This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa File: oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa (raw, json) Hash identifier: CqmLwRU6UPnTaf7VoNKxG/ebsip0tAKsPGqLR+tu6fE= Subject key identifier: A2:21:04:9D:04:0C:24:4F:B5:09:5F:C9:5C:88:BD:5F:04:5C:69:7D Certificate issuer: /CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf Certificate serial: 019B7F139E51A9CE2CAF937BE0DF6DBDEE67 Authority key identifier: C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa Signing time: Fri 02 Jan 2026 14:19:10 +0000 ROA not before: Fri 02 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44979 IP address blocks: 185.111.4.0/24 maxlen: 24 185.111.5.0/24 maxlen: 24 185.111.6.0/24 maxlen: 24 185.111.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.mft rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9e:51:a9:ce:2c:af:93:7b:e0:df:6d:bd:ee:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c97ec9a2a4d9d3a2c1c05dabd41a5f9212e2d6cf Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a221049d040c244fb5095fc95c88bd5f045c697d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:7b:cc:e6:5e:9a:f4:23:e4:4d:68:7a:f0: dc:91:17:04:84:66:c9:09:6f:d5:31:79:5d:b9:67: 76:19:28:e1:91:18:08:5d:f4:c3:f2:ed:60:5e:49: c7:a3:91:08:01:6a:2a:f3:b9:14:c7:70:60:58:6f: 36:89:18:2b:1a:2f:df:90:c8:6e:4e:bf:59:35:27: 87:6e:bf:33:a0:81:bd:13:ef:20:43:fe:db:9d:97: f2:04:8b:92:8b:58:65:95:42:59:56:0b:42:9a:9e: a2:4f:3e:0f:15:c3:e5:c8:8e:53:cb:c9:c0:7e:e2: c4:0f:ca:f2:50:14:5c:e5:95:4b:c3:96:9c:74:72: a8:00:b5:c5:51:1c:dc:62:48:8d:51:fd:b7:49:5b: c6:15:cf:47:22:c8:f1:0e:5f:81:02:2e:d5:16:e9: 29:5c:12:d4:08:cd:c2:b4:f2:7d:09:a4:31:b0:a6: 53:d8:de:ac:65:31:32:4f:06:fc:b3:32:ea:f0:0f: d6:85:7a:56:e2:88:20:7e:80:27:72:a1:95:00:ae: 69:cd:64:fb:5f:d2:f2:12:6b:50:bd:73:9c:df:91: 9b:00:8a:1a:20:d2:2a:bf:91:80:4a:a3:86:2b:be: e9:53:65:04:e2:4b:88:53:d2:f3:e7:d9:e1:7d:7f: 76:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:21:04:9D:04:0C:24:4F:B5:09:5F:C9:5C:88:BD:5F:04:5C:69:7D X509v3 Authority Key Identifier: keyid:C9:7E:C9:A2:A4:D9:D3:A2:C1:C0:5D:AB:D4:1A:5F:92:12:E2:D6:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yX7JoqTZ06LBwF2r1BpfkhLi1s8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/oiEEnQQMJE-1CV_JXIi9XwRcaX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/213464-1ddb-4c60-b57e-9c724f7d1265/1/yX7JoqTZ06LBwF2r1BpfkhLi1s8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.4.0/22 