This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/M-xMMd6Gf2uZ9tUOBffibUedQdU.roa File: M-xMMd6Gf2uZ9tUOBffibUedQdU.roa (raw, json) Hash identifier: z6UposrdmUFZ9Kx81ZvTCfrpr+0sTwq6v1d56afx4Nk= Subject key identifier: 33:EC:4C:31:DE:86:7F:6B:99:F6:D5:0E:05:F7:E2:6D:47:9D:41:D5 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BB3742E74B069C9355772EFE91B1AE4E9 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/M-xMMd6Gf2uZ9tUOBffibUedQdU.roa Signing time: Mon 12 Jan 2026 18:24:54 +0000 ROA not before: Mon 12 Jan 2026 18:24:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 77.111.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:74:2e:74:b0:69:c9:35:57:72:ef:e9:1b:1a:e4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 12 18:24:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33ec4c31de867f6b99f6d50e05f7e26d479d41d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:f6:84:29:86:94:99:d6:97:12:91:36:6e: 56:96:1f:bb:93:bd:09:bd:22:1b:5e:48:71:06:39: 6a:36:5c:ab:fd:43:e2:09:5e:75:91:59:a7:1e:30: f5:46:e8:d0:45:7b:10:c4:d7:b6:ec:e8:fe:8a:c5: d5:54:78:3c:12:0f:22:17:29:21:d2:55:2e:46:31: 65:38:4b:86:7a:f5:a4:8f:d4:7e:03:e0:32:b2:40: 10:f5:0a:1c:6d:bc:f0:15:06:74:0e:2c:4d:db:72: 28:d0:38:a8:02:fc:9f:40:24:05:21:e3:58:3b:25: 32:4f:2f:2d:d0:68:d0:06:e6:14:89:74:1c:5f:de: 8e:80:32:10:e4:e6:48:28:50:aa:04:0c:d0:0b:9c: 8d:38:75:df:28:0b:70:e0:af:61:3f:84:d8:10:d7: aa:12:60:82:67:cf:c9:6f:6b:32:97:94:f3:2f:a3: 7a:89:d6:f1:2e:51:38:4d:4b:cb:9f:1a:18:b9:dc: f6:14:ef:55:1c:04:41:15:2f:bc:92:ec:31:90:0d: 23:c4:d7:08:e9:28:67:14:58:41:93:68:b7:a8:87: 18:a9:20:a7:2c:48:f2:7b:f0:4b:b3:46:88:30:e8: 3b:88:17:3e:1a:22:54:46:d3:53:77:5e:d7:6a:f4: 44:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:EC:4C:31:DE:86:7F:6B:99:F6:D5:0E:05:F7:E2:6D:47:9D:41:D5 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/M-xMMd6Gf2uZ9tUOBffibUedQdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.104.0/24 Signature Algorithm: sha256WithRSAEncryption b5:27:23:57:9b:b8:2d:62:0c:da:e1:0d:e8:79:6b:99:86:ee: 5a:da:f1:74:af:5c:70:6f:f5:ea:da:aa:cc:be:bb:c2:9a:b6: 87:c2:f4:b0:21:96:55:8c:4c:e6:53:d1:e0:6c:61:0a:62:12: d4:3c:aa:b3:d1:6c:a9:72:69:1d:e4:86:bd:5f:d2:0a:6b:4a: 03:dc:c2:6b:34:8b:14:8b:43:23:64:03:04:70:eb:51:a8:32: 24:49:ed:23:1a:4c:cb:ad:4b:1d:32:c7:3d:bc:a8:8a:53:1b: bd:2b:f5:62:b7:0d:7c:c3:48:4d:31:8e:43:ca:55:d6:67:97: 40:c3:49:41:ad:54:bf:43:1a:c1:54:e6:b7:f1:17:1d:46:61: 17:05:5f:8c:cb:68:ff:4c:28:b9:b2:87:05:41:0a:23:88:cb: a5:8b:65:de:79:2f:e4:53:1f:b0:c9:d5:1d:8a:0d:88:a3:27: c5:86:72:9a:b2:40:bf:f5:ca:9a:1c:98:ed:ec:ff:da:9c:75: 79:0d:bb:25:7b:cb:64:93:10:74:93:43:a5:2c:53:7c:93:b4: 2c:f8:0d:62:1b:00:00:2f:84:14:3f:72:e4:fb:a7:46:a8:cb: a9:1c:0b:96:d1:12:2a:f2:a5:0b:a1:d9:c2:37:4f:3a:b3:a8: 44:55:91:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuzdC50sGnJNVdy7+kbGuTpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTEyMTgyNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2VjNGMzMWRlODY3ZjZiOTlmNmQ1MGUwNWY3ZTI2ZDQ3OWQ0MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSP2hCmGlJnWlxKRNm5Wlh+7k70J vSIbXkhxBjlqNlyr/UPiCV51kVmnHjD1RujQRXsQxNe27Oj+isXVVHg8Eg8iFykh 0lUuRjFlOEuGevWkj9R+A+AyskAQ9QocbbzwFQZ0DixN23Io0DioAvyfQCQFIeNY OyUyTy8t0GjQBuYUiXQcX96OgDIQ5OZIKFCqBAzQC5yNOHXfKAtw4K9hP4TYENeq EmCCZ8/Jb2syl5TzL6N6idbxLlE4TUvLnxoYudz2FO9VHARBFS+8kuwxkA0jxNcI 6ShnFFhBk2i3qIcYqSCnLEjye/BLs0aIMOg7iBc+GiJURtNTd17XavREsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDPsTDHehn9rmfbVDgX34m1HnUHVMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvTS14TU1kNkdmMnVaOXRVT0JmZmliVWVkUWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9oMA0G CSqGSIb3DQEBCwUAA4IBAQC1JyNXm7gtYgza4Q3oeWuZhu5a2vF0r1xwb/Xq2qrM vrvCmraHwvSwIZZVjEzmU9HgbGEKYhLUPKqz0Wypcmkd5Ia9X9IKa0oD3MJrNIsU i0MjZAMEcOtRqDIkSe0jGkzLrUsdMsc9vKiKUxu9K/Vitw18w0hNMY5DylXWZ5dA w0lBrVS/QxrBVOa38RcdRmEXBV+My2j/TCi5socFQQojiMuli2XeeS/kUx+wydUd ig2IoyfFhnKaskC/9cqaHJjt7P/anHV5Dbsle8tkkxB0k0OlLFN8k7Qs+A1iGwAA L4QUP3Lk+6dGqMupHAuW0RIq8qULodnCN086s6hEVZHU -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:50 2026 by rpki-client