This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/E1B43eToeg9juwSrwFPSbC4X2G4.roa File: E1B43eToeg9juwSrwFPSbC4X2G4.roa (raw, json) Hash identifier: rNzf2VSkMloV9qysukbfY5HPtwfSVLDIxEriJfO1Ro8= Subject key identifier: 13:50:78:DD:E4:E8:7A:0F:63:BB:04:AB:C0:53:D2:6C:2E:17:D8:6E Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019BB3BE57F42643A5CBC53BB83D51251E38 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/E1B43eToeg9juwSrwFPSbC4X2G4.roa Signing time: Mon 12 Jan 2026 19:45:54 +0000 ROA not before: Mon 12 Jan 2026 19:45:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 77.76.4.0/22 maxlen: 22 78.128.2.0/23 maxlen: 23 78.128.10.0/23 maxlen: 23 78.128.12.0/22 maxlen: 22 78.128.16.0/20 maxlen: 20 78.128.41.0/24 maxlen: 24 78.128.52.0/22 maxlen: 22 78.128.56.0/22 maxlen: 22 78.128.82.0/23 maxlen: 23 78.128.84.0/22 maxlen: 22 78.128.88.0/22 maxlen: 22 78.128.97.0/24 maxlen: 24 78.128.100.0/22 maxlen: 22 78.128.104.0/22 maxlen: 22 78.142.10.0/23 maxlen: 23 78.142.12.0/22 maxlen: 22 78.142.31.0/24 maxlen: 24 83.222.190.0/23 maxlen: 23 84.201.224.0/20 maxlen: 20 91.148.162.0/23 maxlen: 23 91.148.164.0/23 maxlen: 23 91.148.169.0/24 maxlen: 24 91.148.170.0/23 maxlen: 23 91.148.172.0/22 maxlen: 22 91.148.176.0/21 maxlen: 21 130.185.227.0/24 maxlen: 24 130.185.234.0/24 maxlen: 24 185.81.120.0/24 maxlen: 24 193.24.240.0/22 maxlen: 22 193.200.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:be:57:f4:26:43:a5:cb:c5:3b:b8:3d:51:25:1e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 12 19:45:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=135078dde4e87a0f63bb04abc053d26c2e17d86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:13:2d:11:b0:2b:e7:bc:64:80:d0:3c:e5: 6e:f5:72:f1:0d:02:7a:d5:7a:5f:c3:2f:32:5a:6e: e6:00:a7:d2:b9:96:99:cd:68:57:b8:d2:5b:75:ab: bc:c6:25:dc:64:b4:06:be:4b:4d:21:e4:c7:fd:63: e9:4c:ba:7a:64:6c:a6:00:13:89:5f:f3:68:b8:eb: b4:5f:03:db:93:a5:d5:c0:8e:04:37:f8:d0:79:97: 09:83:66:7c:0f:ee:cd:68:47:80:f8:31:c9:6e:45: 71:7b:23:39:70:ac:d6:08:f2:88:7e:53:ea:30:00: 94:ca:e0:80:f9:35:64:cd:26:65:77:47:de:83:e9: bb:ca:c7:87:51:b0:f7:b3:b0:98:c8:a2:b0:3a:24: 41:6f:38:fa:1b:96:fe:ec:18:87:70:7f:e4:f9:34: 79:20:e7:22:c5:4c:ca:d3:f0:7e:fe:d5:32:81:0b: 58:9b:9d:59:4a:6d:5e:06:45:98:ff:35:0e:70:b9: f9:b6:ae:4c:c7:4c:80:d2:f1:27:48:4a:1e:31:41: 65:b0:41:c4:54:ca:76:db:a5:29:25:36:02:9c:3f: bf:e5:99:f4:ab:42:d1:9d:dc:28:ee:09:b1:f9:96: bf:f4:a0:fe:ef:37:a1:7f:e1:b5:97:8a:57:e9:28: 94:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:50:78:DD:E4:E8:7A:0F:63:BB:04:AB:C0:53:D2:6C:2E:17:D8:6E X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/E1B43eToeg9juwSrwFPSbC4X2G4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.4.0/22 78.128.2.0/23 