This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/OaTUQuWzfS_XZHCe_x2P_axi78M.roa File: OaTUQuWzfS_XZHCe_x2P_axi78M.roa (raw, json) Hash identifier: Q0N03WD0sCw/QoQfv4FCs+8GpuZ94pPLAh6lH5jdwNQ= Subject key identifier: 39:A4:D4:42:E5:B3:7D:2F:D7:64:70:9E:FF:1D:8F:FD:AC:62:EF:C3 Certificate issuer: /CN=69159820dd718004fb15c85b270796cb4e84a4ea Certificate serial: 019B21CEF40D30F884619E835DE3B48F0107 Authority key identifier: 69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/OaTUQuWzfS_XZHCe_x2P_axi78M.roa Signing time: Mon 15 Dec 2025 11:39:29 +0000 ROA not before: Mon 15 Dec 2025 11:39:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12337 IP address blocks: 195.149.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.mft rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ce:f4:0d:30:f8:84:61:9e:83:5d:e3:b4:8f:01:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69159820dd718004fb15c85b270796cb4e84a4ea Validity Not Before: Dec 15 11:39:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=39a4d442e5b37d2fd764709eff1d8ffdac62efc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:13:19:68:3b:ed:2e:7b:a4:02:a8:65:8c: 06:de:1f:7f:03:19:a6:a6:c9:ea:58:37:b1:c7:e7: ce:75:41:5f:dd:4c:c9:9c:e2:5e:e3:01:d0:ee:ef: 7f:13:56:78:4b:57:27:24:3d:35:bf:a5:f2:0c:35: e8:36:b9:ce:34:d5:30:bf:20:07:40:4f:63:1a:e5: 41:d9:a2:4b:e1:4e:ff:ae:af:3a:d0:a1:cb:9d:dc: 56:1b:7e:c1:fa:52:c2:f1:b5:4f:54:df:8a:b1:dd: bf:5c:50:01:8b:05:f2:88:11:3e:70:d0:ac:97:93: 76:52:5a:88:71:25:90:16:57:b1:a2:dc:84:98:f4: d9:a0:68:7e:44:87:57:02:15:29:0d:c7:32:b2:51: ba:4f:bd:60:5b:59:98:e0:a9:14:73:b2:5f:52:01: 2b:58:7b:c5:81:8f:8d:af:7f:98:5c:df:61:29:2d: ea:5f:80:51:e2:1e:83:4c:db:db:ea:58:43:f8:bb: c5:d0:af:24:f8:88:54:17:bc:0d:b2:32:ac:8d:5c: e6:73:96:5e:e0:e4:d5:ba:d8:04:6f:7d:8d:f1:d0: 39:3b:31:4f:a9:ab:52:da:4e:fd:b6:49:26:67:aa: 15:c4:9f:06:5f:09:c7:62:5f:76:83:68:e1:f6:a7: ff:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A4:D4:42:E5:B3:7D:2F:D7:64:70:9E:FF:1D:8F:FD:AC:62:EF:C3 X509v3 Authority Key Identifier: keyid:69:15:98:20:DD:71:80:04:FB:15:C8:5B:27:07:96:CB:4E:84:A4:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRWYIN1xgAT7FchbJweWy06EpOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/OaTUQuWzfS_XZHCe_x2P_axi78M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7ddf30-3c91-43f9-b3b1-c949f0591f5b/1/aRWYIN1xgAT7FchbJweWy06EpOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.149.76.