This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AOvP0fytuVSZJuWAbpzAr9EUN4Q.roa File: AOvP0fytuVSZJuWAbpzAr9EUN4Q.roa (raw, json) Hash identifier: SDXjElGNKClHrh5SupMqc2Lra2+IYpVFowrKdhV8aWA= Subject key identifier: 00:EB:CF:D1:FC:AD:B9:54:99:26:E5:80:6E:9C:C0:AF:D1:14:37:84 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BF3F704DD823F847736EBC3DC3263D715 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AOvP0fytuVSZJuWAbpzAr9EUN4Q.roa Signing time: Sun 25 Jan 2026 07:03:30 +0000 ROA not before: Sun 25 Jan 2026 07:03:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401322 IP address blocks: 77.111.103.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f7:04:dd:82:3f:84:77:36:eb:c3:dc:32:63:d7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 25 07:03:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00ebcfd1fcadb9549926e5806e9cc0afd1143784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:af:a2:f7:95:d5:29:77:29:55:d7:d2:0e: 68:d5:28:15:ee:db:02:5e:3c:05:3d:a8:1d:0c:19: 16:01:de:b0:82:f9:96:51:50:f0:ca:3c:f1:9b:9e: fb:bc:a4:2e:71:5e:32:64:77:fe:c2:bb:8a:22:8e: 2a:0f:95:0c:17:b9:cd:3e:d1:6c:55:68:25:7f:2a: d5:ed:e2:df:bd:68:fb:d1:76:f1:b3:0c:31:e7:cb: ee:86:33:dc:06:de:0f:e2:46:7d:06:99:e8:77:27: 79:ad:06:d8:f7:e2:ee:16:8e:b0:30:07:0b:b9:61: b7:cb:cb:ae:a0:05:c9:13:70:f0:aa:8f:55:10:a3: 4a:48:36:da:6b:2d:4e:68:86:0b:52:04:18:6b:ea: a7:4a:96:63:ba:02:bb:12:3d:46:0e:c1:8f:b6:3a: fc:19:3a:18:b3:3a:9d:9f:fc:a0:50:cb:8d:c2:e8: ad:d8:c0:13:3c:20:f5:d2:f1:81:c5:7d:6a:f5:3f: 35:b4:d4:cc:ed:62:c4:0a:d3:fa:d9:7d:76:88:91: 49:22:92:97:43:23:b3:ee:11:25:cd:3e:ce:e6:53: 73:c6:d8:00:3b:ad:fd:9d:db:64:82:49:eb:36:60: f1:19:10:2c:4e:e4:5a:3f:d5:e4:fe:47:c4:18:97: f6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EB:CF:D1:FC:AD:B9:54:99:26:E5:80:6E:9C:C0:AF:D1:14:37:84 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AOvP0fytuVSZJuWAbpzAr9EUN4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.103.0/24 89.106.16.0/24 Signature Algorithm: sha256WithRSAEncryption bb:c8:64:2e:4f:ac:77:d5:18:21:42:c1:69:b6:54:b8:d2:08: 0f:61:aa:66:a7:07:f2:c2:f2:58:1d:c5:88:cd:55:cd:a8:36: 6f:c8:ab:ff:da:2f:2e:03:59:d4:ef:a2:e5:33:6b:4f:5e:4f: 8a:26:af:61:8f:b1:70:0c:ff:a2:e1:9a:0f:63:2b:d9:7e:ef: 29:38:da:e3:5e:58:f5:fe:b6:2f:c4:ed:c8:f5:7d:61:5c:8c: 17:df:63:b3:fd:dc:b5:79:7c:77:6f:87:9a:25:78:dc:d3:a1: 79:a3:08:2e:85:dc:a5:19:8a:1a:12:33:28:02:5b:b7:4d:e7: ee:29:7e:0b:b7:6c:95:7b:e2:35:7e:50:c2:01:80:14:bb:ce: 65:78:3a:29:6e:11:00:18:c6:e7:fc:e3:36:01:81:15:6e:2d: 82:14:ab:11:e3:d3:18:45:55:ed:09:c5:72:26:37:54:e0:cd: 1e:4d:f4:30:61:ae:25:ea:18:c6:d8:5d:9d:ad:7c:de:e5:3e: e2:7a:04:30:46:f4:c9:3d:68:61:4e:c4:80:0c:3c:f2:47:bc: 34:af:14:0c:7e:68:80:53:44:8e:94:a4:ed:77:69:b8:37:11: f4:c2:6e:bb:40:c3:42:ff:96:e1:ed:35:c8:44:11:68:7f:85: a4:36:00:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvz9wTdgj+Edzbrw9wyY9cVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTI1MDcwMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGViY2ZkMWZjYWRiOTU0OTkyNmU1ODA2ZTljYzBhZmQxMTQzNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBqvoveV1Sl3KVXX0g5o1SgV7tsC XjwFPagdDBkWAd6wgvmWUVDwyjzxm577vKQucV4yZHf+wruKIo4qD5UMF7nNPtFs VWglfyrV7eLfvWj70Xbxswwx58vuhjPcBt4P4kZ9Bpnodyd5rQbY9+LuFo6wMAcL uWG3y8uuoAXJE3Dwqo9VEKNKSDbaay1OaIYLUgQYa+qnSpZjugK7Ej1GDsGPtjr8 GToYszqdn/ygUMuNwuit2MATPCD10vGBxX1q9T81tNTM7WLECtP62X12iJFJIpKX QyOz7hElzT7O5lNzxtgAO639ndtkgknrNmDxGRAsTuRaP9Xk/kfEGJf2jwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFADrz9H8rblUmSblgG6cwK/RFDeEMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvQU92UDBmeXR1VlNaSnVXQWJwekFyOUVVTjRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW9nAwQA WWoQMA0GCSqGSIb3DQEBCwUAA4IBAQC7yGQuT6x31RghQsFptlS40ggPYapmpwfy wvJYHcWIzVXNqDZvyKv/2i8uA1nU76LlM2tPXk+KJq9hj7FwDP+i4ZoPYyvZfu8p ONrjXlj1/rYvxO3I9X1hXIwX32Oz/dy1eXx3b4eaJXjc06F5owguhdylGYoaEjMo Alu3TefuKX4Lt2yVe+I1flDCAYAUu85leDopbhEAGMbn/OM2AYEVbi2CFKsR49MY RVXtCcVyJjdU4M0eTfQwYa4l6hjG2F2drXze5T7iegQwRvTJPWhhTsSADDzyR7w0 rxQMfmiAU0SOlKTtd2m4NxH0wm67QMNC/5bh7TXIRBFof4WkNgDv -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:14 2026 by rpki-client