This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/OG0rDdymXMd6_rDI8itWThmJDlI.roa File: OG0rDdymXMd6_rDI8itWThmJDlI.roa (raw, json) Hash identifier: ViV8MW1OvZq4mlHYhO2nlGv1TLuKI9kbW+K8qAMrIA8= Subject key identifier: 38:6D:2B:0D:DC:A6:5C:C7:7A:FE:B0:C8:F2:2B:56:4E:19:89:0E:52 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B1206BAF5EE3F6A4A17B696E1137A71CD Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/OG0rDdymXMd6_rDI8itWThmJDlI.roa Signing time: Fri 12 Dec 2025 10:06:29 +0000 ROA not before: Fri 12 Dec 2025 10:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 89.222.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:06:ba:f5:ee:3f:6a:4a:17:b6:96:e1:13:7a:71:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Dec 12 10:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=386d2b0ddca65cc77afeb0c8f22b564e19890e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1e:e4:b2:23:3e:07:5d:9b:48:ce:d4:7c:ad: 50:e6:48:91:73:4f:2a:a1:4c:f0:68:d2:55:78:d1: 5b:58:c7:e1:56:e7:6a:cc:29:3c:bc:0a:20:2a:da: 1e:a9:c6:bc:2d:11:e7:d1:08:9b:15:34:93:53:74: 02:82:e0:48:39:d8:d9:a2:bc:ea:a5:bd:61:07:c9: 90:2b:60:19:76:a0:45:97:19:99:56:c5:bc:c4:64: ac:4d:a5:8d:20:b6:25:8a:e2:b9:13:41:4c:71:ae: d9:9d:12:42:8e:1a:eb:2b:8e:23:52:64:b7:4b:60: c4:17:74:33:90:ba:7f:39:0b:2f:fd:83:d8:30:6e: de:e8:f4:c8:96:3e:ac:9d:6d:f7:10:c5:24:9c:74: ee:62:2d:3f:0e:fb:91:06:30:ad:94:ae:ee:e5:22: 1c:af:7c:bd:b0:a3:22:f5:a7:12:f6:e1:3a:6a:17: 1f:f7:52:5e:c3:f0:34:87:bb:22:91:f6:9e:8a:7f: 0b:56:e7:3a:b8:8e:b1:50:f2:2f:61:1a:4c:8b:c7: 77:34:a9:50:1f:53:97:c1:41:c5:93:05:4c:b5:ae: 28:6f:ed:74:8e:32:0d:4c:1a:79:d0:6a:f0:4a:ab: 12:a1:c3:14:20:63:02:42:86:92:de:15:b4:36:b0: f7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6D:2B:0D:DC:A6:5C:C7:7A:FE:B0:C8:F2:2B:56:4E:19:89:0E:52 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/OG0rDdymXMd6_rDI8itWThmJDlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.92.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:57:de:7c:b3:50:98:0e:7d:38:2e:48:e7:99:98:11:eb:5b: 6d:cc:7f:47:76:47:9c:ea:70:96:ce:46:ce:66:32:a7:e9:94: d4:67:ad:af:94:4f:b2:9e:78:79:f4:37:11:69:8f:aa:d3:f1: 4c:22:3e:2f:c4:e5:24:87:02:24:15:f3:7e:41:c4:48:9f:ee: 35:2a:9f:87:30:6b:91:eb:2b:b9:12:76:7f:25:12:67:fe:de: 7f:5a:df:f5:80:56:a7:e7:52:7e:31:6d:52:84:bf:bd:86:ab: a3:54:a0:91:0a:15:75:9f:11:0d:08:fe:56:30:8c:ae:c5:7f: 2b:cb:9d:2c:87:78:fe:b4:0d:e5:09:04:be:29:21:91:a5:03: 22:15:88:a4:5f:77:ba:04:9f:a6:22:7f:8f:22:06:76:41:67: 4e:c1:9e:d2:ea:b4:2d:ad:c9:1d:4a:1b:3f:58:d3:ba:6e:02: 6b:14:8d:3f:4e:e1:5d:34:5d:df:21:40:52:56:80:27:17:2d: e5:aa:3a:b6:9d:2b:e0:cf:30:11:5d:2d:8a:4f:bc:31:ac:78: 33:d0:f0:42:af:e3:a9:df:e5:d5:7e:9b:98:7e:e6:76:3b:a4: ce:25:ac:08:d6:79:ec:8f:c2:fa:aa:1f:0e:74:3a:69:c4:af: 8f:a8:e9:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsSBrr17j9qShe2luETenHNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMjEyMTAwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODZkMmIwZGRjYTY1Y2M3N2FmZWIwYzhmMjJiNTY0ZTE5ODkwZTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB7ksiM+B12bSM7UfK1Q5kiRc08q oUzwaNJVeNFbWMfhVudqzCk8vAogKtoeqca8LRHn0QibFTSTU3QCguBIOdjZorzq pb1hB8mQK2AZdqBFlxmZVsW8xGSsTaWNILYliuK5E0FMca7ZnRJCjhrrK44jUmS3 S2DEF3QzkLp/OQsv/YPYMG7e6PTIlj6snW33EMUknHTuYi0/DvuRBjCtlK7u5SIc r3y9sKMi9acS9uE6ahcf91Jew/A0h7sikfaein8LVuc6uI6xUPIvYRpMi8d3NKlQ H1OXwUHFkwVMta4ob+10jjINTBp50GrwSqsSocMUIGMCQoaS3hW0NrD35wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDhtKw3cplzHev6wyPIrVk4ZiQ5SMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvT0cwckRkeW1YTWQ2X3JESThpdFdUaG1KRGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWd5cMA0G CSqGSIb3DQEBCwUAA4IBAQA7V958s1CYDn04LkjnmZgR61ttzH9Hdkec6nCWzkbO ZjKn6ZTUZ62vlE+ynnh59DcRaY+q0/FMIj4vxOUkhwIkFfN+QcRIn+41Kp+HMGuR 6yu5EnZ/JRJn/t5/Wt/1gFan51J+MW1ShL+9hqujVKCRChV1nxENCP5WMIyuxX8r y50sh3j+tA3lCQS+KSGRpQMiFYikX3e6BJ+mIn+PIgZ2QWdOwZ7S6rQtrckdShs/ WNO6bgJrFI0/TuFdNF3fIUBSVoAnFy3lqjq2nSvgzzARXS2KT7wxrHgz0PBCr+Op 3+XVfpuYfuZ2O6TOJawI1nnsj8L6qh8OdDppxK+PqOnP -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:40 2025 by rpki-client