb:f3:a0:27:78:42:04:47:22:9c:67:f3:2a:8d: 55:02:75:50 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZpYdRFWRxVGlVv1LjVZrIGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNDYyM2Y3NmJkNWJiMmRmMGFmNjZmMzYwZmY3NGZmMWMw MGRiMDIwHhcNMjUxMTA2MDkxNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjRmYTBhMzhlNjIxMDdhZTkwOGRjNjhlMzIzZDBmYjcyNjhiNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6gm5VcF7voXLdvXXbV+747/jsB9 Shlkg56NYFV1eMVDWIbcRFYorinqPWaqlHlhJeWp4jGVoGR43+7ATRXpzs08Y8Mr 2ZT/cJQuNHtZxENjtdMviEPm+mzmS2msACasrPCFn8OMaWzS60Xc+la5oDrKUrs3 ti+dYvKvI/eu27bs2nGt2p6BaOrdhF0D01sz6jyiA7RoCuI/8uwSGWSm3Gdjh/R0 8G/3WX+rK4fbn4C8R4BFsx8VL0QLTvhA3EyUoCr9u9y9XVqdn6MBEZevG4mKOMCR BHZCc+vgtlW2UvcaIYA1otcVWURO82TQquWLZ3EbiS25Xf6C8W2aBmXWtwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDtPoKOOYhB66QjcaOMj0PtyaLQQMB8GA1UdIwQY MBaAFGpGI/dr1bst8K9m82D/dP8cANsCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgt NmM4MzIwNTBlNzdhLzEvTzAtZ280NWlFSHJwQ054bzR5UFEtM0pvdEJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81OTk1MjgtYjg5ZC00NDAyLWE4MDgtNmM4MzIwNTBlNzdh LzEvYWtZajkydlZ1eTN3cjJiellQOTBfeHdBMndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuQSEAwQC uYooMBQEAgACMA4DBQMqAsUAAwUDKgcIwDANBgkqhkiG9w0BAQsFAAOCAQEAXbpA soiSIqfYlGD89wTk1LpL8/Ha3l5cd5idPF9mq2O1Y9DcC+nVnc5c3gr2npK84AVB UxzRMFY++zwDdAmL6GmANgzFtYfwp4I+bws0f4ecUkDpFoNIbSG9vLv7VA6KDsoz zyPxo02Gxvekg0wBfobVyovS0NJL9o0rqwCc1OUv0KZ2av+xNEMhy4pl4Uu7IpvM WRf0bnW8ZgCy/RsO9YLavY+Tz+gXZbVURevSMcbA/f14iSOAooS/M8FNe+6T18/x 9Blii+dw4qDZyYAQu1fRT+FWXSFN1r3WJx4NlH0+49WuoJAPz2uthjmnh+vzoCd4 QgRHIpxn8yqNVQJ1UA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:51:48 2025 by rpki-client