This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oFq4k3jjq58AVkYV37VxNam_vhQ.roa File: oFq4k3jjq58AVkYV37VxNam_vhQ.roa (raw, json) Hash identifier: yt9RD78c2DlDLj9QrteYguRc3xhGx9cs6a+AGlNFCXg= Subject key identifier: A0:5A:B8:93:78:E3:AB:9F:00:56:46:15:DF:B5:71:35:A9:BF:BE:14 Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af Certificate serial: 019A7DFE6DAA07C4CDF32739C68F157EDC72 Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oFq4k3jjq58AVkYV37VxNam_vhQ.roa Signing time: Thu 13 Nov 2025 16:13:37 +0000 ROA not before: Thu 13 Nov 2025 16:13:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 146.247.104.0/24 maxlen: 24 146.247.115.0/24 maxlen: 24 146.247.116.0/24 maxlen: 24 146.247.117.0/24 maxlen: 24 146.247.118.0/23 maxlen: 23 146.247.118.0/24 maxlen: 24 146.247.119.0/24 maxlen: 24 146.247.120.0/24 maxlen: 24 146.247.122.0/24 maxlen: 24 146.247.126.0/24 maxlen: 24 146.247.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7d:fe:6d:aa:07:c4:cd:f3:27:39:c6:8f:15:7e:dc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af Validity Not Before: Nov 13 16:13:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a05ab89378e3ab9f00564615dfb57135a9bfbe14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c8:4c:5e:41:10:c0:e8:98:7c:81:6f:53:7d: 61:0b:52:9c:8c:40:9a:7f:7b:70:8e:54:1c:e4:62: 62:65:e6:e0:8d:af:9a:fd:d4:f3:09:81:d3:0b:25: 7f:fa:37:55:f3:96:a8:a1:a7:af:d9:79:0a:f2:21: 07:d3:36:4a:44:4d:7f:53:e4:6f:60:db:f9:a4:4a: 4a:e3:89:31:17:ca:09:a5:11:bd:8e:c6:d0:5f:ee: 44:27:c9:4a:fa:b0:0b:70:4b:bf:99:84:82:85:4d: e9:bb:ac:fd:fc:df:e7:07:a1:06:08:2f:3f:dc:ea: 92:0a:88:57:a4:c3:70:0d:b3:86:90:5a:a8:b6:66: 12:5e:9f:7a:fe:a5:2f:9d:fe:1f:05:cc:bf:b9:2d: 32:33:ba:41:ea:1a:4f:e6:30:c9:b7:58:71:ad:99: f6:e7:d5:61:08:ab:26:0f:59:f4:9d:10:e3:13:97: ed:86:4d:a6:9f:6c:3a:9c:31:2e:37:06:9e:17:28: 3a:63:e2:de:2d:8e:56:8b:76:c8:1a:b6:da:bd:81: 10:2b:38:cb:1c:ad:8d:bb:6f:8e:b7:d1:ac:cb:52: 58:cb:76:94:ee:5c:0a:39:b1:cb:4c:37:f0:bb:9d: 60:9b:66:15:4d:d9:07:87:c1:0e:c8:fa:d8:11:a0: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5A:B8:93:78:E3:AB:9F:00:56:46:15:DF:B5:71:35:A9:BF:BE:14 X509v3 Authority Key Identifier: keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/oFq4k3jjq58AVkYV37VxNam_vhQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.247.104.0/24 146.247.115.0-146.247.120.255 146.247.122.0/24 146.247.126.0/23 Signature Algorithm: sha256WithRSAEncryption 86:9c:94:35:35:d8:56:9d:5b:98:e4:60:68:e2:32:94:9f:7c: f7:49:48:f6:96:08:95:75:cb:5f:22:86:c1:ef:e4:b7:12:d9: 8b:33:8a:06:40:c3:cf:0e:df:d7:7d:92:cd:fb:3a:6a:10:25: 09:cd:9a:ae:85:99:c2:2e:00:f9:73:4c:74:45:c3:77:d8:10: 21:f1:63:b4:c2:67:1f:84:00:4e:c6:3d:f0:0d:f9:d0:3a:b3: 23:e6:aa:a7:17:40:82:8c:7a:53:42:ab:ef:a1:17:a8:6b:44: 62:5c:96:16:3c:df:5e:26:21:40:2e:d4:b9:f1:57:4e:de:af: cc:d1:c6:59:c6:5d:3d:87:57:12:64:8d:0d:10:aa:ca:9a:e5: 2e:58:a9:1b:76:76:c3:99:76:87:02:20:c0:2c:3c:de:dc:3b: 0c:f6:44:e1:f8:fe:82:d8:de:2f:d3:0f:41:6d:fa:89:b3:ca: 6e:77:c5:be:07:1c:30:48:3e:d1:29:59:41:49:ef:8a:65:91: d1:c7:b9:39:56:d5:6f:52:4f:d8:07:a4:c5:40:21:bb:f9:74: 07:1d:ba:5a:94:f6:1a:5e:bd:e3:7a:31:10:e2:33:6c:f8:87: e4:0f:de:b6:2f:ad:f9:3f:d5:db:f1:fd:0d:34:c0:7f:f0:99: c0:72:2a:af -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZp9/m2qB8TN8yc5xo8VftxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2 ODQ2YWYwHhcNMjUxMTEzMTYxMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDVhYjg5Mzc4ZTNhYjlmMDA1NjQ2MTVkZmI1NzEzNWE5YmZiZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlshMXkEQwOiYfIFvU31hC1KcjECa f3twjlQc5GJiZebgja+a/dTzCYHTCyV/+jdV85aooaev2XkK8iEH0zZKRE1/U+Rv YNv5pEpK44kxF8oJpRG9jsbQX+5EJ8lK+rALcEu/mYSChU3pu6z9/N/nB6EGCC8/ 3OqSCohXpMNwDbOGkFqotmYSXp96/qUvnf4fBcy/uS0yM7pB6hpP5jDJt1hxrZn2 59VhCKsmD1n0nRDjE5fthk2mn2w6nDEuNwaeFyg6Y+LeLY5Wi3bIGrbavYEQKzjL HK2Nu2+Ot9Gsy1JYy3aU7lwKObHLTDfwu51gm2YVTdkHh8EOyPrYEaA/swIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKBauJN446ufAFZGFd+1cTWpv74UMB8GA1UdIwQY MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt ZDI0ZjU2MmRlZGQyLzEvb0ZxNGszampxNThBVmtZVjM3VnhOYW1fdmhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAkvdoMAwD BACS93MDBACS93gDBACS93oDBAGS934wDQYJKoZIhvcNAQELBQADggEBAIaclDU1 2FadW5jkYGjiMpSffPdJSPaWCJV1y18ihsHv5LcS2YszigZAw88O39d9ks37OmoQ JQnNmq6FmcIuAPlzTHRFw3fYECHxY7TCZx+EAE7GPfAN+dA6syPmqqcXQIKMelNC q++hF6hrRGJclhY8314mIUAu1LnxV07er8zRxlnGXT2HVxJkjQ0Qqsqa5S5YqRt2 dsOZdocCIMAsPN7cOwz2ROH4/oLY3i/TD0Ft+omzym53xb4HHDBIPtEpWUFJ74pl kdHHuTlW1W9ST9gHpMVAIbv5dAcdulqU9hpeveN6MRDiM2z4h+QP3rYvrfk/1dvx /Q00wH/wmcByKq8= -----END CERTIFICATE-----Generated at Sat Dec 6 16:52:15 2025 by rpki-client