This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/apjWmR4jAqudDEj7PwgnJ-v9wSg.roa File: apjWmR4jAqudDEj7PwgnJ-v9wSg.roa (raw, json) Hash identifier: g54nFKjGisPlM1R9XjRpypwCYziDZGK47W/XeOKOQis= Subject key identifier: 6A:98:D6:99:1E:23:02:AB:9D:0C:48:FB:3F:08:27:27:EB:FD:C1:28 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8593B29FEB0041FBD15A95E6C1162 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/apjWmR4jAqudDEj7PwgnJ-v9wSg.roa Signing time: Thu 01 Jan 2026 18:18:28 +0000 ROA not before: Thu 01 Jan 2026 18:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53808 IP address blocks: 77.111.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:59:3b:29:fe:b0:04:1f:bd:15:a9:5e:6c:11:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a98d6991e2302ab9d0c48fb3f082727ebfdc128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c1:15:ce:58:74:0c:e0:6e:c3:5e:82:85:fc: 58:0b:69:ae:d9:a5:1b:35:71:e8:70:f3:bb:56:b3: 9f:08:f2:e8:6d:09:ca:85:33:66:9f:98:67:2f:75: 1d:14:84:bf:0d:66:d4:d9:b3:03:46:31:52:a0:88: 12:2a:9e:1b:f1:40:dc:57:14:80:99:05:34:73:62: 8b:82:45:e7:9a:3d:09:27:38:28:a6:ba:50:9c:9a: c0:9d:98:b8:e3:6c:38:25:ed:a2:cd:33:9b:f4:32: 5f:dd:dd:82:42:d2:78:b5:ad:ab:f1:1a:de:8d:a3: f3:1a:f4:36:53:89:04:11:78:4a:67:8e:6d:c3:9c: 79:84:94:de:99:b1:6c:d3:01:f2:7e:5a:8f:36:61: 61:b0:b7:37:0e:43:3a:40:3d:a6:3d:48:ee:12:03: 39:53:76:7d:41:9e:08:69:d0:44:a3:a8:b7:42:2e: 54:67:06:81:f9:46:34:40:53:36:80:36:78:57:4c: 56:b4:91:f5:9b:d4:11:b5:5f:92:56:89:88:5d:1b: 56:06:c2:b8:55:04:6c:63:1e:e2:30:97:75:6c:f7: 4c:b7:3e:d6:a5:08:ac:65:82:01:45:71:f4:68:51: 46:5d:a8:40:de:f7:6c:cf:ee:11:18:bd:c9:e6:ff: 66:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:98:D6:99:1E:23:02:AB:9D:0C:48:FB:3F:08:27:27:EB:FD:C1:28 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/apjWmR4jAqudDEj7PwgnJ-v9wSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.111.100.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:b5:ab:60:2f:28:2b:e9:7f:5c:92:46:9f:1b:8b:49:51:f1: 8c:19:93:d5:07:12:68:ec:37:a0:21:8b:c2:69:55:ff:05:7a: a1:73:b7:32:19:03:4a:b6:0e:a3:1c:2b:ef:8f:39:72:18:f5: e6:b6:88:b9:98:5f:15:2b:82:81:fd:7a:d2:0a:77:cc:d3:6c: 3e:23:05:b4:19:18:e8:89:3f:f5:bc:db:4a:37:44:42:c2:5d: c6:30:f2:f5:fe:b9:fa:f9:49:43:f2:51:e9:ef:0f:69:8e:4a: e1:d0:30:8d:8e:5d:71:8c:48:fc:7f:ad:f5:1a:9b:83:bd:29: fd:91:fc:e8:1e:00:48:c5:95:06:6a:fc:ef:d7:bc:8d:6d:0f: 68:03:5d:b1:5c:33:4b:f3:c2:75:06:fb:16:fc:dd:fd:5e:dd: 62:9f:be:68:58:1f:96:d3:78:1a:dc:fb:60:71:ac:33:67:dc: 3f:3a:4b:cc:de:65:32:cd:8a:6d:58:99:08:96:5e:a5:d1:74: 2a:2f:01:2d:7f:30:c2:ec:27:91:11:fa:c6:05:97:0d:e3:d0: aa:c1:a0:b8:24:11:3e:b2:43:54:6a:aa:6f:d3:28:fa:46:f5: 21:cd:a0:03:4b:8b:d4:19:31:73:27:c9:59:df:51:16:73:6e: 75:66:d2:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFk7Kf6wBB+9FalebBFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTk4ZDY5OTFlMjMwMmFiOWQwYzQ4ZmIzZjA4MjcyN2ViZmRjMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8EVzlh0DOBuw16ChfxYC2mu2aUb NXHocPO7VrOfCPLobQnKhTNmn5hnL3UdFIS/DWbU2bMDRjFSoIgSKp4b8UDcVxSA mQU0c2KLgkXnmj0JJzgoprpQnJrAnZi442w4Je2izTOb9DJf3d2CQtJ4ta2r8Rre jaPzGvQ2U4kEEXhKZ45tw5x5hJTembFs0wHyflqPNmFhsLc3DkM6QD2mPUjuEgM5 U3Z9QZ4IadBEo6i3Qi5UZwaB+UY0QFM2gDZ4V0xWtJH1m9QRtV+SVomIXRtWBsK4 VQRsYx7iMJd1bPdMtz7WpQisZYIBRXH0aFFGXahA3vdsz+4RGL3J5v9mTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGqY1pkeIwKrnQxI+z8IJyfr/cEoMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvYXBqV21SNGpBcXVkREVqN1B3Z25KLXY5d1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATW9kMA0G CSqGSIb3DQEBCwUAA4IBAQBstatgLygr6X9ckkafG4tJUfGMGZPVBxJo7DegIYvC aVX/BXqhc7cyGQNKtg6jHCvvjzlyGPXmtoi5mF8VK4KB/XrSCnfM02w+IwW0GRjo iT/1vNtKN0RCwl3GMPL1/rn6+UlD8lHp7w9pjkrh0DCNjl1xjEj8f631GpuDvSn9 kfzoHgBIxZUGavzv17yNbQ9oA12xXDNL88J1BvsW/N39Xt1in75oWB+W03ga3Ptg cawzZ9w/OkvM3mUyzYptWJkIll6l0XQqLwEtfzDC7CeREfrGBZcN49CqwaC4JBE+ skNUaqpv0yj6RvUhzaADS4vUGTFzJ8lZ31EWc251ZtLu -----END CERTIFICATE-----Generated at Sun Jan 18 20:29:44 2026 by rpki-client