This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oDM233la8eVLRZbNR8nh5Vb8nhg.roa File: oDM233la8eVLRZbNR8nh5Vb8nhg.roa (raw, json) Hash identifier: IZbNW+e8JaQSXYQpsho7z1f63y5qRsc4mFKmZA1nB4M= Subject key identifier: A0:33:36:DF:79:5A:F1:E5:4B:45:96:CD:47:C9:E1:E5:56:FC:9E:18 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019AB8292701C1E61F70A64A392054B85F86 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oDM233la8eVLRZbNR8nh5Vb8nhg.roa Signing time: Mon 24 Nov 2025 23:18:15 +0000 ROA not before: Mon 24 Nov 2025 23:18:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28964 IP address blocks: 77.105.8.0/24 maxlen: 24 77.105.39.0/24 maxlen: 24 79.175.66.0/24 maxlen: 24 79.175.120.0/24 maxlen: 24 81.18.51.0/24 maxlen: 24 81.18.56.0/24 maxlen: 24 81.18.57.0/24 maxlen: 24 93.186.65.0/24 maxlen: 24 93.186.77.0/24 maxlen: 24 109.121.48.0/24 maxlen: 24 109.121.49.0/24 maxlen: 24 109.121.53.0/24 maxlen: 24 178.219.2.0/24 maxlen: 24 178.253.212.0/24 maxlen: 24 178.253.216.0/24 maxlen: 24 178.253.217.0/24 maxlen: 24 178.253.218.0/24 maxlen: 24 178.253.235.0/24 maxlen: 24 178.253.238.0/24 maxlen: 24 178.253.246.0/24 maxlen: 24 188.255.179.0/24 maxlen: 24 188.255.190.0/24 maxlen: 24 188.255.192.0/24 maxlen: 24 188.255.195.0/24 maxlen: 24 188.255.207.0/24 maxlen: 24 188.255.217.0/24 maxlen: 24 188.255.228.0/24 maxlen: 24 212.69.2.0/24 maxlen: 24 212.69.3.0/24 maxlen: 24 212.69.19.0/24 maxlen: 24 212.69.21.0/24 maxlen: 24 212.69.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b8:29:27:01:c1:e6:1f:70:a6:4a:39:20:54:b8:5f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 24 23:18:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a03336df795af1e54b4596cd47c9e1e556fc9e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:96:d1:87:a1:54:dd:7f:c4:e8:ae:28:fb:cb: ab:7e:3b:5f:78:d1:66:c7:7c:ba:bc:4d:97:67:12: 6c:6f:44:67:58:e7:89:70:46:c8:02:0d:5f:82:a1: 3c:38:75:4d:9e:ed:ca:0a:09:69:56:62:db:c7:17: 61:96:15:be:6c:50:06:b0:fa:57:1a:f7:21:8a:d9: 57:fa:cd:c9:2e:b2:69:70:73:7e:4a:cf:1a:66:c9: d0:dd:1b:3c:2b:36:a8:26:4d:04:11:b0:3b:16:a1: 31:e4:36:4e:94:39:97:46:fd:3f:50:ef:c5:53:0d: b3:9e:b3:f6:4a:a6:07:ee:45:17:0b:c3:02:da:65: 8e:86:aa:a0:ec:99:7c:8f:39:59:92:90:7e:87:86: 62:dc:62:cc:ac:d7:94:de:39:e8:c0:0c:61:ec:21: 80:29:3e:f5:9e:b2:04:c9:22:f4:71:e5:ee:af:69: 93:91:65:b9:42:57:0c:e8:91:56:3f:91:2e:45:5f: 46:2e:0e:74:a6:ae:33:66:d0:36:c3:97:c4:b0:a8: 5c:31:0c:ad:8e:4a:30:aa:c0:34:18:2f:56:02:d6: 90:9e:08:6b:5c:1d:97:fd:c8:13:e9:6e:9d:60:92: fc:1b:bc:12:dc:b7:d6:7e:75:50:a2:12:78:62:72: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:33:36:DF:79:5A:F1:E5:4B:45:96:CD:47:C9:E1:E5:56:FC:9E:18 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/oDM233la8eVLRZbNR8nh5Vb8nhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.8.0/24 