This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/c4VwfAIIxq8HneUFjmHadjHzSns.roa File: c4VwfAIIxq8HneUFjmHadjHzSns.roa (raw, json) Hash identifier: pJrbCNaVteoeZHOyBAII8tij1ozIZm0ZpfPyvb+wCOY= Subject key identifier: 73:85:70:7C:02:08:C6:AF:07:9D:E5:05:8E:61:DA:76:31:F3:4A:7B Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8659169E5FB76218036DEF3BE8326 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/c4VwfAIIxq8HneUFjmHadjHzSns.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214677 IP address blocks: 85.208.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:65:91:69:e5:fb:76:21:80:36:de:f3:be:83:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7385707c0208c6af079de5058e61da7631f34a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9c:30:2b:4e:8c:f1:02:d3:1a:b4:36:5e:9d: 90:c8:87:01:d0:45:45:93:bf:13:bd:17:aa:c8:f1: 0f:88:ad:a3:b2:d2:12:e3:e3:6a:db:14:76:df:4e: 32:49:45:f0:71:55:07:9a:1c:ea:06:b9:9c:90:2a: d3:cf:50:98:05:79:33:10:ac:20:48:8b:87:7a:f5: 7b:ce:5b:42:8e:e6:f5:64:5b:0e:1b:64:6d:b1:6d: 83:06:3c:57:28:c8:e6:ab:37:7c:e2:2c:12:65:41: 3a:55:da:7d:08:bf:74:0b:3f:00:b9:5d:4c:7b:18: ac:b1:d3:83:4a:c2:1d:60:9d:21:4b:fb:ac:cc:66: 11:e2:b2:17:af:93:0c:6c:80:25:9c:af:2a:1f:a8: 56:a2:00:d1:96:4f:68:e4:85:0c:96:09:1f:85:73: a9:ef:79:41:19:ed:ce:2b:67:84:7d:f0:7d:3b:48: 66:04:af:0f:bb:e9:17:02:48:84:1b:3d:a1:f4:4a: bc:cc:2d:92:49:0d:a0:71:71:b9:7d:e8:c4:8f:7c: 44:08:44:ef:03:0f:08:fc:0b:7f:5d:f8:00:93:00: f1:5d:fd:ba:fb:d4:bd:3b:bf:59:4d:b4:4d:eb:fd: 9f:a3:23:6f:2b:91:73:26:46:22:4b:c3:c3:17:09: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:85:70:7C:02:08:C6:AF:07:9D:E5:05:8E:61:DA:76:31:F3:4A:7B X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/c4VwfAIIxq8HneUFjmHadjHzSns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.208.9.0/24 Signature Algorithm: sha256WithRSAEncryption d2:f0:3f:c3:83:36:2e:52:dd:1b:43:5b:c1:b6:2e:8d:6f:cc: 03:0a:a0:54:62:f4:a1:f2:6b:86:57:8f:b0:71:ba:2b:77:a4: 55:75:aa:d3:f5:e4:25:4f:51:22:de:a2:f1:18:50:89:5c:9a: 0b:c9:2b:3e:80:0c:88:4e:33:60:eb:79:f3:a5:d9:15:e6:e2: 1a:0a:d1:c5:72:e8:a4:95:37:a3:9e:07:06:69:05:23:8a:c9: 23:8d:55:b7:d7:92:31:42:f6:09:13:21:e7:d3:01:b3:0a:12: a2:d1:92:e9:b8:44:ce:9c:88:62:30:31:b8:ad:10:d8:d6:09: a6:d2:1b:65:04:59:4b:4f:44:64:df:98:a1:42:9f:f8:f6:08: c3:22:73:96:58:67:9b:6d:ea:af:fc:31:d8:37:31:6c:5f:72: 3b:c0:aa:89:cb:48:24:2d:6f:98:09:54:85:d2:2b:32:d0:1f: e5:b3:cd:24:92:dd:dc:f8:41:d9:9e:1d:2e:93:ff:4e:fc:0b: c9:d2:44:d3:ff:57:ee:03:50:4c:8f:4f:47:f0:72:47:5e:c1: 82:e0:4c:3d:c8:27:1b:a2:cf:2c:37:08:50:63:e5:69:29:99: d4:de:90:e5:d3:a5:fb:f5:51:c6:4f:c3:81:a1:e6:e1:64:e2: db:cf:31:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGWRaeX7diGANt7zvoMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mzg1NzA3YzAyMDhjNmFmMDc5ZGU1MDU4ZTYxZGE3NjMxZjM0YTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JwwK06M8QLTGrQ2Xp2QyIcB0EVF k78TvReqyPEPiK2jstIS4+Nq2xR2304ySUXwcVUHmhzqBrmckCrTz1CYBXkzEKwg SIuHevV7zltCjub1ZFsOG2RtsW2DBjxXKMjmqzd84iwSZUE6Vdp9CL90Cz8AuV1M exissdODSsIdYJ0hS/uszGYR4rIXr5MMbIAlnK8qH6hWogDRlk9o5IUMlgkfhXOp 73lBGe3OK2eEffB9O0hmBK8Pu+kXAkiEGz2h9Eq8zC2SSQ2gcXG5fejEj3xECETv Aw8I/At/XfgAkwDxXf26+9S9O79ZTbRN6/2foyNvK5FzJkYiS8PDFwmPBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOFcHwCCMavB53lBY5h2nYx80p7MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvYzRWd2ZBSUl4cThIbmVVRmptSGFkakh6U25zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdAJMA0G CSqGSIb3DQEBCwUAA4IBAQDS8D/DgzYuUt0bQ1vBti6Nb8wDCqBUYvSh8muGV4+w cbord6RVdarT9eQlT1Ei3qLxGFCJXJoLySs+gAyITjNg63nzpdkV5uIaCtHFcuik lTejngcGaQUjiskjjVW315IxQvYJEyHn0wGzChKi0ZLpuETOnIhiMDG4rRDY1gmm 0htlBFlLT0Rk35ihQp/49gjDInOWWGebbeqv/DHYNzFsX3I7wKqJy0gkLW+YCVSF 0isy0B/ls80kkt3c+EHZnh0uk/9O/AvJ0kTT/1fuA1BMj09H8HJHXsGC4Ew9yCcb os8sNwhQY+VpKZnU3pDl06X79VHGT8OBoebhZOLbzzHE -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:29 2026 by rpki-client