Signature Algorithm: sha256WithRSAEncryption 44:8f:3e:a7:f6:e7:5a:7f:18:5f:40:21:b3:cf:c5:81:55:f8: 33:fc:fe:6d:ab:94:2a:fc:da:7a:68:b7:f3:aa:3e:b6:40:6d: b6:d9:a4:61:0f:84:c2:e0:c1:80:e9:52:c5:3d:8f:b2:e7:93: 0f:e9:0e:a6:f9:8e:49:27:1c:65:bb:ab:e3:e6:63:69:d3:24: 4e:3d:7d:66:6c:83:d7:59:c7:51:58:44:ca:cc:98:8f:5c:0f: d0:5f:82:05:4a:d6:97:9b:46:0b:45:91:d2:7f:27:38:11:49: 63:9f:86:65:6b:50:d2:f6:fc:8d:92:d0:dc:c2:25:8b:61:e8: 49:b3:9d:5f:35:6e:8f:9c:7b:1d:59:9f:13:16:94:1d:b8:c1: 34:8a:9c:be:05:8e:b3:c1:17:89:75:54:e9:9e:5d:cf:58:66: b0:f7:b2:ef:bc:41:58:f5:f9:2c:9f:b5:f1:76:5b:7f:f9:c9: 9d:7e:5b:37:5f:c6:c4:2f:ba:ac:46:dc:51:1e:4a:40:1f:db: 69:a3:ae:19:ae:e5:1f:bd:b5:04:ce:30:a0:03:85:1a:1d:c6: 60:6e:c5:d1:bc:47:37:82:fb:37:5c:ea:4b:4a:ee:4e:8c:91: e4:8b:88:f9:ab:34:f8:dc:d2:e0:40:ce:77:c2:63:df:a0:93: 53:c6:37:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E55Rqc4sr5N74N9tve5nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5N2VjOWEyYTRkOWQzYTJjMWMwNWRhYmQ0MWE1ZjkyMTJl MmQ2Y2YwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjIxMDQ5ZDA0MGMyNDRmYjUwOTVmYzk1Yzg4YmQ1ZjA0NWM2OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SJ7zOZemvQj5E1oevDckRcEhGbJ CW/VMXlduWd2GSjhkRgIXfTD8u1gXknHo5EIAWoq87kUx3BgWG82iRgrGi/fkMhu Tr9ZNSeHbr8zoIG9E+8gQ/7bnZfyBIuSi1hllUJZVgtCmp6iTz4PFcPlyI5Ty8nA fuLED8ryUBRc5ZVLw5acdHKoALXFURzcYkiNUf23SVvGFc9HIsjxDl+BAi7VFukp XBLUCM3CtPJ9CaQxsKZT2N6sZTEyTwb8szLq8A/WhXpW4oggfoAncqGVAK5pzWT7 X9LyEmtQvXOc35GbAIoaINIqv5GASqOGK77pU2UE4kuIU9Lz59nhfX92qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKIhBJ0EDCRPtQlfyVyIvV8EXGl9MB8GA1UdIwQY MBaAFMl+yaKk2dOiwcBdq9QaX5IS4tbPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8yMTM0NjQtMWRkYi00YzYwLWI1N2Ut OWM3MjRmN2QxMjY1LzEvb2lFRW5RUU1KRS0xQ1ZfSlhJaTlYd1JjYVgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8yMTM0NjQtMWRkYi00YzYwLWI1N2UtOWM3MjRmN2QxMjY1 LzEveVg3Sm9xVFowNkxCd0YycjFCcGZraExpMXM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuW8EMA0G CSqGSIb3DQEBCwUAA4IBAQBEjz6n9udafxhfQCGzz8WBVfgz/P5tq5Qq/Np6aLfz qj62QG222aRhD4TC4MGA6VLFPY+y55MP6Q6m+Y5JJxxlu6vj5mNp0yROPX1mbIPX WcdRWETKzJiPXA/QX4IFStaXm0YLRZHSfyc4EUljn4Zla1DS9vyNktDcwiWLYehJ s51fNW6PnHsdWZ8TFpQduME0ipy+BY6zwReJdVTpnl3PWGaw97LvvEFY9fksn7Xx dlt/+cmdfls3X8bEL7qsRtxRHkpAH9tpo64ZruUfvbUEzjCgA4UaHcZgbsXRvEc3 gvs3XOpLSu5OjJHki4j5qzT43NLgQM53wmPfoJNTxjdG -----END CERTIFICATE-----Generated at Tue Jan 27 13:18:39 2026 by rpki-client