This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UOozdgMWkk0RJwT79mq5mSwdurM.roa File: UOozdgMWkk0RJwT79mq5mSwdurM.roa (raw, json) Hash identifier: fJ4sYv6ZeyusyQL5urhnyr1YZ9IQ2Da9R2oWQOCYu0A= Subject key identifier: 50:EA:33:76:03:16:92:4D:11:27:04:FB:F6:6A:B9:99:2C:1D:BA:B3 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C6751D97468FF7F1949FB175761C7A Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UOozdgMWkk0RJwT79mq5mSwdurM.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56856 IP address blocks: 212.21.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:75:1d:97:46:8f:f7:f1:94:9f:b1:75:76:1c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50ea33760316924d112704fbf66ab9992c1dbab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a5:83:3a:1b:85:2a:73:8a:7d:37:df:63:be: 39:48:52:57:42:dd:e8:9a:78:a6:71:dd:8b:6d:00: d4:67:8a:61:6d:fe:c2:0a:87:ed:87:44:58:f0:e2: b9:2f:f2:81:4a:34:63:e3:4f:99:0c:38:98:54:e3: 78:92:c6:ff:3b:14:bd:fc:ec:f8:f5:64:c0:5c:80: b4:30:3d:53:e5:fd:a1:f5:34:26:45:3c:b6:b1:8c: 34:81:bd:50:27:9e:80:1f:49:7a:27:a0:8f:5c:d6: 12:6f:eb:ac:18:5d:91:96:28:72:71:03:7b:98:46: 20:ef:df:c9:5b:9c:04:a5:bf:ff:fb:9b:69:ad:91: 4f:99:ae:bd:b4:9c:74:c8:9d:76:09:a7:16:b4:e8: d6:0e:56:c6:65:67:b9:84:61:c9:2b:a3:05:64:69: 0f:b2:01:ac:d4:4e:b0:a2:e4:cb:c6:7c:23:57:d7: f2:08:ef:b5:5d:59:96:73:1f:e7:22:5e:24:bd:75: 05:4c:ca:14:06:f6:c8:75:3d:53:e9:12:d1:65:7a: 10:31:28:5c:7b:b9:d6:69:2b:77:b7:79:20:95:44: 5b:da:de:a7:89:90:4a:f3:9c:35:34:4c:08:70:1b: 66:1e:53:12:b1:4e:02:c0:ed:3d:9b:de:e3:1f:a1: b5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EA:33:76:03:16:92:4D:11:27:04:FB:F6:6A:B9:99:2C:1D:BA:B3 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/UOozdgMWkk0RJwT79mq5mSwdurM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.21.139.0/24 Signature Algorithm: sha256WithRSAEncryption 72:57:ef:9c:72:d7:76:21:23:f7:78:4d:56:07:ee:f7:7f:c2: 28:f3:61:4b:be:8b:d7:a7:fe:0c:9a:a4:92:2d:95:8a:98:08: 1d:24:f0:81:ee:7f:63:57:41:42:05:83:ed:37:10:6b:f9:51: bf:d4:d9:52:0e:94:0c:3a:29:e7:8c:7e:55:b1:b3:43:90:be: 39:40:0b:52:b8:64:23:99:7c:25:ff:56:43:fb:e6:26:b3:7d: 6f:20:02:dd:32:b3:d9:fc:7d:aa:57:98:37:ba:9a:57:a7:91: 35:36:f5:22:6b:f5:23:08:12:99:89:a7:0c:e7:62:fd:39:22: ac:b0:3c:00:0a:92:40:72:5d:eb:04:fd:63:77:32:4e:a2:9f: 36:c9:46:fa:a7:d9:2e:11:a2:32:c2:82:8d:35:9e:30:a6:eb: 9f:20:0b:c6:bd:13:d6:10:f3:b4:80:80:98:c9:53:02:b8:fd: dc:ea:32:29:ad:b6:5c:da:3e:40:81:c2:e7:00:0e:53:bb:43: 07:e8:92:55:ff:06:74:8d:96:55:33:4f:fd:4d:7d:97:c3:e8: 62:30:e4:fc:e7:af:3c:96:e4:ac:b5:c3:24:ee:b4:66:5c:1e: 3c:be:dc:d2:cb:c8:18:32:64:fd:ac:b7:e1:01:aa:30:dc:9b: f1:c8:db:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnUdl0aP9/GUn7F1dhx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MGVhMzM3NjAzMTY5MjRkMTEyNzA0ZmJmNjZhYjk5OTJjMWRiYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qWDOhuFKnOKfTffY745SFJXQt3o mnimcd2LbQDUZ4phbf7CCofth0RY8OK5L/KBSjRj40+ZDDiYVON4ksb/OxS9/Oz4 9WTAXIC0MD1T5f2h9TQmRTy2sYw0gb1QJ56AH0l6J6CPXNYSb+usGF2RlihycQN7 mEYg79/JW5wEpb//+5tprZFPma69tJx0yJ12CacWtOjWDlbGZWe5hGHJK6MFZGkP sgGs1E6wouTLxnwjV9fyCO+1XVmWcx/nIl4kvXUFTMoUBvbIdT1T6RLRZXoQMShc e7nWaSt3t3kglURb2t6niZBK85w1NEwIcBtmHlMSsU4CwO09m97jH6G18QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFDqM3YDFpJNEScE+/ZquZksHbqzMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvVU9vemRnTVdrazBSSndUNzltcTVtU3dkdXJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BWLMA0G CSqGSIb3DQEBCwUAA4IBAQByV++cctd2ISP3eE1WB+73f8Io82FLvovXp/4MmqSS LZWKmAgdJPCB7n9jV0FCBYPtNxBr+VG/1NlSDpQMOinnjH5VsbNDkL45QAtSuGQj mXwl/1ZD++Yms31vIALdMrPZ/H2qV5g3uppXp5E1NvUia/UjCBKZiacM52L9OSKs sDwACpJAcl3rBP1jdzJOop82yUb6p9kuEaIywoKNNZ4wpuufIAvGvRPWEPO0gICY yVMCuP3c6jIprbZc2j5AgcLnAA5Tu0MH6JJV/wZ0jZZVM0/9TX2Xw+hiMOT85688 luSstcMk7rRmXB48vtzSy8gYMmT9rLfhAaow3JvxyNtx -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:17 2026 by rpki-client