This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa File: Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa (raw, json) Hash identifier: INOU1pQ7jEMWCkd6rFZSFopLqyhhp2Ctyc6t0sEfFdA= Subject key identifier: 12:27:77:77:AD:98:9F:11:DE:E5:8D:BE:57:40:61:DF:AB:AD:F3:39 Certificate issuer: /CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Certificate serial: 019B7A5B622949CC299AFCFE59BE2DE3FBBE Authority key identifier: 48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa Signing time: Thu 01 Jan 2026 16:19:27 +0000 ROA not before: Thu 01 Jan 2026 16:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201029 IP address blocks: 185.77.76.0/24 maxlen: 24 185.77.77.0/24 maxlen: 24 2a00:8dc0:ff00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.mft rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:62:29:49:cc:29:9a:fc:fe:59:be:2d:e3:fb:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48e06a351a5189bcdc44840948dbfb40abf58be5 Validity Not Before: Jan 1 16:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12277777ad989f11dee58dbe574061dfabadf339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:88:66:c0:b4:93:36:bb:d6:81:29:62:2f: c4:aa:7c:dc:47:88:f4:5d:6d:bc:9d:e2:1e:89:6a: c0:01:d4:0d:41:96:17:e6:00:84:fd:97:3a:34:c8: 13:6f:c6:02:81:0c:e8:1e:7b:c5:16:44:55:87:34: 14:9c:10:8f:bf:ef:16:64:0c:59:71:cc:d3:53:58: 72:4f:f8:90:14:af:2e:b2:c5:69:07:5f:38:16:54: cc:72:4b:3d:b0:bd:d9:ef:c3:03:33:32:2c:e3:f3: 48:47:35:73:71:31:9e:b0:54:84:cb:c3:d2:13:f6: e4:ab:c4:a4:d7:ea:57:d9:8b:d1:5d:ca:db:18:36: 84:df:73:4b:c5:15:ee:ee:dd:53:20:89:c8:b9:86: 13:78:9f:05:bd:bc:2b:9c:c3:72:69:6b:c7:bd:9d: cf:f8:cb:1b:16:33:91:c2:c4:f1:45:f6:b4:7e:69: a6:42:60:8e:2f:43:01:5b:64:82:06:b2:99:76:c7: 45:83:ab:94:bf:4f:68:6a:26:ee:7e:25:d7:56:7b: 0f:f0:7e:8c:3e:79:e0:51:d8:f9:88:e2:21:73:61: db:61:74:c0:53:e9:f8:93:9f:f8:fe:97:ee:54:77: 1b:bc:5f:ce:35:e0:eb:d4:8e:0b:55:0d:c4:0d:2e: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:27:77:77:AD:98:9F:11:DE:E5:8D:BE:57:40:61:DF:AB:AD:F3:39 X509v3 Authority Key Identifier: keyid:48:E0:6A:35:1A:51:89:BC:DC:44:84:09:48:DB:FB:40:AB:F5:8B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOBqNRpRibzcRIQJSNv7QKv1i-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/Eid3d62YnxHe5Y2-V0Bh36ut8zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/600aea-9ea5-4c67-a602-ab1a87ecdf1b/1/SOBqNRpRibzcRIQJSNv7QKv1i-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.76.0/23 