78.128.10.0-78.128.31.255 78.128.41.0/24 78.128.52.0-78.128.59.255 78.128.82.0-78.128.91.255 78.128.97.0/24 78.128.100.0-78.128.107.255 78.142.10.0-78.142.15.255 78.142.31.0/24 83.222.190.0/23 84.201.224.0/20 91.148.162.0-91.148.165.255 91.148.169.0-91.148.183.255 130.185.227.0/24 130.185.234.0/24 185.81.120.0/24 193.24.240.0/22 193.200.14.0/23 Signature Algorithm: sha256WithRSAEncryption 15:9a:90:41:fd:00:2e:b8:62:5e:62:59:74:2a:bd:fa:a6:b0: 30:b3:10:e5:10:9b:b0:37:5f:5a:b6:48:63:6a:7b:3f:68:1e: 82:7a:b6:e0:57:87:b5:d9:6e:21:b2:05:69:84:c0:a2:90:4a: 4a:61:f9:07:f7:93:db:1f:b2:ee:e9:b9:34:2c:ba:f3:3e:9e: 29:2a:20:d0:c7:d5:e4:97:5d:55:53:8a:19:e7:fc:07:8b:72: d1:e9:16:c7:38:b0:a9:e8:54:21:38:b0:49:d0:03:16:3f:6b: 71:2f:73:58:ff:fe:f1:c2:a4:f6:a0:f7:c2:99:af:0e:89:88: ea:c8:31:80:37:58:94:c9:3e:32:b8:a3:78:1a:28:a9:fd:47: ff:05:4f:4c:e9:80:01:35:26:c0:95:b2:22:8b:a7:bf:57:15: c5:4a:e6:7a:71:3d:35:62:43:91:2f:ed:84:37:bf:1f:33:a9: bd:1d:5e:41:4e:c3:3b:91:09:a7:38:a7:a6:db:b1:7b:67:4d: 7c:8e:44:d3:de:57:29:91:d8:05:9c:a9:96:8d:a2:21:2a:cb: a8:0a:06:2a:78:fb:36:43:cc:7d:c1:97:f8:97:27:d7:04:48: 9c:be:71:c3:13:a8:c4:b6:ff:9d:7b:09:19:f5:4b:0b:4a:43: ca:05:6c:25 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZuzvlf0JkOly8U7uD1RJR44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTEyMTk0NTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzUwNzhkZGU0ZTg3YTBmNjNiYjA0YWJjMDUzZDI2YzJlMTdkODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGsTLRGwK+e8ZIDQPOVu9XLxDQJ6 1Xpfwy8yWm7mAKfSuZaZzWhXuNJbdau8xiXcZLQGvktNIeTH/WPpTLp6ZGymABOJ X/NouOu0XwPbk6XVwI4EN/jQeZcJg2Z8D+7NaEeA+DHJbkVxeyM5cKzWCPKIflPq MACUyuCA+TVkzSZld0feg+m7yseHUbD3s7CYyKKwOiRBbzj6G5b+7BiHcH/k+TR5 IOcixUzK0/B+/tUygQtYm51ZSm1eBkWY/zUOcLn5tq5Mx0yA0vEnSEoeMUFlsEHE VMp226UpJTYCnD+/5Zn0q0LRndwo7gmx+Za/9KD+7zehf+G1l4pX6SiUNwIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFBNQeN3k6HoPY7sEq8BT0mwuF9huMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvRTFCNDNlVG9lZzlqdXdTcndGUFNiQzRYMkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAJN TAQDBAFOgAIwDAMEAU6ACgMEBU6AAAMEAE6AKTAMAwQCToA0AwQCToA4MAwDBAFO gFIDBAJOgFgDBABOgGEwDAMEAk6AZAMEAk6AaDAMAwQBTo4KAwQETo4AAwQATo4f AwQBU96+AwQEVMngMAwDBAFblKIDBAFblKQwDAMEAFuUqQMEA1uUsAMEAIK54wME AIK56gMEALlReAMEAsEY8AMEAcHIDjANBgkqhkiG9w0BAQsFAAOCAQEAFZqQQf0A LrhiXmJZdCq9+qawMLMQ5RCbsDdfWrZIY2p7P2gegnq24FeHtdluIbIFaYTAopBK SmH5B/eT2x+y7um5NCy68z6eKSog0MfV5JddVVOKGef8B4ty0ekWxziwqehUITiw SdADFj9rcS9zWP/+8cKk9qD3wpmvDomI6sgxgDdYlMk+MrijeBooqf1H/wVPTOmA ATUmwJWyIounv1cVxUrmenE9NWJDkS/thDe/HzOpvR1eQU7DO5EJpzinptuxe2dN fI5E095XKZHYBZyplo2iISrLqAoGKnj7NkPMfcGX+Jcn1wRInL5xwxOoxLb/nXsJ GfVLC0pDygVsJQ== -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:53 2026 by rpki-client