This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/OavN9BLfO2BUhtzfzIMR5ThRAYo.roa File: OavN9BLfO2BUhtzfzIMR5ThRAYo.roa (raw, json) Hash identifier: f0nsJmrjHw9xgADrydXL400f8OVsJcPCzxNFxsqeGPs= Subject key identifier: 39:AB:CD:F4:12:DF:3B:60:54:86:DC:DF:CC:83:11:E5:38:51:01:8A Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019A6EAB6522C9036B3EC8DC2E67A4B7677D Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/OavN9BLfO2BUhtzfzIMR5ThRAYo.roa Signing time: Mon 10 Nov 2025 16:48:37 +0000 ROA not before: Mon 10 Nov 2025 16:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57543 IP address blocks: 46.143.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6e:ab:65:22:c9:03:6b:3e:c8:dc:2e:67:a4:b7:67:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Nov 10 16:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39abcdf412df3b605486dcdfcc8311e53851018a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5b:99:15:fc:a2:82:5e:a7:f1:7a:24:13:da: cd:a8:c4:3d:86:b6:5a:52:6e:b6:b3:bf:2f:8c:10: f5:78:c3:ee:15:26:c0:b2:2f:9e:6d:cd:f8:3a:1e: 59:10:e0:eb:9f:4d:c1:4f:84:1e:61:99:08:ed:1d: 63:00:80:51:62:fb:85:4d:84:c9:72:44:15:a9:3d: 9d:31:0f:77:b5:22:53:06:2f:82:8d:40:fe:55:38: 1d:d4:7b:7b:e6:7e:32:cf:c5:54:9a:42:fe:2a:d9: 16:a1:5f:65:ac:d0:ac:59:c8:af:be:b4:39:ae:5b: 3f:bb:c2:e8:55:b2:de:85:76:4f:de:d6:10:a2:ce: 5f:30:c4:20:14:d6:81:00:82:30:81:24:97:84:d9: e2:38:35:22:b2:fe:45:5d:99:51:49:26:12:13:c9: 44:fb:aa:5c:24:00:03:61:58:49:12:d8:17:ee:49: d1:49:8b:df:a0:f4:5f:49:9e:f1:db:0a:c5:5f:fc: 69:14:a2:a7:f4:14:f9:8d:3f:4e:e0:84:dd:5e:6d: 46:b1:a5:21:5d:1f:3e:f4:83:e2:b3:ec:98:b4:94: f0:35:7f:5c:f2:6f:b7:a4:0c:d5:f5:77:f2:86:bb: 08:20:36:5f:98:48:b0:9d:df:4a:9c:85:df:9c:f0: 3e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AB:CD:F4:12:DF:3B:60:54:86:DC:DF:CC:83:11:E5:38:51:01:8A X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/OavN9BLfO2BUhtzfzIMR5ThRAYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.216.0/21 Signature Algorithm: sha256WithRSAEncryption 90:f9:eb:45:92:99:67:8e:39:5b:c0:a5:7f:bc:2d:5f:b2:4e: a3:f3:a7:b0:48:44:8d:1e:a3:23:61:20:d0:84:69:3c:9b:79: 66:f4:5d:58:e0:71:ef:f6:41:bf:e4:4c:08:1b:92:3b:f2:62: 80:ff:43:7b:c0:4d:e5:69:bd:53:45:2e:d0:af:fb:5b:9a:e5: 75:38:33:ed:c1:a6:cd:3c:44:ee:f3:3e:97:27:9c:4f:bf:69: c2:dc:e7:0a:f0:5d:d9:b7:6d:86:0a:2a:51:85:70:ae:cf:8b: 2a:d0:6c:01:23:72:f3:ab:b6:7f:08:f8:bc:14:a9:12:6f:88: 3d:26:03:4c:8a:31:d7:7a:9e:2b:19:6c:71:d5:1d:cf:20:38: 67:ea:89:75:92:7f:29:15:0d:2b:65:e3:e8:58:76:4e:55:25: 34:08:d5:db:07:35:60:2e:8a:1e:70:48:ee:55:9f:00:2c:03: 90:14:4c:a6:70:ef:e5:5a:67:c0:5e:6e:16:13:07:f7:b0:00: 1c:dc:a5:a6:48:05:bf:82:6f:fe:19:bc:81:69:1c:89:15:8c: c9:f0:56:2d:63:d3:85:1f:71:b8:b1:88:fe:12:88:5a:5d:17: c5:05:7f:e3:da:60:78:b0:fd:1f:17:5d:57:28:52:2b:a2:6e: 9c:58:8c:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpuq2UiyQNrPsjcLmekt2d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUxMTEwMTY0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWFiY2RmNDEyZGYzYjYwNTQ4NmRjZGZjYzgzMTFlNTM4NTEwMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsluZFfyigl6n8XokE9rNqMQ9hrZa Um62s78vjBD1eMPuFSbAsi+ebc34Oh5ZEODrn03BT4QeYZkI7R1jAIBRYvuFTYTJ ckQVqT2dMQ93tSJTBi+CjUD+VTgd1Ht75n4yz8VUmkL+KtkWoV9lrNCsWcivvrQ5 rls/u8LoVbLehXZP3tYQos5fMMQgFNaBAIIwgSSXhNniODUisv5FXZlRSSYSE8lE +6pcJAADYVhJEtgX7knRSYvfoPRfSZ7x2wrFX/xpFKKn9BT5jT9O4ITdXm1GsaUh XR8+9IPis+yYtJTwNX9c8m+3pAzV9XfyhrsIIDZfmEiwnd9KnIXfnPA+swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmrzfQS3ztgVIbc38yDEeU4UQGKMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvT2F2TjlCTGZPMkJVaHR6ZnpJTVI1VGhSQVlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLo/YMA0G CSqGSIb3DQEBCwUAA4IBAQCQ+etFkplnjjlbwKV/vC1fsk6j86ewSESNHqMjYSDQ hGk8m3lm9F1Y4HHv9kG/5EwIG5I78mKA/0N7wE3lab1TRS7Qr/tbmuV1ODPtwabN PETu8z6XJ5xPv2nC3OcK8F3Zt22GCipRhXCuz4sq0GwBI3Lzq7Z/CPi8FKkSb4g9 JgNMijHXep4rGWxx1R3PIDhn6ol1kn8pFQ0rZePoWHZOVSU0CNXbBzVgLooecEju VZ8ALAOQFEymcO/lWmfAXm4WEwf3sAAc3KWmSAW/gm/+GbyBaRyJFYzJ8FYtY9OF H3G4sYj+EohaXRfFBX/j2mB4sP0fF11XKFIrom6cWIzi -----END CERTIFICATE-----Generated at Sat Dec 6 10:50:58 2025 by rpki-client