This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/ox_RAZ62BnMtTtsni2E71dlvqdw.roa File: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (raw, json) Hash identifier: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo= Subject key identifier: A3:1F:D1:01:9E:B6:06:73:2D:4E:DB:27:8B:61:3B:D5:D9:6F:A9:DC Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 019B7CECFC42C0600DE1DC5FDE3245115BC2 Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/ox_RAZ62BnMtTtsni2E71dlvqdw.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12462 IP address blocks: 185.123.120.0/22 maxlen: 24 212.66.160.0/24 maxlen: 24 212.80.160.0/19 maxlen: 24 213.170.32.0/19 maxlen: 24 2a0c:f5c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fc:42:c0:60:0d:e1:dc:5f:de:32:45:11:5b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31fd1019eb606732d4edb278b613bd5d96fa9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:10:49:84:26:9a:37:a2:99:28:e2:7b:3f: a2:8e:99:e7:34:b2:68:bd:8e:2b:70:a3:36:cc:21: d3:37:89:e2:66:63:65:7a:bd:14:84:76:30:af:a5: 1d:3e:f2:cb:53:81:5c:dd:02:88:fe:ba:c4:66:2f: 46:e8:b4:1b:65:fc:ac:1f:3d:f9:7f:31:92:5a:26: 06:3a:11:19:5a:b3:d9:38:48:ff:a7:05:69:2c:26: 7c:e5:48:0e:c2:b3:d5:d8:82:85:54:61:f4:f4:e1: 7e:5e:3a:49:81:25:c8:6a:91:ad:d0:d8:ec:02:4e: 95:b0:4e:2e:5b:11:a0:82:33:18:04:63:5b:2d:5d: 9d:84:82:ae:23:d6:59:44:0d:39:b4:4f:ac:ed:b4: e2:bd:cd:54:8d:08:7a:0a:c3:7c:a6:b2:ca:8f:00: 31:80:4f:c5:84:e6:0b:c3:10:54:37:f0:6f:df:fd: 44:f2:27:fa:b7:77:fc:18:75:a9:5e:1a:e4:e4:dc: 27:1e:c5:e0:02:f3:ce:9c:f1:2c:fc:db:0d:44:27: 73:86:02:b3:11:9e:e0:c4:62:36:4f:4d:76:04:98: a2:9f:7d:c9:70:00:51:60:82:c5:3c:76:b8:ce:1d: 81:28:f4:ea:3a:ca:06:c0:3f:76:5e:0b:ca:5b:88: 35:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:D1:01:9E:B6:06:73:2D:4E:DB:27:8B:61:3B:D5:D9:6F:A9:DC X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/ox_RAZ62BnMtTtsni2E71dlvqdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.123.120.0/22 212.66.160.0/24 212.80.160.0/19 213.170.32.0/19 IPv6: 2a0c:f5c0::/32 Signature Algorithm: sha256WithRSAEncryption d2:d5:72:cd:f8:eb:33:c9:f5:d1:99:e6:02:30:c8:22:0e:cb: 15:be:26:5c:e2:c4:9c:d5:ce:fc:61:5b:5f:11:1a:38:f6:e8: 75:c8:ca:f4:ab:35:bc:c5:3a:af:b8:a9:90:87:60:a6:38:49: 72:35:be:5f:a1:4d:d1:71:93:db:e3:87:37:36:8d:17:6f:a6: d8:aa:e9:6a:7f:82:2b:9d:53:c4:72:d7:4b:86:31:17:7b:f9: bd:a8:52:a1:58:0f:71:5f:93:ce:e5:02:bd:ea:80:1f:ef:ff: f5:d0:d2:a9:9e:c2:8b:ff:df:8a:3d:b7:24:15:ce:75:82:6c: af:da:e9:c7:fd:0d:77:1d:d6:ec:80:0d:d0:98:a2:63:60:35: d9:b3:ee:21:7c:54:ed:12:7c:df:7d:f6:5a:05:3d:07:3d:47: 92:d9:cd:86:4f:a6:f6:ae:cb:35:44:90:dc:dd:d3:5e:b4:fa: d1:26:12:a9:65:b8:07:28:d0:d4:dc:ee:30:02:35:06:ea:10: e5:b5:bd:6e:6a:cf:b5:17:41:d8:ad:bd:33:08:41:d9:51:fd: 26:49:ae:01:ad:ab:6a:9d:93:3f:a1:cf:24:d3:85:e0:f2:74: d3:fc:a6:c4:5a:36:96:3a:91:e1:e9:75:1e:69:60:26:67:06: 64:ec:7b:82 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87PxCwGAN4dxf3jJFEVvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzFmZDEwMTllYjYwNjczMmQ0ZWRiMjc4YjYxM2JkNWQ5NmZhOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzsQSYQmmjeimSjiez+ijpnnNLJo vY4rcKM2zCHTN4niZmNler0UhHYwr6UdPvLLU4Fc3QKI/rrEZi9G6LQbZfysHz35 fzGSWiYGOhEZWrPZOEj/pwVpLCZ85UgOwrPV2IKFVGH09OF+XjpJgSXIapGt0Njs Ak6VsE4uWxGggjMYBGNbLV2dhIKuI9ZZRA05tE+s7bTivc1UjQh6CsN8prLKjwAx gE/FhOYLwxBUN/Bv3/1E8if6t3f8GHWpXhrk5NwnHsXgAvPOnPEs/NsNRCdzhgKz EZ7gxGI2T012BJiin33JcABRYILFPHa4zh2BKPTqOsoGwD92XgvKW4g12QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFKMf0QGetgZzLU7bJ4thO9XZb6ncMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvb3hfUkFaNjJCbk10VHRzbmkyRTcxZGx2cWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCuXt4AwQA 1EKgAwQF1FCgAwQF1aogMA0EAgACMAcDBQAqDPXAMA0GCSqGSIb3DQEBCwUAA4IB AQDS1XLN+OszyfXRmeYCMMgiDssVviZc4sSc1c78YVtfERo49uh1yMr0qzW8xTqv uKmQh2CmOElyNb5foU3RcZPb44c3No0Xb6bYqulqf4IrnVPEctdLhjEXe/m9qFKh WA9xX5PO5QK96oAf7//10NKpnsKL/9+KPbckFc51gmyv2unH/Q13HdbsgA3QmKJj YDXZs+4hfFTtEnzfffZaBT0HPUeS2c2GT6b2rss1RJDc3dNetPrRJhKpZbgHKNDU 3O4wAjUG6hDltb1uas+1F0HYrb0zCEHZUf0mSa4BratqnZM/oc8k04Xg8nTT/KbE WjaWOpHh6XUeaWAmZwZk7HuC -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:46 2026 by rpki-client