This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/oeb6m3It37B8PGE2O7TDai_TrWY.roa File: oeb6m3It37B8PGE2O7TDai_TrWY.roa (raw, json) Hash identifier: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ= Subject key identifier: A1:E6:FA:9B:72:2D:DF:B0:7C:3C:61:36:3B:B4:C3:6A:2F:D3:AD:66 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C741618618284ECF9DC6C3531C61B4 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/oeb6m3It37B8PGE2O7TDai_TrWY.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48894 IP address blocks: 86.54.86.0/24 maxlen: 24 152.89.232.0/23 maxlen: 23 152.89.234.0/24 maxlen: 24 152.89.235.0/24 maxlen: 24 2a09:37c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:41:61:86:18:28:4e:cf:9d:c6:c3:53:1c:61:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1e6fa9b722ddfb07c3c61363bb4c36a2fd3ad66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:f2:a6:9a:67:d0:8f:2d:96:f7:38:6a:a2: 15:fb:00:3b:03:cb:91:38:f9:a4:bf:ff:e0:07:2d: 87:49:62:c4:85:22:17:d4:05:92:f7:df:98:4a:2a: d2:77:b6:d8:a1:fe:a9:46:07:65:1b:73:5c:39:65: 66:96:62:b3:c9:83:03:bb:36:fa:4b:db:61:06:7d: 2b:6d:d7:8a:84:d1:58:48:53:0c:b0:7a:b4:55:ae: f6:7d:db:19:b5:3b:15:98:84:4e:ec:b5:3e:30:67: bd:ac:f0:6a:29:b1:6d:55:3c:5f:b8:5d:af:14:c5: 40:c6:f9:3d:ff:85:c9:eb:63:fb:fd:d0:a3:90:41: d4:07:47:93:a7:22:e4:21:e2:6c:43:7b:b2:85:f4: d3:c6:5b:37:1f:17:38:44:7a:6c:5f:be:90:6f:fa: 11:e7:bc:b6:1c:c8:8e:1c:46:71:05:a2:70:44:b7: 3b:4e:92:bd:bb:c7:cd:d8:fd:ee:81:7f:18:43:c5: 7a:8b:4e:06:a4:a8:6e:28:f3:0b:20:9b:fd:e2:85: b9:cc:13:7b:9f:32:c1:92:44:6c:15:b6:5e:de:1f: e1:4a:d0:8b:63:b8:00:61:33:62:4b:98:77:96:90: f6:94:29:16:84:25:11:01:6f:63:b2:81:56:c9:37: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E6:FA:9B:72:2D:DF:B0:7C:3C:61:36:3B:B4:C3:6A:2F:D3:AD:66 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/oeb6m3It37B8PGE2O7TDai_TrWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.86.0/24 152.89.232.0/22 IPv6: 2a09:37c0::/29 Signature Algorithm: sha256WithRSAEncryption 5f:6f:4d:54:25:f4:b5:a8:cb:a9:65:93:e1:a8:dd:63:4f:0b: 60:ee:a7:2d:43:ae:4c:ae:3f:6c:02:9e:7e:e2:93:29:9e:5d: 3d:b3:c3:f4:7a:e5:1d:70:ec:34:ef:28:c0:63:af:8b:d6:08: 7a:37:06:73:8e:09:72:b1:22:75:57:00:f9:51:02:a6:b1:5b: 16:73:1b:91:a0:8d:07:be:ec:11:43:8c:b3:c6:7a:9b:9f:94: c7:91:f6:03:e3:f1:3a:90:66:99:df:01:88:f9:1c:9f:f0:f3: c8:13:38:eb:b6:32:da:58:8f:16:9f:04:5d:5b:10:bc:8a:69: 9b:e4:e4:71:ab:c0:68:dc:54:d6:97:75:c9:6c:5f:43:14:30: f9:d8:93:0b:dc:da:c7:3c:78:94:77:4d:00:c6:9d:0f:79:e3: f7:cb:9d:4d:0e:14:c2:b5:b2:9e:b1:ef:c3:52:cf:11:a0:6f: f4:6d:4a:be:22:39:9a:af:b0:17:be:7e:a8:83:c4:58:22:4f: 96:37:52:ba:d9:29:96:5f:ae:41:69:07:4f:65:62:97:2f:5c: 15:c0:17:69:f6:59:19:85:1a:b7:16:fe:5b:30:70:52:e6:da: 6f:68:a4:bb:11:4d:18:60:fd:c8:f4:51:e1:5d:5c:ed:7f:f2: e6:56:18:db -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x0FhhhgoTs+dxsNTHGG0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWU2ZmE5YjcyMmRkZmIwN2MzYzYxMzYzYmI0YzM2YTJmZDNhZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB3ypppn0I8tlvc4aqIV+wA7A8uR OPmkv//gBy2HSWLEhSIX1AWS99+YSirSd7bYof6pRgdlG3NcOWVmlmKzyYMDuzb6 S9thBn0rbdeKhNFYSFMMsHq0Va72fdsZtTsVmIRO7LU+MGe9rPBqKbFtVTxfuF2v FMVAxvk9/4XJ62P7/dCjkEHUB0eTpyLkIeJsQ3uyhfTTxls3Hxc4RHpsX76Qb/oR 57y2HMiOHEZxBaJwRLc7TpK9u8fN2P3ugX8YQ8V6i04GpKhuKPMLIJv94oW5zBN7 nzLBkkRsFbZe3h/hStCLY7gAYTNiS5h3lpD2lCkWhCURAW9jsoFWyTdsbQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKHm+ptyLd+wfDxhNju0w2ov061mMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvb2ViNm0zSXQzN0I4UEdFMk83VERhaV9UcldZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVjZWAwQC mFnoMA0EAgACMAcDBQMqCTfAMA0GCSqGSIb3DQEBCwUAA4IBAQBfb01UJfS1qMup ZZPhqN1jTwtg7qctQ65Mrj9sAp5+4pMpnl09s8P0euUdcOw07yjAY6+L1gh6NwZz jglysSJ1VwD5UQKmsVsWcxuRoI0HvuwRQ4yzxnqbn5THkfYD4/E6kGaZ3wGI+Ryf 8PPIEzjrtjLaWI8WnwRdWxC8immb5ORxq8Bo3FTWl3XJbF9DFDD52JML3NrHPHiU d00Axp0PeeP3y51NDhTCtbKese/DUs8RoG/0bUq+Ijmar7AXvn6og8RYIk+WN1K6 2SmWX65BaQdPZWKXL1wVwBdp9lkZhRq3Fv5bMHBS5tpvaKS7EU0YYP3I9FHhXVzt f/LmVhjb -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:32 2026 by rpki-client