This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/cttWIecNV3-RxwLBOUCi60J1iJY.roa File: cttWIecNV3-RxwLBOUCi60J1iJY.roa (raw, json) Hash identifier: BkBMDu3YGkPA9g0Vj6imuKd49PHZGK/pP3QhJiDHRZ8= Subject key identifier: 72:DB:56:21:E7:0D:57:7F:91:C7:02:C1:39:40:A2:EB:42:75:88:96 Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8 Certificate serial: 019B7A5A84C8BEF926E06AF47C0E111A8620 Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/cttWIecNV3-RxwLBOUCi60J1iJY.roa Signing time: Thu 01 Jan 2026 16:18:31 +0000 ROA not before: Thu 01 Jan 2026 16:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 212.93.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:84:c8:be:f9:26:e0:6a:f4:7c:0e:11:1a:86:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8 Validity Not Before: Jan 1 16:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72db5621e70d577f91c702c13940a2eb42758896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:df:76:aa:68:76:a5:94:b0:67:e7:86:2c:00: 3b:7e:6f:f9:1f:dd:ed:04:b4:fd:95:54:7e:f5:5f: 6a:27:15:37:af:41:57:6e:2b:0d:c1:ea:6d:68:8d: 7c:79:3d:37:7b:0a:cd:49:cd:08:8f:01:d3:59:e2: 13:b2:a2:3b:5f:fc:c7:d7:1b:56:2a:5d:b3:42:30: aa:f8:77:09:c6:e0:40:c1:30:34:67:9e:03:9f:a9: c6:20:d3:04:33:9d:18:fc:12:7a:b5:a8:6d:79:d1: 14:22:b4:f0:01:63:9d:80:ed:4e:18:4e:d3:1e:72: 11:88:a9:1e:50:74:a3:62:e5:7d:c0:e8:00:08:6e: d4:0a:4f:fc:24:85:bc:42:4b:74:1e:a6:b4:31:b3: 78:40:c6:af:c1:eb:f9:19:31:ae:1f:37:53:a9:a0: d8:5e:5c:f2:d6:00:45:a1:f0:4d:c0:d8:9b:d4:4d: 56:2a:93:38:f1:6d:a4:b1:f8:20:ef:d4:7c:ee:36: 25:50:6c:fd:02:9e:3d:40:b2:0a:7d:3d:21:ae:52: 93:93:bf:1c:db:2f:c7:09:e9:22:50:d1:b8:8b:f9: b1:65:8d:74:be:e0:95:9b:71:72:8c:81:83:bb:de: d6:1d:9c:d8:65:6a:cc:b0:d9:51:ba:ef:f8:c4:ac: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:56:21:E7:0D:57:7F:91:C7:02:C1:39:40:A2:EB:42:75:88:96 X509v3 Authority Key Identifier: keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/cttWIecNV3-RxwLBOUCi60J1iJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.93.57.0/24 Signature Algorithm: sha256WithRSAEncryption ba:15:cf:49:3f:70:eb:b9:f0:1e:57:48:ec:e2:72:2c:ef:b2: 32:40:06:5a:98:9a:7a:92:08:90:2b:95:08:9d:80:75:94:e4: 29:bf:30:e0:da:74:fc:f0:a0:e0:24:96:1b:82:f5:35:4b:1e: 8f:36:26:a2:49:76:0b:19:05:54:d6:59:9c:42:6c:b6:1b:97: 6e:cb:50:a6:49:0f:24:ae:ec:0c:41:bc:c0:f5:1d:38:9f:e2: 4e:ff:43:c3:ff:a5:46:f8:dc:c8:9c:ab:86:d9:d5:96:9b:09: 73:21:5b:b5:e7:fa:4a:b2:1e:fa:c1:f1:85:58:ab:c5:f0:13: dc:5f:8a:f3:4f:b9:99:15:3d:6c:3d:8c:e6:14:a9:a3:27:3e: 56:53:7c:81:64:d4:45:09:05:6a:e4:9d:c1:f2:2b:a5:ee:bf: db:50:13:8e:96:7c:1e:6c:1b:a3:9b:d1:1f:91:2f:25:39:c7: 23:7c:78:f9:c5:c1:90:83:52:88:67:0f:57:20:3e:94:85:3a: 3f:03:c9:b8:c9:2f:92:ef:b5:e6:d3:b6:97:84:f8:27:11:ac: 3f:73:de:e1:ee:7e:32:b6:fd:3e:21:e4:85:e6:76:47:b6:f6: 0a:e4:b9:c7:05:7e:4c:7e:7c:9c:25:37:34:8c:d4:10:07:8b: 65:42:c4:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WoTIvvkm4Gr0fA4RGoYgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz MGY4ZDgwHhcNMjYwMTAxMTYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmRiNTYyMWU3MGQ1NzdmOTFjNzAyYzEzOTQwYTJlYjQyNzU4ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2992qmh2pZSwZ+eGLAA7fm/5H93t BLT9lVR+9V9qJxU3r0FXbisNweptaI18eT03ewrNSc0IjwHTWeITsqI7X/zH1xtW Kl2zQjCq+HcJxuBAwTA0Z54Dn6nGINMEM50Y/BJ6tahtedEUIrTwAWOdgO1OGE7T HnIRiKkeUHSjYuV9wOgACG7UCk/8JIW8Qkt0Hqa0MbN4QMavwev5GTGuHzdTqaDY Xlzy1gBFofBNwNib1E1WKpM48W2ksfgg79R87jYlUGz9Ap49QLIKfT0hrlKTk78c 2y/HCekiUNG4i/mxZY10vuCVm3FyjIGDu97WHZzYZWrMsNlRuu/4xKzzdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLbViHnDVd/kccCwTlAoutCdYiWMB8GA1UdIwQY MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt ODIxNzA3ZTJjMDAyLzEvY3R0V0llY05WMy1SeHdMQk9VQ2k2MEoxaUpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1F05MA0G CSqGSIb3DQEBCwUAA4IBAQC6Fc9JP3DrufAeV0js4nIs77IyQAZamJp6kgiQK5UI nYB1lOQpvzDg2nT88KDgJJYbgvU1Sx6PNiaiSXYLGQVU1lmcQmy2G5duy1CmSQ8k ruwMQbzA9R04n+JO/0PD/6VG+NzInKuG2dWWmwlzIVu15/pKsh76wfGFWKvF8BPc X4rzT7mZFT1sPYzmFKmjJz5WU3yBZNRFCQVq5J3B8iul7r/bUBOOlnwebBujm9Ef kS8lOccjfHj5xcGQg1KIZw9XID6UhTo/A8m4yS+S77Xm07aXhPgnEaw/c97h7n4y tv0+IeSF5nZHtvYK5LnHBX5MfnycJTc0jNQQB4tlQsTh -----END CERTIFICATE-----Generated at Fri Jan 9 00:58:32 2026 by rpki-client