This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/7OYINGfsZGRwmGiFBkte0bEqDWY.roa File: 7OYINGfsZGRwmGiFBkte0bEqDWY.roa (raw, json) Hash identifier: dfyzTywSCPRXETBeGtH7CmV1lDhC/PZ6zR8WT3NCcxg= Subject key identifier: EC:E6:08:34:67:EC:64:64:70:98:68:85:06:4B:5E:D1:B1:2A:0D:66 Certificate issuer: /CN=b945674f01fec565971c950f3512165c43ffdfb6 Certificate serial: 019A90C9869FE560E6BFD2079241512FC6E3 Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/7OYINGfsZGRwmGiFBkte0bEqDWY.roa Signing time: Mon 17 Nov 2025 07:48:37 +0000 ROA not before: Mon 17 Nov 2025 07:48:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201902 IP address blocks: 5.182.8.0/22 maxlen: 24 45.141.164.0/22 maxlen: 22 45.141.164.0/24 maxlen: 24 45.141.165.0/24 maxlen: 24 45.141.166.0/24 maxlen: 24 45.141.167.0/24 maxlen: 24 185.59.92.0/22 maxlen: 24 2a02:6a20::/48 maxlen: 48 2a02:6a20:10::/48 maxlen: 48 2a02:6a20:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:c9:86:9f:e5:60:e6:bf:d2:07:92:41:51:2f:c6:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6 Validity Not Before: Nov 17 07:48:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ece6083467ec646470986885064b5ed1b12a0d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:02:db:77:27:cb:fb:56:72:bc:91:12:47: 94:95:29:ea:b5:b7:26:7f:b1:60:ca:2d:22:86:03: 8e:78:1d:6a:ff:58:e0:51:ab:d3:2e:af:49:8f:76: 3c:23:8d:6e:dd:d9:a0:e1:28:d4:7a:f3:40:d3:de: 85:22:e7:00:2b:e2:df:3f:55:d1:02:b9:18:bb:00: a8:f5:43:ae:ec:d4:5a:29:0a:8d:d6:fc:01:63:6d: 28:04:a1:59:80:ff:68:ab:0c:b8:1f:b1:ed:5b:82: 8f:80:fb:85:e0:41:bc:9e:ae:0c:4a:dc:77:32:5e: 32:09:be:99:35:27:47:b4:98:f9:a7:d6:ea:db:b0: bb:b2:30:bd:fa:64:2e:66:7d:96:e9:4c:87:b3:e3: de:18:22:b1:4b:b9:97:e5:4a:dc:28:93:9a:8f:4e: e5:93:48:c5:98:c0:8c:97:f6:d7:1e:e4:96:4f:bb: 0e:35:ff:d0:2b:64:68:45:ab:a2:98:89:f9:e8:6d: c9:3c:d5:7c:9b:a8:2e:fc:3d:d5:4b:e6:c3:2e:b0: 7a:7d:92:aa:cf:38:b2:03:8b:72:3d:8a:44:f0:30: c2:90:c9:0c:b5:2c:65:f3:fd:f5:5f:67:b4:30:7a: d0:56:dc:f2:79:cb:fe:f6:83:53:fb:84:46:1c:36: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E6:08:34:67:EC:64:64:70:98:68:85:06:4B:5E:D1:B1:2A:0D:66 X509v3 Authority Key Identifier: keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/7OYINGfsZGRwmGiFBkte0bEqDWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.8.0/22 45.141.164.0/22 185.59.92.0/22 IPv6: 2a02:6a20::/48 2a02:6a20:10::/48 2a02:6a20:20::/48 Signature Algorithm: sha256WithRSAEncryption 