This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/OSUatOyJaFwFS_eCt-SXjYT12MY.roa File: OSUatOyJaFwFS_eCt-SXjYT12MY.roa (raw, json) Hash identifier: 6ZIwwLUACrTrL87sZJ7drbQkHoTCqJ77NHCYNXgiQ24= Subject key identifier: 39:25:1A:B4:EC:89:68:5C:05:4B:F7:82:B7:E4:97:8D:84:F5:D8:C6 Certificate issuer: /CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461 Certificate serial: 019AEF5D71C8ECCAFA93315819CDD15DC6FE Authority key identifier: 81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/OSUatOyJaFwFS_eCt-SXjYT12MY.roa Signing time: Fri 05 Dec 2025 16:34:29 +0000 ROA not before: Fri 05 Dec 2025 16:34:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20924 IP address blocks: 80.76.72.0/23 maxlen: 23 80.76.76.0/24 maxlen: 24 80.76.79.0/24 maxlen: 24 185.156.132.0/22 maxlen: 22 2a01:5880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.mft rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:5d:71:c8:ec:ca:fa:93:31:58:19:cd:d1:5d:c6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8132db9d1566ccd77e3c6b1681f4dfa41f63c461 Validity Not Before: Dec 5 16:34:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39251ab4ec89685c054bf782b7e4978d84f5d8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:26:b9:d9:dd:5e:c7:79:4b:66:0d:57:ba:ac: 1f:08:db:92:2e:95:49:1d:3d:4c:ba:1e:a5:58:f7: 96:b0:75:7d:23:83:12:d2:fa:54:fb:f4:c7:1e:fd: 78:0c:19:2e:7f:ed:06:d0:fa:89:8d:58:ef:ba:d3: 74:e8:80:2b:2d:f0:51:e9:5c:03:6e:63:b6:d8:a2: e7:26:e7:06:15:72:dc:06:01:1d:8b:ea:b7:33:40: f2:02:ef:ec:2b:5b:d4:b8:d0:c5:ca:61:aa:c1:16: 17:e5:3d:65:ca:57:15:ec:43:b6:a9:61:41:90:24: 2b:4c:55:32:66:77:4c:6d:66:90:d0:40:f2:1b:be: c1:74:fd:d8:1b:af:83:7e:16:82:2d:24:ff:72:47: 1e:74:d4:9d:d2:f7:f6:9c:98:ac:b9:41:2a:ae:8b: 55:4c:15:28:db:28:49:ea:7d:9e:e5:e1:5f:82:0c: a9:e8:dd:88:81:29:ad:df:c1:c4:12:bf:53:1f:a1: 10:e5:e8:10:0b:21:cf:6c:37:c7:a0:d2:8e:c4:17: 3e:4e:aa:c8:9d:0f:05:8a:0c:ba:c6:c0:3e:7c:b2: c6:9b:74:5f:fe:bb:00:c4:78:b6:83:a1:f2:a6:8f: 4e:f2:b3:d9:07:d4:f2:e0:28:e4:9a:bc:62:2e:c1: 0a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:1A:B4:EC:89:68:5C:05:4B:F7:82:B7:E4:97:8D:84:F5:D8:C6 X509v3 Authority Key Identifier: keyid:81:32:DB:9D:15:66:CC:D7:7E:3C:6B:16:81:F4:DF:A4:1F:63:C4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gTLbnRVmzNd-PGsWgfTfpB9jxGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/OSUatOyJaFwFS_eCt-SXjYT12MY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f3ef3-9267-4d4a-a365-73d26ea9b193/1/gTLbnRVmzNd-PGsWgfTfpB9jxGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.76.72.0/23 80.76.76.0/24 80.76.79.0/24 185.156.132.0/22 