This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jebhHEpLK2YY5TWEJ3Rh0t4Mtoc.roa File: jebhHEpLK2YY5TWEJ3Rh0t4Mtoc.roa (raw, json) Hash identifier: YDuZ6BXjyWo4rOAsAWeJFQATcsEpKqUbgNVaUVtnBaw= Subject key identifier: 8D:E6:E1:1C:4A:4B:2B:66:18:E5:35:84:27:74:61:D2:DE:0C:B6:87 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C80185627D4C8AB05180EB1C1044C18 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jebhHEpLK2YY5TWEJ3Rh0t4Mtoc.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31660 IP address blocks: 81.255.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:18:56:27:d4:c8:ab:05:18:0e:b1:c1:04:4c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8de6e11c4a4b2b6618e53584277461d2de0cb687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:f3:7f:0c:fd:ca:e9:1f:a2:bd:60:4d:9d: 45:f2:95:26:29:3a:c5:0c:10:4d:b8:37:ce:fb:64: 37:fe:68:06:53:28:4f:bb:49:a4:d4:83:67:09:33: 24:4a:6b:f6:1b:98:59:40:e1:a9:a3:01:6f:5f:93: 6a:0b:bb:be:aa:a4:23:0c:6d:a3:da:25:29:7b:6f: c4:8c:67:72:b1:a6:05:14:c7:f6:74:14:5a:d0:96: e2:00:49:4d:2f:49:1e:89:a8:ef:fb:93:d4:78:23: 2c:cb:ae:21:ca:56:b2:08:c8:90:02:3c:99:af:f9: 22:68:a8:8b:77:fa:5c:5c:c3:c0:78:8b:af:e7:6d: 7b:23:49:f0:20:6e:87:d4:95:0d:8c:f8:b2:da:0d: fe:34:60:9e:b8:f5:4e:e9:10:c7:4e:28:cc:07:17: 54:c0:bf:4c:14:97:99:ee:80:ae:81:73:56:ec:e6: f5:4d:78:66:91:ce:4f:08:ea:f4:89:64:61:e9:67: 1e:d2:9f:6f:2c:0a:2a:2d:ca:41:9b:99:2c:4e:76: 46:36:4e:bb:b9:86:4a:f6:4c:72:7c:41:2b:72:4f: 31:4c:f0:df:0c:35:11:ae:82:90:a3:a0:05:a0:43: cc:d2:ce:a2:68:48:99:b0:6e:a8:4f:cf:55:f7:ef: 6e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E6:E1:1C:4A:4B:2B:66:18:E5:35:84:27:74:61:D2:DE:0C:B6:87 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/jebhHEpLK2YY5TWEJ3Rh0t4Mtoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.255.156.0/24 Signature Algorithm: sha256WithRSAEncryption 09:5c:41:9a:74:db:99:f0:39:b1:b0:93:ab:b3:3b:20:7c:fb: 9e:13:ea:59:87:4a:96:fe:26:90:bf:1f:4d:21:61:ae:67:d3: 03:07:6c:d1:0c:5a:24:69:3d:6e:06:3b:56:c9:3b:53:1c:90: 60:21:c6:51:8f:f2:a7:e8:d3:7d:dc:b6:26:55:bb:ac:cd:d0: 3e:7b:96:5e:a2:8a:a1:cf:84:ff:e9:97:9b:f6:97:b5:3f:68: 86:9d:10:2f:a5:42:aa:3b:d2:d4:d0:0a:3d:87:a0:7e:95:d7: f5:39:b9:a0:dc:8c:49:3c:93:8b:ef:fe:ff:c7:f7:db:88:e5: 68:04:89:9c:b1:50:ac:56:ae:62:d6:c8:fa:f0:0a:5c:a6:aa: 83:b2:50:7c:a1:3b:88:1d:a7:02:2d:8f:d1:4e:03:6e:14:64: a7:b5:0e:c3:7b:fc:15:ae:83:61:17:ef:7a:c8:46:9b:86:89: 97:38:40:c3:ad:5d:0d:69:41:f0:c8:1f:14:02:6b:22:f0:ed: 7c:88:a7:dd:fe:c1:ea:06:33:92:33:4a:2c:99:fe:35:7a:ce: fb:b5:91:0e:5e:61:d2:cc:c4:07:99:bf:9b:7c:65:b0:e8:d9: e5:93:1e:b5:b7:9b:c2:4c:55:dd:8d:e5:35:e8:cf:03:53:36: 00:03:e3:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBhWJ9TIqwUYDrHBBEwYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGU2ZTExYzRhNGIyYjY2MThlNTM1ODQyNzc0NjFkMmRlMGNiNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKPzfwz9yukfor1gTZ1F8pUmKTrF DBBNuDfO+2Q3/mgGUyhPu0mk1INnCTMkSmv2G5hZQOGpowFvX5NqC7u+qqQjDG2j 2iUpe2/EjGdysaYFFMf2dBRa0JbiAElNL0keiajv+5PUeCMsy64hylayCMiQAjyZ r/kiaKiLd/pcXMPAeIuv5217I0nwIG6H1JUNjPiy2g3+NGCeuPVO6RDHTijMBxdU wL9MFJeZ7oCugXNW7Ob1TXhmkc5PCOr0iWRh6Wce0p9vLAoqLcpBm5ksTnZGNk67 uYZK9kxyfEErck8xTPDfDDURroKQo6AFoEPM0s6iaEiZsG6oT89V9+9u7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI3m4RxKSytmGOU1hCd0YdLeDLaHMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvamViaEhFcExLMllZNVRXRUozUmgwdDRNdG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUf+cMA0G CSqGSIb3DQEBCwUAA4IBAQAJXEGadNuZ8DmxsJOrszsgfPueE+pZh0qW/iaQvx9N IWGuZ9MDB2zRDFokaT1uBjtWyTtTHJBgIcZRj/Kn6NN93LYmVbuszdA+e5Zeooqh z4T/6Zeb9pe1P2iGnRAvpUKqO9LU0Ao9h6B+ldf1Obmg3IxJPJOL7/7/x/fbiOVo BImcsVCsVq5i1sj68ApcpqqDslB8oTuIHacCLY/RTgNuFGSntQ7De/wVroNhF+96 yEabhomXOEDDrV0NaUHwyB8UAmsi8O18iKfd/sHqBjOSM0osmf41es77tZEOXmHS zMQHmb+bfGWw6Nnlkx61t5vCTFXdjeU16M8DUzYAA+Pr -----END CERTIFICATE-----Generated at Thu Jan 22 23:34:17 2026 by rpki-client