This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/0OEHU7Z4Xep124nqLarwZ20qYvg.roa File: 0OEHU7Z4Xep124nqLarwZ20qYvg.roa (raw, json) Hash identifier: EinNI0ZI4eyeX1yQhgmTMLlxSGZ6l01xF7uPwFE7Lv8= Subject key identifier: D0:E1:07:53:B6:78:5D:EA:75:DB:89:EA:2D:AA:F0:67:6D:2A:62:F8 Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Certificate serial: 019B7BA3E72CCD154767358A50BE8EDAF539 Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/0OEHU7Z4Xep124nqLarwZ20qYvg.roa Signing time: Thu 01 Jan 2026 22:18:17 +0000 ROA not before: Thu 01 Jan 2026 22:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28753 IP address blocks: 109.70.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e7:2c:cd:15:47:67:35:8a:50:be:8e:da:f5:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f Validity Not Before: Jan 1 22:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0e10753b6785dea75db89ea2daaf0676d2a62f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8b:ba:4a:fb:f1:c9:55:23:4c:5e:1e:b9:35: a5:8c:2e:0f:3a:73:5d:da:25:b9:cc:4e:d0:cb:f2: b0:74:b5:b5:5b:54:b5:13:67:a1:a5:e8:fd:8e:32: d9:04:2b:4f:7d:19:6e:f2:cd:5f:ae:8f:8c:1f:c2: a1:cd:fc:d7:88:f0:8e:91:1a:c8:ed:b7:77:67:90: 26:15:5d:68:37:c5:2c:07:b7:d1:72:76:25:e3:61: e3:bd:da:5d:2e:bf:39:88:4d:92:fa:d0:aa:2a:75: 97:c4:75:a9:46:3e:19:ab:3a:09:e8:30:23:f2:b3: b7:37:49:73:d2:0f:d4:bf:58:d0:51:7d:10:75:b9: 6c:a3:12:3a:d6:f3:3c:c3:c1:9c:7e:35:b7:5e:de: 9c:35:6b:9c:4c:ef:f6:73:0a:1b:b8:88:4f:53:f6: 77:1f:da:6e:63:13:c2:f4:f6:d4:92:6e:75:90:85: 63:52:ae:61:5f:a1:89:89:38:f8:3b:2b:86:70:43: e8:3d:f3:21:11:69:4a:ea:f6:7c:45:19:d0:d8:f3: 0c:92:f9:90:68:87:52:cd:87:9a:a0:c9:77:bd:66: d0:2e:f3:2c:8b:a0:c1:e5:bd:0d:dd:9c:ee:64:a0: 41:17:78:a5:ca:97:20:3d:18:bc:ac:33:24:cd:1a: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E1:07:53:B6:78:5D:EA:75:DB:89:EA:2D:AA:F0:67:6D:2A:62:F8 X509v3 Authority Key Identifier: keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/0OEHU7Z4Xep124nqLarwZ20qYvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.74.0/24 Signature Algorithm: sha256WithRSAEncryption 50:a6:02:3d:df:76:04:72:b2:4f:b6:4b:49:f8:c1:c7:d7:f5: 1d:70:7e:52:50:92:a7:78:aa:67:3e:2c:13:56:a2:44:b1:0f: 7d:49:18:ef:6a:bf:d9:6f:cd:91:43:c1:65:e2:d6:35:44:58: d5:07:c4:42:6a:ba:5b:d1:08:ad:6e:f4:84:9f:ad:9b:4b:5b: 68:6b:92:be:02:71:74:3d:c5:b2:17:40:23:48:b0:65:7d:6b: 88:03:55:01:0c:6b:0c:6d:ff:c0:13:80:3a:08:a2:5c:c5:3e: 29:a7:6b:ab:79:cc:c7:4a:b2:ba:bd:71:5e:e8:4a:57:e4:4f: bc:cb:cd:13:77:e3:c1:7b:1e:1f:98:d3:4b:3c:4d:66:d0:58: 6b:c0:d3:30:f2:0e:1f:6f:09:bf:44:36:52:6c:ee:3e:67:71: b5:75:db:54:f1:93:62:7d:30:8c:fd:91:62:51:18:95:33:12: c8:ef:49:81:16:13:57:d2:cc:9d:11:c7:91:ae:b2:0d:91:73: 57:83:46:da:45:11:28:2f:ca:40:ee:9f:55:b2:30:66:36:40: 23:96:e3:0e:b9:24:a6:40:94:0e:07:4d:4c:82:b9:b1:07:a4: bc:39:bb:fe:1d:ae:c2:9d:c1:91:28:0e:ba:1b:50:5a:b8:f7: da:cf:b4:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+cszRVHZzWKUL6O2vU5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj Zjc2M2YwHhcNMjYwMTAxMjIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGUxMDc1M2I2Nzg1ZGVhNzVkYjg5ZWEyZGFhZjA2NzZkMmE2MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYu6SvvxyVUjTF4euTWljC4POnNd 2iW5zE7Qy/KwdLW1W1S1E2ehpej9jjLZBCtPfRlu8s1fro+MH8KhzfzXiPCOkRrI 7bd3Z5AmFV1oN8UsB7fRcnYl42HjvdpdLr85iE2S+tCqKnWXxHWpRj4ZqzoJ6DAj 8rO3N0lz0g/Uv1jQUX0QdblsoxI61vM8w8GcfjW3Xt6cNWucTO/2cwobuIhPU/Z3 H9puYxPC9PbUkm51kIVjUq5hX6GJiTj4OyuGcEPoPfMhEWlK6vZ8RRnQ2PMMkvmQ aIdSzYeaoMl3vWbQLvMsi6DB5b0N3ZzuZKBBF3ilypcgPRi8rDMkzRo5UQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNDhB1O2eF3qdduJ6i2q8GdtKmL4MB8GA1UdIwQY MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt YTczZjBiNzQxOGFiLzEvME9FSFU3WjRYZXAxMjRucUxhcndaMjBxWXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUZKMA0G CSqGSIb3DQEBCwUAA4IBAQBQpgI933YEcrJPtktJ+MHH1/UdcH5SUJKneKpnPiwT VqJEsQ99SRjvar/Zb82RQ8Fl4tY1RFjVB8RCarpb0QitbvSEn62bS1toa5K+AnF0 PcWyF0AjSLBlfWuIA1UBDGsMbf/AE4A6CKJcxT4pp2ureczHSrK6vXFe6EpX5E+8 y80Td+PBex4fmNNLPE1m0FhrwNMw8g4fbwm/RDZSbO4+Z3G1ddtU8ZNifTCM/ZFi URiVMxLI70mBFhNX0sydEceRrrINkXNXg0baRREoL8pA7p9VsjBmNkAjluMOuSSm QJQOB01MgrmxB6S8Obv+Ha7CncGRKA66G1BauPfaz7RG -----END CERTIFICATE-----Generated at Wed Jan 7 17:16:51 2026 by rpki-client