This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/eeJX5peQ1g-nWbA9lZGu8mlVXvk.roa File: eeJX5peQ1g-nWbA9lZGu8mlVXvk.roa (raw, json) Hash identifier: /dJXTuDaINBRLHLHkbz+FLFKHSjS7Mr+y/EC0teqSLs= Subject key identifier: 79:E2:57:E6:97:90:D6:0F:A7:59:B0:3D:95:91:AE:F2:69:55:5E:F9 Certificate issuer: /CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Certificate serial: 019B7F83F4B11162DE90436877E24910DF57 Authority key identifier: B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/eeJX5peQ1g-nWbA9lZGu8mlVXvk.roa Signing time: Fri 02 Jan 2026 16:21:52 +0000 ROA not before: Fri 02 Jan 2026 16:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206075 IP address blocks: 31.41.249.0/24 maxlen: 24 91.218.20.0/24 maxlen: 24 185.153.55.0/24 maxlen: 24 188.239.191.0/24 maxlen: 24 193.36.132.0/24 maxlen: 24 195.72.60.0/22 maxlen: 22 2a07:e040::/32 maxlen: 32 2a07:e041::/32 maxlen: 32 2a07:e042::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.mft rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:f4:b1:11:62:de:90:43:68:77:e2:49:10:df:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8b3d4ace735613ecbc591dffc2985f3417667d3 Validity Not Before: Jan 2 16:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79e257e69790d60fa759b03d9591aef269555ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b7:c8:d9:d1:c7:93:a7:61:da:b3:f7:73:de: 93:47:f9:04:d9:e3:fb:9a:67:08:03:cf:68:ea:a4: e0:97:dd:e6:aa:16:63:98:9f:7c:a0:f3:bd:70:d7: d1:c6:92:72:e6:23:73:43:39:af:04:60:81:10:2f: 9d:31:8f:bf:6e:83:fa:5e:4b:27:36:84:b4:17:a1: 80:83:6a:2f:2e:08:30:4a:22:c4:a6:2d:af:91:df: 26:ad:bf:56:14:40:20:8b:bb:d7:2b:28:ea:91:26: b9:35:6b:af:b7:ad:5f:52:57:ea:0f:21:c6:8d:10: 3e:e5:d7:b1:16:8a:89:f8:f3:df:8e:a4:71:e5:44: 64:5c:b2:06:0a:8a:79:8c:ba:20:dd:ed:ac:34:f4: 6d:1d:ab:7a:20:62:95:9a:bf:fb:d5:a8:a7:39:c5: bf:4b:8f:37:6c:fc:56:18:56:2d:90:32:29:82:d6: 42:52:be:d9:ed:27:29:ca:1b:2c:c7:99:a5:28:5d: e0:9c:8d:bc:61:8a:e2:00:9a:79:aa:f2:ae:17:8d: 80:80:04:05:08:21:2b:dd:d9:53:63:76:8e:98:3b: e9:c9:19:4e:9a:98:aa:c7:01:50:9b:79:7d:af:44: 68:40:9a:3e:fa:a1:28:4c:52:14:c6:93:67:d7:72: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E2:57:E6:97:90:D6:0F:A7:59:B0:3D:95:91:AE:F2:69:55:5E:F9 X509v3 Authority Key Identifier: keyid:B8:B3:D4:AC:E7:35:61:3E:CB:C5:91:DF:FC:29:85:F3:41:76:67:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLPUrOc1YT7LxZHf_CmF80F2Z9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/eeJX5peQ1g-nWbA9lZGu8mlVXvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/977ff4-d3da-43f7-a93a-442cc3649bac/1/uLPUrOc1YT7LxZHf_CmF80F2Z9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.249.0/24 