IPv6: 2a01:5880::/32 Signature Algorithm: sha256WithRSAEncryption 28:12:00:10:d9:d9:5b:a2:98:53:01:f5:35:cd:73:83:65:ff: cf:0b:21:d5:a4:f9:ce:8f:a7:4a:cd:ce:a9:da:58:75:10:49: eb:89:a2:ee:3a:11:be:d6:d5:b5:01:a2:87:dc:59:5a:37:8a: ef:e8:13:e9:3e:48:e2:66:a4:60:37:43:a7:e5:d3:11:7e:ae: 58:b9:ab:2b:df:ef:1b:2c:8a:5a:77:75:7b:18:e6:3c:a0:8d: 36:b2:e0:cf:56:91:9f:33:7c:49:35:a0:ea:9b:d2:a3:de:37: d6:10:70:af:fa:20:ff:87:8c:db:73:37:80:1b:b2:d0:9f:46: fa:01:98:9f:cc:6d:29:c5:4b:91:5e:34:87:c8:d7:84:5a:4c: 38:08:34:09:e1:91:95:cd:a4:84:ad:a9:2a:d0:2e:40:70:d0: a2:97:5f:4e:13:d2:bd:d1:d4:69:9e:4b:53:8f:3b:58:09:50: 25:d4:55:83:2a:7a:17:52:27:da:77:00:d5:87:4c:fd:21:8b: af:ae:b7:af:bd:0d:2b:cf:f0:d0:af:88:71:d8:ea:74:01:e1: cd:f4:43:39:05:f5:40:aa:45:69:90:ce:84:5a:0b:7c:48:06: 49:1c:99:f4:62:21:18:42:e7:47:f7:10:f7:57:8e:3d:66:5b: 4e:c9:c4:22 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZrvXXHI7Mr6kzFYGc3RXcb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMzJkYjlkMTU2NmNjZDc3ZTNjNmIxNjgxZjRkZmE0MWY2 M2M0NjEwHhcNMjUxMjA1MTYzNDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOTI1MWFiNGVjODk2ODVjMDU0YmY3ODJiN2U0OTc4ZDg0ZjVkOGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCa52d1ex3lLZg1XuqwfCNuSLpVJ HT1Muh6lWPeWsHV9I4MS0vpU+/THHv14DBkuf+0G0PqJjVjvutN06IArLfBR6VwD bmO22KLnJucGFXLcBgEdi+q3M0DyAu/sK1vUuNDFymGqwRYX5T1lylcV7EO2qWFB kCQrTFUyZndMbWaQ0EDyG77BdP3YG6+DfhaCLST/ckcedNSd0vf2nJisuUEqrotV TBUo2yhJ6n2e5eFfggyp6N2IgSmt38HEEr9TH6EQ5egQCyHPbDfHoNKOxBc+TqrI nQ8Figy6xsA+fLLGm3Rf/rsAxHi2g6Hypo9O8rPZB9Ty4CjkmrxiLsEKJwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFDklGrTsiWhcBUv3grfkl42E9djGMB8GA1UdIwQY MBaAFIEy250VZszXfjxrFoH036QfY8RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1RMYm5SVm16TmQtUEdzV2dmVGZwQjlqeEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZjNlZjMtOTI2Ny00ZDRhLWEzNjUt NzNkMjZlYTliMTkzLzEvT1NVYXRPeUphRndGU19lQ3QtU1hqWVQxMk1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8yZjNlZjMtOTI2Ny00ZDRhLWEzNjUtNzNkMjZlYTliMTkz LzEvZ1RMYm5SVm16TmQtUEdzV2dmVGZwQjlqeEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBUExIAwQA UExMAwQAUExPAwQCuZyEMA0EAgACMAcDBQAqAViAMA0GCSqGSIb3DQEBCwUAA4IB AQAoEgAQ2dlbophTAfU1zXODZf/PCyHVpPnOj6dKzc6p2lh1EEnriaLuOhG+1tW1 AaKH3FlaN4rv6BPpPkjiZqRgN0On5dMRfq5Yuasr3+8bLIpad3V7GOY8oI02suDP VpGfM3xJNaDqm9Kj3jfWEHCv+iD/h4zbczeAG7LQn0b6AZifzG0pxUuRXjSHyNeE Wkw4CDQJ4ZGVzaSErakq0C5AcNCil19OE9K90dRpnktTjztYCVAl1FWDKnoXUifa dwDVh0z9IYuvrrevvQ0rz/DQr4hx2Op0AeHN9EM5BfVAqkVpkM6EWgt8SAZJHJn0 YiEYQudH9xD3V449ZltOycQi -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:34 2025 by rpki-client