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b0:22:20:12:5b:68:d1:d4:40:c0:4c:8e:ac:f9:53:5b:39: 4b:a4:5d:4e:d5:ae:b7:31:94:fd:c3:51:20:9f:1b:d7:3c:b7: 4a:ee:80:1e:0a:cb:d1:00:d4:72:86:62:8d:20:7a:eb:07:a8: b4:b4:ab:72:7c:a8:b7:63:38:4c:6f:a9:e4:65:c3:6b:05:e0: aa:b6:c0:a6:85:7a:f7:85:e8:9e:50:32:50:5f:fd:02:d8:3c: f7:38:7d:8d:49:fe:6f:5b:26:b7:79:3d:af:18:7f:5f:71:f6: 64:e5:f3:3a:6e:32:26:2d:71:00:f2:4c:14:9d:ad:26:cf:39: 67:a5:98:93:0d:4d:09:4c:f8:5c:5e:b0:15:89:2d:4d:f0:d2: 1b:ae:2e:5d:f5:c7:84:97:0b:4e:f6:f3:b2:61:4c:6c:2b:37: 67:0e:d1:15:9c:07:bd:e7:5e:88:7b:6a:82:8d:02:0c:87:32: fe:d0:12:ff:5e:3a:8b:3f:e9:cb:68:1c:ff:2c:dc:e5:61:fd: 6e:91:13:db:03:31:a7:bb:b3:10:7a:d1:29:89:9e:0b:83:9c: 9c:1c:cb:25:da:1c:cb:50:32:76:56:b4:14:94:bd:4b:b0:4a: 24:8e:6d:f8:d0:33:bc:d3:be:67:98:0d:7d:75:e7:86:cd:48: 55:6a:dd:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshzvQNMPiEYZ6DXeO0jwEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MTU5ODIwZGQ3MTgwMDRmYjE1Yzg1YjI3MDc5NmNiNGU4 NGE0ZWEwHhcNMjUxMjE1MTEzOTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzOWE0ZDQ0MmU1YjM3ZDJmZDc2NDcwOWVmZjFkOGZmZGFjNjJlZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnToTGWg77S57pAKoZYwG3h9/Axmm psnqWDexx+fOdUFf3UzJnOJe4wHQ7u9/E1Z4S1cnJD01v6XyDDXoNrnONNUwvyAH QE9jGuVB2aJL4U7/rq860KHLndxWG37B+lLC8bVPVN+Ksd2/XFABiwXyiBE+cNCs l5N2UlqIcSWQFlexotyEmPTZoGh+RIdXAhUpDccyslG6T71gW1mY4KkUc7JfUgEr WHvFgY+Nr3+YXN9hKS3qX4BR4h6DTNvb6lhD+LvF0K8k+IhUF7wNsjKsjVzmc5Ze 4OTVutgEb32N8dA5OzFPqatS2k79tkkmZ6oVxJ8GXwnHYl92g2jh9qf/BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDmk1ELls30v12Rwnv8dj/2sYu/DMB8GA1UdIwQY MBaAFGkVmCDdcYAE+xXIWycHlstOhKTqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEt Yzk0OWYwNTkxZjViLzEvT2FUVVF1V3pmU19YWkhDZV94MlBfYXhpNzhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83ZGRmMzAtM2M5MS00M2Y5LWIzYjEtYzk0OWYwNTkxZjVi LzEvYVJXWUlOMXhnQVQ3RmNoYkp3ZVd5MDZFcE9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5VMMA0G CSqGSIb3DQEBCwUAA4IBAQB1sCIgElto0dRAwEyOrPlTWzlLpF1O1a63MZT9w1Eg nxvXPLdK7oAeCsvRANRyhmKNIHrrB6i0tKtyfKi3YzhMb6nkZcNrBeCqtsCmhXr3 heieUDJQX/0C2Dz3OH2NSf5vWya3eT2vGH9fcfZk5fM6bjImLXEA8kwUna0mzzln pZiTDU0JTPhcXrAViS1N8NIbri5d9ceElwtO9vOyYUxsKzdnDtEVnAe9516Ie2qC jQIMhzL+0BL/XjqLP+nLaBz/LNzlYf1ukRPbAzGnu7MQetEpiZ4Lg5ycHMsl2hzL UDJ2VrQUlL1LsEokjm340DO8075nmA19deeGzUhVat3W -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:33 2025 by rpki-client