This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1DbiEjCM5LRX_TUQJHI0lujGvOo.roa File: 1DbiEjCM5LRX_TUQJHI0lujGvOo.roa (raw, json) Hash identifier: MCj4cNo4Dd/572tVL4RbWxrBawvv0KprBhZcFrYXSiA= Subject key identifier: D4:36:E2:12:30:8C:E4:B4:57:FD:35:10:24:72:34:96:E8:C6:BC:EA Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019B7B364BB0966D2CC89FDECC16588273A4 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1DbiEjCM5LRX_TUQJHI0lujGvOo.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21294 IP address blocks: 84.239.19.0/24 maxlen: 24 84.239.20.0/24 maxlen: 24 84.239.21.0/24 maxlen: 24 84.239.22.0/24 maxlen: 24 84.239.23.0/24 maxlen: 24 84.239.24.0/24 maxlen: 24 84.239.26.0/24 maxlen: 24 84.239.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4b:b0:96:6d:2c:c8:9f:de:cc:16:58:82:73:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d436e212308ce4b457fd351024723496e8c6bcea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:79:7c:be:64:2f:33:4e:aa:28:2c:bf:10:ef: d8:dc:5f:af:d9:f2:0e:03:4c:d8:f5:2e:38:f4:72: 05:3e:d4:c5:3c:90:a8:4b:e6:b2:e1:2d:27:1f:2c: b7:67:81:db:8c:89:d4:03:77:0d:62:8a:54:64:41: dd:f4:41:01:78:66:9a:3a:68:e6:30:69:1a:af:b2: b1:76:b7:9a:40:27:a3:5c:dc:0b:9e:b0:5d:dc:99: fd:35:5e:47:48:5e:f1:d7:8f:73:6d:de:f0:5b:e5: b3:57:7a:fb:07:7d:65:ee:a4:99:4c:e6:ce:80:be: 07:32:f9:9f:19:33:e5:a3:47:ee:57:ab:44:b0:4d: 2b:96:75:82:61:4c:51:36:17:46:aa:02:7b:92:74: 48:3b:95:d7:54:e0:95:5c:5d:44:fb:9e:b1:ec:a4: c6:a5:17:6f:f7:a2:57:f2:d0:41:b7:b4:29:64:bf: f7:f9:70:8f:8f:f1:a9:f9:21:45:22:e6:49:fc:ff: 29:06:36:a6:4b:b5:81:e2:0f:9e:c3:c0:f4:92:17: 98:41:62:16:ee:02:9f:86:86:3b:80:b5:0d:58:67: 9c:89:49:84:25:7d:d5:4b:3e:bd:b5:55:93:d9:70: 60:bf:b1:97:38:62:3d:10:31:ea:e2:32:e1:81:98: d1:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:E2:12:30:8C:E4:B4:57:FD:35:10:24:72:34:96:E8:C6:BC:EA X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/1DbiEjCM5LRX_TUQJHI0lujGvOo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.239.19.0-84.239.24.255 84.239.26.0/24 84.239.53.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:49:6f:d0:c4:c4:ff:e3:3f:42:57:b4:bb:bf:a2:5b:60:46: 30:d8:cf:0f:bc:12:94:3c:cb:12:9f:84:cf:01:76:f6:d1:ba: d8:8b:b6:40:f2:d2:e2:ca:65:9e:a8:5c:b8:dd:35:41:e0:8b: 18:9d:48:ff:53:31:2b:8b:2f:93:65:bb:a6:c4:3c:5b:a7:1f: 8c:72:84:f4:05:d8:95:fb:08:17:81:49:08:d4:c4:fa:f3:9c: f1:66:ab:21:49:20:d9:12:8b:98:f0:e5:88:66:b9:68:91:18: f0:45:15:7f:f9:f6:94:b0:43:f4:33:26:96:f1:80:eb:a1:1a: f1:fa:12:ee:6c:5e:68:ad:a6:3b:7f:4b:e9:06:cd:54:69:03: fd:6b:00:09:b3:b3:27:2a:3e:20:d1:fc:e9:88:43:13:1e:b1: 73:d2:bd:1d:a3:6d:f2:07:56:d3:35:49:36:6f:cb:46:82:e0: 47:89:db:e2:dd:89:bd:48:1d:47:16:e8:cf:b1:bd:df:d1:6b: 3d:83:b5:ad:2c:dc:86:f2:20:e5:ca:a4:35:bc:69:5b:92:7d: 44:d9:b7:9c:6b:b5:16:32:8a:de:8e:80:1a:07:7e:fb:a3:e6: fa:a2:04:da:37:03:7c:d1:fc:40:94:1e:02:8e:f9:c9:ce:3b: 18:ba:1d:ce -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7Nkuwlm0syJ/ezBZYgnOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDM2ZTIxMjMwOGNlNGI0NTdmZDM1MTAyNDcyMzQ5NmU4YzZiY2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nl8vmQvM06qKCy/EO/Y3F+v2fIO A0zY9S449HIFPtTFPJCoS+ay4S0nHyy3Z4HbjInUA3cNYopUZEHd9EEBeGaaOmjm MGkar7KxdreaQCejXNwLnrBd3Jn9NV5HSF7x149zbd7wW+WzV3r7B31l7qSZTObO gL4HMvmfGTPlo0fuV6tEsE0rlnWCYUxRNhdGqgJ7knRIO5XXVOCVXF1E+56x7KTG pRdv96JX8tBBt7QpZL/3+XCPj/Gp+SFFIuZJ/P8pBjamS7WB4g+ew8D0kheYQWIW 7gKfhoY7gLUNWGeciUmEJX3VSz69tVWT2XBgv7GXOGI9EDHq4jLhgZjRAwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNQ24hIwjOS0V/01ECRyNJboxrzqMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvMURiaUVqQ001TFJYX1RVUUpISTBsdWpHdk9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABU7xMD BABU7xgDBABU7xoDBABU7zUwDQYJKoZIhvcNAQELBQADggEBAI1Jb9DExP/jP0JX tLu/oltgRjDYzw+8EpQ8yxKfhM8BdvbRutiLtkDy0uLKZZ6oXLjdNUHgixidSP9T MSuLL5Nlu6bEPFunH4xyhPQF2JX7CBeBSQjUxPrznPFmqyFJINkSi5jw5YhmuWiR GPBFFX/59pSwQ/QzJpbxgOuhGvH6Eu5sXmitpjt/S+kGzVRpA/1rAAmzsycqPiDR /OmIQxMesXPSvR2jbfIHVtM1STZvy0aC4EeJ2+Ldib1IHUcW6M+xvd/Raz2Dta0s 3IbyIOXKpDW8aVuSfUTZt5xrtRYyit6OgBoHfvuj5vqiBNo3A3zR/ECUHgKO+cnO Oxi6Hc4= -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:39 2026 by rpki-client