This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/lL0LeMczcwfvyoEQjyk2MhaCQrA.roa File: lL0LeMczcwfvyoEQjyk2MhaCQrA.roa (raw, json) Hash identifier: 3YjWMj9ua1ppltI1NThOC0PjdeOgzDujfR8Km66ne14= Subject key identifier: 94:BD:0B:78:C7:33:73:07:EF:CA:81:10:8F:29:36:32:16:82:42:B0 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C801B11FEFF5EA9A76BE223B7C750EF Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/lL0LeMczcwfvyoEQjyk2MhaCQrA.roa Signing time: Fri 02 Jan 2026 02:18:48 +0000 ROA not before: Fri 02 Jan 2026 02:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38926 IP address blocks: 212.234.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1b:11:fe:ff:5e:a9:a7:6b:e2:23:b7:c7:50:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94bd0b78c7337307efca81108f293632168242b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:7a:05:18:8b:eb:4f:84:4a:ee:94:6b:c4: d5:01:a3:cb:fe:89:66:47:02:95:92:a6:3e:f6:cc: 01:6f:6c:8d:39:ae:8f:b2:bd:23:30:d4:7a:60:ab: 97:3a:15:b2:c3:42:ae:36:8d:25:60:8e:d7:07:3f: 47:c0:fc:1e:ff:08:04:17:5d:e0:0c:25:5d:2f:f3: 73:fa:a4:2e:92:d3:c3:50:2b:54:97:a1:e1:f9:6f: 16:4d:33:df:f2:0b:3d:f2:74:76:6a:f6:65:d6:e8: f2:1e:0b:c7:50:4b:27:94:b4:51:a7:50:2a:60:b3: 4b:55:45:48:af:19:6f:e0:c0:cd:cf:24:58:d2:78: db:15:7a:14:38:ee:c0:0d:1f:20:35:cc:fd:6d:ea: a5:df:e1:f2:79:b2:4e:d2:91:11:cd:16:39:fd:a8: 4d:51:54:08:8a:a6:a1:46:81:f3:44:62:8c:46:08: ba:31:bb:71:9b:ac:0a:8d:24:b6:b9:af:4a:29:2e: c1:53:66:28:94:d9:fa:94:54:1f:51:a6:6b:b1:29: ce:33:3c:9b:08:82:a0:f2:66:56:48:43:1e:d0:04: e4:18:8f:63:e1:6e:36:29:91:7b:f2:0d:f7:f8:ba: b3:23:c6:a3:35:8d:20:74:0f:f4:4d:05:b1:e6:b8: 84:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:0B:78:C7:33:73:07:EF:CA:81:10:8F:29:36:32:16:82:42:B0 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/lL0LeMczcwfvyoEQjyk2MhaCQrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.234.39.0/24 Signature Algorithm: sha256WithRSAEncryption 89:6f:c3:65:5d:55:d1:3b:99:80:20:77:87:dc:3d:bb:d7:b6: 3d:50:63:90:45:5b:d2:0b:ee:11:25:bc:47:b1:7b:87:5f:bf: 7d:75:93:0e:21:1e:23:84:5d:81:6e:a6:6b:02:35:38:39:40: fa:4a:d0:53:03:83:6a:df:27:b4:56:a1:57:df:fb:46:2a:40: ea:22:ef:04:51:5e:d0:60:e9:1c:f5:66:2d:49:e9:04:f9:01: 27:cb:95:39:06:6f:c8:6d:19:fc:31:88:1d:64:31:86:75:f1: 19:7b:3b:ea:60:61:b0:84:3d:4d:3a:5c:31:02:1e:cb:b1:76: 3d:27:3c:8e:8b:70:eb:6a:dc:49:d1:a7:7a:a0:77:a0:e2:50: 5d:4c:83:28:e7:7d:19:2a:84:72:5f:4c:61:9a:8e:42:ff:3d: 7b:ab:01:de:5d:68:d2:2c:2f:ce:a3:be:4f:a9:f7:f4:89:37: 79:59:24:25:ab:c7:9b:e4:5f:1f:be:2c:2b:e0:bf:c7:4e:ae: 51:fa:74:e5:54:0e:e1:11:51:db:5f:1f:87:4a:1b:2b:e5:5b: 99:d0:1f:f1:99:4e:ae:c2:aa:ac:d2:9c:74:d1:bf:a5:86:89: 00:f7:4e:39:c7:35:7c:55:ba:df:8f:47:3a:48:1f:1b:dd:36: 86:22:8e:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gBsR/v9eqadr4iO3x1DvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGJkMGI3OGM3MzM3MzA3ZWZjYTgxMTA4ZjI5MzYzMjE2ODI0MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01V6BRiL60+ESu6Ua8TVAaPL/olm RwKVkqY+9swBb2yNOa6Psr0jMNR6YKuXOhWyw0KuNo0lYI7XBz9HwPwe/wgEF13g DCVdL/Nz+qQuktPDUCtUl6Hh+W8WTTPf8gs98nR2avZl1ujyHgvHUEsnlLRRp1Aq YLNLVUVIrxlv4MDNzyRY0njbFXoUOO7ADR8gNcz9beql3+HyebJO0pERzRY5/ahN UVQIiqahRoHzRGKMRgi6Mbtxm6wKjSS2ua9KKS7BU2YolNn6lFQfUaZrsSnOMzyb CIKg8mZWSEMe0ATkGI9j4W42KZF78g33+LqzI8ajNY0gdA/0TQWx5riE8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJS9C3jHM3MH78qBEI8pNjIWgkKwMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvbEwwTGVNY3pjd2Z2eW9FUWp5azJNaGFDUXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1OonMA0G CSqGSIb3DQEBCwUAA4IBAQCJb8NlXVXRO5mAIHeH3D2717Y9UGOQRVvSC+4RJbxH sXuHX799dZMOIR4jhF2BbqZrAjU4OUD6StBTA4Nq3ye0VqFX3/tGKkDqIu8EUV7Q YOkc9WYtSekE+QEny5U5Bm/IbRn8MYgdZDGGdfEZezvqYGGwhD1NOlwxAh7LsXY9 JzyOi3DratxJ0ad6oHeg4lBdTIMo530ZKoRyX0xhmo5C/z17qwHeXWjSLC/Oo75P qff0iTd5WSQlq8eb5F8fviwr4L/HTq5R+nTlVA7hEVHbXx+HShsr5VuZ0B/xmU6u wqqs0px00b+lhokA9045xzV8Vbrfj0c6SB8b3TaGIo6n -----END CERTIFICATE-----Generated at Wed Jan 21 21:02:15 2026 by rpki-client