This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pu2pdj2KJkXZN3NQHXHpfJ-BRT0.roa File: pu2pdj2KJkXZN3NQHXHpfJ-BRT0.roa (raw, json) Hash identifier: 1/YxBdKhHF/WkRhBeAXjg77/kse5dhUnNlbWm5WDetQ= Subject key identifier: A6:ED:A9:76:3D:8A:26:45:D9:37:73:50:1D:71:E9:7C:9F:81:45:3D Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019BD2C5D56CB47D6D64A1F751465A32D95F Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pu2pdj2KJkXZN3NQHXHpfJ-BRT0.roa Signing time: Sun 18 Jan 2026 20:22:19 +0000 ROA not before: Sun 18 Jan 2026 20:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 43.242.137.0/24 maxlen: 24 77.111.103.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 89.106.21.0/24 maxlen: 24 103.102.135.0/24 maxlen: 24 124.158.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d2:c5:d5:6c:b4:7d:6d:64:a1:f7:51:46:5a:32:d9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 18 20:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6eda9763d8a2645d93773501d71e97c9f81453d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:e1:92:2e:b1:31:66:b0:59:e1:f7:45:93: c5:0d:bd:cc:0b:62:14:46:a1:8e:91:03:9d:1e:d9: 8f:55:46:17:4d:f1:f3:87:bf:93:2a:46:62:b0:a3: 19:2a:8e:15:5c:a9:b8:6e:f8:e4:43:51:3e:e5:4f: 4d:c4:10:32:20:fa:52:bb:58:aa:28:ec:73:6f:70: 78:da:52:90:da:3d:51:2e:82:a0:ba:11:93:25:2c: 77:5f:aa:b2:f1:36:a1:7f:e7:c6:f5:58:ba:45:13: d7:19:7b:55:a0:fe:b7:b3:4b:04:75:87:61:8c:e0: c7:c3:74:28:91:02:a2:dd:8e:ac:68:18:a7:6a:3d: 09:d8:97:de:60:c7:4d:c9:a2:36:82:39:76:52:95: 18:1a:a8:9c:9e:93:df:95:6f:ee:83:6e:08:e7:58: ad:59:84:55:13:e1:cd:cd:28:bc:d3:d8:9b:ef:00: 8b:87:0f:fc:79:27:67:ea:20:42:bd:67:f3:36:22: 84:e4:19:30:a4:33:fd:14:34:bc:93:e2:04:64:dc: dc:98:49:40:cd:64:da:1b:38:bc:8b:1a:22:ae:76: 00:a4:f3:ef:2e:3d:c0:a8:9e:04:69:77:14:50:f6: 99:db:b2:fb:80:d5:94:d2:ca:3f:30:3b:2e:77:9f: 95:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:ED:A9:76:3D:8A:26:45:D9:37:73:50:1D:71:E9:7C:9F:81:45:3D X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/pu2pdj2KJkXZN3NQHXHpfJ-BRT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.137.0/24 77.111.103.0/24 89.106.16.0/24 89.106.21.0/24 103.102.135.0/24 124.158.113.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:b8:f2:99:d4:62:b4:70:ff:97:2e:76:58:1c:e9:7d:be:b5: a0:62:fb:13:a7:1a:05:bb:17:96:3e:bd:c5:88:e8:f0:45:84: 4c:94:4c:36:91:f0:4d:d0:32:b7:e2:3b:35:23:69:b5:64:ad: 32:ac:5c:42:6f:e3:ce:80:37:89:f7:8e:88:d0:38:6b:6e:ff: bd:a0:7a:7f:ec:bd:68:fe:a1:b4:ef:36:54:30:5a:d0:fd:4c: 9b:73:49:64:02:76:f9:7c:40:5c:98:8e:4c:22:56:4a:20:bc: 1a:78:6e:15:ae:a1:ea:0c:cd:e9:3b:5a:93:02:ff:35:4f:46: 9a:0d:d8:3a:fa:e7:2f:1c:ec:c6:66:bf:d6:fa:10:5b:cf:64: 1c:46:fb:3c:78:5b:98:33:98:0f:b2:04:bf:88:ee:d2:55:ca: 02:47:04:8c:13:8c:f9:77:04:40:00:7c:6f:c6:fe:42:45:33: 06:81:7a:3a:d0:ce:fd:83:54:d1:0e:72:62:cc:d1:7f:1b:2f: 0c:d6:e5:8c:88:8b:0c:ac:55:aa:f6:ab:f1:b7:82:06:5c:bb: 16:3b:23:5f:85:0d:53:70:ac:f5:33:6d:c6:06:41:59:68:27: b2:3e:ff:f0:bd:25:29:4a:55:79:8f:95:cd:24:43:6e:73:e1: ce:8b:39:ca -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZvSxdVstH1tZKH3UUZaMtlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTE4MjAyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmVkYTk3NjNkOGEyNjQ1ZDkzNzczNTAxZDcxZTk3YzlmODE0NTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2rhki6xMWawWeH3RZPFDb3MC2IU RqGOkQOdHtmPVUYXTfHzh7+TKkZisKMZKo4VXKm4bvjkQ1E+5U9NxBAyIPpSu1iq KOxzb3B42lKQ2j1RLoKguhGTJSx3X6qy8Tahf+fG9Vi6RRPXGXtVoP63s0sEdYdh jODHw3QokQKi3Y6saBinaj0J2JfeYMdNyaI2gjl2UpUYGqicnpPflW/ug24I51it WYRVE+HNzSi809ib7wCLhw/8eSdn6iBCvWfzNiKE5BkwpDP9FDS8k+IEZNzcmElA zWTaGzi8ixoirnYApPPvLj3AqJ4EaXcUUPaZ27L7gNWU0so/MDsud5+VcQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKbtqXY9iiZF2TdzUB1x6XyfgUU9MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvcHUycGRqMktKa1haTjNOUUhYSHBmSi1CUlQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAK/KJAwQA TW9nAwQAWWoQAwQAWWoVAwQAZ2aHAwQAfJ5xMA0GCSqGSIb3DQEBCwUAA4IBAQB+ uPKZ1GK0cP+XLnZYHOl9vrWgYvsTpxoFuxeWPr3FiOjwRYRMlEw2kfBN0DK34js1 I2m1ZK0yrFxCb+POgDeJ946I0Dhrbv+9oHp/7L1o/qG07zZUMFrQ/Uybc0lkAnb5 fEBcmI5MIlZKILwaeG4VrqHqDM3pO1qTAv81T0aaDdg6+ucvHOzGZr/W+hBbz2Qc Rvs8eFuYM5gPsgS/iO7SVcoCRwSME4z5dwRAAHxvxv5CRTMGgXo60M79g1TRDnJi zNF/Gy8M1uWMiIsMrFWq9qvxt4IGXLsWOyNfhQ1TcKz1M23GBkFZaCeyPv/wvSUp SlV5j5XNJENuc+HOiznK -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:19 2026 by rpki-client