This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/EEC5l5eXa30hCWFdS6hfFowX3rA.roa File: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (raw, json) Hash identifier: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc= Subject key identifier: 10:40:B9:97:97:97:6B:7D:21:09:61:5D:4B:A8:5F:16:8C:17:DE:B0 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 019B7DCB0E661C0E401A6207352C789187F3 Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/EEC5l5eXa30hCWFdS6hfFowX3rA.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56430 IP address blocks: 77.81.64.0/24 maxlen: 24 86.105.152.0/23 maxlen: 23 86.105.155.0/24 maxlen: 24 89.36.18.0/24 maxlen: 24 89.36.93.0/24 maxlen: 24 89.40.214.0/24 maxlen: 24 89.42.42.0/24 maxlen: 24 89.43.174.0/24 maxlen: 24 91.193.53.0/24 maxlen: 24 185.82.172.0/22 maxlen: 22 188.212.250.0/24 maxlen: 24 188.241.13.0/24 maxlen: 24 193.33.200.0/23 maxlen: 23 193.105.218.0/24 maxlen: 24 2a05:91c0::/32 maxlen: 32 2a05:91c4::/32 maxlen: 32 2a09:1340::/29 maxlen: 29 2a0f:8b80::/29 maxlen: 29 2a12:aec0::/29 maxlen: 29 2a12:ec40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0e:66:1c:0e:40:1a:62:07:35:2c:78:91:87:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1040b99797976b7d2109615d4ba85f168c17deb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8b:86:5c:8c:e2:86:0d:0a:57:da:6d:9e:b3: 55:3f:4c:59:ef:be:2c:94:91:c9:45:f2:6e:32:0b: 47:72:01:d5:b6:ec:93:ee:9f:eb:e0:d2:6c:0c:0e: 8e:5e:b8:4c:da:06:a6:71:e7:49:68:df:88:40:1f: b7:6a:25:48:31:76:1b:be:86:8d:6d:a3:2a:9c:82: 9f:01:e0:5a:a2:c2:b7:76:af:a7:25:d0:9b:90:18: f9:f1:9d:1a:c0:d4:b4:72:bd:7b:43:04:c6:b5:8d: ce:76:95:ef:f8:23:c8:fa:47:80:0b:87:d6:fe:db: 07:0e:f9:84:0f:92:08:90:6c:6a:a3:f1:bd:08:5d: 75:7c:10:25:84:11:ee:e5:4d:ac:fe:8f:d3:21:48: f0:f6:83:21:15:98:56:55:fc:0e:0b:37:4d:29:44: df:10:90:79:33:d9:b0:4a:f5:fe:87:13:d6:ac:a7: 56:43:e4:9f:08:17:bb:7f:ed:dd:57:c0:19:dd:0d: 94:2c:da:da:61:bb:25:2d:d4:ad:23:b1:e5:56:2a: 25:62:9c:40:bb:0d:be:68:3d:45:3b:74:12:c5:6c: 8b:1a:b0:30:21:1b:a7:4c:40:ab:19:d8:4e:d4:78: 48:30:e0:7a:14:4a:e8:1e:cc:c3:d4:6f:2f:9c:bf: 95:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:40:B9:97:97:97:6B:7D:21:09:61:5D:4B:A8:5F:16:8C:17:DE:B0 X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/EEC5l5eXa30hCWFdS6hfFowX3rA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.64.0/24 86.105.152.0/23 86.105.155.0/24 89.36.18.0/24 89.36.93.0/24 89.40.214.0/24 89.42.42.0/24 89.43.174.0/24 