This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/O-OxTyA5ehQ2ZKNGCdzbNqrmREo.roa File: O-OxTyA5ehQ2ZKNGCdzbNqrmREo.roa (raw, json) Hash identifier: IZ+Dtqniutr6GXZaWWLBGMzrymuKXFanYIhfnb0AsIs= Subject key identifier: 3B:E3:B1:4F:20:39:7A:14:36:64:A3:46:09:DC:DB:36:AA:E6:44:4A Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019A9CAC2889ADA4264021044E2D882E4199 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/O-OxTyA5ehQ2ZKNGCdzbNqrmREo.roa Signing time: Wed 19 Nov 2025 15:11:59 +0000 ROA not before: Wed 19 Nov 2025 15:11:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209260 IP address blocks: 87.229.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:ac:28:89:ad:a4:26:40:21:04:4e:2d:88:2e:41:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Nov 19 15:11:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3be3b14f20397a143664a34609dcdb36aae6444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9a:15:6d:c2:db:3f:e4:fb:40:a0:b0:f4:7e: 9b:79:3b:d9:d8:83:2a:4a:09:7b:56:6d:0d:39:8d: 42:f8:46:93:1f:6c:21:42:10:98:c8:92:03:cf:7d: bf:15:6b:18:7b:af:07:c4:2c:9e:ac:46:74:b3:a4: c9:26:6f:91:7a:6d:6a:e9:23:84:3f:10:bc:30:d1: ea:67:6c:65:d7:82:70:57:cb:af:e2:d0:b4:1f:19: 2d:dd:f0:50:cd:6a:43:d1:39:67:ef:a6:6b:38:bd: 2c:93:ce:1c:ca:a8:7e:d0:b8:60:6d:c5:34:33:d6: 4a:40:4d:81:aa:a5:ea:a3:e7:f2:c0:b5:f8:56:ac: 82:fc:54:b2:9e:21:72:b0:84:e3:02:36:5a:c2:2a: 89:74:b4:78:f1:00:f5:1f:85:2d:74:bd:d2:71:f3: 72:87:ad:22:15:19:df:65:11:14:af:ac:a6:bf:a9: b5:32:de:19:da:c6:31:f7:24:87:30:2e:1a:0d:16: 16:d6:80:d1:0a:25:a1:c0:07:6b:b4:91:f8:ea:bd: e8:1d:4f:5b:c6:1f:3b:be:02:0b:56:4c:89:27:a9: 31:67:5f:cc:5c:2f:e5:24:55:28:fe:c5:d2:1f:4a: 24:b9:4f:94:f7:5f:74:1b:b8:d9:0d:61:ff:39:16: bc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:B1:4F:20:39:7A:14:36:64:A3:46:09:DC:DB:36:AA:E6:44:4A X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/O-OxTyA5ehQ2ZKNGCdzbNqrmREo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.34.0/24 Signature Algorithm: sha256WithRSAEncryption 69:c4:9c:3b:4e:40:97:68:6a:c1:c4:1b:90:3d:c1:ff:d4:bd: 7d:e8:0c:f0:6d:bd:d6:5d:74:dc:b6:b4:de:35:5b:52:16:de: 33:e8:04:de:08:75:8b:b5:60:f4:a4:f8:18:d8:50:b7:98:60: 7b:6a:13:10:89:78:6f:41:3f:21:7c:cc:da:eb:5e:1a:c1:ec: cf:b5:3d:15:3a:20:d3:11:eb:40:9e:47:e6:91:f0:09:90:3f: 76:c7:e1:76:6d:8b:9f:f3:51:50:9b:50:fb:f3:8e:5a:eb:d8: 7b:b1:09:9c:b6:7b:66:e3:91:84:00:83:ee:0e:16:20:49:67: 18:73:69:01:19:41:37:69:31:dd:e6:35:36:2e:f0:65:1b:98: ef:63:0f:cf:81:a3:3b:78:47:cb:e7:c1:5a:10:96:57:93:16: 56:ad:76:dd:f5:61:27:e8:c6:fc:f2:31:21:44:fd:cc:a1:ea: 2d:4f:3f:55:e9:9a:7e:5b:7e:95:84:40:0e:66:5e:25:a0:2e: db:33:b2:b9:0b:ee:98:05:80:81:0f:60:fa:34:e2:a9:1f:d4: 8b:a5:13:eb:5f:2f:6b:80:be:5a:c7:fb:49:57:76:1a:16:c4: e0:c8:bf:2e:62:b6:4a:e3:9a:94:a6:8e:be:26:85:77:8e:fa: 5d:93:bc:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqcrCiJraQmQCEETi2ILkGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjUxMTE5MTUxMTU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYmUzYjE0ZjIwMzk3YTE0MzY2NGEzNDYwOWRjZGIzNmFhZTY0NDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpoVbcLbP+T7QKCw9H6beTvZ2IMq Sgl7Vm0NOY1C+EaTH2whQhCYyJIDz32/FWsYe68HxCyerEZ0s6TJJm+Rem1q6SOE PxC8MNHqZ2xl14JwV8uv4tC0Hxkt3fBQzWpD0Tln76ZrOL0sk84cyqh+0LhgbcU0 M9ZKQE2BqqXqo+fywLX4VqyC/FSyniFysITjAjZawiqJdLR48QD1H4UtdL3ScfNy h60iFRnfZREUr6ymv6m1Mt4Z2sYx9ySHMC4aDRYW1oDRCiWhwAdrtJH46r3oHU9b xh87vgILVkyJJ6kxZ1/MXC/lJFUo/sXSH0okuU+U9190G7jZDWH/ORa8DQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDvjsU8gOXoUNmSjRgnc2zaq5kRKMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvTy1PeFR5QTVlaFEyWktOR0NkemJOcXJtUkVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UiMA0G CSqGSIb3DQEBCwUAA4IBAQBpxJw7TkCXaGrBxBuQPcH/1L196Azwbb3WXXTctrTe NVtSFt4z6ATeCHWLtWD0pPgY2FC3mGB7ahMQiXhvQT8hfMza614awezPtT0VOiDT EetAnkfmkfAJkD92x+F2bYuf81FQm1D7845a69h7sQmctntm45GEAIPuDhYgSWcY c2kBGUE3aTHd5jU2LvBlG5jvYw/PgaM7eEfL58FaEJZXkxZWrXbd9WEn6Mb88jEh RP3MoeotTz9V6Zp+W36VhEAOZl4loC7bM7K5C+6YBYCBD2D6NOKpH9SLpRPrXy9r gL5ax/tJV3YaFsTgyL8uYrZK45qUpo6+JoV3jvpdk7yA -----END CERTIFICATE-----Generated at Sat Dec 6 12:02:59 2025 by rpki-client