IPv6: 2a00:8dc0:ff00::/40 Signature Algorithm: sha256WithRSAEncryption 37:8f:5b:ef:bd:18:7f:04:86:bd:86:5d:9f:3d:1a:ec:8b:43: 01:4b:73:a2:f7:44:2f:a5:bd:f5:81:a2:72:7f:70:26:14:de: b9:07:16:67:33:68:55:c7:45:46:60:16:ca:a2:5f:cd:29:81: a9:ed:ca:dc:16:a4:95:74:76:3b:9c:8b:92:f7:0a:24:83:27: 6f:ee:67:89:84:c9:41:e2:3b:fb:16:e3:28:a9:02:d8:30:5b: e7:2b:40:92:e2:3a:11:28:58:69:93:f5:13:c4:02:4a:4b:3d: d4:c6:fb:fb:15:cb:04:f5:38:68:d4:6b:0d:80:ea:47:94:7c: 5b:48:0c:ef:da:4c:c0:ad:ad:f0:ac:8b:1e:c0:c1:ba:dc:7f: a6:f0:bb:27:aa:44:99:ce:4d:80:de:86:07:0f:a6:d7:c3:af: dd:05:f5:b0:a8:0d:db:52:9e:78:58:89:45:9f:20:cb:13:4c: a7:6b:71:65:e4:51:dc:0f:bf:cb:32:7d:97:5e:1a:fd:b0:34: 73:87:8b:64:3d:d3:3d:bd:f9:cc:b3:a1:77:2e:50:53:b1:0c: 0a:60:5f:66:fb:4a:c5:ff:ec:81:bd:7d:d0:fd:a1:95:fb:f3: b1:30:ba:93:59:8b:b5:6c:71:f8:83:46:d0:63:70:46:a7:43: 99:7f:71:0d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6W2IpScwpmvz+Wb4t4/u+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZTA2YTM1MWE1MTg5YmNkYzQ0ODQwOTQ4ZGJmYjQwYWJm NThiZTUwHhcNMjYwMTAxMTYxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjI3Nzc3N2FkOTg5ZjExZGVlNThkYmU1NzQwNjFkZmFiYWRmMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs32IZsC0kza71oEpYi/EqnzcR4j0 XW28neIeiWrAAdQNQZYX5gCE/Zc6NMgTb8YCgQzoHnvFFkRVhzQUnBCPv+8WZAxZ cczTU1hyT/iQFK8ussVpB184FlTMcks9sL3Z78MDMzIs4/NIRzVzcTGesFSEy8PS E/bkq8Sk1+pX2YvRXcrbGDaE33NLxRXu7t1TIInIuYYTeJ8FvbwrnMNyaWvHvZ3P +MsbFjORwsTxRfa0fmmmQmCOL0MBW2SCBrKZdsdFg6uUv09oaibufiXXVnsP8H6M PnngUdj5iOIhc2HbYXTAU+n4k5/4/pfuVHcbvF/ONeDr1I4LVQ3EDS4q+QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBInd3etmJ8R3uWNvldAYd+rrfM5MB8GA1UdIwQY MBaAFEjgajUaUYm83ESECUjb+0Cr9YvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDIt YWIxYTg3ZWNkZjFiLzEvRWlkM2Q2MllueEhlNVkyLVYwQmgzNnV0OHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82MDBhZWEtOWVhNS00YzY3LWE2MDItYWIxYTg3ZWNkZjFi LzEvU09CcU5ScFJpYnpjUklRSlNOdjdRS3YxaS1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuU1MMA4E AgACMAgDBgAqAI3A/zANBgkqhkiG9w0BAQsFAAOCAQEAN49b770YfwSGvYZdnz0a 7ItDAUtzovdEL6W99YGicn9wJhTeuQcWZzNoVcdFRmAWyqJfzSmBqe3K3BaklXR2 O5yLkvcKJIMnb+5niYTJQeI7+xbjKKkC2DBb5ytAkuI6EShYaZP1E8QCSks91Mb7 +xXLBPU4aNRrDYDqR5R8W0gM79pMwK2t8KyLHsDButx/pvC7J6pEmc5NgN6GBw+m 18Ov3QX1sKgN21KeeFiJRZ8gyxNMp2txZeRR3A+/yzJ9l14a/bA0c4eLZD3TPb35 zLOhdy5QU7EMCmBfZvtKxf/sgb190P2hlfvzsTC6k1mLtWxx+ING0GNwRqdDmX9x DQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:09 2026 by rpki-client