This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ozwg9wWi_drcE3BLr-LIUGq-RrQ.roa File: ozwg9wWi_drcE3BLr-LIUGq-RrQ.roa (raw, json) Hash identifier: w2o7mE3vYvfc2//Lln613XEzrndmo7bmleWcyOkyyRU= Subject key identifier: A3:3C:20:F7:05:A2:FD:DA:DC:13:70:4B:AF:E2:C8:50:6A:BE:46:B4 Certificate issuer: /CN=af734108705a95796e8577125dd300c751dfd9a8 Certificate serial: 019AE42B85B64F4C768A6EF892AC8E388A18 Authority key identifier: AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ozwg9wWi_drcE3BLr-LIUGq-RrQ.roa Signing time: Wed 03 Dec 2025 12:24:08 +0000 ROA not before: Wed 03 Dec 2025 12:24:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48715 IP address blocks: 103.215.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.mft rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:2b:85:b6:4f:4c:76:8a:6e:f8:92:ac:8e:38:8a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af734108705a95796e8577125dd300c751dfd9a8 Validity Not Before: Dec 3 12:24:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a33c20f705a2fddadc13704bafe2c8506abe46b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:5c:5a:48:37:f0:21:85:c7:4c:26:78:a0: 7d:7f:13:8e:d0:64:e2:96:ef:22:3f:a6:68:33:71: 76:40:6e:7c:cf:a1:3a:da:d9:0d:3d:51:ef:f9:e8: 75:42:fd:6f:b7:9b:03:c3:44:96:92:a6:48:46:fc: 8b:a9:b8:e6:b2:71:83:02:25:a1:c2:ca:35:e0:02: 25:fd:ff:d7:e7:98:92:f5:23:45:e8:44:51:a2:d8: 1a:d1:1e:00:73:f0:14:07:05:dc:d7:3d:30:6d:f2: 4c:fc:e7:f7:8d:e4:30:e6:d7:a9:a0:e5:0b:4a:7e: 35:b1:ed:3a:ea:4c:91:b1:79:f8:57:cf:77:d0:06: d7:07:77:fa:c1:71:6c:98:29:b3:f7:e0:3e:ed:3a: 20:e3:6b:02:44:4f:d5:a1:8e:9a:9c:4d:73:38:c2: 25:62:56:65:17:db:94:d7:ec:63:5f:98:47:01:56: 17:12:55:ad:3e:8a:f0:51:e8:7e:32:19:f2:b5:0c: d9:8b:65:b6:f7:67:40:2c:cd:20:d1:c2:21:f3:ea: 10:f3:a5:b0:78:67:5a:2c:48:91:d1:9a:0f:8a:ed: 40:5f:5a:b9:c6:03:18:e7:55:1c:6c:72:72:21:78: d8:8f:e3:16:a6:44:70:4c:41:f5:6d:bd:b7:f7:bc: 50:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3C:20:F7:05:A2:FD:DA:DC:13:70:4B:AF:E2:C8:50:6A:BE:46:B4 X509v3 Authority Key Identifier: keyid:AF:73:41:08:70:5A:95:79:6E:85:77:12:5D:D3:00:C7:51:DF:D9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3NBCHBalXluhXcSXdMAx1Hf2ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/ozwg9wWi_drcE3BLr-LIUGq-RrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/r3NBCHBalXluhXcSXdMAx1Hf2ag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.221.0/24 