This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/aOEEzvkeKFsM224w6kKEjPV9sBM.roa File: aOEEzvkeKFsM224w6kKEjPV9sBM.roa (raw, json) Hash identifier: fWln4gV+IzmBIAjgeR0k0Qp4FmqwLWPS6AvPR6ad5L8= Subject key identifier: 68:E1:04:CE:F9:1E:28:5B:0C:DB:6E:30:EA:42:84:8C:F5:7D:B0:13 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381A74941F977940F4995682606C8A Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/aOEEzvkeKFsM224w6kKEjPV9sBM.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25591 IP address blocks: 5.101.208.0/22 maxlen: 22 5.101.212.0/22 maxlen: 22 91.243.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1a:74:94:1f:97:79:40:f4:99:56:82:60:6c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68e104cef91e285b0cdb6e30ea42848cf57db013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bd:da:7a:ac:ab:49:ff:46:b7:dc:31:3d:c2: 50:e2:ac:56:67:38:7c:b4:42:a1:63:a1:2b:75:82: 79:b4:2e:5d:c9:5c:24:d4:f3:22:26:c9:17:b1:75: e9:2c:42:37:ae:52:d8:6a:da:8e:f0:6e:40:a1:b3: 41:60:5f:92:ce:36:fe:57:94:1b:75:d3:c2:65:f4: 69:62:90:0b:e9:a6:db:2d:ad:63:0d:0b:1d:92:52: 73:fe:61:e4:c8:93:27:97:57:95:9c:65:72:0a:f7: 2e:ef:df:b2:75:a5:99:3d:06:29:e1:7f:3a:fd:b2: c8:8a:15:57:c1:57:ef:f8:7e:a9:c9:26:56:94:00: 49:4f:2e:3c:d8:3e:2f:48:4c:a8:d5:21:74:9f:3d: a1:99:04:9d:af:67:28:df:a9:7f:75:d8:a4:d6:69: 8a:4a:69:32:75:55:5c:16:0c:06:29:9b:21:92:d9: 8f:1e:df:ad:bf:1d:c5:2c:64:12:4d:53:a2:6c:a0: 99:9f:d1:b0:bb:57:81:00:12:ac:8a:bc:54:b7:ce: 4f:97:47:c1:d2:8a:2b:46:41:2f:ff:95:d4:6a:1f: ee:17:6f:d2:d7:47:cb:1f:f4:d0:e2:14:d4:ee:90: f6:e7:a0:d9:5d:65:e1:cb:6b:9e:42:99:39:5c:b4: 58:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E1:04:CE:F9:1E:28:5B:0C:DB:6E:30:EA:42:84:8C:F5:7D:B0:13 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/aOEEzvkeKFsM224w6kKEjPV9sBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.208.0/21 91.243.36.0/22 Signature Algorithm: sha256WithRSAEncryption a4:a6:f5:24:c1:dd:cb:cb:a9:9c:c8:51:c2:2b:e5:a4:7f:33: 87:f9:af:38:f9:5b:f1:56:ba:fd:3e:3a:d5:a3:5c:ba:e8:0a: 78:69:15:a1:a2:7c:07:83:0b:6f:cf:31:ca:bf:bf:e4:b8:9c: 5f:13:9f:7b:5b:8c:4e:0f:00:11:36:f9:be:88:ce:03:8b:b6: 0e:19:79:35:e1:e2:95:4e:7c:c5:e8:cc:97:94:ff:29:04:e8: c8:60:57:bd:dd:4b:60:87:9e:8f:cc:ee:c4:91:a1:0a:cc:b8: 4f:5c:ed:28:1e:c8:70:ff:2d:4d:6a:c3:d6:01:3f:d6:3f:6f: 73:83:f4:b5:17:7a:0f:ac:5e:3c:67:af:ad:39:b1:d3:ea:99: a2:3e:87:e6:15:94:8a:54:9d:81:0c:50:66:ff:7d:60:ad:35: 13:47:9e:5a:bd:1e:3a:85:b7:da:f5:ef:39:c1:37:e4:94:ae: ad:b4:66:70:18:b0:b6:ab:0b:21:06:af:98:c2:fe:68:df:f7: 05:4a:32:2c:61:8e:6f:45:0f:83:9f:91:ce:40:f1:88:5e:2c: 9f:1f:a8:20:ea:fa:c3:1f:19:cf:66:a2:d8:9c:0d:7c:a1:8b: 36:7e:9f:73:a3:06:24:e3:bc:ef:75:a8:1f:d4:5f:a9:5d:ea: b5:67:7f:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OBp0lB+XeUD0mVaCYGyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGUxMDRjZWY5MWUyODViMGNkYjZlMzBlYTQyODQ4Y2Y1N2RiMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb3aeqyrSf9Gt9wxPcJQ4qxWZzh8 tEKhY6ErdYJ5tC5dyVwk1PMiJskXsXXpLEI3rlLYatqO8G5AobNBYF+Szjb+V5Qb ddPCZfRpYpAL6abbLa1jDQsdklJz/mHkyJMnl1eVnGVyCvcu79+ydaWZPQYp4X86 /bLIihVXwVfv+H6pySZWlABJTy482D4vSEyo1SF0nz2hmQSdr2co36l/ddik1mmK SmkydVVcFgwGKZshktmPHt+tvx3FLGQSTVOibKCZn9Gwu1eBABKsirxUt85Pl0fB 0oorRkEv/5XUah/uF2/S10fLH/TQ4hTU7pD256DZXWXhy2ueQpk5XLRYJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGjhBM75HihbDNtuMOpChIz1fbATMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvYU9FRXp2a2VLRnNNMjI0dzZrS0VqUFY5c0JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBWXQAwQC W/MkMA0GCSqGSIb3DQEBCwUAA4IBAQCkpvUkwd3Ly6mcyFHCK+WkfzOH+a84+Vvx Vrr9PjrVo1y66Ap4aRWhonwHgwtvzzHKv7/kuJxfE597W4xODwARNvm+iM4Di7YO GXk14eKVTnzF6MyXlP8pBOjIYFe93Utgh56PzO7EkaEKzLhPXO0oHshw/y1NasPW AT/WP29zg/S1F3oPrF48Z6+tObHT6pmiPofmFZSKVJ2BDFBm/31grTUTR55avR46 hbfa9e85wTfklK6ttGZwGLC2qwshBq+Ywv5o3/cFSjIsYY5vRQ+Dn5HOQPGIXiyf H6gg6vrDHxnPZqLYnA18oYs2fp9zowYk47zvdagf1F+pXeq1Z39T -----END CERTIFICATE-----Generated at Tue Jan 20 09:22:23 2026 by rpki-client