This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/eed8-v0DQQsIlGh_LdKlEMEvsTw.roa File: eed8-v0DQQsIlGh_LdKlEMEvsTw.roa (raw, json) Hash identifier: ryiQISgXOOgfkizItwqCf8st8jseYCZTQbYCWpyKpsM= Subject key identifier: 79:E7:7C:FA:FD:03:41:0B:08:94:68:7F:2D:D2:A5:10:C1:2F:B1:3C Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6 Certificate serial: 019B77C76DB6D6068B890DB8CFFBE74693AE Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/eed8-v0DQQsIlGh_LdKlEMEvsTw.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5413 IP address blocks: 185.121.16.0/22 maxlen: 22 185.121.16.0/24 maxlen: 24 185.121.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6d:b6:d6:06:8b:89:0d:b8:cf:fb:e7:46:93:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6 Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79e77cfafd03410b0894687f2dd2a510c12fb13c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:82:58:99:3a:77:f8:34:cb:0f:19:0f:3f: f8:0d:70:d4:d4:ee:43:74:ea:21:ee:81:4a:10:91: e7:37:7f:f2:36:91:78:3c:00:af:5b:da:f6:1e:70: a0:59:fb:73:cd:08:00:c6:6b:5c:b6:49:f4:dd:f4: 6e:97:ad:b3:ba:c2:8e:1c:f0:b7:3a:13:3f:da:d8: 86:86:1a:20:f3:a2:40:22:70:e5:44:09:66:8b:c4: ac:2e:5f:35:66:cf:23:b1:3c:79:88:ad:fb:e0:4a: 77:07:1c:b4:34:37:be:77:f2:dd:7a:20:44:22:70: bc:3f:19:38:ef:fc:b6:c0:69:b5:5c:f4:00:29:07: 85:4a:99:89:86:2f:19:06:4b:9c:78:e4:b1:c9:20: 95:5f:03:f4:fb:de:29:93:3b:35:1d:8f:ac:fe:7d: 96:f4:b3:ea:67:88:eb:01:88:6d:3c:2c:80:25:ec: 5d:5d:96:a3:cf:1f:3a:21:d9:c3:60:e4:dd:bc:af: 0c:de:38:ce:9a:64:26:5d:da:90:e6:d8:4f:61:83: 8a:38:5c:55:49:56:6b:11:ae:2c:b1:5b:69:70:5c: 74:78:6b:77:f1:52:62:ef:e6:ea:0d:22:0c:0a:fe: 4c:08:37:25:c9:8b:b7:f7:b6:ae:37:c0:7e:fe:ce: 15:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E7:7C:FA:FD:03:41:0B:08:94:68:7F:2D:D2:A5:10:C1:2F:B1:3C X509v3 Authority Key Identifier: keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/eed8-v0DQQsIlGh_LdKlEMEvsTw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.16.0/22 Signature Algorithm: sha256WithRSAEncryption 22:78:bf:8d:58:a3:ce:eb:68:b1:17:6f:8a:c1:5d:6c:d0:94: a0:2d:a6:8d:dc:56:93:73:4d:f0:91:94:df:12:9b:76:b0:65: 29:dc:ed:2b:dc:b0:7b:69:e3:65:06:dc:c3:20:1e:3f:56:5c: fe:11:6b:bf:cb:d9:e0:e4:ee:a5:07:fd:7b:e8:84:df:07:b6: 72:18:96:78:1f:fc:21:e4:59:8c:d7:2e:4e:0f:c7:b6:3b:e3: 03:74:d9:0f:a9:54:d2:e1:04:1a:9d:b5:6a:ad:4f:ff:c5:3b: e3:96:b7:10:2f:0d:e6:ea:11:2a:78:a8:7b:24:bc:fa:82:ea: 60:a2:04:8a:d9:98:45:b9:a6:66:a6:e7:81:6f:9c:19:bf:c4: e2:39:f6:b6:0e:27:7b:0b:64:cd:29:fe:38:1d:5b:7f:05:30: ff:e7:f8:45:0d:50:72:1a:0b:2d:5c:72:75:2b:2a:07:d9:d7: 5a:23:b2:de:5a:b8:f1:3d:8e:1e:88:52:5a:48:7b:65:1d:86: 2a:72:7b:e0:ab:9a:f5:ee:25:4a:ba:cb:77:b6:b7:8c:c8:4c: 84:b2:95:65:15:c9:92:a6:7e:b8:65:c1:9d:f2:24:f1:b2:0d: 91:1e:d2:7a:26:9f:75:b2:f0:e5:80:bc:66:cb:ef:75:e7:81: d2:6b:4a:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2221gaLiQ24z/vnRpOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZTAyMjI0ZmZiOTcxMTcyZTQ5MzVlZDdkZDk2NWQxMTU1 MDg5YjYwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWU3N2NmYWZkMDM0MTBiMDg5NDY4N2YyZGQyYTUxMGMxMmZiMTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAGCWJk6d/g0yw8ZDz/4DXDU1O5D dOoh7oFKEJHnN3/yNpF4PACvW9r2HnCgWftzzQgAxmtctkn03fRul62zusKOHPC3 OhM/2tiGhhog86JAInDlRAlmi8SsLl81Zs8jsTx5iK374Ep3Bxy0NDe+d/LdeiBE InC8Pxk47/y2wGm1XPQAKQeFSpmJhi8ZBkuceOSxySCVXwP0+94pkzs1HY+s/n2W 9LPqZ4jrAYhtPCyAJexdXZajzx86IdnDYOTdvK8M3jjOmmQmXdqQ5thPYYOKOFxV SVZrEa4ssVtpcFx0eGt38VJi7+bqDSIMCv5MCDclyYu397auN8B+/s4V2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnnfPr9A0ELCJRofy3SpRDBL7E8MB8GA1UdIwQY MBaAFFLgIiT/uXEXLkk17X3ZZdEVUIm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUt YjhkYTg5NDA2YmVkLzEvZWVkOC12MERRUXNJbEdoX0xkS2xFTUV2c1R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zMTFiYzUtM2YzNi00ZDVlLWFiZGUtYjhkYTg5NDA2YmVk LzEvVXVBaUpQLTVjUmN1U1RYdGZkbGwwUlZRaWJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXkQMA0G CSqGSIb3DQEBCwUAA4IBAQAieL+NWKPO62ixF2+KwV1s0JSgLaaN3FaTc03wkZTf Ept2sGUp3O0r3LB7aeNlBtzDIB4/Vlz+EWu/y9ng5O6lB/176ITfB7ZyGJZ4H/wh 5FmM1y5OD8e2O+MDdNkPqVTS4QQanbVqrU//xTvjlrcQLw3m6hEqeKh7JLz6gupg ogSK2ZhFuaZmpueBb5wZv8TiOfa2Did7C2TNKf44HVt/BTD/5/hFDVByGgstXHJ1 KyoH2ddaI7LeWrjxPY4eiFJaSHtlHYYqcnvgq5r17iVKust3treMyEyEspVlFcmS pn64ZcGd8iTxsg2RHtJ6Jp91svDlgLxmy+9154HSa0r+ -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:47 2026 by rpki-client