Signature Algorithm: sha256WithRSAEncryption 99:29:e9:5d:43:dd:d1:f8:4b:6a:2c:69:ee:65:f5:7f:ce:55: 57:bf:e7:c1:d1:ef:0b:e9:ac:7e:b3:e5:78:19:09:cc:1e:41: 83:cf:b0:57:11:73:b0:fa:2a:d6:e5:72:92:5c:15:98:84:70: e3:1f:04:e8:3d:61:fb:08:7d:41:21:ab:88:02:05:9c:80:94: 3b:2f:78:69:87:73:30:82:d2:be:7d:bd:65:55:4c:69:22:e0: a7:07:49:db:8d:a7:cb:ef:03:33:6e:b3:fe:a9:f7:08:a3:e0: ab:f0:2a:38:2a:0c:0c:0c:20:b7:76:c7:84:c8:ae:0b:70:16: a8:84:de:55:a3:22:b4:9a:9d:d6:64:67:fa:a7:3b:c4:bd:4c: 5e:d1:19:72:87:d6:37:50:47:96:f8:da:1d:db:1b:a5:79:43: a8:2d:48:6f:63:bf:57:2f:a4:f2:a7:26:b9:48:22:95:a8:f8: 1b:12:65:39:3b:a6:5a:55:05:8c:b2:d7:d3:93:2b:c0:23:79: a3:1a:5a:7b:53:bd:46:d4:0e:cf:85:b7:1b:8c:0d:70:36:93: e4:ad:71:91:fb:09:98:b0:a1:3f:88:b2:15:bf:97:c0:cb:60: da:0b:aa:35:4f:d0:02:d3:aa:cf:8a:c8:b8:25:8b:c6:77:74: 46:d7:01:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkK4W2T0x2im74kqyOOIoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNzM0MTA4NzA1YTk1Nzk2ZTg1NzcxMjVkZDMwMGM3NTFk ZmQ5YTgwHhcNMjUxMjAzMTIyNDA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzNjMjBmNzA1YTJmZGRhZGMxMzcwNGJhZmUyYzg1MDZhYmU0NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaVcWkg38CGFx0wmeKB9fxOO0GTi lu8iP6ZoM3F2QG58z6E62tkNPVHv+eh1Qv1vt5sDw0SWkqZIRvyLqbjmsnGDAiWh wso14AIl/f/X55iS9SNF6ERRotga0R4Ac/AUBwXc1z0wbfJM/Of3jeQw5tepoOUL Sn41se066kyRsXn4V8930AbXB3f6wXFsmCmz9+A+7Tog42sCRE/VoY6anE1zOMIl YlZlF9uU1+xjX5hHAVYXElWtPorwUeh+MhnytQzZi2W292dALM0g0cIh8+oQ86Ww eGdaLEiR0ZoPiu1AX1q5xgMY51UcbHJyIXjYj+MWpkRwTEH1bb2397xQcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKM8IPcFov3a3BNwS6/iyFBqvka0MB8GA1UdIwQY MBaAFK9zQQhwWpV5boV3El3TAMdR39moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUt MThkMWE0MDZhYWVkLzEvb3p3Zzl3V2lfZHJjRTNCTHItTElVR3EtUnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jOTNhNjYtYzdjNy00YzMzLWE3MjUtMThkMWE0MDZhYWVk LzEvcjNOQkNIQmFsWGx1aFhjU1hkTUF4MUhmMmFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9fdMA0G CSqGSIb3DQEBCwUAA4IBAQCZKeldQ93R+EtqLGnuZfV/zlVXv+fB0e8L6ax+s+V4 GQnMHkGDz7BXEXOw+irW5XKSXBWYhHDjHwToPWH7CH1BIauIAgWcgJQ7L3hph3Mw gtK+fb1lVUxpIuCnB0nbjafL7wMzbrP+qfcIo+Cr8Co4KgwMDCC3dseEyK4LcBao hN5VoyK0mp3WZGf6pzvEvUxe0Rlyh9Y3UEeW+Nod2xuleUOoLUhvY79XL6Typya5 SCKVqPgbEmU5O6ZaVQWMstfTkyvAI3mjGlp7U71G1A7PhbcbjA1wNpPkrXGR+wmY sKE/iLIVv5fAy2DaC6o1T9AC06rPisi4JYvGd3RG1wFB -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:14 2025 by rpki-client