This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/rbEZUX-V_RUbO-B__2tBNPZPi20.roa File: rbEZUX-V_RUbO-B__2tBNPZPi20.roa (raw, json) Hash identifier: 5orvEtrKwewCyoQkeWjKimsM7zmwihlBeVeYKcs/1tM= Subject key identifier: AD:B1:19:51:7F:95:FD:15:1B:3B:E0:7F:FF:6B:41:34:F6:4F:8B:6D Certificate issuer: /CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Certificate serial: 019B7BA4406E19B5FF972AFB1BB16B9E79B3 Authority key identifier: 8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/rbEZUX-V_RUbO-B__2tBNPZPi20.roa Signing time: Thu 01 Jan 2026 22:18:40 +0000 ROA not before: Thu 01 Jan 2026 22:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208861 IP address blocks: 81.161.102.0/23 maxlen: 23 194.152.56.0/24 maxlen: 24 2a13:59c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.mft rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:40:6e:19:b5:ff:97:2a:fb:1b:b1:6b:9e:79:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5b629a46985888ff14bfa9d7dcb1eb526600a6 Validity Not Before: Jan 1 22:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=adb119517f95fd151b3be07fff6b4134f64f8b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:56:ed:3b:d0:bf:44:71:57:44:25:4a:88: c7:44:3c:0e:76:92:38:6b:b9:b9:85:a6:33:98:bd: 5f:3d:6d:ef:fa:92:05:4b:55:fc:d1:48:4c:f2:0c: fc:24:b5:d3:c0:74:2a:b8:85:65:39:b3:0a:2b:55: f8:a0:8e:05:ce:8d:eb:4f:61:77:e5:e8:f9:a3:2c: 75:c7:c3:33:7e:15:c4:45:6c:4e:08:27:e5:b5:8a: b6:71:5c:1f:17:51:85:df:ca:be:cc:65:5a:ac:80: 26:9c:98:30:ef:b8:17:70:de:1e:7a:ad:4b:69:5f: a7:47:45:d0:63:52:54:ea:c7:fb:b0:f9:b4:88:bc: 14:89:79:4c:e1:f9:4d:50:cd:15:86:5e:ba:c6:fa: 34:b3:aa:11:e4:4c:6f:90:32:1a:d1:fd:b3:ff:e2: 8b:29:9d:e0:7c:f5:63:43:62:76:b4:bf:d2:40:05: 80:f2:6b:61:45:24:87:04:03:e3:82:56:f0:8c:d2: be:92:0d:1e:33:21:66:5f:0b:51:d0:37:d2:ab:b8: 2d:3d:84:c4:14:7b:96:08:61:f4:a8:dd:1e:a6:ce: 87:40:eb:4b:11:1d:b3:ca:4c:72:16:48:88:85:af: 83:79:b4:d1:be:7b:24:85:c6:72:2d:24:ac:91:50: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B1:19:51:7F:95:FD:15:1B:3B:E0:7F:FF:6B:41:34:F6:4F:8B:6D X509v3 Authority Key Identifier: keyid:8A:5B:62:9A:46:98:58:88:FF:14:BF:A9:D7:DC:B1:EB:52:66:00:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iltimkaYWIj_FL-p19yx61JmAKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/rbEZUX-V_RUbO-B__2tBNPZPi20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/95f965-270a-4c70-a690-2d7baf882674/1/iltimkaYWIj_FL-p19yx61JmAKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.102.0/23 