This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/O3Nn92cP9mhnaQHpIkipdhKcmhY.roa File: O3Nn92cP9mhnaQHpIkipdhKcmhY.roa (raw, json) Hash identifier: V+9TgZOrsnrsR383ax8U4lIwjvNLrmt7tE94b7Wzobs= Subject key identifier: 3B:73:67:F7:67:0F:F6:68:67:69:01:E9:22:48:A9:76:12:9C:9A:16 Certificate issuer: /CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Certificate serial: 019A532B624C401ADC3A7D4E8F45AFFCD7F4 Authority key identifier: 99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/O3Nn92cP9mhnaQHpIkipdhKcmhY.roa Signing time: Wed 05 Nov 2025 08:39:03 +0000 ROA not before: Wed 05 Nov 2025 08:39:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212097 IP address blocks: 45.81.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.mft rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:2b:62:4c:40:1a:dc:3a:7d:4e:8f:45:af:fc:d7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99a62d3073a82da86542acfc36f6fcb9e66a05bb Validity Not Before: Nov 5 08:39:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3b7367f7670ff668676901e92248a976129c9a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0e:34:a6:44:31:19:be:9e:9f:6e:80:19:e3: 14:75:49:0a:7f:36:87:30:8e:45:29:dd:cf:2f:aa: 4c:40:5e:a9:ae:db:11:d9:8f:67:26:14:e9:ed:9d: 7e:8d:1c:a4:dc:bb:60:13:19:84:e9:c4:8b:a0:3e: fc:bd:1e:36:48:dd:ba:91:cc:e5:7d:ec:23:0c:0b: 83:a4:ef:0f:ca:74:e5:77:bd:e0:f4:4a:f4:61:8f: 7e:13:78:d5:ae:e4:48:0e:bc:b4:c7:36:2e:59:b5: 43:ca:ab:9d:e8:56:c5:86:90:01:2a:a9:4a:eb:5d: 0e:37:1c:36:a4:2d:ad:20:83:b4:42:82:69:30:07: c1:46:3f:a4:3d:da:eb:bb:6e:95:9a:cb:87:74:06: 30:46:7f:32:fc:c6:11:9d:2b:15:64:ab:46:b3:91: 1a:be:91:2a:85:82:fa:86:e8:05:07:9e:6b:7b:a5: cc:9f:61:7f:90:16:e8:ce:ed:ca:27:ee:aa:8f:5f: 4e:70:92:a5:6b:58:9e:eb:a2:cd:c6:9c:3f:fd:dc: 8f:ba:49:75:4d:3c:1c:2c:f0:7c:75:82:b3:b0:d4: 15:21:e2:a8:ef:6f:85:d5:59:e7:35:58:e8:50:cc: 85:38:63:7d:60:f3:e2:8f:a9:91:dc:f5:0e:0a:9b: b0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:67:F7:67:0F:F6:68:67:69:01:E9:22:48:A9:76:12:9C:9A:16 X509v3 Authority Key Identifier: keyid:99:A6:2D:30:73:A8:2D:A8:65:42:AC:FC:36:F6:FC:B9:E6:6A:05:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maYtMHOoLahlQqz8Nvb8ueZqBbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/O3Nn92cP9mhnaQHpIkipdhKcmhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/795baf-508b-477d-8926-2d953600ff37/1/maYtMHOoLahlQqz8Nvb8ueZqBbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.88.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:e9:3c:a9:63:38:4d:d9:fa:1d:19:3c:02:bb:bc:fb:2d:ff: 84:dd:62:30:75:b9:a6:1f:16:41:ac:01:33:6f:b2:19:d8:34: f4:f2:23:3a:40:49:18:4a:15:98:41:a0:79:a7:09:ea:cc:4a: 4c:20:5d:81:15:68:ff:db:56:06:5c:68:af:03:55:bb:d4:a8: 47:86:a4:5c:1c:84:93:c0:41:5c:71:2d:10:5e:9b:e3:e9:46: 35:d6:0c:59:4c:aa:be:e0:4e:f7:c5:66:bb:ec:80:e5:eb:d8: c1:d6:e1:2f:7e:a7:ca:1c:ad:6a:39:23:36:6f:e9:8e:19:51: c4:e8:48:f2:99:e4:90:e9:8e:94:e3:38:a4:c4:36:b9:04:9d: 3e:25:b0:42:e7:47:65:d6:ba:57:6a:8f:77:63:84:51:d9:27: 19:46:a4:c4:30:3e:28:90:ca:b0:e4:8a:b8:69:54:6c:20:4f: c3:f0:1e:5b:53:2e:33:86:6a:66:a2:8c:dd:cd:37:f1:28:e3: bb:71:e2:87:d2:b9:96:67:6b:08:40:4d:47:38:72:3f:a1:0b: 75:cd:c6:16:8a:50:48:54:75:14:a8:a2:63:a9:dd:55:5d:b0: 64:a0:d5:38:44:65:5a:66:09:29:45:d9:3f:af:57:5c:ab:de: 9b:16:b8:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTK2JMQBrcOn1Oj0Wv/Nf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5YTYyZDMwNzNhODJkYTg2NTQyYWNmYzM2ZjZmY2I5ZTY2 YTA1YmIwHhcNMjUxMTA1MDgzOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjczNjdmNzY3MGZmNjY4Njc2OTAxZTkyMjQ4YTk3NjEyOWM5YTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A40pkQxGb6en26AGeMUdUkKfzaH MI5FKd3PL6pMQF6prtsR2Y9nJhTp7Z1+jRyk3LtgExmE6cSLoD78vR42SN26kczl fewjDAuDpO8PynTld73g9Er0YY9+E3jVruRIDry0xzYuWbVDyqud6FbFhpABKqlK 610ONxw2pC2tIIO0QoJpMAfBRj+kPdrru26VmsuHdAYwRn8y/MYRnSsVZKtGs5Ea vpEqhYL6hugFB55re6XMn2F/kBbozu3KJ+6qj19OcJKla1ie66LNxpw//dyPukl1 TTwcLPB8dYKzsNQVIeKo72+F1VnnNVjoUMyFOGN9YPPij6mR3PUOCpuwYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDtzZ/dnD/ZoZ2kB6SJIqXYSnJoWMB8GA1UdIwQY MBaAFJmmLTBzqC2oZUKs/Db2/LnmagW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYt MmQ5NTM2MDBmZjM3LzEvTzNObjkyY1A5bWhuYVFIcElraXBkaEtjbWhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83OTViYWYtNTA4Yi00NzdkLTg5MjYtMmQ5NTM2MDBmZjM3 LzEvbWFZdE1IT29MYWhsUXF6OE52Yjh1ZVpxQmJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVFYMA0G CSqGSIb3DQEBCwUAA4IBAQAf6TypYzhN2fodGTwCu7z7Lf+E3WIwdbmmHxZBrAEz b7IZ2DT08iM6QEkYShWYQaB5pwnqzEpMIF2BFWj/21YGXGivA1W71KhHhqRcHIST wEFccS0QXpvj6UY11gxZTKq+4E73xWa77IDl69jB1uEvfqfKHK1qOSM2b+mOGVHE 6EjymeSQ6Y6U4zikxDa5BJ0+JbBC50dl1rpXao93Y4RR2ScZRqTEMD4okMqw5Iq4 aVRsIE/D8B5bUy4zhmpmoozdzTfxKOO7ceKH0rmWZ2sIQE1HOHI/oQt1zcYWilBI VHUUqKJjqd1VXbBkoNU4RGVaZgkpRdk/r1dcq96bFrhU -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:47 2025 by rpki-client