This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa File: cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa (raw, json) Hash identifier: kNaz2FiMudsOJvGO1opecBy8qmYIKUFo/9uEsWYwB/k= Subject key identifier: 70:BB:1B:43:9F:D8:E2:5B:10:F5:55:9A:1E:91:81:CB:AB:6F:3D:79 Certificate issuer: /CN=411dea53467b6c7143eb23d284569a8183b2e82f Certificate serial: 019B7B364B54EDB4C79301FD6F1FDF269E9B Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa Signing time: Thu 01 Jan 2026 20:18:34 +0000 ROA not before: Thu 01 Jan 2026 20:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 84.239.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.mft rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4b:54:ed:b4:c7:93:01:fd:6f:1f:df:26:9e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f Validity Not Before: Jan 1 20:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70bb1b439fd8e25b10f5559a1e9181cbab6f3d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:27:f9:b8:62:e8:ea:92:71:0f:65:25:00: ad:33:40:13:91:d6:bc:c0:63:70:eb:ff:b2:47:28: cc:5e:c7:af:96:1a:de:f0:c2:a4:46:bb:06:e3:d7: e6:ec:41:8d:1a:2b:53:7d:73:c4:30:18:d0:3d:59: 58:e1:10:8d:75:63:68:e4:71:85:c4:2a:f9:69:e9: 9b:4f:d8:92:c7:9f:9f:33:ad:f2:fa:1d:6b:3e:48: 39:86:04:83:c1:21:ac:dc:ca:03:55:19:08:9d:1c: bc:fc:15:0e:a5:85:02:6d:4f:f2:94:ca:3e:e7:65: 3b:b9:a4:22:ab:d6:f6:36:f9:15:2d:9c:60:c3:5b: 2e:a3:1d:1f:04:c6:f4:54:7c:b2:ee:d3:fd:29:4b: c3:35:c0:a6:b7:48:93:53:48:70:dc:87:6b:96:a7: d3:3c:35:3e:12:65:f6:f6:d9:a4:cb:8a:3d:38:8f: e4:44:f7:59:16:cc:ab:5b:0b:a3:f9:37:4f:0e:ef: 38:b6:04:00:67:0b:e3:3f:c8:95:47:a4:55:67:66: 6c:4f:e9:f9:ac:f0:93:42:09:a3:73:c6:76:62:a4: 30:e6:82:95:1a:95:b5:f9:b4:51:b4:c4:cd:de:d3: e6:5d:2b:3e:0c:e2:7e:2a:53:ad:52:51:93:49:6e: 65:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BB:1B:43:9F:D8:E2:5B:10:F5:55:9A:1E:91:81:CB:AB:6F:3D:79 X509v3 Authority Key Identifier: keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/cLsbQ5_Y4lsQ9VWaHpGBy6tvPXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.239.61.0/24 Signature Algorithm: sha256WithRSAEncryption 64:8f:22:c7:76:e6:2d:61:6e:24:7e:a7:e9:64:4b:9b:dd:dc: b6:f2:6b:db:5a:9f:e3:7f:40:c0:a9:8f:9d:29:0a:46:73:8e: 3f:d0:17:f5:39:f2:be:43:57:82:b0:16:01:6e:2b:19:d9:00: a3:7e:60:f1:63:49:e0:bd:81:e0:f2:4d:75:69:04:a8:12:34: 00:a0:bf:49:b1:ae:80:b3:85:2f:d0:ec:4c:34:47:ff:1c:a8: 34:59:3b:d8:f4:94:52:46:e4:5e:97:27:e0:d1:ff:1a:73:be: 41:7d:e6:b5:b5:2e:cf:84:6a:85:f6:fd:d0:78:8b:ff:63:2b: ac:57:c4:7e:58:60:1b:6a:5e:47:2a:da:53:c9:0e:8b:65:90: 84:02:34:ae:b2:aa:43:f3:19:b3:29:69:5f:4e:45:b4:df:e2: c6:dd:8e:b5:8f:3f:ba:98:6a:7e:71:ba:c3:7f:03:bb:8f:f5: 19:d9:be:8e:e3:b4:d9:76:c1:82:af:ed:ff:7b:17:1d:2f:51: 4f:70:5e:c3:07:58:1f:66:fd:5f:e8:27:30:bb:77:2d:87:1a: 7e:cb:42:45:34:e4:86:70:46:90:9e:c9:c4:0e:ef:fd:d7:52: 57:d2:c2:c6:80:2f:19:34:83:7b:09:95:29:2c:3b:f5:a7:d6: 9b:9f:33:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NktU7bTHkwH9bx/fJp6bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWRlYTUzNDY3YjZjNzE0M2ViMjNkMjg0NTY5YTgxODNi MmU4MmYwHhcNMjYwMTAxMjAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGJiMWI0MzlmZDhlMjViMTBmNTU1OWExZTkxODFjYmFiNmYzZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFYn+bhi6OqScQ9lJQCtM0ATkda8 wGNw6/+yRyjMXsevlhre8MKkRrsG49fm7EGNGitTfXPEMBjQPVlY4RCNdWNo5HGF xCr5aembT9iSx5+fM63y+h1rPkg5hgSDwSGs3MoDVRkInRy8/BUOpYUCbU/ylMo+ 52U7uaQiq9b2NvkVLZxgw1suox0fBMb0VHyy7tP9KUvDNcCmt0iTU0hw3IdrlqfT PDU+EmX29tmky4o9OI/kRPdZFsyrWwuj+TdPDu84tgQAZwvjP8iVR6RVZ2ZsT+n5 rPCTQgmjc8Z2YqQw5oKVGpW1+bRRtMTN3tPmXSs+DOJ+KlOtUlGTSW5lhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHC7G0Of2OJbEPVVmh6Rgcurbz15MB8GA1UdIwQY MBaAFEEd6lNGe2xxQ+sj0oRWmoGDsugvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEt NDcxMjBiOTA2OWI3LzEvY0xzYlE1X1k0bHNROVZXYUhwR0J5NnR2UFhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9lYWNjZTUtZTRkZC00ZDlmLThlYzEtNDcxMjBiOTA2OWI3 LzEvUVIzcVUwWjdiSEZENnlQU2hGYWFnWU95NkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVO89MA0G CSqGSIb3DQEBCwUAA4IBAQBkjyLHduYtYW4kfqfpZEub3dy28mvbWp/jf0DAqY+d KQpGc44/0Bf1OfK+Q1eCsBYBbisZ2QCjfmDxY0ngvYHg8k11aQSoEjQAoL9Jsa6A s4Uv0OxMNEf/HKg0WTvY9JRSRuRelyfg0f8ac75Bfea1tS7PhGqF9v3QeIv/Yyus V8R+WGAbal5HKtpTyQ6LZZCEAjSusqpD8xmzKWlfTkW03+LG3Y61jz+6mGp+cbrD fwO7j/UZ2b6O47TZdsGCr+3/excdL1FPcF7DB1gfZv1f6Ccwu3cthxp+y0JFNOSG cEaQnsnEDu/911JX0sLGgC8ZNIN7CZUpLDv1p9abnzN2 -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:26 2026 by rpki-client