This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/d3-nrfMvfaOpvsIYeah_hOlo3ZM.roa File: d3-nrfMvfaOpvsIYeah_hOlo3ZM.roa (raw, json) Hash identifier: tyX3/biLF/D/dHVN/RlOv+sp88iISW4o3eLH9GBLHbw= Subject key identifier: 77:7F:A7:AD:F3:2F:7D:A3:A9:BE:C2:18:79:A8:7F:84:E9:68:DD:93 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84947E86E2F013360D31E57E59B17 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/d3-nrfMvfaOpvsIYeah_hOlo3ZM.roa Signing time: Thu 01 Jan 2026 18:18:24 +0000 ROA not before: Thu 01 Jan 2026 18:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12029 IP address blocks: 89.106.27.0/24 maxlen: 24 103.47.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:49:47:e8:6e:2f:01:33:60:d3:1e:57:e5:9b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=777fa7adf32f7da3a9bec21879a87f84e968dd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:00:20:a4:9b:54:e0:c9:2c:e3:a1:ee:55: 0c:ff:36:b6:bb:22:d0:9d:e5:7f:da:2a:7e:60:7c: 20:8e:7a:b0:e0:ee:f6:2f:b6:15:d1:86:c7:9c:73: ee:7f:03:ac:37:6d:85:72:86:0a:4e:ef:a2:14:ec: b0:72:b0:26:e1:04:bf:13:1d:75:3e:e7:b2:75:6d: dd:49:59:c3:96:ba:4d:af:d4:19:5e:9e:b0:8a:cb: 9c:2e:8b:c8:e7:b1:dd:6a:e7:c9:40:a3:c1:6f:45: 22:01:e0:69:59:ef:8d:3c:c0:f0:d0:20:d7:0b:c4: 25:8c:79:03:fd:ef:ce:5d:2f:0b:f3:41:48:d6:96: f8:fb:d8:cf:09:88:c3:aa:d5:87:1a:5e:b1:b8:a8: 23:35:bd:d7:1f:2d:9d:88:2c:43:28:10:af:7d:1e: 28:85:54:77:a0:36:70:27:93:8b:3d:f8:48:bd:06: 1b:25:5d:ce:c5:0a:94:73:cb:47:1e:1b:e2:4d:67: 2e:5f:3f:4a:f9:5d:92:02:54:76:82:51:49:93:df: b8:ff:09:44:13:a7:c4:63:79:a3:d9:86:ce:e6:67: 5d:1c:a0:92:e1:71:c1:f0:f0:93:2e:73:a0:80:fa: 39:fa:d3:41:ae:1a:c5:29:15:3e:87:95:d1:b2:66: 9d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7F:A7:AD:F3:2F:7D:A3:A9:BE:C2:18:79:A8:7F:84:E9:68:DD:93 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/d3-nrfMvfaOpvsIYeah_hOlo3ZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.27.0/24 103.47.56.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:25:1f:22:91:ec:86:28:44:e2:f1:b1:3e:fd:27:1e:7d:ff: d8:d9:4f:a7:5d:86:ca:1f:d3:75:d1:ff:6c:14:2f:03:d7:74: 70:62:58:34:33:0e:d1:f8:d8:2e:9d:e4:67:6a:c0:28:46:dc: ac:5d:97:9f:cd:bc:92:0d:5e:a1:de:2a:69:47:df:8b:c6:4e: 20:b5:3c:2d:65:c5:91:7f:b2:ed:a4:fa:fd:d1:1e:08:70:4d: 9e:1c:73:b5:c4:97:18:75:8c:84:a7:8e:71:50:b0:9b:a3:d8: 7c:57:f3:2d:7a:73:68:5d:15:8a:6f:61:a6:08:7c:88:2a:0c: b6:9a:71:c9:a1:a3:66:dd:4a:08:15:27:3a:ef:c9:83:53:ae: 38:84:a3:39:80:8d:36:1a:27:b1:5b:4a:28:c7:72:41:ab:93: 49:e0:82:d3:74:6f:b3:12:b2:00:6d:d1:cc:e5:de:4d:21:82: 00:50:4d:b7:de:f7:11:70:c5:c9:a6:20:dd:5e:dc:cf:4c:ff: 9a:19:4d:60:d1:f6:dd:af:c7:44:5a:4d:79:7a:2a:d7:4a:64: db:54:98:34:db:04:5a:d2:7c:0f:9b:c5:2e:3b:81:2b:b9:c4: c4:cd:47:d8:44:26:e2:8c:b1:1a:6b:34:5a:24:d1:e7:a9:7d: 27:75:3d:f9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yElH6G4vATNg0x5X5ZsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzdmYTdhZGYzMmY3ZGEzYTliZWMyMTg3OWE4N2Y4NGU5NjhkZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF4AIKSbVODJLOOh7lUM/za2uyLQ neV/2ip+YHwgjnqw4O72L7YV0YbHnHPufwOsN22FcoYKTu+iFOywcrAm4QS/Ex11 PueydW3dSVnDlrpNr9QZXp6wisucLovI57HdaufJQKPBb0UiAeBpWe+NPMDw0CDX C8QljHkD/e/OXS8L80FI1pb4+9jPCYjDqtWHGl6xuKgjNb3XHy2diCxDKBCvfR4o hVR3oDZwJ5OLPfhIvQYbJV3OxQqUc8tHHhviTWcuXz9K+V2SAlR2glFJk9+4/wlE E6fEY3mj2YbO5mddHKCS4XHB8PCTLnOggPo5+tNBrhrFKRU+h5XRsmadtwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHd/p63zL32jqb7CGHmof4TpaN2TMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvZDMtbnJmTXZmYU9wdnNJWWVhaF9oT2xvM1pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWobAwQA Zy84MA0GCSqGSIb3DQEBCwUAA4IBAQB8JR8ikeyGKETi8bE+/Sceff/Y2U+nXYbK H9N10f9sFC8D13RwYlg0Mw7R+NguneRnasAoRtysXZefzbySDV6h3ippR9+Lxk4g tTwtZcWRf7LtpPr90R4IcE2eHHO1xJcYdYyEp45xULCbo9h8V/MtenNoXRWKb2Gm CHyIKgy2mnHJoaNm3UoIFSc678mDU644hKM5gI02GiexW0oox3JBq5NJ4ILTdG+z ErIAbdHM5d5NIYIAUE233vcRcMXJpiDdXtzPTP+aGU1g0fbdr8dEWk15eirXSmTb VJg02wRa0nwPm8UuO4ErucTEzUfYRCbijLEaazRaJNHnqX0ndT35 -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:22 2026 by rpki-client