77.105.39.0/24 79.175.66.0/24 79.175.120.0/24 81.18.51.0/24 81.18.56.0/23 93.186.65.0/24 93.186.77.0/24 109.121.48.0/23 109.121.53.0/24 178.219.2.0/24 178.253.212.0/24 178.253.216.0-178.253.218.255 178.253.235.0/24 178.253.238.0/24 178.253.246.0/24 188.255.179.0/24 188.255.190.0/24 188.255.192.0/24 188.255.195.0/24 188.255.207.0/24 188.255.217.0/24 188.255.228.0/24 212.69.2.0/23 212.69.19.0/24 212.69.21.0/24 212.69.30.0/24 Signature Algorithm: sha256WithRSAEncryption 21:11:0c:17:bd:2a:b4:a9:71:b6:55:80:9e:93:9c:a6:14:61: f8:c0:e3:f7:60:72:e3:9c:04:71:d2:64:21:6e:4c:f4:87:c7: e9:d7:4f:45:fe:b7:fd:90:aa:85:13:1d:65:36:23:ce:62:c7: 08:d0:75:6e:64:4f:4e:7f:8c:6c:5a:7a:54:3a:ab:6b:83:96: 3f:dd:c0:47:da:5a:3c:90:f6:05:40:59:7d:2d:18:df:1a:51: 35:6b:87:a5:b5:3e:19:cf:9e:d4:e3:07:0b:53:8b:50:90:72: bc:cf:b6:9a:6b:46:62:e9:7e:b9:a1:d0:41:0d:0b:f3:00:c2: ab:a2:bc:98:6c:28:49:59:4e:19:e6:da:45:78:a5:88:20:5b: b1:68:16:60:d5:d9:dd:83:d5:0d:6a:02:96:ce:61:d0:9a:0b: 69:5b:9d:e1:74:cf:8f:b0:35:bf:5f:90:d5:0b:69:ce:70:1b: 85:23:1f:cc:f2:e8:b2:6e:f4:63:6d:34:f5:9d:77:ad:ed:d2: 32:7e:93:02:96:b7:a2:e8:8d:33:a5:2d:f9:2c:5b:bd:0e:ae: dd:1f:c9:d0:de:1b:e3:79:e3:0f:f8:ff:81:94:bf:c1:28:ff: 3d:7c:61:9d:93:27:67:e8:b8:71:41:51:00:ba:ea:cd:82:52: f4:38:ec:7b -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZq4KScBweYfcKZKOSBUuF+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTI0MjMxODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDMzMzZkZjc5NWFmMWU1NGI0NTk2Y2Q0N2M5ZTFlNTU2ZmM5ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZbRh6FU3X/E6K4o+8urfjtfeNFm x3y6vE2XZxJsb0RnWOeJcEbIAg1fgqE8OHVNnu3KCglpVmLbxxdhlhW+bFAGsPpX GvchitlX+s3JLrJpcHN+Ss8aZsnQ3Rs8KzaoJk0EEbA7FqEx5DZOlDmXRv0/UO/F Uw2znrP2SqYH7kUXC8MC2mWOhqqg7Jl8jzlZkpB+h4Zi3GLMrNeU3jnowAxh7CGA KT71nrIEySL0ceXur2mTkWW5QlcM6JFWP5EuRV9GLg50pq4zZtA2w5fEsKhcMQyt jkowqsA0GC9WAtaQnghrXB2X/cgT6W6dYJL8G7wS3LfWfnVQohJ4YnKUcwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFKAzNt95WvHlS0WWzUfJ4eVW/J4YMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvb0RNMjMzbGE4ZVZMUlpiTlI4bmg1VmI4bmhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBABN aQgDBABNaScDBABPr0IDBABPr3gDBABREjMDBAFREjgDBABdukEDBABduk0DBAFt eTADBABteTUDBACy2wIDBACy/dQwDAMEA7L92AMEALL92gMEALL96wMEALL97gME ALL99gMEALz/swMEALz/vgMEALz/wAMEALz/wwMEALz/zwMEALz/2QMEALz/5AME AdRFAgMEANRFEwMEANRFFQMEANRFHjANBgkqhkiG9w0BAQsFAAOCAQEAIREMF70q tKlxtlWAnpOcphRh+MDj92By45wEcdJkIW5M9IfH6ddPRf63/ZCqhRMdZTYjzmLH CNB1bmRPTn+MbFp6VDqra4OWP93AR9paPJD2BUBZfS0Y3xpRNWuHpbU+Gc+e1OMH C1OLUJByvM+2mmtGYul+uaHQQQ0L8wDCq6K8mGwoSVlOGebaRXiliCBbsWgWYNXZ 3YPVDWoCls5h0JoLaVud4XTPj7A1v1+Q1QtpznAbhSMfzPLosm70Y2009Z13re3S Mn6TApa3ouiNM6Ut+SxbvQ6u3R/J0N4b43njD/j/gZS/wSj/PXxhnZMnZ+i4cUFR ALrqzYJS9Djsew== -----END CERTIFICATE-----Generated at Sat Dec 6 18:06:38 2025 by rpki-client