This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rvXMITqvxiE0dunMCJAJKfdJXw0.roa File: rvXMITqvxiE0dunMCJAJKfdJXw0.roa (raw, json) Hash identifier: 7xmN3m0/pgIMUHHQo11UpsbuH6bvKTwuJxkUR61ytcc= Subject key identifier: AE:F5:CC:21:3A:AF:C6:21:34:76:E9:CC:08:90:09:29:F7:49:5F:0D Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC86224A57A10C46FA832541754E515 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rvXMITqvxiE0dunMCJAJKfdJXw0.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212384 IP address blocks: 94.229.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:62:24:a5:7a:10:c4:6f:a8:32:54:17:54:e5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aef5cc213aafc6213476e9cc08900929f7495f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:9a:19:7a:ed:b2:36:44:b3:38:f0:06:84: 9a:24:15:9a:38:d6:c6:de:6a:b1:e5:51:b5:8c:1f: 68:81:d5:b4:6b:ad:91:da:19:9f:33:15:a4:0f:40: d0:94:1b:d3:b8:57:60:a2:47:15:2a:bb:1f:41:9a: 06:68:25:b6:b0:87:93:6d:f5:60:39:55:10:1e:8f: 24:f1:a8:51:da:ac:d3:09:ba:4c:d8:be:c9:4a:0f: b0:33:0b:53:dc:e2:d1:d9:b2:6a:17:62:91:8b:82: f5:8e:38:92:29:66:7e:89:cb:16:7d:a7:64:f0:73: c5:37:0b:82:1e:ee:dc:80:d0:e2:d8:02:3b:be:34: a4:75:39:b2:2f:c6:4f:0b:f7:bf:3c:d8:8e:99:cd: 15:0c:64:20:f9:b8:03:2d:03:97:0f:67:46:37:6a: 33:0a:00:fb:cb:7c:a2:66:25:e9:c8:65:81:e9:cc: 8f:4a:a1:8d:29:44:d3:b8:76:ed:ad:c4:fd:3a:da: ac:a6:92:41:35:8c:38:ef:c0:28:8e:95:47:09:19: b9:5e:cd:bc:69:dd:ea:81:5e:f8:52:28:11:a7:f9: c0:87:46:4e:3f:03:4d:7e:a0:1b:ff:3b:b0:9d:4b: 97:67:83:72:7e:dc:d3:3f:8d:b1:52:e9:7b:07:b1: a3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F5:CC:21:3A:AF:C6:21:34:76:E9:CC:08:90:09:29:F7:49:5F:0D X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rvXMITqvxiE0dunMCJAJKfdJXw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.210.0/24 Signature Algorithm: sha256WithRSAEncryption b7:56:a1:92:8d:24:9a:2f:b7:a7:ed:f7:21:68:a4:af:36:cc: 37:42:cc:a2:1d:f8:69:69:2b:8b:19:29:68:61:f6:d7:61:bd: 65:cd:85:be:45:92:1b:b2:bb:70:99:85:38:d3:b8:82:6d:52: 42:f4:fd:73:3e:26:32:9b:22:fb:3e:58:17:9a:33:b2:5c:a1: 69:af:be:b0:5d:d0:d6:25:f1:44:c1:20:74:a1:ad:91:dc:1c: 48:52:96:ea:d0:14:73:3c:0b:68:1e:0e:bb:74:ac:3c:d2:50: 4c:cb:12:61:ad:6a:f6:7c:44:c0:58:ed:88:8d:4f:1d:e9:93: a6:9e:4f:20:99:e2:33:5b:86:c7:27:42:a0:ef:8b:07:ea:13: b2:3b:a5:5a:86:9c:60:c6:ac:75:ff:d5:ef:d0:86:53:32:e4: 13:30:fa:b9:b7:1c:49:bd:af:dc:0b:ad:8c:7d:b1:de:e9:78: 80:c0:79:03:7e:11:c4:06:f1:04:00:f4:64:54:e3:a2:bc:f2: 57:e4:13:4d:82:b9:a7:e4:1a:50:16:b8:13:34:a7:11:c4:20: 85:d0:a1:b5:81:be:8e:09:92:69:d1:3e:39:2e:f9:d4:cf:c2: 33:c1:6f:c1:b3:bd:57:32:4a:e6:e3:93:7f:b8:4e:09:06:8d: 29:7c:26:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGIkpXoQxG+oMlQXVOUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWY1Y2MyMTNhYWZjNjIxMzQ3NmU5Y2MwODkwMDkyOWY3NDk1ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPeaGXrtsjZEszjwBoSaJBWaONbG 3mqx5VG1jB9ogdW0a62R2hmfMxWkD0DQlBvTuFdgokcVKrsfQZoGaCW2sIeTbfVg OVUQHo8k8ahR2qzTCbpM2L7JSg+wMwtT3OLR2bJqF2KRi4L1jjiSKWZ+icsWfadk 8HPFNwuCHu7cgNDi2AI7vjSkdTmyL8ZPC/e/PNiOmc0VDGQg+bgDLQOXD2dGN2oz CgD7y3yiZiXpyGWB6cyPSqGNKUTTuHbtrcT9OtqsppJBNYw478AojpVHCRm5Xs28 ad3qgV74UigRp/nAh0ZOPwNNfqAb/zuwnUuXZ4NyftzTP42xUul7B7GjOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK71zCE6r8YhNHbpzAiQCSn3SV8NMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvcnZYTUlUcXZ4aUUwZHVuTUNKQUpLZmRKWHcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuXSMA0G CSqGSIb3DQEBCwUAA4IBAQC3VqGSjSSaL7en7fchaKSvNsw3QsyiHfhpaSuLGSlo YfbXYb1lzYW+RZIbsrtwmYU407iCbVJC9P1zPiYymyL7PlgXmjOyXKFpr76wXdDW JfFEwSB0oa2R3BxIUpbq0BRzPAtoHg67dKw80lBMyxJhrWr2fETAWO2IjU8d6ZOm nk8gmeIzW4bHJ0Kg74sH6hOyO6Vahpxgxqx1/9Xv0IZTMuQTMPq5txxJva/cC62M fbHe6XiAwHkDfhHEBvEEAPRkVOOivPJX5BNNgrmn5BpQFrgTNKcRxCCF0KG1gb6O CZJp0T45LvnUz8IzwW/Bs71XMkrm45N/uE4JBo0pfCYs -----END CERTIFICATE-----Generated at Fri Jan 2 14:41:00 2026 by rpki-client