This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/ezqDXbFjE3E-cCtOYHb3xwk-fGA.roa File: ezqDXbFjE3E-cCtOYHb3xwk-fGA.roa (raw, json) Hash identifier: wFU8xe1yp84Vz6mjRcrO0Cox0MbWJSGxZY2A1rKwBNE= Subject key identifier: 7B:3A:83:5D:B1:63:13:71:3E:70:2B:4E:60:76:F7:C7:09:3E:7C:60 Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Certificate serial: 019B7D5B53B215640E7F3486BF08EEEE118A Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/ezqDXbFjE3E-cCtOYHb3xwk-fGA.roa Signing time: Fri 02 Jan 2026 06:18:15 +0000 ROA not before: Fri 02 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48347 IP address blocks: 176.58.60.0/24 maxlen: 24 176.58.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:53:b2:15:64:0e:7f:34:86:bf:08:ee:ee:11:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e Validity Not Before: Jan 2 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b3a835db16313713e702b4e6076f7c7093e7c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:14:8d:c4:16:a9:7f:03:a5:ac:78:e5:56: 40:95:42:f1:19:18:48:4c:bd:95:c0:3b:84:b0:10: b0:a1:80:35:22:86:83:ad:3e:d6:a2:d9:c5:f8:51: 08:6b:72:6a:af:d4:5b:10:e7:b2:e1:b8:52:a1:41: 49:66:27:40:28:b6:a8:cd:cb:ab:e1:b0:6e:65:65: ab:f5:f1:d7:2f:44:61:23:d9:a9:0c:19:0c:23:d4: 40:48:a7:be:d3:80:a0:d4:71:17:27:a7:64:8c:32: cc:58:66:70:a0:b3:48:98:10:29:dc:77:8b:04:a8: b2:a8:a5:36:83:96:53:91:30:0b:bf:cd:2d:b7:d1: c4:15:eb:a4:60:7f:ae:8a:05:f7:24:83:bc:b6:79: ee:5a:70:e7:e6:e5:cf:99:3a:1a:39:ac:99:58:30: 49:9b:16:a5:7d:96:05:f4:70:7c:4f:02:fb:68:72: 15:5f:63:ea:36:83:ef:65:5d:5f:fc:6b:15:82:46: d7:50:db:99:43:c1:7b:0c:06:df:63:86:a4:ce:1f: b3:5c:4e:da:4a:22:c5:9e:9d:56:8d:9e:38:75:61: bc:36:a3:62:d8:e5:ea:d2:ef:9e:35:2b:54:b7:5b: 58:c5:b9:75:4f:91:32:20:9f:24:d6:5a:3c:12:5a: 1d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3A:83:5D:B1:63:13:71:3E:70:2B:4E:60:76:F7:C7:09:3E:7C:60 X509v3 Authority Key Identifier: keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/ezqDXbFjE3E-cCtOYHb3xwk-fGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.58.60.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:de:1f:9c:c1:20:00:73:e9:57:92:4e:9b:ab:1a:1e:b1:22: 67:16:1c:91:89:74:6e:fd:4f:5f:8e:a7:37:c7:2b:b7:fe:87: 26:31:3f:be:aa:bb:54:f4:39:00:b3:28:83:6e:90:80:01:d6: 22:d4:57:57:34:f5:a6:1f:39:aa:96:ee:3c:fe:48:c7:46:d8: a1:6c:9d:44:03:b5:d9:c6:ff:31:c7:5a:5d:02:6c:fc:7b:85: 8c:98:01:1a:eb:16:03:ff:a7:e2:15:0e:86:19:20:7c:4d:09: b3:b9:83:82:eb:de:ba:6e:73:e0:2d:47:3d:0a:7c:af:59:98: bc:ce:45:de:f9:06:fd:6e:3d:14:8c:fa:f6:4d:28:00:c2:f3: eb:77:c0:a3:e5:24:9d:8a:6a:3c:1c:76:a7:20:d9:96:95:10: a3:9a:0e:79:9e:80:96:82:9f:ff:68:d1:f9:aa:32:d9:d9:8e: f7:44:0d:51:bf:c6:53:34:5e:f2:91:d4:c8:92:9e:6b:49:3d: a7:22:05:1f:c0:61:2b:10:28:64:0c:df:62:55:9c:c0:db:56: dd:0e:ef:3a:ce:2d:4b:ab:0d:ce:5b:78:04:80:b4:b9:a5:cd: 28:19:00:a5:3c:93:c5:dd:57:fa:2a:95:21:cb:5a:11:61:92: 36:8d:79:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W1OyFWQOfzSGvwju7hGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNjc0ZDU4ODRhNTBhODRlMDdkYmRmNjc5OGRkY2JiOWNj MjAzMmUwHhcNMjYwMTAyMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjNhODM1ZGIxNjMxMzcxM2U3MDJiNGU2MDc2ZjdjNzA5M2U3YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPwUjcQWqX8Dpax45VZAlULxGRhI TL2VwDuEsBCwoYA1IoaDrT7WotnF+FEIa3Jqr9RbEOey4bhSoUFJZidAKLaozcur 4bBuZWWr9fHXL0RhI9mpDBkMI9RASKe+04Cg1HEXJ6dkjDLMWGZwoLNImBAp3HeL BKiyqKU2g5ZTkTALv80tt9HEFeukYH+uigX3JIO8tnnuWnDn5uXPmToaOayZWDBJ mxalfZYF9HB8TwL7aHIVX2PqNoPvZV1f/GsVgkbXUNuZQ8F7DAbfY4akzh+zXE7a SiLFnp1WjZ44dWG8NqNi2OXq0u+eNStUt1tYxbl1T5EyIJ8k1lo8ElodpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHs6g12xYxNxPnArTmB298cJPnxgMB8GA1UdIwQY MBaAFKNnTViEpQqE4H299nmN3LucwgMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTct OWUyMjBmMDRhOTAxLzEvZXpxRFhiRmpFM0UtY0N0T1lIYjN4d2stZkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84MDY1MzItNTRlOS00YjQ5LWI4YTctOWUyMjBmMDRhOTAx LzEvbzJkTldJU2xDb1RnZmIzMmVZM2N1NXpDQXk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsDo8MA0G CSqGSIb3DQEBCwUAA4IBAQAs3h+cwSAAc+lXkk6bqxoesSJnFhyRiXRu/U9fjqc3 xyu3/ocmMT++qrtU9DkAsyiDbpCAAdYi1FdXNPWmHzmqlu48/kjHRtihbJ1EA7XZ xv8xx1pdAmz8e4WMmAEa6xYD/6fiFQ6GGSB8TQmzuYOC6966bnPgLUc9CnyvWZi8 zkXe+Qb9bj0UjPr2TSgAwvPrd8Cj5SSdimo8HHanINmWlRCjmg55noCWgp//aNH5 qjLZ2Y73RA1Rv8ZTNF7ykdTIkp5rST2nIgUfwGErEChkDN9iVZzA21bdDu86zi1L qw3OW3gEgLS5pc0oGQClPJPF3Vf6KpUhy1oRYZI2jXnv -----END CERTIFICATE-----Generated at Sun Jan 25 22:14:51 2026 by rpki-client