This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/eNE1gKczXhaDFK6XnoGtDfRLu3c.roa File: eNE1gKczXhaDFK6XnoGtDfRLu3c.roa (raw, json) Hash identifier: cmDBhWAdX5HMQq+uTsDFnU6N/qjuh4ugnNLxR0oQNAg= Subject key identifier: 78:D1:35:80:A7:33:5E:16:83:14:AE:97:9E:81:AD:0D:F4:4B:BB:77 Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Certificate serial: 019B401C3762456E907FA3D2C0BD2ADF8EAC Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/eNE1gKczXhaDFK6XnoGtDfRLu3c.roa Signing time: Sun 21 Dec 2025 08:52:29 +0000 ROA not before: Sun 21 Dec 2025 08:52:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 833 IP address blocks: 212.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:1c:37:62:45:6e:90:7f:a3:d2:c0:bd:2a:df:8e:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5 Validity Not Before: Dec 21 08:52:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78d13580a7335e168314ae979e81ad0df44bbb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a5:84:c3:6f:e9:66:23:46:b7:cf:a2:c9:54: b9:86:61:89:d3:1d:9e:a0:c1:e8:20:64:a3:8f:4c: b1:03:c2:f1:7b:99:8b:90:80:e0:d1:29:55:aa:be: b5:fe:d4:51:dc:ac:7a:86:85:df:4b:21:c4:92:b5: 66:84:e2:00:66:dd:d4:cb:d3:b4:72:b4:92:e3:87: ad:1e:d4:31:53:54:cf:d5:4c:13:5f:75:b8:41:d7: f4:be:38:2a:c5:23:50:3a:32:e2:ef:7b:32:54:7f: 57:0a:3b:c7:7e:1b:ac:c7:6d:f9:65:05:64:66:73: 3f:e5:47:86:70:8e:04:4c:76:d7:40:05:e9:92:90: 71:55:2d:5d:6a:1d:9e:a1:f1:41:d6:27:5e:7b:d3: 37:72:42:91:c9:24:1d:12:57:b8:70:03:d2:f5:bb: 38:27:96:91:9b:01:a7:4f:41:5a:f9:e1:db:69:7c: 54:d8:0c:a6:3f:91:1b:32:13:56:25:d2:fc:f9:0d: 2a:05:bf:b5:73:84:01:f9:ac:07:28:fb:d6:22:06: 90:26:44:74:43:72:19:96:83:57:f1:c6:d3:43:a4: 8c:5f:5b:6a:f2:1e:a8:4e:2d:ab:85:94:cd:68:55: 12:e0:25:25:92:2f:78:8b:2e:1f:d3:0f:64:2e:e4: 83:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D1:35:80:A7:33:5E:16:83:14:AE:97:9E:81:AD:0D:F4:4B:BB:77 X509v3 Authority Key Identifier: keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/eNE1gKczXhaDFK6XnoGtDfRLu3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.66.55.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:da:af:a9:82:00:44:71:6d:b9:c7:ce:fb:27:f9:02:41:da: ec:70:8e:57:bf:98:f4:a9:0e:ec:16:9d:54:8d:79:c7:ee:ad: 71:53:24:d8:9d:74:8f:6a:c5:86:1e:62:45:7b:64:b6:c4:73: 6b:05:98:2f:14:12:5a:9c:dd:07:29:7e:9d:cf:23:fb:24:68: b7:e7:60:38:91:6e:54:6e:d7:2c:71:74:1c:7b:72:11:c0:2f: 3c:10:84:34:23:7c:9c:8b:2d:03:64:11:d2:c4:c2:e3:69:0a: c8:da:6a:77:8f:44:0a:5f:fa:24:4b:15:5e:04:82:c0:b3:e4: cc:22:ee:da:0a:b0:b2:ca:59:00:f0:92:02:4f:88:1c:76:95: 20:b8:43:cd:e6:3d:36:28:13:3e:a3:53:11:87:ef:90:36:f2: f0:b4:bb:ac:c9:2c:72:0d:96:ec:96:fa:5a:fa:44:c3:41:80: f6:f7:d8:26:a4:3b:d1:b1:ca:b6:b6:dd:e9:14:89:11:77:d4: 1c:d3:c5:48:41:0a:c6:ad:a4:26:52:fa:6c:c0:6c:d0:39:f1: 8c:23:ff:cd:89:e2:3f:ca:36:25:90:7b:0c:61:93:26:55:f4: 21:80:f9:00:87:72:b7:a1:fd:89:c7:89:74:7a:02:e6:dd:c9: 18:8f:d7:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtAHDdiRW6Qf6PSwL0q346sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy YzgxZDUwHhcNMjUxMjIxMDg1MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGQxMzU4MGE3MzM1ZTE2ODMxNGFlOTc5ZTgxYWQwZGY0NGJiYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaWEw2/pZiNGt8+iyVS5hmGJ0x2e oMHoIGSjj0yxA8Lxe5mLkIDg0SlVqr61/tRR3Kx6hoXfSyHEkrVmhOIAZt3Uy9O0 crSS44etHtQxU1TP1UwTX3W4Qdf0vjgqxSNQOjLi73syVH9XCjvHfhusx235ZQVk ZnM/5UeGcI4ETHbXQAXpkpBxVS1dah2eofFB1idee9M3ckKRySQdEle4cAPS9bs4 J5aRmwGnT0Fa+eHbaXxU2AymP5EbMhNWJdL8+Q0qBb+1c4QB+awHKPvWIgaQJkR0 Q3IZloNX8cbTQ6SMX1tq8h6oTi2rhZTNaFUS4CUlki94iy4f0w9kLuSDmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHjRNYCnM14WgxSul56BrQ30S7t3MB8GA1UdIwQY MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt OWZlYmY4YzNlMzNmLzEvZU5FMWdLY3pYaGFERks2WG5vR3REZlJMdTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EI3MA0G CSqGSIb3DQEBCwUAA4IBAQB62q+pggBEcW25x877J/kCQdrscI5Xv5j0qQ7sFp1U jXnH7q1xUyTYnXSPasWGHmJFe2S2xHNrBZgvFBJanN0HKX6dzyP7JGi352A4kW5U btcscXQce3IRwC88EIQ0I3yciy0DZBHSxMLjaQrI2mp3j0QKX/okSxVeBILAs+TM Iu7aCrCyylkA8JICT4gcdpUguEPN5j02KBM+o1MRh++QNvLwtLusySxyDZbslvpa +kTDQYD299gmpDvRscq2tt3pFIkRd9Qc08VIQQrGraQmUvpswGzQOfGMI//NieI/ yjYlkHsMYZMmVfQhgPkAh3K3of2Jx4l0egLm3ckYj9eF -----END CERTIFICATE-----Generated at Sun Dec 21 14:09:22 2025 by rpki-client