This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa File: Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa (raw, json) Hash identifier: kYGqmXXjuRtKcO0c+iMXi0qsCWcYdXw5YIPgbA3A38U= Subject key identifier: 11:DF:A3:58:CE:A8:47:58:F4:2C:9F:CE:44:AA:0C:85:E3:B9:F9:ED Certificate issuer: /CN=3cb78128b79ca91ab624ba8325dfced94f64469a Certificate serial: 019B7AC8CA3461AE68A1F1276DEE6A105B8A Authority key identifier: 3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa Signing time: Thu 01 Jan 2026 18:18:57 +0000 ROA not before: Thu 01 Jan 2026 18:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12703 IP address blocks: 185.71.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.mft rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ca:34:61:ae:68:a1:f1:27:6d:ee:6a:10:5b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cb78128b79ca91ab624ba8325dfced94f64469a Validity Not Before: Jan 1 18:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11dfa358cea84758f42c9fce44aa0c85e3b9f9ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:a8:5b:d8:73:1c:48:69:81:ab:5c:ab:5f: cf:c9:e5:85:46:df:fc:6b:86:a8:48:c9:c2:ba:82: 9a:bd:f9:88:ff:79:98:b5:d2:2c:a9:eb:b4:04:cd: f2:27:57:37:55:81:4f:2b:78:63:c7:31:ad:0e:9f: 31:8b:1d:7b:cb:0e:32:c4:d4:63:a8:ff:e6:5c:78: bb:43:82:4f:ec:bb:6c:5a:6f:30:bf:b2:e5:4e:cf: a1:a1:e4:8e:41:c2:5c:9b:d8:9e:fb:8c:d4:3a:46: 82:2b:41:d3:74:f4:fe:55:b5:ce:82:f4:06:52:12: 6c:ab:18:7e:e1:21:2b:93:a4:dc:8b:00:7b:91:cf: 35:cb:48:ce:b5:54:14:f5:ad:a6:04:cd:6f:f7:e5: 90:eb:0e:f8:59:c6:bc:26:bd:61:f3:0b:23:05:31: 05:36:77:48:38:43:86:29:d6:ff:14:85:37:9b:58: 47:c4:d9:ad:54:4f:62:cb:ce:e2:47:6d:e1:67:07: e4:ea:ad:8a:a9:e6:ac:a6:7c:14:cb:08:66:16:ac: de:94:84:c6:f3:e5:11:0a:52:59:e3:5e:81:f8:33: bf:e7:e4:48:c7:e4:f4:31:4e:1f:38:bd:35:ac:07: cf:65:82:0e:44:a3:2c:6e:7f:71:b6:1b:4a:cd:44: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DF:A3:58:CE:A8:47:58:F4:2C:9F:CE:44:AA:0C:85:E3:B9:F9:ED X509v3 Authority Key Identifier: keyid:3C:B7:81:28:B7:9C:A9:1A:B6:24:BA:83:25:DF:CE:D9:4F:64:46:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLeBKLecqRq2JLqDJd_O2U9kRpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/Ed-jWM6oR1j0LJ_ORKoMheO5-e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/779d7c-7564-4960-98c1-5f6ee58d9c8b/1/PLeBKLecqRq2JLqDJd_O2U9kRpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.71.100.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:8e:f7:8e:69:3a:d9:ea:72:ee:3c:5d:0e:a5:91:11:f2:2c: 45:52:e9:f8:9e:e7:b2:90:ac:88:61:21:63:dd:f8:a7:55:dc: 1c:5a:44:b7:a7:e2:26:98:f9:48:65:5f:e7:5f:8a:9a:2f:63: c6:bc:b5:bb:ff:56:e8:e8:1c:59:38:1b:bf:65:a9:63:56:1f: b0:d8:81:2a:c1:4c:20:7e:79:a2:d0:17:05:9f:96:6b:b5:8a: 45:62:05:e8:5f:de:c0:81:9c:a5:c9:09:d1:28:fe:2c:ec:72: f2:e4:67:32:cf:4e:e6:86:50:10:ff:fa:4c:fd:19:15:b9:ca: c4:5c:5c:f6:df:94:95:51:d0:6a:17:79:5b:7b:cd:41:30:e5: 06:23:e2:d2:4c:7d:3b:28:d2:95:88:af:1c:7c:5e:e5:57:69: 7e:30:51:3d:ea:30:c7:35:1e:a5:ff:ed:c7:d3:db:39:53:94: be:95:13:fa:0a:c5:12:71:c3:c5:13:dc:7e:f0:52:aa:77:fc: 69:9c:9a:bf:0f:bd:e2:28:23:cd:2f:4d:90:9c:9a:f1:5c:a2: ba:37:14:48:4d:94:85:fe:14:d1:63:fb:79:ef:af:f0:5b:68: 25:97:ea:12:5e:df:10:3f:8d:89:9d:c4:1e:98:cf:cc:b6:e9: cc:59:76:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMo0Ya5oofEnbe5qEFuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjYjc4MTI4Yjc5Y2E5MWFiNjI0YmE4MzI1ZGZjZWQ5NGY2 NDQ2OWEwHhcNMjYwMTAxMTgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWRmYTM1OGNlYTg0NzU4ZjQyYzlmY2U0NGFhMGM4NWUzYjlmOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w+oW9hzHEhpgatcq1/PyeWFRt/8 a4aoSMnCuoKavfmI/3mYtdIsqeu0BM3yJ1c3VYFPK3hjxzGtDp8xix17yw4yxNRj qP/mXHi7Q4JP7LtsWm8wv7LlTs+hoeSOQcJcm9ie+4zUOkaCK0HTdPT+VbXOgvQG UhJsqxh+4SErk6TciwB7kc81y0jOtVQU9a2mBM1v9+WQ6w74Wca8Jr1h8wsjBTEF NndIOEOGKdb/FIU3m1hHxNmtVE9iy87iR23hZwfk6q2KqeaspnwUywhmFqzelITG 8+URClJZ416B+DO/5+RIx+T0MU4fOL01rAfPZYIORKMsbn9xthtKzUTVWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHfo1jOqEdY9CyfzkSqDIXjufntMB8GA1UdIwQY MBaAFDy3gSi3nKkatiS6gyXfztlPZEaaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEt NWY2ZWU1OGQ5YzhiLzEvRWQtaldNNm9SMWowTEpfT1JLb01oZU81LWUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzlkN2MtNzU2NC00OTYwLTk4YzEtNWY2ZWU1OGQ5Yzhi LzEvUExlQktMZWNxUnEySkxxREpkX08yVTlrUnBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUdkMA0G CSqGSIb3DQEBCwUAA4IBAQCbjveOaTrZ6nLuPF0OpZER8ixFUun4nueykKyIYSFj 3finVdwcWkS3p+ImmPlIZV/nX4qaL2PGvLW7/1bo6BxZOBu/ZaljVh+w2IEqwUwg fnmi0BcFn5ZrtYpFYgXoX97AgZylyQnRKP4s7HLy5Gcyz07mhlAQ//pM/RkVucrE XFz235SVUdBqF3lbe81BMOUGI+LSTH07KNKViK8cfF7lV2l+MFE96jDHNR6l/+3H 09s5U5S+lRP6CsUSccPFE9x+8FKqd/xpnJq/D73iKCPNL02QnJrxXKK6NxRITZSF /hTRY/t576/wW2gll+oSXt8QP42JncQemM/MtunMWXa8 -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:43 2026 by rpki-client