This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yPbUe9ufBE1Pan_f-u5hGtRy1t0.roa File: yPbUe9ufBE1Pan_f-u5hGtRy1t0.roa (raw, json) Hash identifier: Wia5AeWT6vIDODN1HEJTffTiQ8WzWOIYEkszM3a+vAM= Subject key identifier: C8:F6:D4:7B:DB:9F:04:4D:4F:6A:7F:DF:FA:EE:61:1A:D4:72:D6:DD Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8573D3CAEE6727877C85D2BA549C9 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yPbUe9ufBE1Pan_f-u5hGtRy1t0.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46105 IP address blocks: 77.111.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:57:3d:3c:ae:e6:72:78:77:c8:5d:2b:a5:49:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8f6d47bdb9f044d4f6a7fdffaee611ad472d6dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:25:b3:fd:65:9b:0b:f8:01:9f:7e:5a:66:6b: 27:01:cd:b9:19:e2:f9:b7:b1:bc:9c:d3:a5:12:89: 6c:c6:ab:e6:7c:81:61:17:80:cb:3e:6f:0e:2d:53: 81:77:d4:01:7f:c5:3d:22:c5:17:16:88:a2:7f:dc: a2:8a:a9:48:0d:d3:96:13:d7:82:66:4a:a4:22:4d: b7:8e:26:ef:4f:45:66:60:29:b5:6e:3e:b7:04:db: 33:e2:02:ec:8f:0d:12:19:f3:7a:08:5c:eb:b6:e0: 60:35:61:61:1c:bf:e1:a8:6d:ba:7b:44:79:71:22: ff:4f:f6:0f:ef:18:f2:7a:d7:78:29:35:ae:92:17: 45:75:cb:77:de:8d:1e:b8:9c:7f:c2:76:54:5e:45: 4c:a2:6e:d6:e7:91:fa:97:83:41:38:aa:18:60:7e: ac:34:da:47:81:79:9e:91:83:0d:94:86:76:18:0b: d2:28:03:e0:ce:ac:ea:97:2f:57:2c:7f:d7:a5:ef: 9e:03:86:65:80:3c:ae:17:78:90:41:c4:6d:f6:b2: 17:fd:ac:53:37:6c:c3:c0:0e:c2:58:81:f0:f0:4c: 34:03:e5:64:a7:23:8b:02:5e:ef:ce:02:2f:88:56: 71:04:ba:a8:d2:78:6a:26:a4:56:2d:eb:b4:b8:44: 2b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F6:D4:7B:DB:9F:04:4D:4F:6A:7F:DF:FA:EE:61:1A:D4:72:D6:DD X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/yPbUe9ufBE1Pan_f-u5hGtRy1t0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.111.0/24 Signature Algorithm: sha256WithRSAEncryption 04:cf:5c:0e:68:68:f3:c2:6a:2e:4d:6f:62:38:94:b1:f7:0d: b6:04:cf:cd:b8:ed:20:0d:13:f0:a9:b2:aa:53:5c:f6:42:9a: 51:22:5b:4d:04:cb:59:df:71:d0:3a:91:69:3d:47:4f:04:b6: 19:53:3b:3f:be:95:ad:b2:1f:23:77:e3:1b:67:55:43:48:6b: d4:97:42:42:57:e4:3e:4b:00:fe:7f:78:e3:f7:95:9b:02:d7: 78:16:fa:11:84:ac:10:fb:c6:b6:d7:32:b0:f4:62:0e:c0:86: c8:5e:e2:0c:33:b2:83:1c:c5:72:3d:a4:cf:ed:a0:0a:45:ec: aa:a4:cf:33:33:38:00:e1:30:ba:a1:1c:31:dc:f6:45:7d:b1: 34:5f:0f:aa:67:06:58:76:5b:1d:8f:8c:dd:49:1d:ca:f4:07: 07:88:c4:9e:5a:d5:79:92:87:1e:8d:33:a6:d5:e4:d6:74:a4: 9b:4b:10:36:81:a6:4c:12:3a:6e:ce:4c:ac:5e:2d:40:6e:6c: f3:e4:ae:71:23:7d:a8:16:eb:2b:35:74:f1:e6:e4:c7:e2:0f: 29:6b:0e:ba:32:8c:58:77:f9:fb:a6:45:03:09:2e:86:f2:eb: 06:93:ab:92:dc:6b:50:52:49:3c:8f:b5:88:7c:81:7b:76:a0: c1:50:c4:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFc9PK7mcnh3yF0rpUnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGY2ZDQ3YmRiOWYwNDRkNGY2YTdmZGZmYWVlNjExYWQ0NzJkNmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCWz/WWbC/gBn35aZmsnAc25GeL5 t7G8nNOlEolsxqvmfIFhF4DLPm8OLVOBd9QBf8U9IsUXFoiif9yiiqlIDdOWE9eC ZkqkIk23jibvT0VmYCm1bj63BNsz4gLsjw0SGfN6CFzrtuBgNWFhHL/hqG26e0R5 cSL/T/YP7xjyetd4KTWukhdFdct33o0euJx/wnZUXkVMom7W55H6l4NBOKoYYH6s NNpHgXmekYMNlIZ2GAvSKAPgzqzqly9XLH/Xpe+eA4ZlgDyuF3iQQcRt9rIX/axT N2zDwA7CWIHw8Ew0A+VkpyOLAl7vzgIviFZxBLqo0nhqJqRWLeu0uEQrEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMj21HvbnwRNT2p/3/ruYRrUctbdMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEveVBiVWU5dWZCRTFQYW5fZi11NWhHdFJ5MXQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9vMA0G CSqGSIb3DQEBCwUAA4IBAQAEz1wOaGjzwmouTW9iOJSx9w22BM/NuO0gDRPwqbKq U1z2QppRIltNBMtZ33HQOpFpPUdPBLYZUzs/vpWtsh8jd+MbZ1VDSGvUl0JCV+Q+ SwD+f3jj95WbAtd4FvoRhKwQ+8a21zKw9GIOwIbIXuIMM7KDHMVyPaTP7aAKReyq pM8zMzgA4TC6oRwx3PZFfbE0Xw+qZwZYdlsdj4zdSR3K9AcHiMSeWtV5kocejTOm 1eTWdKSbSxA2gaZMEjpuzkysXi1Abmzz5K5xI32oFusrNXTx5uTH4g8paw66MoxY d/n7pkUDCS6G8usGk6uS3GtQUkk8j7WIfIF7dqDBUMTu -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:31 2026 by rpki-client