This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa File: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (raw, json) Hash identifier: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg= Subject key identifier: 78:4C:E5:F3:07:4E:D8:DF:FA:0F:BC:3F:F4:16:B1:E4:05:F8:17:A9 Certificate issuer: /CN=d58214cfa326611e9d494135a12ce8276f0f1784 Certificate serial: 019B79ED00AB96234F85BE77A4CBA1E987D8 Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201119 IP address blocks: 37.16.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:00:ab:96:23:4f:85:be:77:a4:cb:a1:e9:87:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784ce5f3074ed8dffa0fbc3ff416b1e405f817a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:f2:2a:93:01:07:06:f0:8c:57:67:8c:26: c7:77:92:8c:5d:2a:2a:3f:b4:72:d3:b3:f6:18:ec: 79:e8:27:c8:61:81:26:1a:81:c3:c8:53:4f:ea:48: 51:9f:42:5d:c9:1c:f3:7c:92:26:15:49:24:4a:9a: e9:d8:35:dd:ea:61:e8:f3:28:8a:9e:7b:79:5d:59: 62:01:b3:c5:84:9e:11:54:7e:e4:9b:7e:02:a8:99: fa:cf:cd:2e:ea:34:21:b5:89:e7:20:7f:0e:4e:e5: f8:d7:88:09:0c:d8:6b:22:3c:2c:2c:93:9f:bd:bb: 7b:24:80:97:ee:0a:3b:ad:4c:14:a8:c0:49:22:1b: 1c:a0:f7:10:02:b5:15:3f:46:46:c1:a2:2c:7a:ed: 1f:f9:d7:72:4c:75:d1:c1:f6:69:1d:0f:97:4e:da: df:95:de:39:91:34:f9:0a:cf:60:84:c7:19:ee:9a: 04:e7:af:95:c3:c3:f8:85:df:70:86:ac:46:31:f9: 85:68:1c:93:9e:73:c9:e3:04:8e:7a:85:35:63:4e: 46:b0:18:9b:7e:19:18:b4:66:2f:a6:e5:02:d4:67: 1d:ca:cf:8b:af:5a:46:af:47:02:fa:fc:e2:61:12: fa:9b:2d:a0:1f:ad:b1:f1:64:72:be:c0:13:43:49: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4C:E5:F3:07:4E:D8:DF:FA:0F:BC:3F:F4:16:B1:E4:05:F8:17:A9 X509v3 Authority Key Identifier: keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.16.90.0/24 Signature Algorithm: sha256WithRSAEncryption 58:b1:ad:02:f4:d4:8d:23:79:52:f9:a6:5e:ee:95:03:f2:e4: bc:f7:6b:f8:b4:06:d2:4a:d4:17:4b:ae:82:48:ff:c8:f6:fd: d3:7c:74:e5:e1:f1:cf:42:a8:77:f1:b0:7a:49:d2:71:ba:44: c9:4a:77:63:bf:67:2e:93:13:2a:72:e5:e2:69:34:77:db:1e: 4a:33:2a:52:85:8b:f6:69:57:ca:64:f0:42:48:5a:f7:0d:7b: 05:ba:30:9d:76:1b:7c:63:a6:be:01:17:0e:1b:49:e2:1c:bb: 10:58:22:94:57:77:19:5b:23:37:5b:d4:9c:bb:54:5b:c7:1d: df:9e:c0:09:5f:c9:75:74:6e:d5:63:39:08:26:0d:05:5b:12: 57:51:50:8e:90:55:55:26:c9:2f:db:e0:2f:d8:7a:72:0f:82: 49:6d:09:9c:8b:00:f8:e9:f1:aa:c7:0c:1c:15:3f:4a:7f:53: e9:9f:e7:ec:75:f1:ca:32:16:75:ac:97:d0:86:58:da:f8:d6: 0a:b0:85:3e:80:8f:90:61:f1:dc:14:35:70:01:c3:0b:d2:99: f7:93:31:57:8a:48:0b:6e:c0:3f:e5:15:40:c8:f2:4a:69:8d: 7a:da:fd:c7:11:be:dd:e8:3c:25:85:47:00:9b:c4:d8:53:23: 68:85:f6:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57QCrliNPhb53pMuh6YfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw ZjE3ODQwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRjZTVmMzA3NGVkOGRmZmEwZmJjM2ZmNDE2YjFlNDA1ZjgxN2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LPyKpMBBwbwjFdnjCbHd5KMXSoq P7Ry07P2GOx56CfIYYEmGoHDyFNP6khRn0JdyRzzfJImFUkkSprp2DXd6mHo8yiK nnt5XVliAbPFhJ4RVH7km34CqJn6z80u6jQhtYnnIH8OTuX414gJDNhrIjwsLJOf vbt7JICX7go7rUwUqMBJIhscoPcQArUVP0ZGwaIseu0f+ddyTHXRwfZpHQ+XTtrf ld45kTT5Cs9ghMcZ7poE56+Vw8P4hd9whqxGMfmFaByTnnPJ4wSOeoU1Y05GsBib fhkYtGYvpuUC1Gcdys+Lr1pGr0cC+vziYRL6my2gH62x8WRyvsATQ0nAsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhM5fMHTtjf+g+8P/QWseQF+BepMB8GA1UdIwQY MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt MTA3OWQ1NWFlZTkxLzEvZUV6bDh3ZE8yTl82RDd3XzlCYXg1QVg0RjZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJRBaMA0G CSqGSIb3DQEBCwUAA4IBAQBYsa0C9NSNI3lS+aZe7pUD8uS892v4tAbSStQXS66C SP/I9v3TfHTl4fHPQqh38bB6SdJxukTJSndjv2cukxMqcuXiaTR32x5KMypShYv2 aVfKZPBCSFr3DXsFujCddht8Y6a+ARcOG0niHLsQWCKUV3cZWyM3W9Scu1Rbxx3f nsAJX8l1dG7VYzkIJg0FWxJXUVCOkFVVJskv2+Av2HpyD4JJbQmciwD46fGqxwwc FT9Kf1Ppn+fsdfHKMhZ1rJfQhlja+NYKsIU+gI+QYfHcFDVwAcML0pn3kzFXikgL bsA/5RVAyPJKaY162v3HEb7d6DwlhUcAm8TYUyNohfah -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:37 2026 by rpki-client