This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/o9ILjFHyqHFBLmfa8iktUbEEHgc.roa File: o9ILjFHyqHFBLmfa8iktUbEEHgc.roa (raw, json) Hash identifier: AnlJF340Arx0CyHCuh9//rcp5JhktymE+WZs85nUSA4= Subject key identifier: A3:D2:0B:8C:51:F2:A8:71:41:2E:67:DA:F2:29:2D:51:B1:04:1E:07 Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Certificate serial: 019ABB45A6967B567A01B8FCB34237BE1114 Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/o9ILjFHyqHFBLmfa8iktUbEEHgc.roa Signing time: Tue 25 Nov 2025 13:48:15 +0000 ROA not before: Tue 25 Nov 2025 13:48:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42337 IP address blocks: 185.222.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bb:45:a6:96:7b:56:7a:01:b8:fc:b3:42:37:be:11:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9 Validity Not Before: Nov 25 13:48:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a3d20b8c51f2a871412e67daf2292d51b1041e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:25:9e:7b:3e:76:13:39:a6:c2:1b:44:4a: 94:45:43:b8:d7:b8:3e:de:d9:a7:8e:fa:d3:ee:4f: 0f:58:b9:54:53:e7:0e:58:5c:42:a5:0d:82:86:de: 9d:27:c8:64:b4:28:b4:f7:09:a1:38:54:f8:89:38: a6:c2:0e:29:2e:68:84:c3:3f:41:44:fe:0c:82:35: 03:c0:f3:8f:50:f6:44:b3:37:0f:1e:2c:66:eb:cb: 60:4e:09:71:92:02:44:12:9c:d7:e1:f3:a3:39:82: 15:69:19:95:2a:ce:d9:ca:a7:4e:9a:91:19:2e:9d: 2e:f6:78:2c:b0:01:d5:e9:14:01:b6:f1:41:d2:ff: ad:2f:d6:68:b2:fb:48:ef:3f:5a:54:90:c4:0b:46: cd:f0:a1:9c:35:1c:37:e7:9f:42:e3:89:87:5f:a4: 9d:74:5f:56:7d:f7:46:23:bf:47:63:42:22:fd:47: 6e:e7:06:33:28:7c:27:b9:d4:fd:0b:e9:2e:33:03: 39:fa:ea:39:9d:d0:73:6e:b0:6b:a7:17:59:ff:38: 76:d6:45:3d:9b:be:b0:0b:0e:d6:17:90:c3:69:0f: 6f:4b:1a:f0:9d:8f:73:4f:7a:ed:2b:53:b3:be:83: b3:75:05:ee:b5:ff:92:94:4b:a5:a0:b3:12:1d:45: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D2:0B:8C:51:F2:A8:71:41:2E:67:DA:F2:29:2D:51:B1:04:1E:07 X509v3 Authority Key Identifier: keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/o9ILjFHyqHFBLmfa8iktUbEEHgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.121.0/24 Signature Algorithm: sha256WithRSAEncryption bb:35:16:34:ce:36:30:13:ef:5c:c6:7b:0e:66:d7:cb:d5:0e: 4d:93:fd:1d:45:d3:cd:ea:c1:df:16:84:00:e7:a8:dd:ca:75: 4a:88:b8:3f:57:2a:7e:44:c8:5e:f4:7f:ef:31:f5:b0:65:d8: ae:c8:4d:1c:dd:ed:25:55:fd:f1:5d:55:d5:cd:08:27:1c:df: 34:d8:62:4e:07:f0:1f:e8:d7:f9:c0:a5:5f:3c:61:3a:5f:0f: 7c:9e:d0:22:11:64:ab:66:9c:d9:12:89:ad:9c:86:b8:3b:74: 87:42:74:30:ef:08:1b:38:c5:b1:c9:8c:43:83:16:b1:c5:b3: c4:b3:9e:1f:25:a5:bb:99:3e:3a:e0:9a:c2:fa:90:3f:a6:4b: 0d:c0:15:a9:fd:3a:f5:7a:f3:68:48:ea:99:70:71:38:bc:6e: d5:a3:6d:f2:37:6c:12:7d:2a:77:73:a8:08:d3:7e:00:ae:0a: a6:e5:cd:b8:d0:5a:8e:68:b8:9b:80:1f:df:23:a6:57:cb:c5: 84:00:dd:02:62:e3:f7:98:d6:b3:9f:9d:e3:ce:65:7d:d9:97: e1:3b:6d:be:00:da:b1:dd:18:c6:fb:c7:af:e8:67:88:c9:c1: 48:e3:b1:aa:45:78:51:3e:15:6e:38:b4:0b:a6:11:10:a4:f1: 0b:3a:2e:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq7RaaWe1Z6Abj8s0I3vhEUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOWI1NmQ4ZDk2ZWJjYjVmY2Y4N2RlMmVjMmI1MmMxOTRj Y2Y5ZjkwHhcNMjUxMTI1MTM0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2QyMGI4YzUxZjJhODcxNDEyZTY3ZGFmMjI5MmQ1MWIxMDQxZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYIlnns+dhM5psIbREqURUO417g+ 3tmnjvrT7k8PWLlUU+cOWFxCpQ2Cht6dJ8hktCi09wmhOFT4iTimwg4pLmiEwz9B RP4MgjUDwPOPUPZEszcPHixm68tgTglxkgJEEpzX4fOjOYIVaRmVKs7ZyqdOmpEZ Lp0u9ngssAHV6RQBtvFB0v+tL9ZosvtI7z9aVJDEC0bN8KGcNRw3559C44mHX6Sd dF9WffdGI79HY0Ii/Udu5wYzKHwnudT9C+kuMwM5+uo5ndBzbrBrpxdZ/zh21kU9 m76wCw7WF5DDaQ9vSxrwnY9zT3rtK1OzvoOzdQXutf+SlEuloLMSHUU0bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPSC4xR8qhxQS5n2vIpLVGxBB4HMB8GA1UdIwQY MBaAFLubVtjZbry1/Ph94uwrUsGUzPn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmIt NGY0ZmU4MDNiMDE1LzEvbzlJTGpGSHlxSEZCTG1mYThpa3RVYkVFSGdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84ZjM5NDItMTdmNy00OTNjLWJjNmItNGY0ZmU4MDNiMDE1 LzEvdTV0VzJObHV2TFg4LUgzaTdDdFN3WlRNLWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud55MA0G CSqGSIb3DQEBCwUAA4IBAQC7NRY0zjYwE+9cxnsOZtfL1Q5Nk/0dRdPN6sHfFoQA 56jdynVKiLg/Vyp+RMhe9H/vMfWwZdiuyE0c3e0lVf3xXVXVzQgnHN802GJOB/Af 6Nf5wKVfPGE6Xw98ntAiEWSrZpzZEomtnIa4O3SHQnQw7wgbOMWxyYxDgxaxxbPE s54fJaW7mT464JrC+pA/pksNwBWp/Tr1evNoSOqZcHE4vG7Vo23yN2wSfSp3c6gI 034Argqm5c240FqOaLibgB/fI6ZXy8WEAN0CYuP3mNazn53jzmV92ZfhO22+ANqx 3RjG+8ev6GeIycFI47GqRXhRPhVuOLQLphEQpPELOi4p -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:17 2025 by rpki-client