This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EEOS3bV2oDUgeFjFMinzAsSuc7M.roa File: EEOS3bV2oDUgeFjFMinzAsSuc7M.roa (raw, json) Hash identifier: EicaNuMZ6SDissDgXCMqmoHg6XU96RYo6yxiNgQltuk= Subject key identifier: 10:43:92:DD:B5:76:A0:35:20:78:58:C5:32:29:F3:02:C4:AE:73:B3 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0E322E9647B43DA20187B77DEB7A Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EEOS3bV2oDUgeFjFMinzAsSuc7M.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48917 IP address blocks: 78.128.5.0/24 maxlen: 24 78.128.66.0/24 maxlen: 24 79.124.32.0/21 maxlen: 24 91.148.142.0/23 maxlen: 24 130.185.192.0/20 maxlen: 24 130.185.208.0/20 maxlen: 24 130.185.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0e:32:2e:96:47:b4:3d:a2:01:87:b7:7d:eb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=104392ddb576a035207858c53229f302c4ae73b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:eb:ef:07:ef:0b:e7:be:ab:03:22:d3:05: dc:4c:5a:ab:2b:60:ba:2c:d9:e9:03:fc:5e:14:4b: f0:a0:4d:6e:4b:71:11:67:4b:9e:b9:61:4c:af:00: e2:a4:2f:50:61:4e:30:90:c3:d8:23:2f:4a:73:3c: 8d:2d:82:2d:e7:77:63:ee:03:34:fb:48:0b:63:8a: 18:18:09:d0:ba:ef:06:8b:f0:a1:55:7e:9d:1d:d1: 8c:48:b1:8d:a1:51:42:90:2a:94:27:af:45:31:ee: d3:6e:ac:73:19:1c:c8:dd:1e:1c:81:f4:0d:91:18: 1f:b4:11:3b:61:95:5e:f9:f9:15:47:6d:50:28:54: 76:c4:5a:0c:b6:f7:5b:ab:79:eb:dd:d5:e1:e5:d4: d6:c9:0d:55:05:5f:13:f4:15:c5:99:f8:06:f2:f0: 4f:a0:02:2a:b8:1b:49:bd:cc:ca:1f:b0:67:2a:47: 51:ad:cd:1c:75:9a:30:60:c1:ae:d4:20:ba:43:d8: 78:6c:22:31:75:10:bb:9f:50:7d:f3:0d:0a:ac:2e: fd:eb:dd:56:3f:a1:76:65:f2:77:7e:cf:1a:e6:71: 20:b2:45:5c:7e:f6:91:8a:b3:f0:d4:6d:85:03:f9: 3f:7a:33:ce:8c:04:9d:d1:50:98:73:8e:67:c1:45: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:43:92:DD:B5:76:A0:35:20:78:58:C5:32:29:F3:02:C4:AE:73:B3 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EEOS3bV2oDUgeFjFMinzAsSuc7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.5.0/24 78.128.66.0/24 79.124.32.0/21 91.148.142.0/23 130.185.192.0/19 130.185.240.0/21 Signature Algorithm: sha256WithRSAEncryption 7a:53:f9:59:bb:9a:67:97:bd:f6:fe:74:b0:42:8a:3a:de:29: bf:b5:fc:d9:f4:a9:5a:95:b6:d3:7c:05:d2:43:39:c8:53:c4: 52:84:f4:5b:89:74:64:e8:a6:6a:99:23:15:a1:32:5a:83:20: 7f:ea:2b:b5:1f:39:59:84:00:23:ea:f4:fb:b2:7e:8a:21:3f: d4:30:9b:bb:cd:26:82:57:ba:97:7f:d5:20:7e:2e:d6:4a:4c: ca:ad:58:e9:03:39:d4:a0:c0:45:2f:c6:1e:fa:7a:b7:83:0c: f2:36:7c:44:24:9b:3c:05:f8:d0:6d:b5:d1:18:a4:9c:45:7a: 90:0b:da:05:5d:66:99:a3:81:08:0e:b1:e2:e8:9e:fe:4e:0c: 5c:c0:36:aa:b9:6e:25:eb:eb:41:3a:20:e5:01:67:f9:f1:f0: ef:af:e1:4a:45:59:c5:24:44:e6:6c:ae:2f:61:f6:6d:e1:c5: 69:01:b5:ba:40:f9:ee:46:47:e3:c3:46:fe:9c:75:54:b1:c1: dc:e2:a8:91:a7:e3:55:0b:7d:48:08:f9:c0:0f:7a:54:79:27: 07:11:cc:84:21:32:fb:de:61:70:9a:97:32:41:4a:92:43:7c: e3:dd:96:0c:48:25:2a:e7:a8:bd:31:b1:82:29:50:c5:03:a7: 00:18:65:ed -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9Ww4yLpZHtD2iAYe3fet6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDQzOTJkZGI1NzZhMDM1MjA3ODU4YzUzMjI5ZjMwMmM0YWU3M2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo7r7wfvC+e+qwMi0wXcTFqrK2C6 LNnpA/xeFEvwoE1uS3ERZ0ueuWFMrwDipC9QYU4wkMPYIy9KczyNLYIt53dj7gM0 +0gLY4oYGAnQuu8Gi/ChVX6dHdGMSLGNoVFCkCqUJ69FMe7TbqxzGRzI3R4cgfQN kRgftBE7YZVe+fkVR21QKFR2xFoMtvdbq3nr3dXh5dTWyQ1VBV8T9BXFmfgG8vBP oAIquBtJvczKH7BnKkdRrc0cdZowYMGu1CC6Q9h4bCIxdRC7n1B98w0KrC79691W P6F2ZfJ3fs8a5nEgskVcfvaRirPw1G2FA/k/ejPOjASd0VCYc45nwUUNLQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBBDkt21dqA1IHhYxTIp8wLErnOzMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvRUVPUzNiVjJvRFVnZUZqRk1pbnpBc1N1YzdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAToAFAwQA ToBCAwQDT3wgAwQBW5SOAwQFgrnAAwQDgrnwMA0GCSqGSIb3DQEBCwUAA4IBAQB6 U/lZu5pnl732/nSwQoo63im/tfzZ9KlalbbTfAXSQznIU8RShPRbiXRk6KZqmSMV oTJagyB/6iu1HzlZhAAj6vT7sn6KIT/UMJu7zSaCV7qXf9Ugfi7WSkzKrVjpAznU oMBFL8Ye+nq3gwzyNnxEJJs8BfjQbbXRGKScRXqQC9oFXWaZo4EIDrHi6J7+Tgxc wDaquW4l6+tBOiDlAWf58fDvr+FKRVnFJETmbK4vYfZt4cVpAbW6QPnuRkfjw0b+ nHVUscHc4qiRp+NVC31ICPnAD3pUeScHEcyEITL73mFwmpcyQUqSQ3zj3ZYMSCUq 56i9MbGCKVDFA6cAGGXt -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:12 2026 by rpki-client