This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/eDu9UPYyz5Jbf-XKyeS71yiEEec.roa File: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (raw, json) Hash identifier: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM= Subject key identifier: 78:3B:BD:50:F6:32:CF:92:5B:7F:E5:CA:C9:E4:BB:D7:28:84:11:E7 Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Certificate serial: 019B7AC78FE29CB96B306A28CED4E6D7B6AE Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/eDu9UPYyz5Jbf-XKyeS71yiEEec.roa Signing time: Thu 01 Jan 2026 18:17:37 +0000 ROA not before: Thu 01 Jan 2026 18:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 94.231.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8f:e2:9c:b9:6b:30:6a:28:ce:d4:e6:d7:b6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81 Validity Not Before: Jan 1 18:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=783bbd50f632cf925b7fe5cac9e4bbd7288411e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:42:2c:3a:86:ec:ce:0d:a7:99:c7:2a:7e:e3: 99:d0:1e:8e:fe:48:59:6c:95:22:75:01:fa:10:e1: 72:c8:57:63:3f:80:c2:23:28:e3:6c:90:7c:b2:d5: 8d:61:2c:24:d9:8f:0d:94:aa:fb:4b:fb:76:89:c3: e4:f7:2c:e4:e7:37:f4:87:09:98:77:76:f2:20:ac: d6:0f:12:51:23:46:c8:de:b2:ff:c1:7c:74:bc:9b: 29:e1:59:70:6e:7e:22:5a:05:76:bb:d8:b6:bb:5c: 87:77:1f:dd:92:b8:ab:24:f8:7b:14:14:1e:16:39: 73:61:1d:2f:d1:ca:cb:62:4a:48:18:08:80:61:0c: 3a:37:1b:56:aa:5e:b8:60:bd:8a:55:43:4b:f1:b0: 15:92:f5:af:78:57:52:45:52:fb:50:f7:2b:b1:49: 49:c3:07:21:ab:f7:e6:3f:8d:c1:80:94:b3:2c:1d: b9:8d:68:76:2e:c5:34:1a:f5:70:d7:99:2c:26:0f: 95:b4:53:02:2c:48:e9:fa:50:4a:2e:20:b9:2c:b8: 88:29:99:f1:d2:01:a1:37:f2:a4:a5:4d:4f:57:66: 56:35:3a:71:73:de:dc:52:30:f3:c4:cb:d2:91:ae: ad:2b:da:fe:03:d3:8b:fb:5d:32:65:c3:28:fb:54: a1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3B:BD:50:F6:32:CF:92:5B:7F:E5:CA:C9:E4:BB:D7:28:84:11:E7 X509v3 Authority Key Identifier: keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/eDu9UPYyz5Jbf-XKyeS71yiEEec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.199.0/24 Signature Algorithm: sha256WithRSAEncryption 97:5b:0c:ed:55:63:50:fb:56:19:af:1a:79:dd:16:a0:1a:ce: a6:f5:84:7a:a7:61:2e:81:e5:4f:c8:e0:46:24:4c:27:d8:ca: c9:a7:6d:72:3d:54:fb:a7:d1:7d:40:ca:63:2b:9f:da:b1:5e: d0:6e:ce:38:b1:a9:68:24:43:b3:e8:6b:49:70:dd:23:2a:69: 35:72:b1:c0:0d:bb:3c:7d:71:29:3f:0c:9e:ea:07:09:d6:7c: 68:2d:82:39:a1:1a:36:db:96:7b:4b:8e:4c:5f:e3:9b:a9:11: b5:3b:1c:83:70:8d:59:84:24:46:9e:f0:7e:0f:4c:54:61:df: e1:8e:f2:47:44:cb:d3:8c:f5:d4:be:16:4a:0a:b7:1e:16:11: ef:df:cf:a9:e3:b9:41:73:e6:0b:9c:fb:28:c4:9a:09:89:1a: 25:3d:a9:6d:05:22:eb:54:91:62:1d:15:ac:95:d4:65:85:1c: 47:5b:7c:b6:07:c9:15:98:6a:4b:40:ef:9a:e4:88:86:b4:34: a9:92:5d:b7:c8:8f:7e:99:bb:7e:32:58:0e:f7:cf:56:18:33: 7d:23:73:e2:21:62:29:cc:71:92:57:47:66:b1:b4:cc:c6:08: 75:d3:89:fe:2d:8d:08:93:4c:ec:48:28:7d:d6:c0:e3:dc:6a: 71:df:3e:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4/inLlrMGooztTm17auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkM2Q2MjdjMjk3ZmU1NDJkODM1OWE4NmQ4ZTJmOWViZDk1 NjVhODEwHhcNMjYwMTAxMTgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODNiYmQ1MGY2MzJjZjkyNWI3ZmU1Y2FjOWU0YmJkNzI4ODQxMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEIsOobszg2nmccqfuOZ0B6O/khZ bJUidQH6EOFyyFdjP4DCIyjjbJB8stWNYSwk2Y8NlKr7S/t2icPk9yzk5zf0hwmY d3byIKzWDxJRI0bI3rL/wXx0vJsp4Vlwbn4iWgV2u9i2u1yHdx/dkrirJPh7FBQe FjlzYR0v0crLYkpIGAiAYQw6NxtWql64YL2KVUNL8bAVkvWveFdSRVL7UPcrsUlJ wwchq/fmP43BgJSzLB25jWh2LsU0GvVw15ksJg+VtFMCLEjp+lBKLiC5LLiIKZnx 0gGhN/KkpU1PV2ZWNTpxc97cUjDzxMvSka6tK9r+A9OL+10yZcMo+1Sh8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHg7vVD2Ms+SW3/lysnku9cohBHnMB8GA1UdIwQY MBaAFJ09Ynwpf+VC2DWahtji+evZVlqBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgt MTVlYTMzN2E3ODQwLzEvZUR1OVVQWXl6NUpiZi1YS3llUzcxeWlFRWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kZGMxYWEtNWEzYS00MTYzLWI1ZTgtMTVlYTMzN2E3ODQw LzEvblQxaWZDbF81VUxZTlpxRzJPTDU2OWxXV29FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufHMA0G CSqGSIb3DQEBCwUAA4IBAQCXWwztVWNQ+1YZrxp53RagGs6m9YR6p2EugeVPyOBG JEwn2MrJp21yPVT7p9F9QMpjK5/asV7Qbs44saloJEOz6GtJcN0jKmk1crHADbs8 fXEpPwye6gcJ1nxoLYI5oRo225Z7S45MX+ObqRG1OxyDcI1ZhCRGnvB+D0xUYd/h jvJHRMvTjPXUvhZKCrceFhHv38+p47lBc+YLnPsoxJoJiRolPaltBSLrVJFiHRWs ldRlhRxHW3y2B8kVmGpLQO+a5IiGtDSpkl23yI9+mbt+MlgO989WGDN9I3PiIWIp zHGSV0dmsbTMxgh104n+LY0Ik0zsSCh91sDj3Gpx3z61 -----END CERTIFICATE-----Generated at Tue Jan 20 01:19:47 2026 by rpki-client