This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/OWRhH0FQBdukNGq2l--MnY_T16Q.roa File: OWRhH0FQBdukNGq2l--MnY_T16Q.roa (raw, json) Hash identifier: 6IKG+JC8NO8uCZ4t2I5OCFvKu9ZDmYfjoRYztumtf8E= Subject key identifier: 39:64:61:1F:41:50:05:DB:A4:34:6A:B6:97:EF:8C:9D:8F:D3:D7:A4 Certificate issuer: /CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Certificate serial: 019AE9A1DA7C0A45BDD53D1112E54533B7B4 Authority key identifier: CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/OWRhH0FQBdukNGq2l--MnY_T16Q.roa Signing time: Thu 04 Dec 2025 13:51:29 +0000 ROA not before: Thu 04 Dec 2025 13:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 192.122.217.0/24 maxlen: 24 192.122.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.mft rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e9:a1:da:7c:0a:45:bd:d5:3d:11:12:e5:45:33:b7:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd6e161dcfb7b72775149d435b79ba9d56d1417 Validity Not Before: Dec 4 13:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3964611f415005dba4346ab697ef8c9d8fd3d7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9f:8d:d5:bb:fa:bc:5b:ee:23:50:47:46:5a: 4f:de:d9:54:15:db:6f:a1:c9:08:3d:c2:e8:e0:99: 2e:e2:ab:67:f1:ab:76:f7:12:cc:e6:5e:fd:79:14: 7f:40:18:c5:04:96:97:58:7a:3a:d6:ce:54:5d:80: a4:40:50:b6:9f:04:19:61:0a:ff:2a:79:36:18:09: f0:cd:fc:1e:20:9d:b7:60:db:64:f5:55:52:74:cc: b2:fb:c1:6a:23:c6:51:cf:ae:00:5d:d5:82:51:22: 7e:12:40:c4:a0:45:ee:d0:12:9a:29:7a:00:12:22: 8f:c9:dc:f1:f5:44:46:0f:4b:79:2e:75:db:dd:f9: 07:81:54:ed:84:7e:f4:c5:fa:ba:f2:30:dc:fc:c4: 2a:de:64:ed:95:eb:16:5e:49:d6:b8:04:f7:a4:89: a3:75:97:c6:af:25:35:7b:1f:ba:5e:01:63:38:00: 66:b9:5c:7b:e6:86:c0:d6:00:22:11:23:ea:65:2e: cb:64:de:9c:d8:93:1b:9b:81:77:67:33:fe:93:38: 3f:61:e6:3f:0d:5c:69:5b:31:55:06:4e:72:44:ef: ee:37:de:d4:4c:f7:67:a4:25:52:42:60:28:f6:8d: 8b:dd:8d:6d:06:a6:58:16:a9:a3:ea:47:8a:55:c1: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:64:61:1F:41:50:05:DB:A4:34:6A:B6:97:EF:8C:9D:8F:D3:D7:A4 X509v3 Authority Key Identifier: keyid:CF:D6:E1:61:DC:FB:7B:72:77:51:49:D4:35:B7:9B:A9:D5:6D:14:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9bhYdz7e3J3UUnUNbebqdVtFBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/OWRhH0FQBdukNGq2l--MnY_T16Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/852140-a27f-449b-b5ff-223742ee4375/1/z9bhYdz7e3J3UUnUNbebqdVtFBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.122.217.0-192.122.219.255 