This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oTOO8k7hCergPedTg_o68-eQNoI.roa File: oTOO8k7hCergPedTg_o68-eQNoI.roa (raw, json) Hash identifier: eI2IpCxPxfmo1DJYURtG5jdM+CZj/5HbS0nKMTSF9Gc= Subject key identifier: A1:33:8E:F2:4E:E1:09:EA:E0:3D:E7:53:83:FA:3A:F3:E7:90:36:82 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BFDE65A40148DB4A8A93B775FA30A3B57 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oTOO8k7hCergPedTg_o68-eQNoI.roa Signing time: Tue 27 Jan 2026 05:21:30 +0000 ROA not before: Tue 27 Jan 2026 05:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 14.102.227.0/24 maxlen: 24 43.242.139.0/24 maxlen: 24 77.111.108.0/24 maxlen: 24 94.229.218.0/24 maxlen: 24 103.102.134.0/24 maxlen: 24 124.158.114.0/24 maxlen: 24 124.158.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fd:e6:5a:40:14:8d:b4:a8:a9:3b:77:5f:a3:0a:3b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 27 05:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1338ef24ee109eae03de75383fa3af3e7903682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:88:8d:a9:aa:d4:7f:6e:b0:55:b3:3a:3b:8c: 1e:dd:a0:f4:21:27:99:7a:ef:58:a1:bb:e0:72:8c: 70:c1:75:3a:42:7d:8d:17:5b:23:52:d3:08:c8:71: 27:5a:ec:bf:fd:60:ea:48:b6:4f:f1:87:51:8c:4b: 8d:25:da:9e:4d:bb:2f:8d:ce:76:f0:a2:7c:fa:ac: 39:7a:ab:9b:45:1e:25:85:7b:26:e3:07:6f:ee:aa: f3:d6:ee:c0:09:33:07:07:57:8f:4a:eb:3d:5e:e1: c9:4d:55:d8:39:2e:73:b8:a6:9c:c8:43:2c:40:2d: e8:aa:d4:57:79:3d:57:fa:74:f5:86:45:7e:ae:cc: 83:84:2c:fb:c3:f1:48:96:0e:d3:0f:08:d3:af:c3: 10:fa:5f:2e:df:02:81:2e:cf:3f:0a:77:9e:32:74: 11:0a:ca:34:9c:86:50:48:4e:f5:fe:b0:2b:16:af: d1:5a:d5:95:fb:c4:fb:f8:3a:ed:c4:22:78:d3:ec: 36:ea:77:1b:07:ca:df:23:25:f3:95:d1:b1:05:e0: f3:26:5a:a2:c3:c2:0e:a3:93:0f:3c:99:da:97:6e: 76:89:94:0d:77:a7:dc:0e:0f:e8:f5:21:cb:82:06: db:e8:d2:8d:94:fd:f5:f5:40:2d:7a:b3:50:68:8e: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:8E:F2:4E:E1:09:EA:E0:3D:E7:53:83:FA:3A:F3:E7:90:36:82 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oTOO8k7hCergPedTg_o68-eQNoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.227.0/24 43.242.139.0/24 77.111.108.0/24 94.229.218.0/24 103.102.134.0/24 124.158.114.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:11:63:30:43:eb:11:06:4f:f0:d0:01:6e:1e:a6:26:44:c3: df:cd:bd:3d:64:0e:53:1f:22:4e:ea:92:f8:53:8b:2f:19:4b: 25:d5:f2:25:e9:6e:3e:5e:3e:2f:e3:e5:54:d2:77:45:84:15: df:87:31:24:39:26:e4:e1:11:47:c4:48:e4:60:05:39:f9:c3: 84:d0:f1:e4:51:b1:be:96:a4:2b:e9:95:57:6e:36:26:a2:fc: 13:13:3e:aa:5d:e3:ef:05:07:e3:2b:f8:52:aa:dc:3f:c3:df: 88:63:fa:a8:6a:08:b1:43:26:e0:2a:3c:c2:ce:43:d4:00:0d: f3:66:28:70:1d:66:0b:67:29:5d:15:2e:f1:0c:17:5c:e7:6b: 83:75:13:a4:01:e0:8c:f6:9c:f8:cb:a3:20:09:34:b7:c2:86: 70:ed:3f:a5:18:62:a1:f7:c8:6b:c4:53:a1:cb:69:52:0c:fb: 75:b9:2b:89:4a:1d:54:82:b4:87:73:6d:b8:b9:74:71:a8:d3: d7:96:35:7d:32:e3:1d:92:c6:a0:cb:5d:79:cf:94:49:b4:be: ab:69:f3:ae:72:ff:54:93:99:50:69:03:b7:d7:22:b1:18:34: 9e:5a:9c:73:e7:fa:26:6a:22:9c:67:50:d7:d3:98:97:3f:21: 9b:b4:9d:48 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZv95lpAFI20qKk7d1+jCjtXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTI3MDUyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTMzOGVmMjRlZTEwOWVhZTAzZGU3NTM4M2ZhM2FmM2U3OTAzNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4iNqarUf26wVbM6O4we3aD0ISeZ eu9YobvgcoxwwXU6Qn2NF1sjUtMIyHEnWuy//WDqSLZP8YdRjEuNJdqeTbsvjc52 8KJ8+qw5equbRR4lhXsm4wdv7qrz1u7ACTMHB1ePSus9XuHJTVXYOS5zuKacyEMs QC3oqtRXeT1X+nT1hkV+rsyDhCz7w/FIlg7TDwjTr8MQ+l8u3wKBLs8/CneeMnQR Cso0nIZQSE71/rArFq/RWtWV+8T7+DrtxCJ40+w26ncbB8rfIyXzldGxBeDzJlqi w8IOo5MPPJnal252iZQNd6fcDg/o9SHLggbb6NKNlP319UAterNQaI5SJQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKEzjvJO4Qnq4D3nU4P6OvPnkDaCMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvb1RPTzhrN2hDZXJnUGVkVGdfbzY4LWVRTm9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQADmbjAwQA K/KLAwQATW9sAwQAXuXaAwQAZ2aGAwQBfJ5yMA0GCSqGSIb3DQEBCwUAA4IBAQBP EWMwQ+sRBk/w0AFuHqYmRMPfzb09ZA5THyJO6pL4U4svGUsl1fIl6W4+Xj4v4+VU 0ndFhBXfhzEkOSbk4RFHxEjkYAU5+cOE0PHkUbG+lqQr6ZVXbjYmovwTEz6qXePv BQfjK/hSqtw/w9+IY/qoagixQybgKjzCzkPUAA3zZihwHWYLZyldFS7xDBdc52uD dROkAeCM9pz4y6MgCTS3woZw7T+lGGKh98hrxFOhy2lSDPt1uSuJSh1UgrSHc224 uXRxqNPXljV9MuMdksagy115z5RJtL6rafOucv9Uk5lQaQO31yKxGDSeWpxz5/om aiKcZ1DX05iXPyGbtJ1I -----END CERTIFICATE-----Generated at Sat Jan 31 11:50:03 2026 by rpki-client