This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ej-OFdxaH8s4VAD8lywR2WW4Xic.roa File: Ej-OFdxaH8s4VAD8lywR2WW4Xic.roa (raw, json) Hash identifier: aUbz0z2CPJ144PD8gb1MCMRZmeoJSzqcK7Vyp5j/G+Q= Subject key identifier: 12:3F:8E:15:DC:5A:1F:CB:38:54:00:FC:97:2C:11:D9:65:B8:5E:27 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C801141848884B05DF62A34E6A1EA82 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ej-OFdxaH8s4VAD8lywR2WW4Xic.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21272 IP address blocks: 81.252.173.0/24 maxlen: 24 194.2.35.0/24 maxlen: 24 217.167.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:11:41:84:88:84:b0:5d:f6:2a:34:e6:a1:ea:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=123f8e15dc5a1fcb385400fc972c11d965b85e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:55:b1:93:af:cc:b1:9b:3d:dc:3c:e9:0d:b6: 1d:ae:c5:1d:ff:20:cb:3f:81:a5:5a:d3:b1:4a:43: 6d:7a:9a:c7:2d:1a:f8:db:cc:b1:4e:84:c6:60:aa: 22:f0:73:c7:5f:05:f2:1a:ef:fa:ff:23:e5:5e:b0: 32:4e:d9:b9:ad:a5:2b:b5:a4:88:c9:2a:bb:93:25: 4d:83:7c:e9:2a:ea:f3:8d:38:25:22:4f:28:1f:35: d7:34:bf:bf:04:5f:b2:94:b6:ef:ff:cc:7c:b4:ce: 51:3c:91:85:ba:66:9b:64:12:15:5c:73:c9:2b:c6: ee:db:38:73:c3:fe:3d:9f:1e:fd:71:f4:f7:4c:0b: 0e:ef:bb:51:70:be:7a:d3:cb:7b:9c:0c:53:3d:bf: b4:e3:40:96:0e:c0:12:8a:b8:91:b6:b3:0b:fe:2d: da:60:d4:1c:d9:3d:43:24:67:0b:46:90:1d:ec:af: 53:02:5c:e4:3c:74:c4:40:d2:d8:0f:0c:d5:cf:f0: d7:df:6d:ff:8e:41:07:43:70:13:f7:a9:50:67:60: d5:aa:46:36:31:b7:ef:cf:f2:4d:2a:fb:b5:10:5a: e9:e7:48:51:8c:40:c6:0b:a0:f3:72:3c:b2:99:27: af:fe:a7:84:75:11:0c:f0:ec:bd:73:90:04:0e:01: 87:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3F:8E:15:DC:5A:1F:CB:38:54:00:FC:97:2C:11:D9:65:B8:5E:27 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/Ej-OFdxaH8s4VAD8lywR2WW4Xic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.252.173.0/24 194.2.35.0/24 217.167.147.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:26:c4:25:b3:e2:3c:33:eb:0b:38:b5:68:d0:44:06:6a:7f: 22:14:79:1e:a1:77:c1:c8:33:76:cd:9e:17:f8:b5:a1:c7:6c: b2:a8:12:c9:45:c1:bd:80:d9:2f:8b:27:5a:db:45:b6:13:cd: e8:a3:79:8a:2b:39:ec:78:56:46:96:70:07:f9:66:ca:7c:b0: 7b:94:2e:b2:da:64:ff:80:44:5a:3e:44:65:d1:c2:83:1c:f2: d9:44:ab:3c:a9:d0:7e:1e:2d:62:69:ac:be:00:5b:00:a8:1a: 4f:c3:f5:21:cc:38:e3:48:1f:b9:7d:dd:56:b9:c4:55:b5:c6: 33:65:a3:58:0e:80:8e:64:c1:97:d1:a0:01:60:28:26:1e:47: ba:6f:43:1d:20:d5:8d:79:38:a6:7a:09:37:7b:ce:fc:2c:3d: 0f:78:06:b8:de:4e:28:07:12:28:79:d4:eb:74:89:a1:fb:89: b3:77:e7:66:ea:5e:5c:03:fd:a8:67:35:a3:68:bf:24:91:6b: 27:3e:a9:36:85:61:be:3d:85:18:5a:73:94:72:78:cc:f8:72: 51:57:3c:43:34:28:90:8e:57:54:b5:b5:1e:0c:e4:ab:d5:16: 15:13:80:41:f2:2e:99:93:78:51:20:59:86:23:28:69:69:03: 40:59:5a:9b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gBFBhIiEsF32KjTmoeqCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjNmOGUxNWRjNWExZmNiMzg1NDAwZmM5NzJjMTFkOTY1Yjg1ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulWxk6/MsZs93DzpDbYdrsUd/yDL P4GlWtOxSkNteprHLRr428yxToTGYKoi8HPHXwXyGu/6/yPlXrAyTtm5raUrtaSI ySq7kyVNg3zpKurzjTglIk8oHzXXNL+/BF+ylLbv/8x8tM5RPJGFumabZBIVXHPJ K8bu2zhzw/49nx79cfT3TAsO77tRcL5608t7nAxTPb+040CWDsASiriRtrML/i3a YNQc2T1DJGcLRpAd7K9TAlzkPHTEQNLYDwzVz/DX323/jkEHQ3AT96lQZ2DVqkY2 Mbfvz/JNKvu1EFrp50hRjEDGC6DzcjyymSev/qeEdREM8Oy9c5AEDgGHgQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBI/jhXcWh/LOFQA/JcsEdlluF4nMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvRWotT0ZkeGFIOHM0VkFEOGx5d1IyV1c0WGljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAUfytAwQA wgIjAwQA2aeTMA0GCSqGSIb3DQEBCwUAA4IBAQALJsQls+I8M+sLOLVo0EQGan8i FHkeoXfByDN2zZ4X+LWhx2yyqBLJRcG9gNkviyda20W2E83oo3mKKznseFZGlnAH +WbKfLB7lC6y2mT/gERaPkRl0cKDHPLZRKs8qdB+Hi1iaay+AFsAqBpPw/UhzDjj SB+5fd1WucRVtcYzZaNYDoCOZMGX0aABYCgmHke6b0MdINWNeTimegk3e878LD0P eAa43k4oBxIoedTrdImh+4mzd+dm6l5cA/2oZzWjaL8kkWsnPqk2hWG+PYUYWnOU cnjM+HJRVzxDNCiQjldUtbUeDOSr1RYVE4BB8i6Zk3hRIFmGIyhpaQNAWVqb -----END CERTIFICATE-----Generated at Sun Jan 25 20:28:57 2026 by rpki-client