This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EDdcciSXencE375xPD5oI_Z88BQ.roa File: EDdcciSXencE375xPD5oI_Z88BQ.roa (raw, json) Hash identifier: AihihoEvZ3ZcAJpoE/h4BVzD9X2P5J45x+vhO2STXwA= Subject key identifier: 10:37:5C:72:24:97:7A:77:04:DF:BE:71:3C:3E:68:23:F6:7C:F0:14 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69884195CE55922ACB0408A457069 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EDdcciSXencE375xPD5oI_Z88BQ.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206866 IP address blocks: 84.232.40.0/21 maxlen: 21 84.232.122.0/23 maxlen: 23 94.24.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:84:19:5c:e5:59:22:ac:b0:40:8a:45:70:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10375c7224977a7704dfbe713c3e6823f67cf014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:85:f0:34:aa:a2:1c:c9:3e:a3:e0:1c:5d: 0e:3e:c2:ed:bd:98:93:46:95:b0:da:c6:3f:91:bc: 65:3f:89:02:7c:8d:00:53:2f:06:b1:ed:c4:43:65: f8:56:f9:49:e4:a2:b3:a5:67:00:49:6e:0e:11:c5: af:d1:f4:50:88:41:7d:e5:e7:27:bb:5d:82:cc:83: 14:5d:f4:e7:d9:24:87:b2:45:a1:2d:5a:13:81:1f: ec:5f:8f:d1:5f:ca:0a:17:9f:1c:29:1d:9e:30:33: 15:0b:c2:57:c8:0a:c9:8a:3b:1c:a7:87:7b:2a:f1: 9d:52:c0:60:93:f5:5a:8f:93:f4:c0:77:69:b2:ca: 8c:72:e2:7d:40:f2:22:02:ad:e0:3a:4f:0b:b1:9b: c3:62:2f:58:81:f7:8a:3e:56:21:96:07:83:fb:f6: 12:4b:4d:2b:2f:50:3e:85:1b:06:4c:4c:d2:5a:70: 87:36:a4:73:b7:45:06:8a:36:7e:56:a5:c4:0f:04: 7e:f3:0b:65:fd:8a:7e:78:4e:3b:27:b4:54:7b:43: 62:8f:8c:3e:63:ce:1d:5b:07:42:49:0c:3c:3e:4d: 5d:cb:40:88:ff:31:17:4f:47:5b:44:5c:68:bc:3d: 91:9c:6d:80:71:44:08:94:2e:64:6c:fc:c4:4c:a7: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:37:5C:72:24:97:7A:77:04:DF:BE:71:3C:3E:68:23:F6:7C:F0:14 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/EDdcciSXencE375xPD5oI_Z88BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.232.40.0/21 84.232.122.0/23 94.24.44.0/23 Signature Algorithm: sha256WithRSAEncryption 24:d3:d4:38:30:1f:22:c3:19:d9:aa:40:58:b8:c8:d4:46:ea: 9e:87:9e:a1:4d:22:4b:f5:55:25:f2:5c:e6:29:57:47:ea:a7: fa:23:cc:20:3a:e0:71:d1:a6:17:73:2b:e8:ff:29:77:2b:f1: 14:97:30:fc:26:2f:c6:af:3e:81:37:55:d1:16:e4:f5:a8:c6: 09:6d:93:e1:bf:e3:ae:31:c5:ae:3d:95:2f:c5:d8:c5:06:08: 58:ac:67:34:92:40:9f:dc:26:5e:44:90:e4:09:11:48:cc:35: 73:d9:67:d2:93:47:d1:e8:89:97:05:15:7a:d6:13:c3:01:28: 7b:c6:a5:a0:43:85:84:02:50:8c:08:01:0f:2e:94:70:77:43: 2e:49:3a:27:5e:f9:56:c5:32:dc:79:0f:71:0c:b3:a1:9d:91: be:d3:1e:08:e9:4c:16:54:2a:ca:c9:3b:bd:f1:d0:5c:0b:d0: 47:29:d9:9e:9e:fb:e9:25:35:a8:f6:64:29:d8:61:57:35:bf: 78:0e:d7:9b:d9:d4:3a:45:80:c6:7c:9a:e7:18:dc:f4:58:0b: 1a:05:b6:ce:ed:5f:b9:42:16:b3:6f:19:32:45:5f:0a:35:af: 61:e3:3b:c5:1b:dd:5b:4e:d6:40:3d:0a:91:0a:19:c6:bd:1a: 4e:e7:26:dd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xpiEGVzlWSKssECKRXBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDM3NWM3MjI0OTc3YTc3MDRkZmJlNzEzYzNlNjgyM2Y2N2NmMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArquF8DSqohzJPqPgHF0OPsLtvZiT RpWw2sY/kbxlP4kCfI0AUy8Gse3EQ2X4VvlJ5KKzpWcASW4OEcWv0fRQiEF95ecn u12CzIMUXfTn2SSHskWhLVoTgR/sX4/RX8oKF58cKR2eMDMVC8JXyArJijscp4d7 KvGdUsBgk/Vaj5P0wHdpssqMcuJ9QPIiAq3gOk8LsZvDYi9YgfeKPlYhlgeD+/YS S00rL1A+hRsGTEzSWnCHNqRzt0UGijZ+VqXEDwR+8wtl/Yp+eE47J7RUe0Nij4w+ Y84dWwdCSQw8Pk1dy0CI/zEXT0dbRFxovD2RnG2AcUQIlC5kbPzETKd4swIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBA3XHIkl3p3BN++cTw+aCP2fPAUMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvRURkY2NpU1hlbmNFMzc1eFBENW9JX1o4OEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVOgoAwQB VOh6AwQBXhgsMA0GCSqGSIb3DQEBCwUAA4IBAQAk09Q4MB8iwxnZqkBYuMjURuqe h56hTSJL9VUl8lzmKVdH6qf6I8wgOuBx0aYXcyvo/yl3K/EUlzD8Ji/Grz6BN1XR FuT1qMYJbZPhv+OuMcWuPZUvxdjFBghYrGc0kkCf3CZeRJDkCRFIzDVz2WfSk0fR 6ImXBRV61hPDASh7xqWgQ4WEAlCMCAEPLpRwd0MuSTonXvlWxTLceQ9xDLOhnZG+ 0x4I6UwWVCrKyTu98dBcC9BHKdmenvvpJTWo9mQp2GFXNb94Dteb2dQ6RYDGfJrn GNz0WAsaBbbO7V+5QhazbxkyRV8KNa9h4zvFG91bTtZAPQqRChnGvRpO5ybd -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:21 2026 by rpki-client