Signature Algorithm: sha256WithRSAEncryption 97:70:0e:80:ea:b0:1b:af:9f:70:fa:06:99:a7:03:bd:6e:ea: 38:6f:26:41:fe:fb:72:40:99:fb:89:27:8e:86:0f:85:9d:ae: f6:eb:35:c4:7c:39:6f:1a:ed:cc:b7:a4:3f:a6:ac:65:20:7c: 0c:e1:3d:db:16:e1:34:05:b1:cb:9d:0e:7a:0a:14:4e:29:35: 8d:e9:92:cc:02:df:f7:f6:af:60:95:2c:56:d6:4b:ae:dc:bc: 19:fd:2c:b9:b0:3d:a5:76:db:0e:4f:14:ca:be:ee:da:cb:5e: 8a:81:1a:2f:f6:bc:3b:58:d4:a2:c8:25:29:b0:c7:d7:67:44: 61:79:0e:1d:3c:44:15:66:3e:d9:7f:22:4d:4c:b8:34:f1:78: 9d:20:53:52:b0:7a:46:88:30:58:4f:55:e6:8d:6a:aa:b9:fd: 47:cf:67:43:f2:01:f3:05:2c:19:5a:34:b5:6e:8a:6f:07:7e: c9:71:9e:1a:f9:71:40:f2:1b:8a:7d:3b:00:05:0a:1e:e1:d3: 97:69:66:24:ee:97:b4:a5:a3:c3:4d:5c:cd:85:4d:a3:de:c2: ba:55:af:7d:56:c3:7d:5e:6b:88:82:59:ba:b6:c7:d0:cd:1d: fa:61:80:9a:f2:2e:24:23:7a:78:68:28:c3:5d:e2:5b:dd:d7: bf:96:3f:02 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZrpodp8CkW91T0REuVFM7e0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDZlMTYxZGNmYjdiNzI3NzUxNDlkNDM1Yjc5YmE5ZDU2 ZDE0MTcwHhcNMjUxMjA0MTM1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTY0NjExZjQxNTAwNWRiYTQzNDZhYjY5N2VmOGM5ZDhmZDNkN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55+N1bv6vFvuI1BHRlpP3tlUFdtv ockIPcLo4Jku4qtn8at29xLM5l79eRR/QBjFBJaXWHo61s5UXYCkQFC2nwQZYQr/ Knk2GAnwzfweIJ23YNtk9VVSdMyy+8FqI8ZRz64AXdWCUSJ+EkDEoEXu0BKaKXoA EiKPydzx9URGD0t5LnXb3fkHgVTthH70xfq68jDc/MQq3mTtlesWXknWuAT3pImj dZfGryU1ex+6XgFjOABmuVx75obA1gAiESPqZS7LZN6c2JMbm4F3ZzP+kzg/YeY/ DVxpWzFVBk5yRO/uN97UTPdnpCVSQmAo9o2L3Y1tBqZYFqmj6keKVcEXuwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFDlkYR9BUAXbpDRqtpfvjJ2P09ekMB8GA1UdIwQY MBaAFM/W4WHc+3tyd1FJ1DW3m6nVbRQXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYt MjIzNzQyZWU0Mzc1LzEvT1dSaEgwRlFCZHVrTkdxMmwtLU1uWV9UMTZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84NTIxNDAtYTI3Zi00NDliLWI1ZmYtMjIzNzQyZWU0Mzc1 LzEvejliaFlkejdlM0ozVVVuVU5iZWJxZFZ0RkJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAetkD BALAetgwDQYJKoZIhvcNAQELBQADggEBAJdwDoDqsBuvn3D6BpmnA71u6jhvJkH+ +3JAmfuJJ46GD4WdrvbrNcR8OW8a7cy3pD+mrGUgfAzhPdsW4TQFscudDnoKFE4p NY3pkswC3/f2r2CVLFbWS67cvBn9LLmwPaV22w5PFMq+7trLXoqBGi/2vDtY1KLI JSmwx9dnRGF5Dh08RBVmPtl/Ik1MuDTxeJ0gU1KwekaIMFhPVeaNaqq5/UfPZ0Py AfMFLBlaNLVuim8Hfslxnhr5cUDyG4p9OwAFCh7h05dpZiTul7Slo8NNXM2FTaPe wrpVr31Ww31ea4iCWbq2x9DNHfphgJryLiQjenhoKMNd4lvd17+WPwI= -----END CERTIFICATE-----Generated at Sat Dec 6 11:34:39 2025 by rpki-client