91.218.20.0/24 185.153.55.0/24 188.239.191.0/24 193.36.132.0/24 195.72.60.0/22 IPv6: 2a07:e040::-2a07:e042:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4c:c4:a3:51:7c:42:35:d4:f6:a1:10:c0:56:c5:83:3d:a1:68: ad:77:75:ac:eb:5a:c3:40:1f:e7:1b:5c:95:4f:cf:c4:58:8b: f2:a4:d0:88:31:52:9c:65:47:16:3b:8c:5c:57:1b:72:57:99: 7f:00:2c:0c:74:de:c3:90:c4:e2:55:c4:bc:fb:27:f7:49:25: 13:c1:e5:5d:8d:93:5e:c8:52:17:a2:c7:38:36:50:fb:f5:c4: c8:fe:ae:70:fc:7f:ae:20:60:2b:bb:ae:65:c8:68:2b:6f:c7: 62:ea:b9:4f:55:84:c7:1d:c3:e1:d7:18:4d:25:11:ef:32:df: f8:69:e5:27:a5:7b:23:ec:45:fa:13:f9:8c:32:d6:56:64:54: 55:1b:29:7c:ed:15:5c:2e:90:d7:94:44:ea:e6:ad:94:50:b6: 54:53:5b:33:31:af:4c:17:fd:6d:e9:a3:49:bd:e5:21:2f:0f: 5f:a6:f1:eb:53:43:82:93:80:d8:3b:fe:55:08:a1:f2:e8:c5: 5a:88:fd:53:8d:12:b4:87:ec:55:93:c8:ed:82:50:70:41:cf: f5:64:fe:3f:92:54:9f:84:5b:49:b9:2f:bc:15:4e:52:3d:97: 10:2e:d7:46:ec:04:75:cc:37:5d:b5:a7:06:dc:46:4e:2d:b1: 8a:4a:60:91 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt/g/SxEWLekENod+JJEN9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YjNkNGFjZTczNTYxM2VjYmM1OTFkZmZjMjk4NWYzNDE3 NjY3ZDMwHhcNMjYwMTAyMTYyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWUyNTdlNjk3OTBkNjBmYTc1OWIwM2Q5NTkxYWVmMjY5NTU1ZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbfI2dHHk6dh2rP3c96TR/kE2eP7 mmcIA89o6qTgl93mqhZjmJ98oPO9cNfRxpJy5iNzQzmvBGCBEC+dMY+/boP6Xksn NoS0F6GAg2ovLggwSiLEpi2vkd8mrb9WFEAgi7vXKyjqkSa5NWuvt61fUlfqDyHG jRA+5dexFoqJ+PPfjqRx5URkXLIGCop5jLog3e2sNPRtHat6IGKVmr/71ainOcW/ S483bPxWGFYtkDIpgtZCUr7Z7Scpyhssx5mlKF3gnI28YYriAJp5qvKuF42AgAQF CCEr3dlTY3aOmDvpyRlOmpiqxwFQm3l9r0RoQJo++qEoTFIUxpNn13KEgQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFHniV+aXkNYPp1mwPZWRrvJpVV75MB8GA1UdIwQY MBaAFLiz1KznNWE+y8WR3/wphfNBdmfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2Et NDQyY2MzNjQ5YmFjLzEvZWVKWDVwZVExZy1uV2JBOWxaR3U4bWxWWHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi85NzdmZjQtZDNkYS00M2Y3LWE5M2EtNDQyY2MzNjQ5YmFj LzEvdUxQVXJPYzFZVDdMeFpIZl9DbUY4MEYyWjlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQAHyn5AwQA W9oUAwQAuZk3AwQAvO+/AwQAwSSEAwQCw0g8MBYEAgACMBAwDgMFBioH4EADBQAq B+BCMA0GCSqGSIb3DQEBCwUAA4IBAQBMxKNRfEI11PahEMBWxYM9oWitd3Ws61rD QB/nG1yVT8/EWIvypNCIMVKcZUcWO4xcVxtyV5l/ACwMdN7DkMTiVcS8+yf3SSUT weVdjZNeyFIXosc4NlD79cTI/q5w/H+uIGAru65lyGgrb8di6rlPVYTHHcPh1xhN JRHvMt/4aeUnpXsj7EX6E/mMMtZWZFRVGyl87RVcLpDXlETq5q2UULZUU1szMa9M F/1t6aNJveUhLw9fpvHrU0OCk4DYO/5VCKHy6MVaiP1TjRK0h+xVk8jtglBwQc/1 ZP4/klSfhFtJuS+8FU5SPZcQLtdG7AR1zDddtacG3EZOLbGKSmCR -----END CERTIFICATE-----Generated at Mon Feb 2 08:04:12 2026 by rpki-client