194.152.56.0/24 IPv6: 2a13:59c0::/32 Signature Algorithm: sha256WithRSAEncryption 4e:b3:82:ac:83:73:41:b4:4b:da:e6:78:b7:ed:5e:35:72:36: 55:54:b0:d4:75:b8:87:08:62:08:22:44:ad:25:22:21:81:71: 3f:2f:8c:d4:b9:75:c6:9f:c3:d6:e9:6e:fb:93:49:57:db:14: 36:bd:a6:04:14:c7:33:e7:3f:8a:2b:ec:53:6a:6a:8a:ab:8a: d8:52:fc:4b:90:ee:74:cd:06:52:1d:f9:db:7b:dc:39:c6:0c: b4:66:1d:68:7a:48:c4:45:90:ab:4d:33:28:20:53:fc:16:8c: 6a:18:6e:69:d9:4b:3b:62:f0:06:9d:7f:b0:44:e6:44:1c:fa: 77:3f:1c:61:1f:78:73:da:2f:33:b2:35:b7:a3:07:5c:cf:07: ea:31:ca:f6:49:6f:35:3b:c0:9d:b4:17:8d:c2:7f:2f:06:73: 85:f3:70:22:03:54:c4:c7:8e:8e:5d:47:a9:ce:57:7b:2d:13: c9:b6:46:31:74:b7:91:a9:0d:07:5b:47:73:41:3a:e0:ed:3d: 30:02:a2:77:04:cc:e3:b7:04:17:1f:32:6d:1a:48:37:26:f4: f2:00:2c:9f:56:65:40:37:88:79:45:69:f1:41:0a:42:87:f2: e8:c9:be:ff:92:d6:c4:f2:5b:af:b3:ae:f2:f0:e8:f1:29:d7: 1c:49:b4:16 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pEBuGbX/lyr7G7FrnnmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNWI2MjlhNDY5ODU4ODhmZjE0YmZhOWQ3ZGNiMWViNTI2 NjAwYTYwHhcNMjYwMTAxMjIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGIxMTk1MTdmOTVmZDE1MWIzYmUwN2ZmZjZiNDEzNGY2NGY4YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LhW7TvQv0RxV0QlSojHRDwOdpI4 a7m5haYzmL1fPW3v+pIFS1X80UhM8gz8JLXTwHQquIVlObMKK1X4oI4Fzo3rT2F3 5ej5oyx1x8MzfhXERWxOCCfltYq2cVwfF1GF38q+zGVarIAmnJgw77gXcN4eeq1L aV+nR0XQY1JU6sf7sPm0iLwUiXlM4flNUM0Vhl66xvo0s6oR5ExvkDIa0f2z/+KL KZ3gfPVjQ2J2tL/SQAWA8mthRSSHBAPjglbwjNK+kg0eMyFmXwtR0DfSq7gtPYTE FHuWCGH0qN0eps6HQOtLER2zykxyFkiIha+DebTRvnskhcZyLSSskVBz7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFK2xGVF/lf0VGzvgf/9rQTT2T4ttMB8GA1UdIwQY MBaAFIpbYppGmFiI/xS/qdfcsetSZgCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAt MmQ3YmFmODgyNjc0LzEvcmJFWlVYLVZfUlViTy1CX18ydEJOUFpQaTIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85NWY5NjUtMjcwYS00YzcwLWE2OTAtMmQ3YmFmODgyNjc0 LzEvaWx0aW1rYVlXSWpfRkwtcDE5eXg2MUptQUtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBUaFmAwQA wpg4MA0EAgACMAcDBQAqE1nAMA0GCSqGSIb3DQEBCwUAA4IBAQBOs4Ksg3NBtEva 5ni37V41cjZVVLDUdbiHCGIIIkStJSIhgXE/L4zUuXXGn8PW6W77k0lX2xQ2vaYE FMcz5z+KK+xTamqKq4rYUvxLkO50zQZSHfnbe9w5xgy0Zh1oekjERZCrTTMoIFP8 FoxqGG5p2Us7YvAGnX+wROZEHPp3PxxhH3hz2i8zsjW3owdczwfqMcr2SW81O8Cd tBeNwn8vBnOF83AiA1TEx46OXUepzld7LRPJtkYxdLeRqQ0HW0dzQTrg7T0wAqJ3 BMzjtwQXHzJtGkg3JvTyACyfVmVAN4h5RWnxQQpCh/Loyb7/ktbE8luvs67y8Ojx KdccSbQW -----END CERTIFICATE-----Generated at Wed Jan 21 03:28:04 2026 by rpki-client