0b:fc:5c:c1:75:d7:d2:b2:6c:0e:be:bf:2d:5f:07:e2:4a:6a: ad:21:b7:d1:e1:dc:d5:27:55:82:cd:a6:59:7b:ea:e8:50:41: 0e:64:14:ae:a4:d3:c2:eb:44:25:c9:da:1a:50:7b:cf:12:fd: 8e:17:c9:43:4e:57:f8:ba:87:c7:63:b3:b0:d0:0d:55:94:c2: 7a:33:67:f9:9e:1d:85:d1:eb:89:c3:33:2c:9a:5c:a0:ec:cd: 33:f4:f1:e8:d3:2e:49:c8:8e:71:0e:e9:e1:32:3d:1b:25:76: cb:25:f8:6d:3a:54:d2:53:3c:9a:ac:68:a8:a6:ab:18:dd:3d: 26:be:78:16:3a:82:98:5f:f5:2b:e6:07:54:b3:23:f5:60:72: d5:58:e3:47:a1:93:fa:01:56:bc:6a:c8:55:59:f5:a3:67:50: 7f:f0:a0:dc:64:27:6f:7e:38:c4:34:35:c0:b1:53:74:56:24: b5:e1:a8:cd:e5:cc:c6:d3:ca:dd:bf:de:aa:14:eb:e6:f0:e3: 8b:03:a8:24:d6:17:f7:ab:bf:07:49:9f:4d:c9:c5:68:35:ea: ff:5b:1c:4f:03:d1:e7:d5:c9:b8:18:75:52:07:38:e3:40:9c: 11:57:e9:01:4c:09:53:b6:97:bd:48:94:69:ee:9e:cb:45:e8: 4f:3a:43:31 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZqQyYaf5WDmv9IHkkFRL8bjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDU2NzRmMDFmZWM1NjU5NzFjOTUwZjM1MTIxNjVjNDNm ZmRmYjYwHhcNMjUxMTE3MDc0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2U2MDgzNDY3ZWM2NDY0NzA5ODY4ODUwNjRiNWVkMWIxMmEwZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgQC23cny/tWcryREkeUlSnqtbcm f7Fgyi0ihgOOeB1q/1jgUavTLq9Jj3Y8I41u3dmg4SjUevNA096FIucAK+LfP1XR ArkYuwCo9UOu7NRaKQqN1vwBY20oBKFZgP9oqwy4H7HtW4KPgPuF4EG8nq4MStx3 Ml4yCb6ZNSdHtJj5p9bq27C7sjC9+mQuZn2W6UyHs+PeGCKxS7mX5UrcKJOaj07l k0jFmMCMl/bXHuSWT7sONf/QK2RoRauimIn56G3JPNV8m6gu/D3VS+bDLrB6fZKq zziyA4tyPYpE8DDCkMkMtSxl8/31X2e0MHrQVtzyecv+9oNT+4RGHDa61wIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFOzmCDRn7GRkcJhohQZLXtGxKg1mMB8GA1UdIwQY MBaAFLlFZ08B/sVllxyVDzUSFlxD/9+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUt NTUzY2I3NzY5Y2E5LzEvN09ZSU5HZnNaR1J3bUdpRkJrdGUwYkVxRFdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80OGViZjQtOTcyMi00NWQ2LWFjNzUtNTUzY2I3NzY5Y2E5 LzEvdVVWblR3SC14V1dYSEpVUE5SSVdYRVBfMzdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQCBbYIAwQC LY2kAwQCuTtcMCEEAgACMBsDBwAqAmogAAADBwAqAmogABADBwAqAmogACAwDQYJ KoZIhvcNAQELBQADggEBAAv8XMF119KybA6+vy1fB+JKaq0ht9Hh3NUnVYLNpll7 6uhQQQ5kFK6k08LrRCXJ2hpQe88S/Y4XyUNOV/i6h8djs7DQDVWUwnozZ/meHYXR 64nDMyyaXKDszTP08ejTLknIjnEO6eEyPRsldssl+G06VNJTPJqsaKimqxjdPSa+ eBY6gphf9SvmB1SzI/VgctVY40ehk/oBVrxqyFVZ9aNnUH/woNxkJ29+OMQ0NcCx U3RWJLXhqM3lzMbTyt2/3qoU6+bw44sDqCTWF/ervwdJn03JxWg16v9bHE8D0efV ybgYdVIHOONAnBFX6QFMCVO2l71IlGnunstF6E86QzE= -----END CERTIFICATE-----Generated at Sat Dec 6 15:41:22 2025 by rpki-client