This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa File: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (raw, json) Hash identifier: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws= Subject key identifier: A1:D8:EB:90:D2:F8:62:AD:82:5D:45:53:42:C5:F1:3D:D9:7D:10:DB Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Certificate serial: 019B7EA7398F8073B3375CA5CFECDCA83065 Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.138.144.0/22 maxlen: 24 2a07:ec0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:39:8f:80:73:b3:37:5c:a5:cf:ec:dc:a8:30:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d8eb90d2f862ad825d455342c5f13dd97d10db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:18:c2:30:a0:99:25:e7:19:79:a3:57:d9:4c: 43:17:27:85:cd:e2:77:ff:84:ea:64:29:b9:f7:83: 0c:98:ec:94:84:d7:94:9a:bb:cf:9a:c7:6c:45:65: 86:18:a9:7b:6c:ce:d9:b2:7e:ab:38:a9:2c:c7:ab: d1:19:90:5e:70:c0:98:89:28:ef:0d:d6:67:7f:5b: 68:16:f5:7d:aa:44:34:b4:04:6e:2e:21:46:0c:85: 9a:60:98:f8:33:92:49:62:61:4b:a5:90:b1:03:0e: ed:0b:0b:4e:c5:87:1f:d4:68:a8:44:15:89:2e:f8: f0:03:64:c9:4b:21:8b:68:a7:25:eb:55:ca:a6:00: be:50:aa:03:8c:67:93:ec:6b:ea:4a:5a:d0:dd:b3: 23:87:fa:7a:08:87:f8:86:e1:80:95:1c:56:2c:3e: ee:26:31:1f:ef:50:fe:2a:d3:0c:f0:83:73:18:ba: c7:84:99:df:dd:a0:89:12:f6:e7:49:fd:58:41:61: 03:29:e0:3a:7f:6c:1b:42:9f:30:c5:75:fb:5f:ec: 00:bf:61:67:79:04:1f:af:03:d7:d6:f1:bf:44:db: 47:08:40:66:6f:8e:72:3d:29:cc:d4:4e:cd:27:bd: f5:56:b0:a6:10:d3:0f:b6:5d:e1:45:17:5c:d0:76: 28:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:EB:90:D2:F8:62:AD:82:5D:45:53:42:C5:F1:3D:D9:7D:10:DB X509v3 Authority Key Identifier: keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.144.0/22 IPv6: 2a07:ec0::/29 Signature Algorithm: sha256WithRSAEncryption 4e:d0:b9:b9:df:4e:6b:79:82:4c:f4:d4:ea:9a:b8:57:07:d3: 45:2d:e0:65:33:81:97:f4:4a:d9:c9:d5:6a:62:e4:f7:b6:9e: e8:46:0b:cd:3e:89:9e:2d:7e:8a:d4:7d:f5:1b:da:3e:cd:7c: 4d:e4:19:89:7c:f1:64:fd:79:94:35:08:5a:95:a2:e8:24:15: 94:1f:ee:58:3c:03:c3:4d:30:67:f6:24:b2:b6:e1:97:cc:b6: 75:ea:3c:37:c9:52:72:eb:52:7e:2e:be:28:74:6a:ec:12:7c: 33:8a:4a:41:f1:7b:61:3d:35:70:f5:8f:9d:42:57:74:17:45: 37:67:89:60:13:6b:05:40:ee:f9:a7:81:2a:1a:1b:77:cd:a2: 68:18:72:12:02:92:01:6b:cf:1a:75:b9:ed:dd:ec:04:f2:8a: f7:28:71:79:e1:f4:40:68:22:4e:09:9e:11:41:b9:0c:b7:aa: 13:68:a0:08:3c:f6:05:95:8a:77:eb:05:27:4b:41:a1:b7:43: 48:34:94:ff:8c:95:89:d5:7f:f5:80:5c:3b:94:24:fd:fe:3c: 9c:1b:ff:ea:81:91:21:c7:68:1c:61:29:d9:b3:11:10:d6:41: 56:59:a7:a6:6f:85:db:8c:f9:98:1e:dd:32:93:e1:1b:cd:74: a3:a4:b7:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzmPgHOzN1ylz+zcqDBlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh OTAzMWUwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQ4ZWI5MGQyZjg2MmFkODI1ZDQ1NTM0MmM1ZjEzZGQ5N2QxMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhjCMKCZJecZeaNX2UxDFyeFzeJ3 /4TqZCm594MMmOyUhNeUmrvPmsdsRWWGGKl7bM7Zsn6rOKksx6vRGZBecMCYiSjv DdZnf1toFvV9qkQ0tARuLiFGDIWaYJj4M5JJYmFLpZCxAw7tCwtOxYcf1GioRBWJ LvjwA2TJSyGLaKcl61XKpgC+UKoDjGeT7GvqSlrQ3bMjh/p6CIf4huGAlRxWLD7u JjEf71D+KtMM8INzGLrHhJnf3aCJEvbnSf1YQWEDKeA6f2wbQp8wxXX7X+wAv2Fn eQQfrwPX1vG/RNtHCEBmb45yPSnM1E7NJ731VrCmENMPtl3hRRdc0HYoEQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKHY65DS+GKtgl1FU0LF8T3ZfRDbMB8GA1UdIwQY MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt Mzg3NTM2ZDAzYTcxLzEvb2RqcmtOTDRZcTJDWFVWVFFzWHhQZGw5RU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQtMzg3NTM2ZDAzYTcx LzEvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYqQMA0E AgACMAcDBQMqBw7AMA0GCSqGSIb3DQEBCwUAA4IBAQBO0Lm5305reYJM9NTqmrhX B9NFLeBlM4GX9ErZydVqYuT3tp7oRgvNPomeLX6K1H31G9o+zXxN5BmJfPFk/XmU NQhalaLoJBWUH+5YPAPDTTBn9iSytuGXzLZ16jw3yVJy61J+Lr4odGrsEnwzikpB 8XthPTVw9Y+dQld0F0U3Z4lgE2sFQO75p4EqGht3zaJoGHISApIBa88adbnt3ewE 8or3KHF54fRAaCJOCZ4RQbkMt6oTaKAIPPYFlYp36wUnS0Ght0NINJT/jJWJ1X/1 gFw7lCT9/jycG//qgZEhx2gcYSnZsxEQ1kFWWaemb4XbjPmYHt0yk+EbzXSjpLeI -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:59 2026 by rpki-client