This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/OxGf8ePayJwU09gGZnySyoA8iyo.roa File: OxGf8ePayJwU09gGZnySyoA8iyo.roa (raw, json) Hash identifier: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA= Subject key identifier: 3B:11:9F:F1:E3:DA:C8:9C:14:D3:D8:06:66:7C:92:CA:80:3C:8B:2A Certificate issuer: /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Certificate serial: 019B7AC8783CD069D6CAAF3F91417E866C45 Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/OxGf8ePayJwU09gGZnySyoA8iyo.roa Signing time: Thu 01 Jan 2026 18:18:36 +0000 ROA not before: Thu 01 Jan 2026 18:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204834 IP address blocks: 185.129.240.0/24 maxlen: 24 185.129.241.0/24 maxlen: 24 185.129.242.0/24 maxlen: 24 185.129.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:78:3c:d0:69:d6:ca:af:3f:91:41:7e:86:6c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0 Validity Not Before: Jan 1 18:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b119ff1e3dac89c14d3d806667c92ca803c8b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:c3:ea:86:85:1f:0f:db:a2:04:a1:e4:40: c4:9f:58:56:35:c8:c1:92:31:52:b3:27:b4:6f:f4: c1:59:73:67:67:04:1b:56:a4:de:6b:2f:68:80:b5: c2:6b:c6:cc:c6:7f:32:71:7a:c9:31:70:e5:f0:66: 5a:7a:2d:f2:9a:d5:5c:e5:24:3c:1d:a8:02:f2:86: e0:0d:b2:34:89:11:dd:63:0a:ce:77:ba:92:1a:b0: 8d:a9:71:d5:39:b9:be:08:59:b6:88:9c:d2:47:0a: d5:1c:01:ee:5b:e0:02:c7:d4:a4:37:f0:9f:17:57: 4b:2c:7a:d2:98:f8:05:d2:3e:15:70:d3:d3:0a:57: b2:20:e2:78:f7:7b:23:81:40:ac:46:7c:05:0f:c8: 10:4e:00:d4:d6:75:6f:1e:06:96:1c:ac:09:e8:9c: 80:77:a3:8b:aa:74:22:d9:d4:a9:75:41:74:3a:c9: 4f:e4:7e:e6:ce:76:be:fe:b2:11:50:dd:34:f3:85: d1:30:7d:2e:37:fe:de:70:6a:72:95:32:41:5a:e5: 22:9e:a3:a2:bd:43:61:04:4f:66:3d:52:02:e5:af: 4f:30:77:e3:3b:0f:25:97:5d:a6:83:eb:da:ea:cf: b0:a6:db:8f:44:ce:b8:89:76:b5:f2:bd:7d:02:12: 42:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:11:9F:F1:E3:DA:C8:9C:14:D3:D8:06:66:7C:92:CA:80:3C:8B:2A X509v3 Authority Key Identifier: keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/OxGf8ePayJwU09gGZnySyoA8iyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.129.240.0/22 Signature Algorithm: sha256WithRSAEncryption a3:44:46:d4:29:f0:0b:32:61:68:36:11:ad:c0:70:9e:16:a9: 48:ca:3d:d5:fe:8a:d4:e6:ed:44:fa:30:af:44:dd:ac:4f:7c: ed:9c:bf:98:3c:ff:66:7b:6e:74:6a:03:fe:f6:72:80:f6:05: 40:c7:79:3d:4c:59:19:56:19:3a:b2:91:96:86:8b:d7:10:37: 16:39:06:f3:b4:a7:41:81:b9:85:91:00:55:8c:9c:d6:25:42: 72:b0:4c:8a:87:fa:d1:86:11:ef:b0:c3:33:4e:16:5c:61:a6: fd:11:d9:44:f4:f0:cc:35:1d:4b:a3:54:36:29:a3:88:7e:30: 26:2c:8b:5d:a2:28:ea:d2:e9:de:04:38:65:ee:19:e0:78:8f: c4:f8:f8:1f:13:0a:e8:bc:ce:a6:bc:a1:d5:8a:7c:aa:67:0b: 2d:cf:e3:7a:f1:2e:43:c8:0d:d4:fc:f1:db:12:65:58:a9:4d: 76:19:be:82:3a:83:0f:24:31:d4:b1:61:d8:e7:13:a9:64:a0: 90:76:bf:86:4d:6e:cc:98:de:16:8e:7c:9a:f1:18:a8:fe:e9: 5d:0d:8c:b6:0c:59:09:08:42:9c:5a:98:3a:db:59:09:9e:4e: 9f:93:26:e5:70:d0:96:cf:91:ef:5f:f3:40:9b:4c:6c:c8:55: ec:56:4d:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yHg80GnWyq8/kUF+hmxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYmQ1MTI3MjA2NGI2M2IyYzY2M2MwMjk2YmExMWRiNWVh MjM4YzAwHhcNMjYwMTAxMTgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjExOWZmMWUzZGFjODljMTRkM2Q4MDY2NjdjOTJjYTgwM2M4YjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+rD6oaFHw/bogSh5EDEn1hWNcjB kjFSsye0b/TBWXNnZwQbVqTeay9ogLXCa8bMxn8ycXrJMXDl8GZaei3ymtVc5SQ8 HagC8obgDbI0iRHdYwrOd7qSGrCNqXHVObm+CFm2iJzSRwrVHAHuW+ACx9SkN/Cf F1dLLHrSmPgF0j4VcNPTCleyIOJ493sjgUCsRnwFD8gQTgDU1nVvHgaWHKwJ6JyA d6OLqnQi2dSpdUF0OslP5H7mzna+/rIRUN0084XRMH0uN/7ecGpylTJBWuUinqOi vUNhBE9mPVIC5a9PMHfjOw8ll12mg+va6s+wptuPRM64iXa18r19AhJCeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsRn/Hj2sicFNPYBmZ8ksqAPIsqMB8GA1UdIwQY MBaAFHu9UScgZLY7LGY8Apa6EdteojjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUt OTdjOWFhYjgyOGYyLzEvT3hHZjhlUGF5SndVMDlnR1pueVN5b0E4aXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iODJhMDYtYWIwZC00YWRmLThhODUtOTdjOWFhYjgyOGYy LzEvZTcxUkp5Qmt0anNzWmp3Q2xyb1IyMTZpT01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYHwMA0G CSqGSIb3DQEBCwUAA4IBAQCjREbUKfALMmFoNhGtwHCeFqlIyj3V/orU5u1E+jCv RN2sT3ztnL+YPP9me250agP+9nKA9gVAx3k9TFkZVhk6spGWhovXEDcWOQbztKdB gbmFkQBVjJzWJUJysEyKh/rRhhHvsMMzThZcYab9EdlE9PDMNR1Lo1Q2KaOIfjAm LItdoijq0uneBDhl7hngeI/E+PgfEwrovM6mvKHVinyqZwstz+N68S5DyA3U/PHb EmVYqU12Gb6COoMPJDHUsWHY5xOpZKCQdr+GTW7MmN4Wjnya8Rio/uldDYy2DFkJ CEKcWpg621kJnk6fkyblcNCWz5HvX/NAm0xsyFXsVk2K -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:08 2026 by rpki-client