This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/OvDQAFDgS_IBra9JqbE082lFsMM.roa File: OvDQAFDgS_IBra9JqbE082lFsMM.roa (raw, json) Hash identifier: ABgvwYUiIoOP2ig1Lzsqgs3CVWMcVEoqfF36W8k4440= Subject key identifier: 3A:F0:D0:00:50:E0:4B:F2:01:AD:AF:49:A9:B1:34:F3:69:45:B0:C3 Certificate issuer: /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Certificate serial: 019B2B58AA360C901019AF7B94559597E19C Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/OvDQAFDgS_IBra9JqbE082lFsMM.roa Signing time: Wed 17 Dec 2025 08:06:29 +0000 ROA not before: Wed 17 Dec 2025 08:06:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 42929 IP address blocks: 2.56.80.0/22 maxlen: 22 2.56.81.0/24 maxlen: 24 2.56.82.0/24 maxlen: 24 2.56.83.0/24 maxlen: 24 45.156.244.0/22 maxlen: 22 185.142.136.0/22 maxlen: 22 193.33.222.0/23 maxlen: 23 193.36.182.0/24 maxlen: 24 193.104.36.0/24 maxlen: 24 195.8.62.0/24 maxlen: 24 2a07:2d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:58:aa:36:0c:90:10:19:af:7b:94:55:95:97:e1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d Validity Not Before: Dec 17 08:06:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3af0d00050e04bf201adaf49a9b134f36945b0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:fc:70:4e:94:b6:17:63:bf:c2:7e:e2:15: 89:3d:3c:ef:7c:f5:67:21:aa:be:44:fb:8f:d5:47: dd:2e:f9:86:a0:6d:5d:10:40:ab:f1:88:93:dd:97: c7:20:c4:16:ec:67:44:3c:01:cc:28:7a:0f:99:3f: 43:3b:28:9c:e5:44:37:0f:20:6e:bb:de:67:ea:06: 61:d9:96:c7:36:59:d5:27:e5:54:be:85:86:e6:53: ba:a2:4a:b0:8a:7e:4b:41:ac:f8:31:62:ba:50:82: 0a:0d:f9:6b:41:f0:05:53:d1:64:c1:a9:c7:cd:4a: 0d:b8:cd:14:1b:13:8c:aa:0d:42:d0:e4:3f:25:6d: 99:96:59:93:c0:62:0c:c9:1c:17:ce:ea:33:40:14: 2b:d7:6d:82:e8:c2:13:0f:ea:c6:86:f4:5d:7c:3e: 68:04:23:38:c3:d2:0d:7c:48:ad:de:fa:7f:63:8e: 35:f7:d6:e1:da:7c:48:80:75:84:21:ce:aa:d7:69: 08:4b:f3:7b:ff:12:b7:1c:90:51:bc:ad:98:4f:4c: 08:90:42:3c:35:08:8b:80:bc:6c:a5:29:9f:8d:95: e9:4b:3e:c2:df:49:96:77:db:6d:4c:46:d0:1f:c4: 1b:9d:d9:7f:95:d1:c5:9d:32:99:d6:94:fe:1e:d3: d6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F0:D0:00:50:E0:4B:F2:01:AD:AF:49:A9:B1:34:F3:69:45:B0:C3 X509v3 Authority Key Identifier: keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/OvDQAFDgS_IBra9JqbE082lFsMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.80.0/22 45.156.244.0/22 185.142.136.0/22 193.33.222.0/23 193.36.182.0/24 193.104.36.0/24 195.8.62.0/24 IPv6: 2a07:2d80::/29 Signature Algorithm: