This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NUuEPA29ofEmvxeml56x1c8s2eU.roa File: NUuEPA29ofEmvxeml56x1c8s2eU.roa (raw, json) Hash identifier: r0Q6jXx2QHHpagXNRpC6zXnmlcxRObXnEmJiNGfG7vI= Subject key identifier: 35:4B:84:3C:0D:BD:A1:F1:26:BF:17:A6:97:9E:B1:D5:CF:2C:D9:E5 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC853843B3E705349F2A86BE590A6E7 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NUuEPA29ofEmvxeml56x1c8s2eU.roa Signing time: Thu 01 Jan 2026 18:18:27 +0000 ROA not before: Thu 01 Jan 2026 18:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29798 IP address blocks: 89.106.27.0/24 maxlen: 24 103.47.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:53:84:3b:3e:70:53:49:f2:a8:6b:e5:90:a6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=354b843c0dbda1f126bf17a6979eb1d5cf2cd9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:c0:0c:15:50:3b:f5:66:54:7e:54:bb:2a: 51:06:29:e3:f3:5e:ef:6b:67:a9:42:16:6e:2f:08: da:9f:b7:7f:3b:5b:5f:52:5f:3f:34:79:46:66:51: 22:ef:4f:ae:aa:4d:4f:f7:02:d1:7a:11:bd:b7:a8: 0d:a3:98:1d:ad:b3:b0:47:c5:92:b1:75:4b:af:52: 2f:34:47:64:c5:38:d4:49:d8:08:f5:33:4e:45:31: 70:53:d9:33:47:4e:19:3b:15:8c:44:d4:78:b9:7f: 7d:71:c4:df:42:da:15:69:85:d9:12:1c:91:f9:4b: c6:2c:f0:03:10:98:b2:ad:3d:ce:bc:a8:11:d9:35: 09:63:dd:06:da:42:24:fb:ac:e5:06:cb:e7:5d:f3: 9f:d8:17:a5:9b:2c:73:fb:56:00:dd:c0:4f:b1:64: df:b8:ba:2b:95:92:54:fe:f9:d6:66:3d:c2:46:0a: b9:4d:2d:0b:2d:f1:dc:0c:6c:24:99:46:bd:43:4f: 9e:6f:b6:fb:0a:a6:86:ea:36:9d:22:6c:55:72:e9: 0f:1a:86:93:a4:a5:a5:7b:cc:24:3b:f5:ed:ba:9a: 1c:8d:c5:83:d7:7f:40:f4:45:98:43:26:99:53:41: c6:e1:12:ec:fb:2d:3d:16:2f:7d:38:bb:a4:4c:25: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4B:84:3C:0D:BD:A1:F1:26:BF:17:A6:97:9E:B1:D5:CF:2C:D9:E5 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/NUuEPA29ofEmvxeml56x1c8s2eU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.27.0/24 103.47.56.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d3:89:8e:b2:2b:d6:a7:e1:5b:e7:eb:73:74:7c:5d:6b:39: 58:92:e3:1c:51:b7:40:9a:63:ee:06:bd:4c:e9:c5:b2:79:2e: 9d:30:3e:2f:73:b2:85:53:52:b3:b0:40:71:d8:d8:3e:15:8e: 4d:7e:70:7f:a5:6b:fb:e6:0d:7d:87:33:a9:f1:c2:cb:34:4f: 82:0f:45:2e:82:a9:09:00:6f:5a:4b:f0:6f:7a:59:d5:9b:cc: 72:c0:b8:3c:a0:91:74:0d:d0:7e:f8:e4:45:e5:42:78:62:cb: 1c:99:f1:3f:3b:82:d8:66:8a:04:f1:d0:23:8b:03:4b:c4:19: c5:16:12:79:0b:99:fe:bf:45:0f:da:cc:be:12:5a:50:0f:2c: ba:13:1f:11:97:fa:2c:74:a4:d8:47:58:1b:eb:a8:3c:0a:13: ec:f9:6f:98:46:2c:91:c3:ea:e4:f6:a1:0f:37:c3:db:e3:bc: c6:a6:8b:19:d8:65:ff:aa:ac:5c:fe:9f:61:a3:62:6a:05:1b: 2a:ed:e8:19:af:07:ef:b1:b7:35:c8:44:59:47:eb:50:3c:b0: e8:6d:b0:68:c3:8e:4e:55:d3:d6:15:75:fa:8b:a4:d6:05:50: 92:6f:cc:91:1c:55:d8:1d:22:fd:13:02:be:4a:57:84:33:89: ee:88:ff:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yFOEOz5wU0nyqGvlkKbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNTRiODQzYzBkYmRhMWYxMjZiZjE3YTY5NzllYjFkNWNmMmNkOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdPADBVQO/VmVH5UuypRBinj817v a2epQhZuLwjan7d/O1tfUl8/NHlGZlEi70+uqk1P9wLRehG9t6gNo5gdrbOwR8WS sXVLr1IvNEdkxTjUSdgI9TNORTFwU9kzR04ZOxWMRNR4uX99ccTfQtoVaYXZEhyR +UvGLPADEJiyrT3OvKgR2TUJY90G2kIk+6zlBsvnXfOf2Belmyxz+1YA3cBPsWTf uLorlZJU/vnWZj3CRgq5TS0LLfHcDGwkmUa9Q0+eb7b7CqaG6jadImxVcukPGoaT pKWle8wkO/XtupocjcWD139A9EWYQyaZU0HG4RLs+y09Fi99OLukTCX4bwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDVLhDwNvaHxJr8XppeesdXPLNnlMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvTlV1RVBBMjlvZkVtdnhlbWw1NngxYzhzMmVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWWobAwQA Zy84MA0GCSqGSIb3DQEBCwUAA4IBAQBY04mOsivWp+Fb5+tzdHxdazlYkuMcUbdA mmPuBr1M6cWyeS6dMD4vc7KFU1KzsEBx2Ng+FY5NfnB/pWv75g19hzOp8cLLNE+C D0UugqkJAG9aS/BvelnVm8xywLg8oJF0DdB++ORF5UJ4YsscmfE/O4LYZooE8dAj iwNLxBnFFhJ5C5n+v0UP2sy+ElpQDyy6Ex8Rl/osdKTYR1gb66g8ChPs+W+YRiyR w+rk9qEPN8Pb47zGposZ2GX/qqxc/p9ho2JqBRsq7egZrwfvsbc1yERZR+tQPLDo bbBow45OVdPWFXX6i6TWBVCSb8yRHFXYHSL9EwK+SleEM4nuiP/y -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client