This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/7mjjEimVyPAhDrW306HN7Xpq5TU.roa File: 7mjjEimVyPAhDrW306HN7Xpq5TU.roa (raw, json) Hash identifier: rJyGYC0o7YsIdd+MxxTQnOk4AhcSOrR+I2pW7d2m2kM= Subject key identifier: EE:68:E3:12:29:95:C8:F0:21:0E:B5:B7:D3:A1:CD:ED:7A:6A:E5:35 Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Certificate serial: 019B79ECC52D1838456F3822B5B265B30889 Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/7mjjEimVyPAhDrW306HN7Xpq5TU.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205447 IP address blocks: 94.240.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c5:2d:18:38:45:6f:38:22:b5:b2:65:b3:08:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4 Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ee68e3122995c8f0210eb5b7d3a1cded7a6ae535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:5d:4f:60:37:c5:64:7e:63:ac:d5:84:8c: e4:de:51:fa:ef:fb:88:49:f2:50:fe:fb:94:61:c5: ad:7a:5a:2f:d3:58:36:29:49:8c:f2:f8:84:bb:fa: 54:09:5a:23:32:82:77:f9:02:98:1e:57:9c:45:18: e6:d5:87:44:f4:83:6a:fa:a1:4c:a4:f0:91:74:88: e6:be:26:6e:df:26:79:88:e2:39:b9:8d:63:1b:e5: e1:0d:ed:c6:5b:5b:d7:71:25:aa:fa:e2:d8:28:fd: 68:a2:97:3c:27:28:0b:c1:b5:e6:1b:8a:e5:43:c8: 40:97:6d:50:8f:a5:dd:e4:ac:a3:88:ce:cf:79:9c: 20:6d:b3:77:65:32:7d:27:73:fd:64:8e:56:bc:76: 65:43:5f:2b:6e:1e:bf:c4:9a:31:2a:22:e3:c1:5f: 65:de:15:12:34:79:9f:5d:11:ab:91:5c:cf:66:4e: 2b:a1:2c:50:0c:80:73:1e:d1:9d:e8:ee:a1:d9:ba: b6:2e:ae:32:36:98:39:f8:3e:13:08:cb:5f:4f:b6: d2:7d:80:f8:97:46:69:f6:e6:c6:b2:11:47:a7:d1: 9b:bb:d8:d8:f6:b4:c5:24:c2:16:40:87:ae:26:99: ed:0a:de:1e:06:c0:e8:fa:04:9c:98:67:05:93:9f: ea:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:68:E3:12:29:95:C8:F0:21:0E:B5:B7:D3:A1:CD:ED:7A:6A:E5:35 X509v3 Authority Key Identifier: keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/7mjjEimVyPAhDrW306HN7Xpq5TU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.240.27.0/24 Signature Algorithm: sha256WithRSAEncryption 87:ce:60:b2:20:13:fa:6b:1f:75:21:66:36:17:0d:1e:19:35: a5:bf:67:39:d5:87:3a:6e:23:ac:2d:3c:02:aa:c3:4c:53:16: d9:9d:34:62:d7:76:3a:bc:d3:61:08:12:e3:db:49:02:5b:cc: 5d:0f:b4:da:6d:e6:b0:e7:71:f5:8e:1e:3e:60:85:0b:21:bc: 66:5f:41:0a:b1:db:60:2d:24:37:94:99:20:b2:49:65:db:bd: 4a:22:8e:81:29:35:17:09:45:0b:a5:69:08:13:b3:81:84:dc: 05:87:90:44:e5:9e:89:0b:87:7f:f7:d1:fe:7c:c4:a0:b2:1e: 23:01:5d:84:19:a0:eb:13:50:fe:f2:55:54:20:62:1a:39:68: 21:b1:6d:5d:dd:bc:5b:28:86:14:e1:60:45:07:42:77:0e:32: db:7f:05:78:ee:bf:f8:aa:5f:44:cf:3f:fa:61:79:7c:42:47: 11:02:50:12:13:2d:ae:21:2c:ae:fe:5f:88:f9:d5:78:b4:f8: 1b:7b:1e:a3:50:04:2d:ba:34:95:ec:29:c9:a6:dd:46:46:ce: 8f:05:28:0a:4d:06:41:fc:2c:b4:ea:13:82:60:7c:f8:92:2c: 81:ff:2c:4c:a2:0d:e0:60:4c:71:61:ff:fe:8f:e8:8b:d8:55: d8:ef:2d:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57MUtGDhFbzgitbJlswiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWEyZmQ2ZjVlNWFmODdkNWNlYTA5NTA2NmZiY2MzZDNl NTQ2YTQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZTY4ZTMxMjI5OTVjOGYwMjEwZWI1YjdkM2ExY2RlZDdhNmFlNTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA9dT2A3xWR+Y6zVhIzk3lH67/uI SfJQ/vuUYcWtelov01g2KUmM8viEu/pUCVojMoJ3+QKYHlecRRjm1YdE9INq+qFM pPCRdIjmviZu3yZ5iOI5uY1jG+XhDe3GW1vXcSWq+uLYKP1oopc8JygLwbXmG4rl Q8hAl21Qj6Xd5KyjiM7PeZwgbbN3ZTJ9J3P9ZI5WvHZlQ18rbh6/xJoxKiLjwV9l 3hUSNHmfXRGrkVzPZk4roSxQDIBzHtGd6O6h2bq2Lq4yNpg5+D4TCMtfT7bSfYD4 l0Zp9ubGshFHp9Gbu9jY9rTFJMIWQIeuJpntCt4eBsDo+gScmGcFk5/qoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO5o4xIplcjwIQ61t9Ohze16auU1MB8GA1UdIwQY MBaAFDUaL9b15a+H1c6glQZvvMPT5UakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODIt MjMwNDllNGQyZjEyLzEvN21qakVpbVZ5UEFoRHJXMzA2SE43WHBxNVRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9jZGRkZDUtODE3YS00MTEzLThiODItMjMwNDllNGQyZjEy LzEvTlJvdjF2WGxyNGZWenFDVkJtLTh3OVBsUnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvAbMA0G CSqGSIb3DQEBCwUAA4IBAQCHzmCyIBP6ax91IWY2Fw0eGTWlv2c51Yc6biOsLTwC qsNMUxbZnTRi13Y6vNNhCBLj20kCW8xdD7Tabeaw53H1jh4+YIULIbxmX0EKsdtg LSQ3lJkgskll271KIo6BKTUXCUULpWkIE7OBhNwFh5BE5Z6JC4d/99H+fMSgsh4j AV2EGaDrE1D+8lVUIGIaOWghsW1d3bxbKIYU4WBFB0J3DjLbfwV47r/4ql9Ezz/6 YXl8QkcRAlASEy2uISyu/l+I+dV4tPgbex6jUAQtujSV7CnJpt1GRs6PBSgKTQZB /Cy06hOCYHz4kiyB/yxMog3gYExxYf/+j+iL2FXY7y33 -----END CERTIFICATE-----Generated at Mon Jan 26 05:34:30 2026 by rpki-client