This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa File: OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa (raw, json) Hash identifier: kmtpULrjAoIbC5DOei+y+P4ZqjnB8VEUtASXOJYqazE= Subject key identifier: 3B:20:49:ED:E5:2E:29:B0:46:34:28:EB:ED:18:E2:FD:E8:AD:4E:FD Certificate issuer: /CN=95cae2c37c86630e61afdf8903fe174de8b945be Certificate serial: 019B7B3564336C5B6DB651FE0229E6177CA8 Authority key identifier: 95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa Signing time: Thu 01 Jan 2026 20:17:35 +0000 ROA not before: Thu 01 Jan 2026 20:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 37.46.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.mft rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:64:33:6c:5b:6d:b6:51:fe:02:29:e6:17:7c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95cae2c37c86630e61afdf8903fe174de8b945be Validity Not Before: Jan 1 20:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3b2049ede52e29b0463428ebed18e2fde8ad4efd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ba:3e:da:1d:a8:42:5b:b3:ff:dc:75:bb:f5: 7d:ba:89:be:69:69:5b:8d:93:11:20:c8:aa:39:18: b7:dd:e5:07:9c:aa:a1:3d:bc:59:00:92:dc:2d:12: d3:c7:da:be:b1:12:d1:32:52:1b:b5:2a:d0:cf:88: 3e:3c:68:db:72:2d:1c:ce:35:37:f8:ae:30:28:52: e2:88:b2:f4:ec:f3:9d:86:ce:09:85:76:4d:a2:39: 35:40:0a:7a:95:4c:ef:04:cb:67:61:98:e0:fd:22: d4:94:2a:5f:f2:13:88:18:80:9c:2e:a4:dc:6b:3f: ad:ec:0a:81:6f:97:77:70:10:7b:b0:05:df:df:df: 39:e8:1d:ab:69:e3:ab:0e:f3:f2:ca:dc:ae:7b:8a: 89:a3:02:a5:9e:0b:b2:d0:61:c9:4d:57:6b:35:5f: ab:b4:0b:c7:a9:f7:2b:20:32:e6:7e:8b:de:b1:0d: aa:60:e2:17:93:5c:af:3a:f5:70:0c:21:2f:e6:61: 31:98:14:ef:6e:a4:d7:3e:8d:55:cf:46:78:6b:32: 79:a6:93:7e:54:6a:ef:17:67:c8:89:00:f4:e6:f6: 9b:f3:2e:18:0a:70:39:f4:53:cf:bc:a7:d9:a5:58: 5b:ca:16:a0:0d:a9:d3:2c:39:91:19:40:9e:a2:0a: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:20:49:ED:E5:2E:29:B0:46:34:28:EB:ED:18:E2:FD:E8:AD:4E:FD X509v3 Authority Key Identifier: keyid:95:CA:E2:C3:7C:86:63:0E:61:AF:DF:89:03:FE:17:4D:E8:B9:45:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lcriw3yGYw5hr9-JA_4XTei5Rb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/OyBJ7eUuKbBGNCjr7Rji_eitTv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/82e6f5-82f2-45e7-844e-3514841f36ae/1/lcriw3yGYw5hr9-JA_4XTei5Rb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.11.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:da:97:a9:a5:33:22:20:11:ba:69:c6:bc:f7:ca:67:85:f8: 5f:19:f5:9f:bc:7b:ff:5b:73:85:3a:a0:d0:6e:bc:7d:44:98: ff:5b:d2:e8:2b:f7:2c:5e:ec:f6:8f:40:e6:b8:cf:42:15:92: a1:9a:9c:85:c1:19:95:ef:8b:03:c2:de:23:44:87:f5:19:d4: 9e:88:d6:09:65:2d:6d:c9:e2:77:65:8c:b0:df:5f:78:88:3d: 6d:8e:c3:38:9d:7a:98:68:82:70:cb:49:a1:da:29:94:a4:06: 1a:63:34:dc:cf:48:e0:09:5a:fc:1a:53:1c:9e:c4:28:a5:45: c8:68:5e:1d:83:e0:87:24:0a:f3:17:58:bc:ba:7b:2d:4a:12: 34:b7:f7:32:f0:66:80:84:52:f0:88:27:bf:3e:18:51:27:ed: 6e:d3:68:3d:93:75:98:0c:8d:73:19:3b:7c:f4:e0:14:e7:0b: b4:fb:cd:09:6a:43:56:c3:e7:fb:42:c2:c7:aa:47:ac:4e:94: ca:2b:6e:67:f3:64:79:99:ec:25:44:97:9e:84:7a:cb:00:63: e3:aa:8e:dc:8d:f7:61:be:07:8a:d0:03:95:8c:24:92:5e:ca: 3f:9e:70:fb:5c:b9:34:e5:ba:6b:72:8c:39:43:e3:c2:42:b4: 23:de:42:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NWQzbFtttlH+AinmF3yoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1Y2FlMmMzN2M4NjYzMGU2MWFmZGY4OTAzZmUxNzRkZThi OTQ1YmUwHhcNMjYwMTAxMjAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYjIwNDllZGU1MmUyOWIwNDYzNDI4ZWJlZDE4ZTJmZGU4YWQ0ZWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ro+2h2oQluz/9x1u/V9uom+aWlb jZMRIMiqORi33eUHnKqhPbxZAJLcLRLTx9q+sRLRMlIbtSrQz4g+PGjbci0czjU3 +K4wKFLiiLL07POdhs4JhXZNojk1QAp6lUzvBMtnYZjg/SLUlCpf8hOIGICcLqTc az+t7AqBb5d3cBB7sAXf39856B2raeOrDvPyytyue4qJowKlnguy0GHJTVdrNV+r tAvHqfcrIDLmfovesQ2qYOIXk1yvOvVwDCEv5mExmBTvbqTXPo1Vz0Z4azJ5ppN+ VGrvF2fIiQD05vab8y4YCnA59FPPvKfZpVhbyhagDanTLDmRGUCeogov1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDsgSe3lLimwRjQo6+0Y4v3orU79MB8GA1UdIwQY MBaAFJXK4sN8hmMOYa/fiQP+F03ouUW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUt MzUxNDg0MWYzNmFlLzEvT3lCSjdlVXVLYkJHTkNqcjdSamlfZWl0VHYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy84MmU2ZjUtODJmMi00NWU3LTg0NGUtMzUxNDg0MWYzNmFl LzEvbGNyaXczeUdZdzVocjktSkFfNFhUZWk1UmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJS4LMA0G CSqGSIb3DQEBCwUAA4IBAQCO2peppTMiIBG6aca898pnhfhfGfWfvHv/W3OFOqDQ brx9RJj/W9LoK/csXuz2j0DmuM9CFZKhmpyFwRmV74sDwt4jRIf1GdSeiNYJZS1t yeJ3ZYyw3194iD1tjsM4nXqYaIJwy0mh2imUpAYaYzTcz0jgCVr8GlMcnsQopUXI aF4dg+CHJArzF1i8unstShI0t/cy8GaAhFLwiCe/PhhRJ+1u02g9k3WYDI1zGTt8 9OAU5wu0+80JakNWw+f7QsLHqkesTpTKK25n82R5mewlRJeehHrLAGPjqo7cjfdh vgeK0AOVjCSSXso/nnD7XLk05bprcow5Q+PCQrQj3kJu -----END CERTIFICATE-----Generated at Mon Jan 19 11:49:12 2026 by rpki-client