This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/oQCU-vFGwd5ee70S7opaXNfPwWM.roa File: oQCU-vFGwd5ee70S7opaXNfPwWM.roa (raw, json) Hash identifier: wna68hebbA+7cjuO7Fh8Nno0oAH4yTHi3LK2Jw8v28U= Subject key identifier: A1:00:94:FA:F1:46:C1:DE:5E:7B:BD:12:EE:8A:5A:5C:D7:CF:C1:63 Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de Certificate serial: 019B07B2B0FB0BF50130E52A5AAC66366DE6 Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/oQCU-vFGwd5ee70S7opaXNfPwWM.roa Signing time: Wed 10 Dec 2025 09:58:29 +0000 ROA not before: Wed 10 Dec 2025 09:58:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 19551 IP address blocks: 217.147.124.0/22 maxlen: 22 217.147.124.0/24 maxlen: 24 217.147.125.0/24 maxlen: 24 217.147.126.0/24 maxlen: 24 217.147.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b2:b0:fb:0b:f5:01:30:e5:2a:5a:ac:66:36:6d:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acf910f36291c3c224ddb596d956543197f163de Validity Not Before: Dec 10 09:58:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a10094faf146c1de5e7bbd12ee8a5a5cd7cfc163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6c:2b:3a:4b:41:aa:12:43:09:6f:f3:04:da: 79:ec:9a:71:de:71:5d:1a:22:7e:4e:25:90:4a:cb: 55:30:99:01:1c:72:5f:3d:df:8a:5c:6e:0d:62:66: 03:b1:ab:fe:10:2e:19:0e:11:f8:f9:a8:52:96:44: be:c9:84:61:01:4f:d2:74:6f:b5:50:6d:85:b8:41: 1f:9b:92:06:bd:23:14:36:e5:3c:38:19:54:45:ba: b4:c9:9e:fb:62:29:ec:1e:c4:6c:7b:ca:5e:a6:56: f4:10:1e:f9:e2:d4:73:6c:54:31:bb:e5:42:c7:91: 9d:96:c4:9b:e5:a3:c8:c5:35:00:d5:10:24:eb:17: 43:87:23:f9:66:30:51:08:ec:97:48:8d:29:f1:49: 33:ee:e0:a9:89:61:f7:b7:33:e6:06:3d:22:f0:67: c2:ca:05:f8:33:77:b0:62:0a:87:3a:07:81:d9:18: 8e:ca:24:ac:ba:ca:c9:54:ef:23:6a:1e:dc:3a:56: d2:6f:aa:02:65:83:93:d6:a1:75:eb:9b:c8:6d:ec: 1b:fe:88:38:97:b0:b5:01:8c:c3:b8:19:01:dc:45: 17:77:1e:54:b2:4c:57:97:85:6e:5e:19:b6:f4:d3: c1:0a:9c:e0:e4:9a:a1:3a:dd:5c:e2:c5:23:fa:bb: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:00:94:FA:F1:46:C1:DE:5E:7B:BD:12:EE:8A:5A:5C:D7:CF:C1:63 X509v3 Authority Key Identifier: keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/oQCU-vFGwd5ee70S7opaXNfPwWM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.147.124.0/22 Signature Algorithm: sha256WithRSAEncryption a4:9a:c8:71:c2:91:f4:c6:e2:bb:8c:84:f4:a7:61:66:77:de: 27:b6:d2:3b:04:89:a1:2b:9c:07:4e:70:c4:03:f8:0a:04:9e: 78:d6:30:42:2a:56:07:c8:cd:83:6d:c1:23:51:e9:0e:18:48: 62:0f:bc:f7:c6:bd:85:5d:fb:05:c7:d0:e7:69:3c:cb:cf:e5: 3a:7b:00:1e:b7:97:c1:97:0a:6b:af:16:49:15:89:19:9b:62: 66:11:be:30:f1:cf:6e:49:8f:db:9d:40:a2:9d:18:99:2b:34: e8:bd:37:d8:8a:90:25:d3:8d:75:fa:8d:1b:0b:d2:4e:38:5e: 33:f4:ea:8c:43:75:fa:8c:6d:0d:ba:ad:94:35:3e:ab:82:83: a0:17:77:7d:41:e6:78:6e:11:06:c6:15:71:4d:80:dd:1f:21: 8b:4b:06:eb:f1:8b:69:5c:fa:b9:33:d0:23:92:ff:1c:e2:a7: 09:13:53:f5:4f:60:9d:56:aa:7d:e1:1d:62:01:cf:41:f8:9f: 96:54:51:72:63:83:34:c5:72:df:f9:fb:b6:1e:36:ba:13:9e: 7d:8f:c0:a5:0b:45:ad:c0:46:dd:69:c3:62:91:be:4d:8d:af: 35:12:7e:30:1e:75:56:4d:1d:c8:97:4e:17:8a:0a:6e:fe:c2: 80:de:ec:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsHsrD7C/UBMOUqWqxmNm3mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZjkxMGYzNjI5MWMzYzIyNGRkYjU5NmQ5NTY1NDMxOTdm MTYzZGUwHhcNMjUxMjEwMDk1ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTAwOTRmYWYxNDZjMWRlNWU3YmJkMTJlZThhNWE1Y2Q3Y2ZjMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2wrOktBqhJDCW/zBNp57Jpx3nFd GiJ+TiWQSstVMJkBHHJfPd+KXG4NYmYDsav+EC4ZDhH4+ahSlkS+yYRhAU/SdG+1 UG2FuEEfm5IGvSMUNuU8OBlURbq0yZ77YinsHsRse8peplb0EB754tRzbFQxu+VC x5GdlsSb5aPIxTUA1RAk6xdDhyP5ZjBRCOyXSI0p8Ukz7uCpiWH3tzPmBj0i8GfC ygX4M3ewYgqHOgeB2RiOyiSsusrJVO8jah7cOlbSb6oCZYOT1qF165vIbewb/og4 l7C1AYzDuBkB3EUXdx5UskxXl4VuXhm29NPBCpzg5JqhOt1c4sUj+rtoTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKEAlPrxRsHeXnu9Eu6KWlzXz8FjMB8GA1UdIwQY MBaAFKz5EPNikcPCJN21ltlWVDGX8WPeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQt ZDNiNThmNjk4MTQ4LzEvb1FDVS12Rkd3ZDVlZTcwUzdvcGFYTmZQd1dNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8xZjVlMDctMzJiNi00MTE0LThiMGQtZDNiNThmNjk4MTQ4 LzEvclBrUTgyS1J3OElrM2JXVzJWWlVNWmZ4WTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ZN8MA0G CSqGSIb3DQEBCwUAA4IBAQCkmshxwpH0xuK7jIT0p2Fmd94nttI7BImhK5wHTnDE A/gKBJ541jBCKlYHyM2DbcEjUekOGEhiD7z3xr2FXfsFx9DnaTzLz+U6ewAet5fB lwprrxZJFYkZm2JmEb4w8c9uSY/bnUCinRiZKzTovTfYipAl0411+o0bC9JOOF4z 9OqMQ3X6jG0Nuq2UNT6rgoOgF3d9QeZ4bhEGxhVxTYDdHyGLSwbr8YtpXPq5M9Aj kv8c4qcJE1P1T2CdVqp94R1iAc9B+J+WVFFyY4M0xXLf+fu2Hja6E559j8ClC0Wt wEbdacNikb5Nja81En4wHnVWTR3Il04Xigpu/sKA3uzE -----END CERTIFICATE-----Generated at Fri Dec 19 01:19:10 2025 by rpki-client