sha256WithRSAEncryption 1e:fd:0b:40:ff:2f:23:42:c7:6d:72:49:eb:9f:e2:26:94:d2: de:57:1b:ba:13:b3:9f:86:b6:cc:4c:41:f7:5e:7e:0d:76:32: 68:be:ef:8d:e2:20:2d:60:84:8e:87:ef:7c:15:86:49:7b:15: 79:c1:ce:7e:bf:97:ee:c2:46:63:d9:b6:d0:f6:c0:ab:28:20: b9:63:37:a5:4a:ec:d9:85:a7:72:20:85:1b:d0:bd:1c:74:38: af:67:a8:68:65:6f:80:d2:b7:81:aa:dd:73:b2:b9:8e:94:7d: e6:02:60:f8:49:9e:1d:da:ee:96:ed:cd:2b:4d:45:83:7f:13: ac:23:15:2a:0c:8a:ea:86:eb:4c:19:6b:43:1e:d0:d8:5b:83: 0b:28:f0:94:be:6e:e9:d4:44:6b:ce:4b:04:be:e0:6c:01:99: 2d:2d:e0:71:4a:19:0e:35:20:c2:e4:ec:ed:be:78:ea:1e:b3: e7:a9:5d:ca:38:f5:5c:d6:b2:10:76:f5:19:b6:7e:9b:93:ec: 3d:8b:df:40:ff:ac:ec:94:42:38:c4:a1:16:c3:2a:7e:64:00: 0f:66:8b:ae:4e:dd:09:9b:bb:ab:85:2d:4e:7b:be:6e:c6:2c: 6c:8f:6d:6f:97:69:f5:a3:ea:eb:5b:e1:5a:c1:cc:0b:f5:83: cb:eb:9a:1b -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZsrWKo2DJAQGa97lFWVl+GcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOWYxZTM4MjY1NDEwYjNjMmE5MjJkMzE2OWM0ZjI5OTUx NDFhMmQwHhcNMjUxMjE3MDgwNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWYwZDAwMDUwZTA0YmYyMDFhZGFmNDlhOWIxMzRmMzY5NDViMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2T8cE6Uthdjv8J+4hWJPTzvfPVn Iaq+RPuP1UfdLvmGoG1dEECr8YiT3ZfHIMQW7GdEPAHMKHoPmT9DOyic5UQ3DyBu u95n6gZh2ZbHNlnVJ+VUvoWG5lO6okqwin5LQaz4MWK6UIIKDflrQfAFU9FkwanH zUoNuM0UGxOMqg1C0OQ/JW2ZllmTwGIMyRwXzuozQBQr122C6MITD+rGhvRdfD5o BCM4w9INfEit3vp/Y44199bh2nxIgHWEIc6q12kIS/N7/xK3HJBRvK2YT0wIkEI8 NQiLgLxspSmfjZXpSz7C30mWd9ttTEbQH8Qbndl/ldHFnTKZ1pT+HtPW2QIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFDrw0ABQ4EvyAa2vSamxNPNpRbDDMB8GA1UdIwQY MBaAFO+fHjgmVBCzwqki0xacTymVFBotMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYt ODA1N2RhNzU0NDUyLzEvT3ZEUUFGRGdTX0lCcmE5SnFiRTA4MmxGc01NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNmZiMWMtOTVjMy00YmZmLTg1NTYtODA1N2RhNzU0NDUy LzEvNzU4ZU9DWlVFTFBDcVNMVEZweFBLWlVVR2kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCAjhQAwQC LZz0AwQCuY6IAwQBwSHeAwQAwSS2AwQAwWgkAwQAwwg+MA0EAgACMAcDBQMqBy2A MA0GCSqGSIb3DQEBCwUAA4IBAQAe/QtA/y8jQsdtcknrn+ImlNLeVxu6E7OfhrbM TEH3Xn4NdjJovu+N4iAtYISOh+98FYZJexV5wc5+v5fuwkZj2bbQ9sCrKCC5Yzel SuzZhadyIIUb0L0cdDivZ6hoZW+A0reBqt1zsrmOlH3mAmD4SZ4d2u6W7c0rTUWD fxOsIxUqDIrqhutMGWtDHtDYW4MLKPCUvm7p1ERrzksEvuBsAZktLeBxShkONSDC 5OztvnjqHrPnqV3KOPVc1rIQdvUZtn6bk+w9i99A/6zslEI4xKEWwyp+ZAAPZouu Tt0Jm7urhS1Oe75uxixsj21vl2n1o+rrW+FawcwL9YPL65ob -----END CERTIFICATE-----Generated at Fri Dec 19 13:24:09 2025 by rpki-client