This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/oE_b2mzBhtaUEaGvSWGvWDW7-7E.roa File: oE_b2mzBhtaUEaGvSWGvWDW7-7E.roa (raw, json) Hash identifier: WK3mI+xQLWOaMQETqVHTLaWD294DJFp3ywMhpFK66mk= Subject key identifier: A0:4F:DB:DA:6C:C1:86:D6:94:11:A1:AF:49:61:AF:58:35:BB:FB:B1 Certificate issuer: /CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Certificate serial: 019A814422DC01735E66B5E38BD04A0764CF Authority key identifier: 41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/oE_b2mzBhtaUEaGvSWGvWDW7-7E.roa Signing time: Fri 14 Nov 2025 07:28:37 +0000 ROA not before: Fri 14 Nov 2025 07:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213499 IP address blocks: 194.242.6.0/24 maxlen: 24 194.242.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:44:22:dc:01:73:5e:66:b5:e3:8b:d0:4a:07:64:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4137af08f19aa15bed3f41be62b36303dcc7dcf4 Validity Not Before: Nov 14 07:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a04fdbda6cc186d69411a1af4961af5835bbfbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:b7:7d:2b:bc:5d:17:a8:a2:48:bd:d6:11: 18:b9:c8:fd:ac:42:55:94:db:75:e0:34:14:37:61: 0f:e3:92:21:15:f1:83:4f:1d:cf:4b:a2:65:23:b4: fb:23:18:a0:3c:d6:52:ac:54:56:8c:35:b4:1b:27: 47:be:bd:31:77:0a:d5:23:52:d8:50:de:56:94:b6: f5:b5:e2:ee:b9:21:c9:d6:a2:11:ae:37:a3:ae:87: 15:20:b7:40:da:f1:95:5a:61:82:77:56:02:e7:56: 80:31:3a:dc:2a:da:7e:42:6a:ed:83:7a:c2:ac:14: 7c:ef:6a:93:ab:0b:a3:f2:73:d9:d5:bf:ff:fa:92: 4b:a2:d6:f4:42:db:f9:e1:f8:82:dd:0d:4f:d0:5c: f1:8d:19:a8:78:e7:20:7b:eb:6b:04:10:e6:1b:77: 15:0b:55:81:ba:b2:03:2e:16:4b:9f:0c:c2:bc:9c: 9e:41:14:8a:40:d6:4a:b0:49:e4:3e:64:dc:78:9f: 79:38:c7:42:db:28:f2:9e:76:9a:ae:75:9e:fe:01: 26:0a:4e:77:47:f7:da:22:c4:6a:d7:a9:d3:d4:e7: 8e:a0:f6:86:ea:c7:49:0b:b4:10:f9:b5:c6:1a:65: c6:e4:3e:ab:e8:ab:b4:f6:73:86:a2:ff:f8:ce:59: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4F:DB:DA:6C:C1:86:D6:94:11:A1:AF:49:61:AF:58:35:BB:FB:B1 X509v3 Authority Key Identifier: keyid:41:37:AF:08:F1:9A:A1:5B:ED:3F:41:BE:62:B3:63:03:DC:C7:DC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTevCPGaoVvtP0G-YrNjA9zH3PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/oE_b2mzBhtaUEaGvSWGvWDW7-7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dfdd24-4d16-4e73-b619-7f5ec275caa4/1/QTevCPGaoVvtP0G-YrNjA9zH3PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.242.6.0/23 