This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/3toE35EUITjod3ujsTDiStr_B54.roa File: 3toE35EUITjod3ujsTDiStr_B54.roa (raw, json) Hash identifier: WJgv/cSPXzniu2qIWia9IFe1EIWa4yT2fM/TzcyszSs= Subject key identifier: DE:DA:04:DF:91:14:21:38:E8:77:7B:A3:B1:30:E2:4A:DA:FF:07:9E Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2E919D6E0761BBDA63A8DE1BA65A8 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/3toE35EUITjod3ujsTDiStr_B54.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 85.237.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e9:19:d6:e0:76:1b:bd:a6:3a:8d:e1:ba:65:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deda04df91142138e8777ba3b130e24adaff079e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2f:38:cb:fb:00:c7:84:04:b6:de:4d:3f:fb: e5:dd:54:8b:60:9d:5f:a4:71:b3:f2:0b:da:4b:62: 95:b2:72:fd:b2:b5:d9:ce:50:0f:b1:86:04:91:b5: 89:ce:bc:3e:6f:8c:4c:79:a4:4f:3f:c5:48:1e:ee: 34:79:a8:76:d8:5d:07:1d:90:65:d4:25:63:58:f8: 44:11:7b:15:a4:9a:d4:11:03:f7:a7:5c:4a:d5:37: 0d:2e:96:b0:49:8e:4f:6c:79:50:29:26:6d:df:4e: 64:76:e7:77:d1:17:6a:a7:f8:11:73:7a:64:33:13: 10:0d:7e:43:ba:2e:1b:57:4c:4d:9b:15:a2:7f:78: 10:13:aa:fb:9a:54:c6:63:80:2a:c3:54:19:f7:ac: 62:b3:9a:a7:e6:14:b3:da:27:1f:df:23:e4:2f:ce: 64:46:52:47:e2:d6:97:5a:a6:fe:2f:5a:ec:24:78: 4d:ad:e4:64:3b:9c:a4:5c:d7:71:5d:97:50:9a:f1: 3e:10:df:66:64:b1:c1:64:3c:51:1b:cc:79:43:f5: 62:55:42:d7:df:88:ff:cc:44:35:03:35:3b:21:90: 25:4b:24:06:44:b2:d9:df:60:96:94:7b:45:2d:db: 3a:a4:5b:83:ab:3e:74:59:a7:08:f1:58:db:b7:01: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:DA:04:DF:91:14:21:38:E8:77:7B:A3:B1:30:E2:4A:DA:FF:07:9E X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/3toE35EUITjod3ujsTDiStr_B54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.72.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:85:fc:f8:9e:01:cf:43:f7:a0:b4:c8:5e:8d:a6:78:bf:02: 99:34:c9:32:b4:42:84:2c:27:fc:0e:ce:89:be:d4:f5:d8:51: 06:9d:0d:62:9c:32:8d:9b:c5:6e:95:5b:32:5b:6f:99:71:a3: 0c:62:b3:c6:bb:b7:55:b3:89:4b:ef:18:f2:63:77:34:eb:eb: eb:c4:04:91:26:42:b4:81:28:c2:58:26:a9:d1:90:9e:d6:b4: 51:68:2a:21:c6:a7:ef:12:28:5c:3a:cb:74:f0:c9:f4:af:c1: 9a:bc:f0:88:5b:3c:9e:c6:46:75:85:03:74:1b:01:58:72:82: 09:c6:7a:50:83:f2:f0:45:79:18:69:2b:63:f5:62:ef:84:a9: 1d:d2:79:0c:95:b5:cb:ad:af:dc:d4:49:cb:69:4e:cb:86:34: 5a:87:e6:70:fe:2d:ef:c0:97:31:7e:13:7b:79:ef:77:34:37: f0:4f:df:a3:82:9e:a9:19:dc:c0:a7:ee:12:82:61:7a:a5:f4: 06:e4:59:d7:0e:14:45:78:9d:77:79:51:d4:86:88:8b:ba:35: 11:60:67:e3:9b:92:7d:d3:3b:69:07:31:d3:82:2b:88:dc:be: c3:76:a0:00:6f:bc:a2:03:58:8c:c0:be:76:88:b6:42:d6:8a: 25:2f:b5:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oukZ1uB2G72mOo3humWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWRhMDRkZjkxMTQyMTM4ZTg3NzdiYTNiMTMwZTI0YWRhZmYwNzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi84y/sAx4QEtt5NP/vl3VSLYJ1f pHGz8gvaS2KVsnL9srXZzlAPsYYEkbWJzrw+b4xMeaRPP8VIHu40eah22F0HHZBl 1CVjWPhEEXsVpJrUEQP3p1xK1TcNLpawSY5PbHlQKSZt305kdud30Rdqp/gRc3pk MxMQDX5Dui4bV0xNmxWif3gQE6r7mlTGY4Aqw1QZ96xis5qn5hSz2icf3yPkL85k RlJH4taXWqb+L1rsJHhNreRkO5ykXNdxXZdQmvE+EN9mZLHBZDxRG8x5Q/ViVULX 34j/zEQ1AzU7IZAlSyQGRLLZ32CWlHtFLds6pFuDqz50WacI8VjbtwHl4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN7aBN+RFCE46Hd7o7Ew4kra/weeMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvM3RvRTM1RVVJVGpvZDN1anNURGlTdHJfQjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDVe1IMA0G CSqGSIb3DQEBCwUAA4IBAQCKhfz4ngHPQ/egtMhejaZ4vwKZNMkytEKELCf8Ds6J vtT12FEGnQ1inDKNm8VulVsyW2+ZcaMMYrPGu7dVs4lL7xjyY3c06+vrxASRJkK0 gSjCWCap0ZCe1rRRaCohxqfvEihcOst08Mn0r8GavPCIWzyexkZ1hQN0GwFYcoIJ xnpQg/LwRXkYaStj9WLvhKkd0nkMlbXLra/c1EnLaU7LhjRah+Zw/i3vwJcxfhN7 ee93NDfwT9+jgp6pGdzAp+4SgmF6pfQG5FnXDhRFeJ13eVHUhoiLujURYGfjm5J9 0ztpBzHTgiuI3L7DdqAAb7yiA1iMwL52iLZC1oolL7XV -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:10 2026 by rpki-client