This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/2sPPy0q5Y12qD-JkITxmoSy9VZk.roa File: 2sPPy0q5Y12qD-JkITxmoSy9VZk.roa (raw, json) Hash identifier: Gj7nMEcJE/n/qMR7ny5p+eEBgM3NSrc5hNkaSKeptpA= Subject key identifier: DA:C3:CF:CB:4A:B9:63:5D:AA:0F:E2:64:21:3C:66:A1:2C:BD:55:99 Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36 Certificate serial: 019AE8FF7D0AE846A243DE48E22DB185F0FB Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/2sPPy0q5Y12qD-JkITxmoSy9VZk.roa Signing time: Thu 04 Dec 2025 10:54:08 +0000 ROA not before: Thu 04 Dec 2025 10:54:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 35228 IP address blocks: 87.194.0.0/16 maxlen: 24 87.194.21.0/24 maxlen: 24 87.194.22.0/24 maxlen: 24 87.194.82.0/24 maxlen: 24 87.194.83.0/24 maxlen: 24 87.194.100.0/23 maxlen: 24 87.194.102.0/23 maxlen: 24 87.194.116.0/24 maxlen: 24 87.194.117.0/24 maxlen: 24 87.194.118.0/24 maxlen: 24 87.194.202.0/24 maxlen: 24 87.194.216.0/23 maxlen: 24 93.97.0.0/16 maxlen: 24 93.97.0.0/22 maxlen: 24 93.97.8.0/22 maxlen: 24 93.97.12.0/22 maxlen: 24 93.97.48.0/22 maxlen: 24 93.97.60.0/22 maxlen: 24 93.97.80.0/23 maxlen: 24 93.97.176.0/22 maxlen: 24 93.97.180.0/22 maxlen: 24 93.97.212.0/22 maxlen: 24 93.97.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:ff:7d:0a:e8:46:a2:43:de:48:e2:2d:b1:85:f0:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36 Validity Not Before: Dec 4 10:54:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dac3cfcb4ab9635daa0fe264213c66a12cbd5599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:44:45:8c:e5:5a:e6:07:31:15:51:89:c7:87: e8:9a:46:0b:58:1b:db:3a:41:75:3d:22:8e:1b:83: 49:c6:3c:1c:dc:40:09:d3:c7:04:e7:ef:2c:73:96: 83:d0:36:53:72:bd:84:b5:4a:c7:57:bd:2f:7f:aa: a0:ba:e6:08:4f:a4:c2:4d:7e:7e:6b:30:b5:ca:cb: 65:23:9d:1e:5c:8b:26:6a:aa:0b:12:1a:ac:9c:3e: 0d:27:c6:fe:71:62:bf:08:c6:6c:fe:91:bc:a9:ba: 11:89:c6:96:df:09:29:40:50:33:50:a7:02:c8:66: 8e:81:d0:0f:6f:4d:aa:07:2c:67:b6:48:a3:c0:9b: 1c:07:a5:d0:a9:e3:57:6a:a3:af:a6:bf:77:3c:cf: 74:79:19:9c:59:de:10:c3:94:24:9f:c8:16:d0:08: cf:b4:43:df:93:68:b6:0c:3a:99:cc:17:06:76:ca: da:5e:5a:8e:3c:83:59:9d:30:4d:3f:8e:2e:29:16: 70:a9:f1:a4:18:56:69:3e:b2:7f:0d:30:7d:c8:cd: 27:e1:88:e9:eb:5d:b5:78:f3:29:52:ef:6e:1b:88: 5a:1e:e4:25:7d:a7:0f:c1:d8:c4:a7:ad:09:3c:78: 55:97:46:25:76:ba:e4:ff:cf:ed:e4:a4:8f:30:41: 3a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C3:CF:CB:4A:B9:63:5D:AA:0F:E2:64:21:3C:66:A1:2C:BD:55:99 X509v3 Authority Key Identifier: keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/2sPPy0q5Y12qD-JkITxmoSy9VZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.194.0.0/16 93.97.0.0/16 Signature Algorithm: sha256WithRSAEncryption bc:54:48:38:61:d4:8c:e3:12:c2:0c:31:90:3b:2a:e1:8c:e3: 25:e6:4d:a8:5f:ac:01:e5:85:12:2c:6c:f3:71:15:96:e5:96: e3:e8:28:f8:d3:d0:41:58:c5:b9:f8:4b:8e:5a:c6:23:2b:74: b7:6e:e8:71:d9:b1:d6:13:9c:24:a4:ab:a4:28:f2:28:15:d2: 5d:9d:dc:1b:f9:08:b3:69:1b:50:38:fa:ef:de:39:17:89:78: 1e:c3:f1:ff:43:8a:07:d7:24:db:93:48:fc:33:dd:60:b9:8b: 99:8b:ef:bf:e5:ef:49:54:6f:35:ba:36:55:b8:c3:55:ae:8f: ca:e4:d5:a7:40:af:a5:64:d0:33:83:3b:51:f2:9c:e9:ac:9b: ea:a8:ee:ea:eb:37:f9:71:b9:4e:1c:34:c0:2e:96:1c:b0:2d: 91:c1:a0:fb:c8:cd:53:ed:de:8b:a8:38:89:6b:02:fb:48:31: 62:3d:91:d3:7d:1d:ed:8d:0f:36:2f:b5:f9:f5:a9:ed:7c:a1: 57:80:4d:41:e3:e3:3d:12:e3:9e:46:f7:0d:b7:a2:f4:bc:ec: d8:fd:40:5c:32:14:ec:66:54:7a:87:c4:a4:59:46:e9:04:1c: 3f:c2:94:3b:21:e1:a8:27:a1:83:f3:79:a1:2a:a2:19:e3:9f: 7e:c0:da:fe -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZro/30K6EaiQ95I4i2xhfD7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMzMxMTRjYmZjNmJmNjY4MzcxYzU2ODdlZTk4YTQ0MmZk OGVhMzYwHhcNMjUxMjA0MTA1NDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYWMzY2ZjYjRhYjk2MzVkYWEwZmUyNjQyMTNjNjZhMTJjYmQ1NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkERFjOVa5gcxFVGJx4fomkYLWBvb OkF1PSKOG4NJxjwc3EAJ08cE5+8sc5aD0DZTcr2EtUrHV70vf6qguuYIT6TCTX5+ azC1ystlI50eXIsmaqoLEhqsnD4NJ8b+cWK/CMZs/pG8qboRicaW3wkpQFAzUKcC yGaOgdAPb02qByxntkijwJscB6XQqeNXaqOvpr93PM90eRmcWd4Qw5Qkn8gW0AjP tEPfk2i2DDqZzBcGdsraXlqOPINZnTBNP44uKRZwqfGkGFZpPrJ/DTB9yM0n4Yjp 6121ePMpUu9uG4haHuQlfacPwdjEp60JPHhVl0Yldrrk/8/t5KSPMEE6swIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFNrDz8tKuWNdqg/iZCE8ZqEsvVWZMB8GA1UdIwQY MBaAFKMzEUy/xr9mg3HFaH7pikQv2Oo2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMt Y2Q0OTI2NGVhZjBiLzEvMnNQUHkwcTVZMTJxRC1Ka0lUeG1vU3k5VlprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC81MzA2MjUtNGU0Ni00NTYzLWFlMmMtY2Q0OTI2NGVhZjBi LzEvb3pNUlRMX0d2MmFEY2NWb2Z1bUtSQ19ZNmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAV8IDAwBd YTANBgkqhkiG9w0BAQsFAAOCAQEAvFRIOGHUjOMSwgwxkDsq4YzjJeZNqF+sAeWF Eixs83EVluWW4+go+NPQQVjFufhLjlrGIyt0t27ocdmx1hOcJKSrpCjyKBXSXZ3c G/kIs2kbUDj67945F4l4HsPx/0OKB9ck25NI/DPdYLmLmYvvv+XvSVRvNbo2VbjD Va6PyuTVp0CvpWTQM4M7UfKc6ayb6qju6us3+XG5Thw0wC6WHLAtkcGg+8jNU+3e i6g4iWsC+0gxYj2R030d7Y0PNi+1+fWp7XyhV4BNQePjPRLjnkb3Dbei9Lzs2P1A XDIU7GZUeofEpFlG6QQcP8KUOyHhqCehg/N5oSqiGeOffsDa/g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:12 2025 by rpki-client