This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jZxZtsxyfRKkqszsYo7-WcKC_mE.roa File: jZxZtsxyfRKkqszsYo7-WcKC_mE.roa (raw, json) Hash identifier: MYv7SXVRJnObLK+2qPSWfrx2plB/11klPEK2yi3IS9w= Subject key identifier: 8D:9C:59:B6:CC:72:7D:12:A4:AA:CC:EC:62:8E:FE:59:C2:82:FE:61 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C8013EE027D58080FFF9052643760DE Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jZxZtsxyfRKkqszsYo7-WcKC_mE.roa Signing time: Fri 02 Jan 2026 02:18:47 +0000 ROA not before: Fri 02 Jan 2026 02:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25186 IP address blocks: 81.80.17.0/24 maxlen: 24 81.80.72.0/24 maxlen: 24 194.3.255.0/24 maxlen: 24 195.6.9.0/24 maxlen: 24 195.6.20.0/24 maxlen: 24 195.6.66.0/24 maxlen: 24 195.6.67.0/24 maxlen: 24 195.6.171.0/24 maxlen: 24 195.6.174.0/24 maxlen: 24 195.6.230.0/24 maxlen: 24 217.167.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:13:ee:02:7d:58:08:0f:ff:90:52:64:37:60:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d9c59b6cc727d12a4aaccec628efe59c282fe61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:d1:d4:b4:22:e7:dc:b5:ab:95:01:f4:a9: dc:2a:1a:14:b8:5f:1a:f2:14:40:89:c8:76:36:3d: 73:14:4b:f4:be:1d:48:17:56:f4:0e:5d:0a:e5:5c: 7d:ec:22:6d:4b:1b:d5:3a:4b:c4:53:b6:5d:43:5f: 0a:c4:e1:f9:14:03:b8:12:d2:12:10:20:99:07:7d: c2:6e:e8:93:c9:79:a6:03:46:cf:86:7f:9b:32:15: 90:7f:38:d3:4f:10:c4:56:50:18:20:26:00:a2:4f: 67:dd:a3:38:72:5d:9a:c7:63:31:b4:cd:ec:44:4b: da:79:2a:58:78:1a:5b:8c:24:69:db:80:8f:bb:9c: 21:74:5f:d0:0f:72:df:b6:c9:92:d1:30:da:61:dc: f7:16:8f:8c:11:90:3c:af:8b:78:b6:5e:50:6a:67: 75:2b:ff:b5:9c:20:f5:7c:71:9b:15:4e:17:6f:e9: 58:f0:f6:7c:71:57:7f:eb:7e:b5:92:68:3f:13:19: 86:ff:ef:98:22:a3:9c:ea:84:eb:60:6c:e7:9e:e7: cc:dc:db:3b:2a:85:dc:0c:ae:a8:03:76:fc:1e:c2: c3:d3:6a:34:07:d5:cb:0c:f9:4d:21:67:ef:67:83: 03:16:c7:61:2c:43:f0:db:df:1a:a2:6c:49:6b:32: 44:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:59:B6:CC:72:7D:12:A4:AA:CC:EC:62:8E:FE:59:C2:82:FE:61 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jZxZtsxyfRKkqszsYo7-WcKC_mE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.80.17.0/24 81.80.72.0/24 194.3.255.0/24 195.6.9.0/24 195.6.20.0/24 195.6.66.0/23 195.6.171.0/24 195.6.174.0/24 195.6.230.0/24 217.167.104.0/24 Signature Algorithm: sha256WithRSAEncryption 30:8b:da:96:d1:12:bb:3c:ea:cb:76:0c:5b:1a:b2:b5:46:8b: 56:47:9f:b3:93:45:c6:79:24:e5:36:1c:66:53:87:80:b1:66: 28:c1:5c:2f:3c:f7:69:17:a0:f9:cd:68:2e:94:5d:89:c8:9d: 69:f2:5b:12:91:f4:90:dc:b5:e8:88:0a:ed:23:68:2d:76:5d: 27:78:2a:47:43:c4:cc:ad:8c:4c:d5:46:1a:c0:7a:5b:24:e0: 18:a1:27:3c:37:38:9a:df:dd:62:f7:82:60:1c:8d:cf:61:67: be:a6:21:bf:a6:f6:8b:ae:e3:9b:ce:47:3d:99:fc:4a:c6:24: 8e:91:09:63:bc:b6:d6:83:0d:e0:2f:c2:d9:ec:4f:3c:d7:f0: 02:ae:27:c4:3a:34:2f:d7:fd:22:cf:02:3e:89:c1:eb:9b:84: c1:5b:b3:d0:cf:a9:08:60:a2:5c:a8:e5:4e:e5:d3:b6:18:a2: 6b:68:4b:7c:6d:77:7a:48:56:6c:cf:43:0b:79:62:61:fa:11: ee:89:b2:52:89:0c:d9:29:9c:ba:f3:c0:ff:b4:a2:a8:c6:f1: 19:c8:c8:09:b1:72:e4:59:32:1a:ed:c0:fd:aa:8d:1e:8f:cf: 08:d8:ce:d9:3c:64:8a:4e:0d:fd:b5:83:dd:ca:14:75:6e:89: 45:74:07:f7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt8gBPuAn1YCA//kFJkN2DeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDljNTliNmNjNzI3ZDEyYTRhYWNjZWM2MjhlZmU1OWMyODJmZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPbR1LQi59y1q5UB9KncKhoUuF8a 8hRAich2Nj1zFEv0vh1IF1b0Dl0K5Vx97CJtSxvVOkvEU7ZdQ18KxOH5FAO4EtIS ECCZB33CbuiTyXmmA0bPhn+bMhWQfzjTTxDEVlAYICYAok9n3aM4cl2ax2MxtM3s REvaeSpYeBpbjCRp24CPu5whdF/QD3LftsmS0TDaYdz3Fo+MEZA8r4t4tl5Qamd1 K/+1nCD1fHGbFU4Xb+lY8PZ8cVd/6361kmg/ExmG/++YIqOc6oTrYGznnufM3Ns7 KoXcDK6oA3b8HsLD02o0B9XLDPlNIWfvZ4MDFsdhLEPw298aomxJazJEZQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFI2cWbbMcn0SpKrM7GKO/lnCgv5hMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvalp4WnRzeHlmUktrcXN6c1lvNy1XY0tDX21FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAUVARAwQA UVBIAwQAwgP/AwQAwwYJAwQAwwYUAwQBwwZCAwQAwwarAwQAwwauAwQAwwbmAwQA 2adoMA0GCSqGSIb3DQEBCwUAA4IBAQAwi9qW0RK7POrLdgxbGrK1RotWR5+zk0XG eSTlNhxmU4eAsWYowVwvPPdpF6D5zWgulF2JyJ1p8lsSkfSQ3LXoiArtI2gtdl0n eCpHQ8TMrYxM1UYawHpbJOAYoSc8Nzia391i94JgHI3PYWe+piG/pvaLruObzkc9 mfxKxiSOkQljvLbWgw3gL8LZ7E881/ACrifEOjQv1/0izwI+icHrm4TBW7PQz6kI YKJcqOVO5dO2GKJraEt8bXd6SFZsz0MLeWJh+hHuibJSiQzZKZy688D/tKKoxvEZ yMgJsXLkWTIa7cD9qo0ej88I2M7ZPGSKTg39tYPdyhR1bolFdAf3 -----END CERTIFICATE-----Generated at Sun Jan 25 19:01:39 2026 by rpki-client