Signature Algorithm: sha256WithRSAEncryption 54:12:e7:5e:8f:7a:5e:f2:a4:3f:77:7b:15:41:a5:c0:50:d8: 97:eb:92:41:9b:d6:5f:a1:5b:5c:8c:ee:5a:a1:b8:e0:e4:4c: 76:fa:06:fa:c7:1b:48:b2:77:d0:90:af:15:de:6e:95:71:e5: 68:69:72:88:e7:c7:1c:94:df:e2:44:4a:07:15:d5:cc:45:d7: c9:47:69:80:a5:8b:39:99:23:ce:8b:1b:bd:51:70:41:63:d7: 3a:94:c6:9a:92:a2:e6:b9:6c:d4:16:cc:e6:fa:be:28:a3:7b: b2:71:ce:fd:58:65:db:04:a2:ba:46:2d:83:fd:ab:dc:7e:23: 34:85:4e:23:1b:e5:54:1c:7e:bb:e1:39:77:ef:e9:3a:7c:ae: a1:55:7f:3e:82:3d:05:44:78:48:ed:0a:8b:ff:a4:d6:e9:53: 17:22:05:4a:a8:9b:53:26:6e:99:ed:75:f8:a1:7b:ac:16:9d: e7:4c:19:5d:29:11:e8:38:f3:dc:19:00:6f:8d:f7:6d:4e:23: 58:43:e9:27:b5:fe:88:b9:fa:da:20:10:c8:7a:a5:1f:9a:ea: 5f:66:29:6e:51:92:14:ee:b3:5c:fb:fd:8a:1c:e1:84:23:0c: 1a:21:e8:8c:dd:31:1e:96:fc:4c:3b:fa:60:bf:af:5c:b4:b9: a5:ed:13:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqBRCLcAXNeZrXji9BKB2TPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMzdhZjA4ZjE5YWExNWJlZDNmNDFiZTYyYjM2MzAzZGNj N2RjZjQwHhcNMjUxMTE0MDcyODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDRmZGJkYTZjYzE4NmQ2OTQxMWExYWY0OTYxYWY1ODM1YmJmYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZO3fSu8XReooki91hEYucj9rEJV lNt14DQUN2EP45IhFfGDTx3PS6JlI7T7IxigPNZSrFRWjDW0GydHvr0xdwrVI1LY UN5WlLb1teLuuSHJ1qIRrjejrocVILdA2vGVWmGCd1YC51aAMTrcKtp+Qmrtg3rC rBR872qTqwuj8nPZ1b//+pJLotb0Qtv54fiC3Q1P0FzxjRmoeOcge+trBBDmG3cV C1WBurIDLhZLnwzCvJyeQRSKQNZKsEnkPmTceJ95OMdC2yjynnaarnWe/gEmCk53 R/faIsRq16nT1OeOoPaG6sdJC7QQ+bXGGmXG5D6r6Ku09nOGov/4zllVuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBP29pswYbWlBGhr0lhr1g1u/uxMB8GA1UdIwQY MBaAFEE3rwjxmqFb7T9BvmKzYwPcx9z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTkt N2Y1ZWMyNzVjYWE0LzEvb0VfYjJtekJodGFVRWFHdlNXR3ZXRFc3LTdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZmRkMjQtNGQxNi00ZTczLWI2MTktN2Y1ZWMyNzVjYWE0 LzEvUVRldkNQR2FvVnZ0UDBHLVlyTmpBOXpIM1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvIGMA0G CSqGSIb3DQEBCwUAA4IBAQBUEudej3pe8qQ/d3sVQaXAUNiX65JBm9ZfoVtcjO5a objg5Ex2+gb6xxtIsnfQkK8V3m6VceVoaXKI58cclN/iREoHFdXMRdfJR2mApYs5 mSPOixu9UXBBY9c6lMaakqLmuWzUFszm+r4oo3uycc79WGXbBKK6Ri2D/avcfiM0 hU4jG+VUHH674Tl37+k6fK6hVX8+gj0FRHhI7QqL/6TW6VMXIgVKqJtTJm6Z7XX4 oXusFp3nTBldKRHoOPPcGQBvjfdtTiNYQ+kntf6IufraIBDIeqUfmupfZiluUZIU 7rNc+/2KHOGEIwwaIeiM3TEelvxMO/pgv69ctLml7RMK -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:44 2025 by rpki-client