This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/1e3-ee_DDB8uKbq4DDF2oeY9brA.roa File: 1e3-ee_DDB8uKbq4DDF2oeY9brA.roa (raw, json) Hash identifier: d1HzxXfkVXwQpykJbxZZ+w5Pxsb18cIOczK6ype9Npo= Subject key identifier: D5:ED:FE:79:EF:C3:0C:1F:2E:29:BA:B8:0C:31:76:A1:E6:3D:6E:B0 Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Certificate serial: 019B76EB6DCCABCB2DA112F10FED47DD09C4 Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/1e3-ee_DDB8uKbq4DDF2oeY9brA.roa Signing time: Thu 01 Jan 2026 00:18:19 +0000 ROA not before: Thu 01 Jan 2026 00:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43734 IP address blocks: 78.24.240.0/21 maxlen: 21 109.235.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6d:cc:ab:cb:2d:a1:12:f1:0f:ed:47:dd:09:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278 Validity Not Before: Jan 1 00:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5edfe79efc30c1f2e29bab80c3176a1e63d6eb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:ea:27:5d:51:e7:70:63:9a:7d:ca:27:c5: 90:2f:32:d4:13:3d:e3:83:d3:6f:e2:43:5d:d1:3f: 83:09:86:4e:a2:77:62:59:5e:0f:05:18:a5:32:f7: 08:54:a3:d8:07:b6:ed:91:81:c1:c3:6a:ec:4b:d6: ee:fc:eb:4c:b4:b6:69:97:f2:40:08:a2:ac:33:ae: 3b:15:cb:f7:4e:85:c1:9e:ed:a9:1c:7d:85:06:c4: cd:92:16:ae:2b:e8:72:45:2b:fe:46:ce:57:a4:db: 90:73:01:1d:bc:83:20:76:82:ca:56:f1:28:ed:99: ad:c7:40:ca:36:df:c9:4a:70:17:35:b1:89:dd:e4: 29:b2:98:ff:ce:51:a4:a2:44:23:98:7f:68:b1:44: 28:26:d2:4e:31:86:0d:c6:b6:26:cd:34:b6:2c:84: 86:15:5d:07:ec:b8:87:21:ab:86:26:d1:3a:b0:71: 7e:c1:d1:16:85:31:b5:c9:5d:29:ad:0b:f2:14:d2: 71:d6:fa:45:97:f1:b6:d7:48:2e:35:9c:cc:a0:40: ec:da:ef:40:44:48:0f:11:c1:3a:31:17:51:4b:08: 17:98:3d:65:6a:0f:1d:6d:2f:3a:cf:8c:5b:77:c3: 13:78:ef:f1:9d:46:61:95:dd:eb:1c:0a:29:d3:36: 97:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:ED:FE:79:EF:C3:0C:1F:2E:29:BA:B8:0C:31:76:A1:E6:3D:6E:B0 X509v3 Authority Key Identifier: keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/1e3-ee_DDB8uKbq4DDF2oeY9brA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.240.0/21 109.235.80.0/21 Signature Algorithm: sha256WithRSAEncryption 5c:62:1f:6c:c0:18:86:d4:d3:e6:98:08:96:92:6f:c5:40:cd: 83:49:34:29:35:57:ee:20:d0:2e:1e:cf:83:ff:8e:05:c9:9c: 32:63:4f:0f:2a:f4:16:70:8f:29:7d:a5:f8:a5:f2:fa:2f:d0: 39:2c:36:8c:8d:49:65:a3:22:bf:fa:c2:f5:f9:10:ee:0f:7a: be:da:f8:bd:62:34:84:d7:5b:eb:4a:08:a8:8e:45:1c:d5:f3: 5b:ff:15:da:af:62:cb:4f:21:2e:d7:0e:b2:51:f0:aa:26:5e: 4c:b6:8e:e3:03:91:23:f6:43:62:1f:6d:14:0a:b9:ff:00:49: d8:74:e4:a0:3d:87:75:86:86:6d:e8:19:32:c1:a7:70:ef:58: 7d:c9:4a:b8:e8:91:03:72:7f:02:93:43:86:53:21:c4:5f:70: e3:4f:03:f9:c1:63:a2:be:c0:02:a2:d8:96:f7:f0:28:bb:27: 62:ab:ff:85:20:3b:0b:b9:09:25:5b:69:b9:44:6c:63:8e:4f: 2c:2f:58:ac:fc:99:81:48:80:be:c1:d5:27:5d:ef:3e:18:e0: 96:c0:72:ac:a5:1e:66:9d:ab:ec:11:50:3b:3c:76:5e:ab:66: c1:32:1f:70:e7:4a:98:19:12:11:0f:cf:ef:c0:d9:ff:1b:d8: 34:20:89:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt2623Mq8stoRLxD+1H3QnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjVlMDE4MWM0YmJhZTVjMDkwYWIxNTlkMDY1NjJmMTMy MmUyNzgwHhcNMjYwMTAxMDAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWVkZmU3OWVmYzMwYzFmMmUyOWJhYjgwYzMxNzZhMWU2M2Q2ZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzzqJ11R53Bjmn3KJ8WQLzLUEz3j g9Nv4kNd0T+DCYZOondiWV4PBRilMvcIVKPYB7btkYHBw2rsS9bu/OtMtLZpl/JA CKKsM647Fcv3ToXBnu2pHH2FBsTNkhauK+hyRSv+Rs5XpNuQcwEdvIMgdoLKVvEo 7Zmtx0DKNt/JSnAXNbGJ3eQpspj/zlGkokQjmH9osUQoJtJOMYYNxrYmzTS2LISG FV0H7LiHIauGJtE6sHF+wdEWhTG1yV0prQvyFNJx1vpFl/G210guNZzMoEDs2u9A REgPEcE6MRdRSwgXmD1lag8dbS86z4xbd8MTeO/xnUZhld3rHAop0zaXPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNXt/nnvwwwfLim6uAwxdqHmPW6wMB8GA1UdIwQY MBaAFPH14BgcS7rlwJCrFZ0GVi8TIuJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2Mt OWJlYmY3ZGNjMWE2LzEvMWUzLWVlX0REQjh1S2JxNERERjJvZVk5YnJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yOTQ2ODMtNTc0Ny00ZWExLWI3N2MtOWJlYmY3ZGNjMWE2 LzEvOGZYZ0dCeEx1dVhBa0tzVm5RWldMeE1pNG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDThjwAwQD betQMA0GCSqGSIb3DQEBCwUAA4IBAQBcYh9swBiG1NPmmAiWkm/FQM2DSTQpNVfu INAuHs+D/44FyZwyY08PKvQWcI8pfaX4pfL6L9A5LDaMjUlloyK/+sL1+RDuD3q+ 2vi9YjSE11vrSgiojkUc1fNb/xXar2LLTyEu1w6yUfCqJl5Mto7jA5Ej9kNiH20U Crn/AEnYdOSgPYd1hoZt6Bkywadw71h9yUq46JEDcn8Ck0OGUyHEX3DjTwP5wWOi vsACotiW9/Aouydiq/+FIDsLuQklW2m5RGxjjk8sL1is/JmBSIC+wdUnXe8+GOCW wHKspR5mnavsEVA7PHZeq2bBMh9w50qYGRIRD8/vwNn/G9g0IInc -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:12 2026 by rpki-client