This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4hDUcMk1ylN0wwQfpA8XgA1jhVI.roa File: 4hDUcMk1ylN0wwQfpA8XgA1jhVI.roa (raw, json) Hash identifier: xNiLmfRybROnprzpJ787ud74ZFdI68RhQTp3FeqURhQ= Subject key identifier: E2:10:D4:70:C9:35:CA:53:74:C3:04:1F:A4:0F:17:80:0D:63:85:52 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC868E17A984E21C1F50FF02EB3C811 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4hDUcMk1ylN0wwQfpA8XgA1jhVI.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 77.111.101.0/24 maxlen: 24 94.229.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:68:e1:7a:98:4e:21:c1:f5:0f:f0:2e:b3:c8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e210d470c935ca5374c3041fa40f17800d638552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:4a:ed:d3:92:e3:0e:ee:5d:29:1e:73:1a: 70:ea:a0:0e:38:36:4f:a6:54:d0:40:44:35:28:e2: 13:01:08:55:94:2a:35:dd:72:3c:d8:72:d7:b4:e4: dd:42:23:5f:1e:1c:bd:ad:32:7b:86:41:61:3e:6a: ac:f2:51:2b:80:fa:2d:4a:87:89:cd:75:52:00:eb: 4f:6d:50:49:b8:3c:69:f7:ca:ae:3d:8b:11:5d:b6: 6d:27:7b:90:ea:5f:2d:dd:f5:ef:2d:6b:35:58:c7: 42:1a:00:4e:4e:5e:16:c3:3d:68:19:68:91:c6:47: 52:fd:dd:08:52:c4:d4:76:a7:76:2f:e1:04:e3:76: 61:f8:d2:91:1b:49:f3:00:89:92:3b:d0:5f:b9:4a: 2e:51:94:59:a1:1d:4f:85:f8:5c:0c:53:e6:6d:cd: 1c:89:00:8a:0e:4c:99:4a:81:84:16:05:89:43:d2: 65:df:53:b3:f2:c4:cb:87:b1:78:fa:3b:0e:26:56: 29:ac:53:da:f9:ef:aa:58:fe:48:51:e2:11:0e:c9: 5b:2c:9f:11:17:a6:a5:9b:98:4e:da:84:56:3f:29: 80:cc:18:b8:6d:32:bd:e9:43:99:ee:72:b4:e9:7c: 5a:db:7f:85:dd:7e:b7:d2:af:fb:bf:82:95:da:12: 7d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:10:D4:70:C9:35:CA:53:74:C3:04:1F:A4:0F:17:80:0D:63:85:52 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/4hDUcMk1ylN0wwQfpA8XgA1jhVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.101.0/24 94.229.221.0/24 Signature Algorithm: sha256WithRSAEncryption 64:01:70:2f:63:81:75:c4:08:7a:4d:16:90:eb:65:cb:d1:61: 31:4d:1d:e2:7a:d6:a6:6b:6a:7c:5d:0f:85:37:60:ef:82:81: ed:52:45:e3:44:36:c9:85:cf:99:67:26:2b:cf:ca:d4:fe:8e: a4:0d:fe:0c:57:16:48:4a:46:44:4b:62:c7:0b:05:d0:2a:6d: fb:80:d8:29:31:93:62:32:17:4d:1b:d3:07:ad:82:f0:2b:1e: 66:7c:e1:f8:40:2a:58:4e:a8:7c:eb:51:bb:3a:5e:e0:44:29: 0f:52:bc:50:01:2c:c1:fe:92:8d:82:e0:de:9b:80:f6:c7:6c: 1a:df:b3:1c:b7:5d:cd:6b:17:64:e0:93:46:40:72:ab:8e:5b: 8d:af:35:0f:b2:18:8e:10:07:60:1d:98:13:bb:03:37:3d:fb: 20:22:4b:3e:7f:f2:a2:d3:32:ad:18:94:a3:e4:78:47:04:30: 7a:3f:51:1a:72:e6:b1:29:70:94:3f:a2:f1:63:d5:5f:c6:73: 7e:e9:10:73:e6:a1:5b:8e:9b:71:d7:15:7d:c2:cd:b4:45:02: 8a:7e:40:cd:27:2b:61:92:03:c2:9a:6e:16:05:11:fa:5f:8e: 1f:9e:49:37:5b:57:35:b8:32:60:ab:0b:0c:ef:6e:2a:63:0d: 9f:2d:c5:2a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yGjhephOIcH1D/Aus8gRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjEwZDQ3MGM5MzVjYTUzNzRjMzA0MWZhNDBmMTc4MDBkNjM4NTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KBK7dOS4w7uXSkecxpw6qAOODZP plTQQEQ1KOITAQhVlCo13XI82HLXtOTdQiNfHhy9rTJ7hkFhPmqs8lErgPotSoeJ zXVSAOtPbVBJuDxp98quPYsRXbZtJ3uQ6l8t3fXvLWs1WMdCGgBOTl4Wwz1oGWiR xkdS/d0IUsTUdqd2L+EE43Zh+NKRG0nzAImSO9BfuUouUZRZoR1PhfhcDFPmbc0c iQCKDkyZSoGEFgWJQ9Jl31Oz8sTLh7F4+jsOJlYprFPa+e+qWP5IUeIRDslbLJ8R F6alm5hO2oRWPymAzBi4bTK96UOZ7nK06Xxa23+F3X630q/7v4KV2hJ94wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOIQ1HDJNcpTdMMEH6QPF4ANY4VSMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvNGhEVWNNazF5bE4wd3dRZnBBOFhnQTFqaFZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW9lAwQA XuXdMA0GCSqGSIb3DQEBCwUAA4IBAQBkAXAvY4F1xAh6TRaQ62XL0WExTR3ietam a2p8XQ+FN2DvgoHtUkXjRDbJhc+ZZyYrz8rU/o6kDf4MVxZISkZES2LHCwXQKm37 gNgpMZNiMhdNG9MHrYLwKx5mfOH4QCpYTqh861G7Ol7gRCkPUrxQASzB/pKNguDe m4D2x2wa37Mct13Naxdk4JNGQHKrjluNrzUPshiOEAdgHZgTuwM3PfsgIks+f/Ki 0zKtGJSj5HhHBDB6P1EacuaxKXCUP6LxY9VfxnN+6RBz5qFbjptx1xV9ws20RQKK fkDNJythkgPCmm4WBRH6X44fnkk3W1c1uDJgqwsM724qYw2fLcUq -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:17 2026 by rpki-client