This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/73IXHJYtz6UDrB4HcikwIyFLtNQ.roa File: 73IXHJYtz6UDrB4HcikwIyFLtNQ.roa (raw, json) Hash identifier: 4bGgZzboXS+rcaui7JH7DF+wRvYupKZP/+pcVhajxRc= Subject key identifier: EF:72:17:1C:96:2D:CF:A5:03:AC:1E:07:72:29:30:23:21:4B:B4:D4 Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019B7B364E90A7BCDF9F504B9F0CC885F0C5 Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/73IXHJYtz6UDrB4HcikwIyFLtNQ.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201308 IP address blocks: 84.239.46.0/24 maxlen: 24 2a02:2160:7111::/48 maxlen: 48 2a02:2160:7112::/48 maxlen: 48 2a02:2160:7113::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4e:90:a7:bc:df:9f:50:4b:9f:0c:c8:85:f0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef72171c962dcfa503ac1e0772293023214bb4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:30:25:19:da:91:94:fb:8e:c4:29:2b:0e:5d: 0f:4c:72:2d:1c:72:64:66:01:80:e5:27:65:aa:bf: f4:fa:2b:42:b6:1e:34:82:8d:c3:e1:cf:f3:0c:b4: dc:7c:01:92:66:4d:15:cf:0c:d5:56:65:97:5f:d2: 2f:57:39:75:2f:79:5f:84:a7:3e:d4:94:c0:49:1f: 88:ce:fe:66:6e:bb:65:29:cc:26:fe:3f:7a:4d:43: bd:b4:82:be:14:f0:92:0d:9e:ea:7b:4e:91:b7:3f: d2:56:46:e2:31:15:2f:07:7d:dc:cd:41:9a:88:cb: 82:c5:d9:cd:1e:4c:2d:88:8b:58:e9:87:a4:11:16: 0e:0e:1b:18:8a:f4:82:ec:23:25:f0:33:fe:aa:d4: be:82:d6:63:0b:de:15:c7:ca:b8:8a:9e:16:ac:73: a3:3d:10:7a:0a:00:1a:24:2d:e7:23:0d:54:50:ff: ab:0e:50:39:db:e3:ee:62:fe:19:fa:b7:7d:52:9a: e2:42:33:4b:a4:fb:e2:e8:01:e1:5f:b6:e6:40:4c: 4f:46:f9:40:4d:76:60:fa:b9:bd:fb:75:ae:3d:13: 05:ca:59:21:5a:2f:26:f2:db:6f:9d:90:dc:5d:a7: 8c:08:5f:15:70:6b:ec:72:3c:53:99:61:46:82:f5: d3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:72:17:1C:96:2D:CF:A5:03:AC:1E:07:72:29:30:23:21:4B:B4:D4 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/73IXHJYtz6UDrB4HcikwIyFLtNQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.239.46.0/24 IPv6: 2a02:2160:7111::-2a02:2160:7113:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 05:7f:25:8e:06:ee:d9:48:f7:7a:3b:96:54:bf:73:7d:58:26: 17:31:29:54:ad:be:4d:d0:11:c0:eb:49:58:92:84:87:5b:c9: 1f:dc:a1:7b:8f:cb:18:e9:43:27:a5:84:74:e2:a6:88:dc:19: b9:57:69:94:8f:76:24:3b:23:6e:42:95:d6:87:2f:4c:ce:08: 14:83:23:ce:17:e4:21:4f:de:09:c8:a4:e9:af:64:74:80:18: ab:13:e1:a1:e5:47:aa:be:cc:4d:8c:00:55:c4:83:b8:ea:d7: d7:0a:79:6d:39:47:74:19:71:07:ca:20:2f:fe:5d:dd:09:4a: dd:68:0f:03:a9:cd:88:2e:6c:3d:4e:1c:ac:c0:28:35:ee:5b: 20:ad:56:53:e3:14:ba:73:14:32:de:82:65:28:95:d4:52:b5: 67:f9:3b:49:7d:85:81:e7:b0:f6:4f:a4:ca:5a:5a:66:7f:14: 9f:a2:67:b1:f5:61:bd:ee:83:1a:13:16:8a:36:0d:1b:05:54: fa:ef:f3:de:09:5f:ff:bf:cb:01:8e:f5:c6:0c:a1:c4:98:29: a5:d9:bb:de:a9:8d:03:f3:0f:9d:e0:47:9f:46:87:15:b8:62: ea:b4:ac:27:59:2d:80:40:0b:6f:cc:a2:d4:75:73:7e:a3:f3: c4:0c:ae:a7 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt7Nk6Qp7zfn1BLnwzIhfDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjcyMTcxYzk2MmRjZmE1MDNhYzFlMDc3MjI5MzAyMzIxNGJiNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TAlGdqRlPuOxCkrDl0PTHItHHJk ZgGA5Sdlqr/0+itCth40go3D4c/zDLTcfAGSZk0VzwzVVmWXX9IvVzl1L3lfhKc+ 1JTASR+Izv5mbrtlKcwm/j96TUO9tIK+FPCSDZ7qe06Rtz/SVkbiMRUvB33czUGa iMuCxdnNHkwtiItY6YekERYODhsYivSC7CMl8DP+qtS+gtZjC94Vx8q4ip4WrHOj PRB6CgAaJC3nIw1UUP+rDlA52+PuYv4Z+rd9UpriQjNLpPvi6AHhX7bmQExPRvlA TXZg+rm9+3WuPRMFylkhWi8m8ttvnZDcXaeMCF8VcGvscjxTmWFGgvXT/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFO9yFxyWLc+lA6weB3IpMCMhS7TUMB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvNzNJWEhKWXR6NlVEckI0SGNpa3dJeUZMdE5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAVO8uMBoE AgACMBQwEgMHACoCIWBxEQMHAioCIWBxEDANBgkqhkiG9w0BAQsFAAOCAQEABX8l jgbu2Uj3ejuWVL9zfVgmFzEpVK2+TdARwOtJWJKEh1vJH9yhe4/LGOlDJ6WEdOKm iNwZuVdplI92JDsjbkKV1ocvTM4IFIMjzhfkIU/eCcik6a9kdIAYqxPhoeVHqr7M TYwAVcSDuOrX1wp5bTlHdBlxB8ogL/5d3QlK3WgPA6nNiC5sPU4crMAoNe5bIK1W U+MUunMUMt6CZSiV1FK1Z/k7SX2Fgeew9k+kylpaZn8Un6JnsfVhve6DGhMWijYN GwVU+u/z3glf/7/LAY71xgyhxJgppdm73qmNA/MPneBHn0aHFbhi6rSsJ1ktgEAL b8yi1HVzfqPzxAyupw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:35 2026 by rpki-client