91.193.53.0/24 185.82.172.0/22 188.212.250.0/24 188.241.13.0/24 193.33.200.0/23 193.105.218.0/24 IPv6: 2a05:91c0::/32 2a05:91c4::/32 2a09:1340::/29 2a0f:8b80::/29 2a12:aec0::/29 2a12:ec40::/29 Signature Algorithm: sha256WithRSAEncryption 19:dc:12:8a:a8:6c:98:97:52:6a:03:62:d6:f9:31:75:ab:04: 6a:7a:4e:4d:07:51:61:e8:98:29:e6:68:22:54:e6:2c:c1:88: e7:cf:bc:4e:cb:a6:a2:cd:55:69:e4:8e:56:06:48:cb:fd:07: 3a:2b:28:a6:2b:aa:1e:c0:e4:45:f4:77:4b:19:e3:d0:97:0f: 08:25:ca:dc:f7:63:03:be:41:3d:39:52:7b:49:4b:48:df:a8: 49:7e:41:37:1c:7f:55:88:49:c8:0d:ce:61:72:ae:c8:58:a7: 59:4d:c1:ef:48:f0:36:87:d9:50:25:f6:90:54:55:28:65:99: fd:bb:a4:2a:ac:4f:41:76:c6:f0:9b:89:cc:ce:b2:40:96:02: e3:ad:22:98:5b:7b:f7:25:87:0f:79:33:78:2a:ec:d3:60:d9: 92:86:93:ec:ff:e9:01:fe:45:05:08:3e:45:55:2d:48:f5:8e: aa:38:65:1d:9b:0b:07:fb:f6:04:53:d5:da:b3:1f:9f:60:17: 9e:46:ab:22:20:b1:02:fc:03:8a:c4:05:00:2b:0c:2a:05:d0: d1:c5:3a:51:19:a6:0b:25:90:47:12:8d:b6:1f:2a:3d:b9:f5: 06:1d:04:04:47:6c:da:31:ab:96:ef:41:d7:75:08:d9:5b:0b: 9d:b9:76:06 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt9yw5mHA5AGmIHNSx4kYfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDQwYjk5Nzk3OTc2YjdkMjEwOTYxNWQ0YmE4NWYxNjhjMTdkZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IuGXIzihg0KV9ptnrNVP0xZ774s lJHJRfJuMgtHcgHVtuyT7p/r4NJsDA6OXrhM2gamcedJaN+IQB+3aiVIMXYbvoaN baMqnIKfAeBaosK3dq+nJdCbkBj58Z0awNS0cr17QwTGtY3OdpXv+CPI+keAC4fW /tsHDvmED5IIkGxqo/G9CF11fBAlhBHu5U2s/o/TIUjw9oMhFZhWVfwOCzdNKUTf EJB5M9mwSvX+hxPWrKdWQ+SfCBe7f+3dV8AZ3Q2ULNraYbslLdStI7HlViolYpxA uw2+aD1FO3QSxWyLGrAwIRunTECrGdhO1HhIMOB6FEroHszD1G8vnL+VqwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFBBAuZeXl2t9IQlhXUuoXxaMF96wMB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvRUVDNWw1ZVhhMzBoQ1dGZFM2aGZGb3dYM3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjBaBAIAATBUAwQATVFA AwQBVmmYAwQAVmmbAwQAWSQSAwQAWSRdAwQAWSjWAwQAWSoqAwQAWSuuAwQAW8E1 AwQCuVKsAwQAvNT6AwQAvPENAwQBwSHIAwQAwWnaMDAEAgACMCoDBQAqBZHAAwUA KgWRxAMFAyoJE0ADBQMqD4uAAwUDKhKuwAMFAyoS7EAwDQYJKoZIhvcNAQELBQAD ggEBABncEoqobJiXUmoDYtb5MXWrBGp6Tk0HUWHomCnmaCJU5izBiOfPvE7LpqLN VWnkjlYGSMv9BzorKKYrqh7A5EX0d0sZ49CXDwglytz3YwO+QT05UntJS0jfqEl+ QTccf1WIScgNzmFyrshYp1lNwe9I8DaH2VAl9pBUVShlmf27pCqsT0F2xvCbiczO skCWAuOtIphbe/clhw95M3gq7NNg2ZKGk+z/6QH+RQUIPkVVLUj1jqo4ZR2bCwf7 9gRT1dqzH59gF55GqyIgsQL8A4rEBQArDCoF0NHFOlEZpgslkEcSjbYfKj259QYd BARHbNoxq5bvQdd1CNlbC525dgY= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:10 2026 by rpki-client