This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tED3a2UiZeDVAxbXmNxN483TEck.roa File: tED3a2UiZeDVAxbXmNxN483TEck.roa (raw, json) Hash identifier: 5cmBAN66l8GIHRQREqywZsQxAcm7W7YmVcKdn3k1bYA= Subject key identifier: B4:40:F7:6B:65:22:65:E0:D5:03:16:D7:98:DC:4D:E3:CD:D3:11:C9 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84889D4DFCB2992B2E19BF5F22CE0 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tED3a2UiZeDVAxbXmNxN483TEck.roa Signing time: Thu 01 Jan 2026 18:18:24 +0000 ROA not before: Thu 01 Jan 2026 18:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9002 IP address blocks: 74.112.156.0/22 maxlen: 24 89.106.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:48:89:d4:df:cb:29:92:b2:e1:9b:f5:f2:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b440f76b652265e0d50316d798dc4de3cdd311c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:75:12:48:0a:8b:65:20:5b:ec:f6:2b:14: be:07:67:0b:6f:bc:28:85:a9:9b:79:87:1e:fb:1e: 98:32:bf:d0:28:ff:29:cb:2a:08:d7:cf:c3:22:ce: ce:6b:eb:37:1f:cd:29:57:5a:cf:56:5a:89:6b:c5: a0:ed:d4:b0:37:19:29:4c:3d:a9:77:ac:16:6c:17: 99:1a:47:6a:16:a2:d0:b2:ac:34:38:9c:be:71:5c: 60:cf:53:b6:1c:88:83:a2:8b:8f:8c:f4:10:8b:d6: 05:86:d1:b7:2f:5e:29:64:b7:3b:3f:2f:19:14:f0: 21:a5:2e:15:d5:62:41:fa:bd:44:f7:5b:5e:44:09: 9d:5f:14:95:ca:80:5b:e3:d4:f0:b2:5a:25:4e:2a: 87:d7:87:2b:5c:5f:75:54:61:f5:7e:9c:58:94:7d: f5:ad:93:77:12:50:e5:44:1a:82:fa:34:45:a9:62: 1a:62:a4:da:17:18:d6:61:6b:c3:e5:8d:d2:2c:d0: 78:58:4f:66:bb:74:ff:6b:7b:b8:95:61:86:d5:b8: af:5d:6c:a3:d7:b2:a5:3e:3a:5a:17:c1:39:f4:9b: b8:24:e1:88:5b:ff:44:46:1e:ef:ef:f6:4c:0a:df: ac:c2:b1:87:56:84:19:2b:97:95:65:42:8e:de:68: f7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:40:F7:6B:65:22:65:E0:D5:03:16:D7:98:DC:4D:E3:CD:D3:11:C9 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tED3a2UiZeDVAxbXmNxN483TEck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.112.156.0/22 89.106.28.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:0a:bb:86:05:67:ce:a8:30:d9:f0:d4:20:d9:79:e7:c5:7a: 40:32:d1:2f:e9:2c:fb:3c:3e:f1:e7:22:d3:ff:49:44:21:a9: b4:d2:d1:e9:0e:cd:6d:06:a4:22:41:5c:ee:67:ed:3b:52:d1: 2c:53:59:94:60:b3:08:c7:de:8b:eb:d2:c6:8f:bc:c5:37:09: 40:ac:c0:19:b9:33:17:05:4b:f3:f0:54:4b:ae:e6:78:64:3b: 01:19:76:4a:09:4f:13:38:0e:31:49:dc:ba:d1:a3:fa:25:74: 03:f6:ea:38:03:cb:fb:44:7f:1a:3e:84:98:b2:3c:b9:2f:33: eb:e4:da:af:e1:b1:72:cc:0f:f7:af:31:31:75:17:a6:7f:cc: d1:fa:6e:f3:17:9f:1d:09:27:6f:45:62:89:05:2f:e7:a7:41: 26:36:05:ec:82:c5:88:fa:8a:6c:3c:c5:53:62:d8:a0:62:cd: e0:ea:9a:e1:d5:6a:98:c4:d1:0e:c3:b1:d1:f4:be:d1:77:bc: 26:c3:d7:90:04:a7:ee:38:ba:3e:3b:d4:68:aa:cb:96:9e:12: 1b:09:4d:d1:9e:4c:e5:68:02:da:e7:05:f3:02:3b:28:22:10: 55:18:ae:7a:8e:ca:ed:29:ea:77:17:83:de:2e:67:7a:f6:fa: 8e:a5:33:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yEiJ1N/LKZKy4Zv18izgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQwZjc2YjY1MjI2NWUwZDUwMzE2ZDc5OGRjNGRlM2NkZDMxMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1Z1EkgKi2UgW+z2KxS+B2cLb7wo hambeYce+x6YMr/QKP8pyyoI18/DIs7Oa+s3H80pV1rPVlqJa8Wg7dSwNxkpTD2p d6wWbBeZGkdqFqLQsqw0OJy+cVxgz1O2HIiDoouPjPQQi9YFhtG3L14pZLc7Py8Z FPAhpS4V1WJB+r1E91teRAmdXxSVyoBb49TwslolTiqH14crXF91VGH1fpxYlH31 rZN3ElDlRBqC+jRFqWIaYqTaFxjWYWvD5Y3SLNB4WE9mu3T/a3u4lWGG1bivXWyj 17KlPjpaF8E59Ju4JOGIW/9ERh7v7/ZMCt+swrGHVoQZK5eVZUKO3mj3qwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLRA92tlImXg1QMW15jcTePN0xHJMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvdEVEM2EyVWlaZURWQXhiWG1OeE40ODNURWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCSnCcAwQC WWocMA0GCSqGSIb3DQEBCwUAA4IBAQBrCruGBWfOqDDZ8NQg2XnnxXpAMtEv6Sz7 PD7x5yLT/0lEIam00tHpDs1tBqQiQVzuZ+07UtEsU1mUYLMIx96L69LGj7zFNwlA rMAZuTMXBUvz8FRLruZ4ZDsBGXZKCU8TOA4xSdy60aP6JXQD9uo4A8v7RH8aPoSY sjy5LzPr5Nqv4bFyzA/3rzExdRemf8zR+m7zF58dCSdvRWKJBS/np0EmNgXsgsWI +opsPMVTYtigYs3g6prh1WqYxNEOw7HR9L7Rd7wmw9eQBKfuOLo+O9RoqsuWnhIb CU3RnkzlaALa5wXzAjsoIhBVGK56jsrtKep3F4PeLmd69vqOpTOS -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:28 2026 by rpki-client