This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/OBbXBCvcqIaXdkpP01srqqNumYQ.roa File: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (raw, json) Hash identifier: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo= Subject key identifier: 38:16:D7:04:2B:DC:A8:86:97:76:4A:4F:D3:5B:2B:AA:A3:6E:99:84 Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Certificate serial: 019B7EA73A3B5D1ECF1201E0325E7F03DE94 Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/OBbXBCvcqIaXdkpP01srqqNumYQ.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.138.144.0/22 maxlen: 24 2a07:ec0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3a:3b:5d:1e:cf:12:01:e0:32:5e:7f:03:de:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3816d7042bdca88697764a4fd35b2baaa36e9984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:74:86:ba:2a:07:8f:88:4e:78:fc:ad:33: 5d:c0:e8:42:6c:bc:d8:e4:98:52:39:de:b9:ad:aa: e6:4e:7c:27:ff:1e:ce:be:2f:20:6a:7a:15:1c:9e: 3b:63:e8:88:c2:41:09:54:b5:f2:64:cd:62:e0:6b: a7:b4:91:19:86:f4:c5:43:de:bc:a4:4f:f4:3f:4c: 6f:d1:68:2a:a5:f6:fe:80:a0:15:1b:d2:5a:33:9b: a0:67:f9:8b:93:10:11:29:94:eb:11:ed:1c:af:46: 42:01:73:1f:6b:be:19:ed:74:e4:2f:94:0e:95:2b: 2b:2a:bd:57:20:83:3b:bd:92:6d:0a:f4:1a:0d:82: ad:42:d2:ff:b3:d3:d4:ab:1d:db:11:bc:63:bc:a0: bf:df:fd:a9:07:0d:8a:ba:5a:f1:94:6d:5e:95:68: fb:ca:40:9c:f5:90:fc:74:59:70:50:2d:41:57:26: 4c:f2:d9:d3:d7:df:91:55:1e:c3:97:84:6e:67:81: 60:11:c0:1c:c2:de:4d:70:78:82:1d:dc:e8:f8:88: 89:91:35:8d:7e:97:5d:43:1c:1e:cd:33:7f:6e:eb: 04:ff:1a:5b:bd:25:4d:de:75:2c:f4:53:8c:68:78: 4b:3d:7b:61:d9:8f:5f:76:26:75:f3:d3:5d:48:e3: 2a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:16:D7:04:2B:DC:A8:86:97:76:4A:4F:D3:5B:2B:AA:A3:6E:99:84 X509v3 Authority Key Identifier: keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/OBbXBCvcqIaXdkpP01srqqNumYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.144.0/22 IPv6: 2a07:ec0::/29 Signature Algorithm: sha256WithRSAEncryption 52:14:37:ed:01:cc:e9:65:fe:4a:10:ae:99:42:eb:30:9f:50: 25:11:a2:69:34:f7:73:0c:5e:03:5b:ef:a9:f1:aa:d0:11:c6: 7a:6b:c4:d4:d5:30:37:75:f8:a7:1b:c2:53:80:7f:66:4d:b8: 1a:de:bd:8d:d7:43:de:c9:67:ef:e5:1a:3d:97:d9:51:3d:b9: 61:61:b2:13:2f:dd:a5:7e:49:64:a0:45:42:52:b2:f9:66:e2: 9d:f9:54:54:04:6b:cf:72:22:ca:b0:a7:49:73:bd:a9:5b:b7: 82:c0:f9:7f:2c:18:83:66:86:54:97:51:10:38:f8:e0:50:1b: 74:70:55:6a:85:a7:52:61:b4:dc:94:47:80:d9:db:85:f0:e5: a4:2c:8f:ed:6c:80:0d:4f:f0:9b:b9:95:07:23:51:73:70:35: f0:65:7f:27:68:8a:3b:f6:23:20:ac:d9:01:69:02:2e:13:48: 5f:2e:7e:d3:b2:67:0a:11:a2:2b:55:35:c5:af:1d:60:81:9f: 45:97:08:b1:06:27:35:13:c0:74:81:22:06:4d:ca:08:ca:ff: 8c:7a:8d:57:e9:1e:c2:51:e2:e1:0b:c0:43:33:96:b4:b4:ff: 1f:69:73:7a:6f:62:3e:86:2e:f7:b4:0d:d4:f2:8f:6d:cf:6a: 9c:a2:e9:50 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzo7XR7PEgHgMl5/A96UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh OTAzMWUwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODE2ZDcwNDJiZGNhODg2OTc3NjRhNGZkMzViMmJhYWEzNmU5OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiht0hroqB4+ITnj8rTNdwOhCbLzY 5JhSOd65rarmTnwn/x7Ovi8ganoVHJ47Y+iIwkEJVLXyZM1i4GuntJEZhvTFQ968 pE/0P0xv0Wgqpfb+gKAVG9JaM5ugZ/mLkxARKZTrEe0cr0ZCAXMfa74Z7XTkL5QO lSsrKr1XIIM7vZJtCvQaDYKtQtL/s9PUqx3bEbxjvKC/3/2pBw2KulrxlG1elWj7 ykCc9ZD8dFlwUC1BVyZM8tnT19+RVR7Dl4RuZ4FgEcAcwt5NcHiCHdzo+IiJkTWN fpddQxwezTN/busE/xpbvSVN3nUs9FOMaHhLPXth2Y9fdiZ189NdSOMqVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFDgW1wQr3KiGl3ZKT9NbK6qjbpmEMB8GA1UdIwQY MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt Mzg3NTM2ZDAzYTcxLzEvT0JiWEJDdmNxSWFYZGtwUDAxc3JxcU51bVlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYqQMA0E AgACMAcDBQMqBw7AMA0GCSqGSIb3DQEBCwUAA4IBAQBSFDftAczpZf5KEK6ZQusw n1AlEaJpNPdzDF4DW++p8arQEcZ6a8TU1TA3dfinG8JTgH9mTbga3r2N10PeyWfv 5Ro9l9lRPblhYbITL92lfklkoEVCUrL5ZuKd+VRUBGvPciLKsKdJc72pW7eCwPl/ LBiDZoZUl1EQOPjgUBt0cFVqhadSYbTclEeA2duF8OWkLI/tbIANT/CbuZUHI1Fz cDXwZX8naIo79iMgrNkBaQIuE0hfLn7TsmcKEaIrVTXFrx1ggZ9FlwixBic1E8B0 gSIGTcoIyv+Meo1X6R7CUeLhC8BDM5a0tP8faXN6b2I+hi73tA3U8o9tz2qcoulQ -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:52 2026 by rpki-client