This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa File: EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa (raw, json) Hash identifier: 0YddX8lcftncrD+VCEJL3eDzYZ6fCFEVTyRED0oHXFA= Subject key identifier: 10:ED:71:BA:AD:13:C8:13:7B:8C:BD:A7:B0:13:51:E8:BB:83:95:0A Certificate issuer: /CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Certificate serial: 019B7D5D2C6047E51715DB2742F564D3EC7F Authority key identifier: 67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51395 IP address blocks: 194.15.228.0/22 maxlen: 22 2001:67c:2f0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2c:60:47:e5:17:15:db:27:42:f5:64:d3:ec:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67fd3e19f583361fe5d90a412b1280f7cffb801f Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ed71baad13c8137b8cbda7b01351e8bb83950a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f0:e9:95:ab:12:ae:13:c4:e1:f6:cb:7a:9e: 87:14:22:38:19:f3:66:e2:60:0b:11:ab:6d:1d:2f: 4c:23:58:2e:3f:a6:db:c2:05:04:fd:92:7d:72:b4: 6c:03:e5:05:8a:ed:16:77:8e:7b:f2:b5:18:24:ed: 05:bc:e0:d2:fd:39:e5:81:b3:d2:80:0a:17:fd:f3: ac:d6:1e:ba:2d:bf:71:63:73:44:1f:03:01:64:d5: 06:4a:84:14:e1:59:e3:14:2c:90:0c:f7:31:79:54: 04:3d:f2:2a:79:b1:ab:19:dd:8c:43:4b:5b:f9:3b: 56:83:ae:d6:59:90:c2:20:fc:44:ad:a8:3a:9f:65: 8f:d4:5a:a0:bf:3a:43:19:75:7d:a8:ab:90:3c:38: e3:09:88:a5:3a:ee:5e:05:23:67:05:5a:14:bf:52: e6:de:a8:9b:82:81:7a:3f:61:96:2f:38:6a:75:40: a5:f9:59:cd:03:92:ee:6e:33:de:40:fa:2a:95:68: b2:21:bf:f1:da:d3:eb:df:3c:e2:14:ab:ad:06:3a: ef:e1:c0:5e:1b:0f:fb:c5:82:dc:9c:f2:31:72:26: 82:37:23:89:f5:eb:6e:23:a7:63:7f:64:36:5a:5b: c2:9d:93:ed:28:22:36:db:0e:f5:c6:4d:b2:5d:20: 0a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:ED:71:BA:AD:13:C8:13:7B:8C:BD:A7:B0:13:51:E8:BB:83:95:0A X509v3 Authority Key Identifier: keyid:67:FD:3E:19:F5:83:36:1F:E5:D9:0A:41:2B:12:80:F7:CF:FB:80:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_0-GfWDNh_l2QpBKxKA98_7gB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/EO1xuq0TyBN7jL2nsBNR6LuDlQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/081b84-4ece-4005-b28d-9f293172bb6b/1/Z_0-GfWDNh_l2QpBKxKA98_7gB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.228.0/22 IPv6: 2001:67c:2f0::/48 Signature Algorithm: sha256WithRSAEncryption 77:0b:26:d7:70:f5:08:6f:6e:02:1b:a5:ba:5d:04:4b:54:46: 0d:84:fc:49:bf:09:d2:6d:ec:6a:b0:ab:07:16:aa:5e:3b:fa: 40:c3:ae:3a:ea:0c:06:de:19:79:5c:3b:f2:b6:2e:2f:df:d8: 70:2a:46:fd:df:c9:ae:55:45:d2:14:f6:f5:ff:8a:5c:f3:9e: 3b:67:80:e6:fa:78:44:b4:d3:d6:31:a3:af:fd:d5:de:ef:95: 6b:5c:74:f0:75:0a:d2:8e:61:1b:1c:a0:77:fc:24:f1:1d:c1: fd:3e:7d:cd:b8:90:2e:b9:3d:f1:24:69:38:e4:22:60:f3:6d: 1e:de:00:54:4b:8f:33:17:11:7b:01:6d:ce:9f:1e:cf:0c:15: 91:36:ba:da:37:19:08:72:fa:2a:29:82:e1:b1:38:ce:6b:79: 0b:ed:30:2b:20:96:25:67:e7:2b:fc:8f:89:d6:70:85:2a:30: ae:14:fb:4c:96:c5:28:00:b1:31:a7:0c:b7:ce:82:ce:dd:56: 54:d2:f9:36:1e:6b:92:5f:99:f2:a0:c4:0b:2c:a5:1c:9b:61: 75:a6:7c:43:25:d6:e6:ce:25:12:6d:e9:25:43:b1:dc:31:18: 3e:8a:b7:4e:17:ae:de:94:1a:3d:12:e7:84:e5:b6:eb:b8:30: 95:ba:5e:e0 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9XSxgR+UXFdsnQvVk0+x/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZmQzZTE5ZjU4MzM2MWZlNWQ5MGE0MTJiMTI4MGY3Y2Zm YjgwMWYwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGVkNzFiYWFkMTNjODEzN2I4Y2JkYTdiMDEzNTFlOGJiODM5NTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvDplasSrhPE4fbLep6HFCI4GfNm 4mALEattHS9MI1guP6bbwgUE/ZJ9crRsA+UFiu0Wd4578rUYJO0FvODS/TnlgbPS gAoX/fOs1h66Lb9xY3NEHwMBZNUGSoQU4VnjFCyQDPcxeVQEPfIqebGrGd2MQ0tb +TtWg67WWZDCIPxErag6n2WP1FqgvzpDGXV9qKuQPDjjCYilOu5eBSNnBVoUv1Lm 3qibgoF6P2GWLzhqdUCl+VnNA5LubjPeQPoqlWiyIb/x2tPr3zziFKutBjrv4cBe Gw/7xYLcnPIxciaCNyOJ9etuI6djf2Q2WlvCnZPtKCI22w71xk2yXSAKiQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBDtcbqtE8gTe4y9p7ATUei7g5UKMB8GA1UdIwQY MBaAFGf9Phn1gzYf5dkKQSsSgPfP+4AfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQt OWYyOTMxNzJiYjZiLzEvRU8xeHVxMFR5Qk43akwybnNCTlI2THVEbFFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wODFiODQtNGVjZS00MDA1LWIyOGQtOWYyOTMxNzJiYjZi LzEvWl8wLUdmV0ROaF9sMlFwQkt4S0E5OF83Z0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwg/kMA8E AgACMAkDBwAgAQZ8AvAwDQYJKoZIhvcNAQELBQADggEBAHcLJtdw9QhvbgIbpbpd BEtURg2E/Em/CdJt7GqwqwcWql47+kDDrjrqDAbeGXlcO/K2Li/f2HAqRv3fya5V RdIU9vX/ilzznjtngOb6eES009Yxo6/91d7vlWtcdPB1CtKOYRscoHf8JPEdwf0+ fc24kC65PfEkaTjkImDzbR7eAFRLjzMXEXsBbc6fHs8MFZE2uto3GQhy+iopguGx OM5reQvtMCsgliVn5yv8j4nWcIUqMK4U+0yWxSgAsTGnDLfOgs7dVlTS+TYea5Jf mfKgxAsspRybYXWmfEMl1ubOJRJt6SVDsdwxGD6Kt04Xrt6UGj0S54Tltuu4MJW6 XuA= -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:52 2026 by rpki-client