This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/7mUqcc1ZRAcERQzQ4MU8EdZH35w.roa File: 7mUqcc1ZRAcERQzQ4MU8EdZH35w.roa (raw, json) Hash identifier: xeQvwrLQZUiDoUb0ml1L918hdYLeraoGxz+49zwQRSg= Subject key identifier: EE:65:2A:71:CD:59:44:07:04:45:0C:D0:E0:C5:3C:11:D6:47:DF:9C Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6 Certificate serial: 019B7A5AD9E6D1A381176972D92C7370FB99 Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/7mUqcc1ZRAcERQzQ4MU8EdZH35w.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35508 IP address blocks: 81.27.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d9:e6:d1:a3:81:17:69:72:d9:2c:73:70:fb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee652a71cd59440704450cd0e0c53c11d647df9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:eb:e1:43:32:fc:e7:2e:0f:57:26:3e:00: 4b:34:65:d8:50:e6:2a:0e:a2:7a:9c:b7:ed:6c:2a: fa:1e:58:a0:e6:67:98:b2:00:65:e2:97:02:c2:81: 9a:cb:00:00:6c:c4:72:0c:ba:27:e0:1e:1c:06:79: 70:49:7f:97:44:32:39:fc:f1:61:4a:f4:8a:c9:73: 40:6c:54:7a:8c:b3:2f:2f:1a:0b:30:65:8d:fd:a7: fc:e6:cd:9d:db:b0:43:72:75:ef:ea:1e:84:4e:72: f5:2c:32:df:18:f0:5b:45:03:4d:93:4c:66:8e:c4: 6e:29:fa:ae:c5:a7:ac:9f:75:25:c0:0c:64:16:b0: 9a:58:88:99:96:b1:07:38:17:a3:33:13:aa:a3:d3: c7:3c:e5:e8:d0:ac:25:1c:ce:4f:11:f2:cb:2c:bf: c6:29:aa:09:37:42:de:f8:ee:8f:9f:33:e6:2a:fd: 9e:56:80:9e:40:61:c6:21:fd:b4:f4:b7:2a:cd:39: d5:e8:2b:71:a6:9d:eb:d0:d1:32:33:2f:84:a7:dc: 54:c7:7b:86:98:14:7f:91:1a:ca:cb:58:1d:5c:6d: fd:85:9d:77:af:58:08:c4:8d:ea:a2:73:60:2d:6e: 25:3a:7a:eb:34:74:b9:41:a0:27:22:c0:83:79:15: 55:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:2A:71:CD:59:44:07:04:45:0C:D0:E0:C5:3C:11:D6:47:DF:9C X509v3 Authority Key Identifier: keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/7mUqcc1ZRAcERQzQ4MU8EdZH35w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.27.244.0/24 Signature Algorithm: sha256WithRSAEncryption d9:ad:91:49:95:54:f9:8e:6b:27:3f:f5:13:b0:42:8b:4d:10: 9c:e9:52:57:9c:b3:b5:83:ef:36:30:7e:6f:5e:7d:c3:8a:1c: 3a:25:6d:0a:bd:6a:fe:cc:0d:84:e5:ae:a4:24:c0:70:9b:88: d7:46:d4:a1:da:6a:75:b1:f1:e8:6c:bb:71:ad:0e:44:1a:f0: d4:f8:43:f4:33:41:25:28:28:e0:6d:6b:fc:c9:14:ce:ac:5a: 45:90:a8:79:ea:2f:3c:98:e5:22:56:11:67:32:e6:c3:1d:71: 41:2e:dd:27:44:e7:0c:65:ae:0d:50:c8:9e:22:90:84:61:0e: ec:18:67:b4:4f:83:29:bc:cc:2c:6e:e8:5d:23:ac:f8:eb:33: 1d:47:f5:82:3d:69:1d:45:d7:c3:7a:c1:87:7f:d4:72:ca:9e: d6:22:9c:62:f4:c7:b8:db:33:9c:f7:d8:de:9a:c3:d7:52:1e: 11:74:fb:86:3c:3b:03:97:b2:55:34:cf:c2:07:db:44:e7:4a: d8:28:64:8b:3b:39:39:ed:c5:58:78:65:6b:23:5b:b9:b8:6e: e6:21:06:0e:db:31:6f:59:71:1c:76:e0:d3:a2:c5:5d:e9:72: 9d:14:06:50:61:a3:d9:a4:d5:28:80:7b:5d:64:40:f6:83:d2: ce:8e:8f:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wtnm0aOBF2ly2SxzcPuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh OWMwZjYwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTY1MmE3MWNkNTk0NDA3MDQ0NTBjZDBlMGM1M2MxMWQ2NDdkZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIrr4UMy/OcuD1cmPgBLNGXYUOYq DqJ6nLftbCr6Hlig5meYsgBl4pcCwoGaywAAbMRyDLon4B4cBnlwSX+XRDI5/PFh SvSKyXNAbFR6jLMvLxoLMGWN/af85s2d27BDcnXv6h6ETnL1LDLfGPBbRQNNk0xm jsRuKfquxaesn3UlwAxkFrCaWIiZlrEHOBejMxOqo9PHPOXo0KwlHM5PEfLLLL/G KaoJN0Le+O6PnzPmKv2eVoCeQGHGIf209LcqzTnV6Ctxpp3r0NEyMy+Ep9xUx3uG mBR/kRrKy1gdXG39hZ13r1gIxI3qonNgLW4lOnrrNHS5QaAnIsCDeRVVPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5lKnHNWUQHBEUM0ODFPBHWR9+cMB8GA1UdIwQY MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt OGVhZThiNzVlOWNhLzEvN21VcWNjMVpSQWNFUlF6UTRNVThFZFpIMzV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURv0MA0G CSqGSIb3DQEBCwUAA4IBAQDZrZFJlVT5jmsnP/UTsEKLTRCc6VJXnLO1g+82MH5v Xn3Dihw6JW0KvWr+zA2E5a6kJMBwm4jXRtSh2mp1sfHobLtxrQ5EGvDU+EP0M0El KCjgbWv8yRTOrFpFkKh56i88mOUiVhFnMubDHXFBLt0nROcMZa4NUMieIpCEYQ7s GGe0T4MpvMwsbuhdI6z46zMdR/WCPWkdRdfDesGHf9Ryyp7WIpxi9Me42zOc99je msPXUh4RdPuGPDsDl7JVNM/CB9tE50rYKGSLOzk57cVYeGVrI1u5uG7mIQYO2zFv WXEcduDTosVd6XKdFAZQYaPZpNUogHtdZED2g9LOjo9y -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:05 2026 by rpki-client