This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bz5VRiwzt4t0TYQPq_mLQS6tM98.roa File: bz5VRiwzt4t0TYQPq_mLQS6tM98.roa (raw, json) Hash identifier: FMHBGBrrVY0cnzsegc9MmDPwY0WYVMZLPO1kOWY6yqU= Subject key identifier: 6F:3E:55:46:2C:33:B7:8B:74:4D:84:0F:AB:F9:8B:41:2E:AD:33:DF Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80106F03A34062E14D7F4CFEDD71E0 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bz5VRiwzt4t0TYQPq_mLQS6tM98.roa Signing time: Fri 02 Jan 2026 02:18:46 +0000 ROA not before: Fri 02 Jan 2026 02:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16236 IP address blocks: 81.255.178.0/24 maxlen: 24 90.115.208.0/24 maxlen: 24 90.115.209.0/24 maxlen: 24 194.2.56.0/24 maxlen: 24 194.2.57.0/24 maxlen: 24 194.2.86.0/24 maxlen: 24 194.2.132.0/24 maxlen: 24 194.2.133.0/24 maxlen: 24 194.3.4.0/24 maxlen: 24 194.250.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:10:6f:03:a3:40:62:e1:4d:7f:4c:fe:dd:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3e55462c33b78b744d840fabf98b412ead33df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:bb:58:89:67:cf:4b:07:de:c4:c0:9e:69: 5f:ae:b6:f5:ae:55:81:85:d2:e0:79:c1:6e:94:86: 70:f1:4b:0a:dd:05:1d:8f:23:08:e8:f2:16:a2:d3: 4d:d4:5c:3e:40:41:7c:11:ea:74:65:04:b3:1d:aa: a0:df:1d:c6:b3:fb:df:22:f1:4d:e9:98:bb:d2:75: 38:45:92:73:46:dc:38:d0:6e:4a:63:45:50:d1:76: 1c:90:8f:1a:58:ce:42:f8:1c:f1:90:f2:3c:83:9c: 93:b5:76:b4:b9:b6:e9:45:e2:34:ab:db:af:0e:e9: 2d:c7:71:a5:3d:1b:02:53:13:70:94:14:94:64:42: 74:3f:3f:2c:a5:a5:a5:25:a7:80:55:3c:57:25:63: 6b:78:0d:cf:6d:e1:ce:68:9e:5d:05:dd:6b:83:55: 86:93:c1:01:e9:73:3b:b1:02:34:d4:28:9f:d4:34: a6:b5:b9:ba:7b:c7:0c:73:ac:88:26:4c:d1:25:4d: c9:1e:b1:02:08:b2:07:8b:37:bf:4f:8e:84:d2:99: 6f:82:8d:54:fa:03:4d:09:03:0f:f2:0c:c9:21:0c: 17:cd:04:e0:36:b8:cf:07:22:4f:80:0f:c5:8c:64: 3a:b9:48:93:ae:6e:b1:4b:39:d3:48:6e:5d:8d:62: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3E:55:46:2C:33:B7:8B:74:4D:84:0F:AB:F9:8B:41:2E:AD:33:DF X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/bz5VRiwzt4t0TYQPq_mLQS6tM98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.255.178.0/24 90.115.208.0/23 194.2.56.0/23 194.2.86.0/24 194.2.132.0/23 194.3.4.0/24 194.250.98.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:0a:b5:35:f4:4e:9f:7d:69:6c:ed:bf:81:99:b3:46:b5:7e: a2:03:69:26:09:65:6a:23:66:34:9d:bb:0f:f1:28:d8:d1:f0: ea:dd:21:ed:5a:24:ac:3e:b4:40:5b:38:96:75:fd:6f:19:38: e2:fc:2b:32:98:9f:f9:36:46:63:30:3d:a9:65:7d:17:9c:e3: 43:f6:61:cd:ab:50:e9:a1:99:86:72:3b:4f:aa:d7:ce:71:f4: 0f:58:cf:97:66:d5:19:a0:2e:5c:32:50:03:37:71:de:ca:30: a8:53:e4:b9:bd:f7:01:96:73:00:2d:8b:f7:5b:de:3b:50:f9: 7d:df:49:4f:94:1e:a8:d8:94:a4:aa:d2:b3:af:a4:1e:aa:02: bb:bb:a8:60:58:83:8a:87:eb:da:a6:11:21:bc:0f:03:4e:82: 77:55:09:be:2c:09:14:93:e2:c1:f7:aa:2a:75:0f:f2:9e:3a: 4d:f5:fb:66:8c:3d:f1:d1:dc:e2:ff:34:9a:93:68:b1:26:2e: 46:ef:1a:82:1a:53:b8:20:02:b4:7a:0e:7b:fd:dd:26:04:89: 28:dd:3a:cb:35:a2:a9:a5:f4:26:92:00:f1:b9:92:c6:61:7c: f0:60:a6:d9:42:3e:18:14:8b:2d:fc:85:79:68:b7:67:97:25: 90:51:79:ce -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8gBBvA6NAYuFNf0z+3XHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjNlNTU0NjJjMzNiNzhiNzQ0ZDg0MGZhYmY5OGI0MTJlYWQzM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvy7WIlnz0sH3sTAnmlfrrb1rlWB hdLgecFulIZw8UsK3QUdjyMI6PIWotNN1Fw+QEF8Eep0ZQSzHaqg3x3Gs/vfIvFN 6Zi70nU4RZJzRtw40G5KY0VQ0XYckI8aWM5C+BzxkPI8g5yTtXa0ubbpReI0q9uv Duktx3GlPRsCUxNwlBSUZEJ0Pz8spaWlJaeAVTxXJWNreA3PbeHOaJ5dBd1rg1WG k8EB6XM7sQI01Cif1DSmtbm6e8cMc6yIJkzRJU3JHrECCLIHize/T46E0plvgo1U +gNNCQMP8gzJIQwXzQTgNrjPByJPgA/FjGQ6uUiTrm6xSznTSG5djWKoQQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFG8+VUYsM7eLdE2ED6v5i0EurTPfMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvYno1VlJpd3p0NHQwVFlRUHFfbUxRUzZ0TTk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAUf+yAwQB WnPQAwQBwgI4AwQAwgJWAwQBwgKEAwQAwgMEAwQAwvpiMA0GCSqGSIb3DQEBCwUA A4IBAQAsCrU19E6ffWls7b+BmbNGtX6iA2kmCWVqI2Y0nbsP8SjY0fDq3SHtWiSs PrRAWziWdf1vGTji/CsymJ/5NkZjMD2pZX0XnOND9mHNq1DpoZmGcjtPqtfOcfQP WM+XZtUZoC5cMlADN3HeyjCoU+S5vfcBlnMALYv3W947UPl930lPlB6o2JSkqtKz r6QeqgK7u6hgWIOKh+vaphEhvA8DToJ3VQm+LAkUk+LB96oqdQ/ynjpN9ftmjD3x 0dzi/zSak2ixJi5G7xqCGlO4IAK0eg57/d0mBIko3TrLNaKppfQmkgDxuZLGYXzw YKbZQj4YFIst/IV5aLdnlyWQUXnO -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:20 2026 by rpki-client