This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/EX0J0xvnJG9c66QV7uljwQw0Ktc.roa File: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (raw, json) Hash identifier: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U= Subject key identifier: 11:7D:09:D3:1B:E7:24:6F:5C:EB:A4:15:EE:E9:63:C1:0C:34:2A:D7 Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B85FC279201F3AA2186D0C6706806 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/EX0J0xvnJG9c66QV7uljwQw0Ktc.roa Signing time: Thu 01 Jan 2026 16:19:36 +0000 ROA not before: Thu 01 Jan 2026 16:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205207 IP address blocks: 77.104.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:85:fc:27:92:01:f3:aa:21:86:d0:c6:70:68:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=117d09d31be7246f5ceba415eee963c10c342ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:61:be:47:b0:df:84:12:1d:42:ad:fd:93:e6: 4b:7c:f4:55:46:83:5b:e0:6e:2c:7a:64:e0:aa:44: 0a:1d:22:0e:dc:d0:9d:5c:0e:ae:a1:93:52:d8:e2: aa:dc:a4:21:ca:21:e8:43:3b:cd:b3:dd:e9:ac:ba: 76:65:6f:27:94:c0:a6:1b:0f:be:cb:31:b7:53:92: 46:7b:42:fe:4f:07:20:16:01:38:1b:e1:30:8e:8b: c7:55:02:05:78:89:08:6d:ef:2d:bb:51:72:9b:38: 06:48:37:72:1c:09:18:1a:d8:06:35:b9:6a:ed:c5: fa:af:20:42:91:d5:82:c4:6b:1a:f7:17:3d:74:81: 03:8b:6f:4f:3a:4c:11:c2:2b:66:68:2a:d6:ca:6f: e8:a3:eb:9a:f4:e5:03:2d:f0:8f:4c:93:07:56:0c: e6:f6:c0:45:17:2b:b3:27:d0:86:9f:b1:fd:fe:d0: 0b:69:72:59:0d:d2:c8:20:6c:b5:0c:8a:ea:fb:65: 42:53:1f:49:72:14:fb:17:fe:d3:6f:36:7e:8e:e0: 79:fc:79:b3:e7:aa:40:91:fa:de:6a:1c:45:ec:09: 9e:3f:12:e4:20:d4:a6:f5:0e:54:21:48:68:2f:3d: 05:5e:01:07:85:12:ca:c3:b8:49:db:17:62:ee:2f: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7D:09:D3:1B:E7:24:6F:5C:EB:A4:15:EE:E9:63:C1:0C:34:2A:D7 X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/EX0J0xvnJG9c66QV7uljwQw0Ktc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.104.92.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:fb:4b:72:7f:c3:23:3e:1a:0c:c0:fe:0a:67:4f:f8:ac:ec: e9:39:0a:06:12:08:8b:5b:82:6d:85:75:c1:12:f8:e0:1b:17: 0d:4d:72:e5:3b:a4:c7:ad:9e:f2:d4:5c:75:0d:02:cb:ae:95: 82:43:d5:5a:0e:9a:26:d8:2e:33:c5:e0:97:42:3d:70:b1:49: 5f:e7:98:7f:5a:27:21:31:b2:e0:cb:c0:ca:41:f0:ec:60:1a: a3:3f:b8:a9:9a:ce:51:6a:27:9a:0a:32:0c:fd:15:8a:0a:70: d1:ac:8e:85:ed:f0:f6:2e:1f:89:2e:07:15:45:1e:ad:79:d6: b7:da:73:4c:dd:e0:bf:f3:37:99:97:3f:49:b4:a5:7b:2a:ca: 7b:f0:f2:7c:5b:2c:dc:92:55:db:4e:47:9f:ee:94:52:65:93: db:1e:73:45:5e:a8:65:47:5d:17:92:71:b1:ea:6b:37:00:d0: ca:f5:29:1c:77:9f:ca:04:6f:d7:28:58:da:71:00:33:79:ee: 5a:31:98:81:05:5b:79:13:1c:cb:a7:8e:8c:85:c1:19:b9:b6: dc:63:22:40:5c:c8:d7:b6:61:9e:02:3b:6c:a5:a1:34:3d:d0: bb:fe:9f:9f:25:f8:2a:0e:fa:0e:af:9b:14:7d:c5:d3:d8:02: a0:3a:c2:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W4X8J5IB86ohhtDGcGgGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTdkMDlkMzFiZTcyNDZmNWNlYmE0MTVlZWU5NjNjMTBjMzQyYWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWG+R7DfhBIdQq39k+ZLfPRVRoNb 4G4semTgqkQKHSIO3NCdXA6uoZNS2OKq3KQhyiHoQzvNs93prLp2ZW8nlMCmGw++ yzG3U5JGe0L+TwcgFgE4G+EwjovHVQIFeIkIbe8tu1FymzgGSDdyHAkYGtgGNblq 7cX6ryBCkdWCxGsa9xc9dIEDi29POkwRwitmaCrWym/oo+ua9OUDLfCPTJMHVgzm 9sBFFyuzJ9CGn7H9/tALaXJZDdLIIGy1DIrq+2VCUx9JchT7F/7TbzZ+juB5/Hmz 56pAkfreahxF7AmePxLkINSm9Q5UIUhoLz0FXgEHhRLKw7hJ2xdi7i+wcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBF9CdMb5yRvXOukFe7pY8EMNCrXMB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvRVgwSjB4dm5KRzljNjZRVjd1bGp3UXcwS3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWhcMA0G CSqGSIb3DQEBCwUAA4IBAQAe+0tyf8MjPhoMwP4KZ0/4rOzpOQoGEgiLW4JthXXB EvjgGxcNTXLlO6THrZ7y1Fx1DQLLrpWCQ9VaDpom2C4zxeCXQj1wsUlf55h/Wich MbLgy8DKQfDsYBqjP7ipms5RaieaCjIM/RWKCnDRrI6F7fD2Lh+JLgcVRR6teda3 2nNM3eC/8zeZlz9JtKV7Ksp78PJ8WyzcklXbTkef7pRSZZPbHnNFXqhlR10XknGx 6ms3ANDK9Skcd5/KBG/XKFjacQAzee5aMZiBBVt5ExzLp46MhcEZubbcYyJAXMjX tmGeAjtspaE0PdC7/p+fJfgqDvoOr5sUfcXT2AKgOsKw -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:56 2026 by rpki-client