This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa File: 5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa (raw, json) Hash identifier: n0us7CHhoP1rKb4vN6/gR6gcwVv7Il8CmXn18T2tiXo= Subject key identifier: E6:49:04:DD:7B:44:F5:99:D2:B2:94:75:39:CC:29:56:9D:13:C9:5F Certificate issuer: /CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb Certificate serial: 019B7B35AC783EE07EF18CF8E4D531284312 Authority key identifier: 7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa Signing time: Thu 01 Jan 2026 20:17:53 +0000 ROA not before: Thu 01 Jan 2026 20:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213508 IP address blocks: 94.231.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.mft rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:ac:78:3e:e0:7e:f1:8c:f8:e4:d5:31:28:43:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7abaa0b4028f073c0564a658b4fb8886cbc8d3eb Validity Not Before: Jan 1 20:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e64904dd7b44f599d2b2947539cc29569d13c95f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d8:38:ec:82:d0:7e:dd:cd:33:21:3e:14:d0: da:52:9e:c5:b9:56:32:89:c0:96:ce:9d:a4:42:dc: 60:18:bf:f3:be:40:47:1b:e8:11:a3:56:ba:ee:64: 1c:5d:0b:52:9e:ca:ef:07:ca:e3:d9:95:ee:fd:a1: 8d:fa:99:01:74:2a:8d:29:9e:77:c2:78:72:08:6e: 68:a9:ed:f8:82:6a:9a:7c:30:6e:30:c4:d4:5b:f7: 12:f7:a1:e3:3f:f5:ec:e8:c3:f7:b7:66:cc:5b:03: 2b:99:1c:a3:f2:d5:f5:26:14:8e:dd:66:ce:99:66: 64:88:77:85:56:22:46:b3:d5:f8:5b:9f:e5:43:2f: ec:6f:59:05:ca:28:c1:64:0d:cb:5c:cb:63:67:93: d3:8d:b7:05:67:3d:f0:4d:5c:98:3c:ff:ed:59:7e: c5:72:d3:6f:91:ee:67:a3:fe:10:a7:cf:f9:a6:09: ea:10:7c:56:00:9d:9e:df:3e:9c:36:bd:aa:8d:43: be:71:4a:de:7c:eb:1a:58:b3:9a:27:9d:ac:13:2b: e2:b8:21:00:f4:e0:b7:e7:37:35:9a:72:4b:5f:4d: 59:9f:74:55:1b:c9:88:4b:09:6e:f3:1d:5d:0f:fc: e4:36:9b:83:2c:8f:b9:d0:7d:fe:da:35:2b:3a:55: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:49:04:DD:7B:44:F5:99:D2:B2:94:75:39:CC:29:56:9D:13:C9:5F X509v3 Authority Key Identifier: keyid:7A:BA:A0:B4:02:8F:07:3C:05:64:A6:58:B4:FB:88:86:CB:C8:D3:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erqgtAKPBzwFZKZYtPuIhsvI0-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/5kkE3XtE9ZnSspR1OcwpVp0TyV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6df7ec-2afe-4532-b40a-baedc79ae7e1/1/erqgtAKPBzwFZKZYtPuIhsvI0-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.220.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:d3:35:82:94:d3:da:4c:fe:6e:31:e0:f8:ee:a6:be:e2:6e: 6b:65:2b:6c:f3:47:ec:54:18:1b:8c:61:2c:d8:db:22:1a:fb: c9:d3:79:bd:49:f1:f4:84:7d:04:16:e7:b9:4f:52:59:19:53: bc:61:fd:18:c0:6d:cb:4a:8e:81:b0:34:a8:27:7a:ed:da:a5: 05:86:20:6c:4e:07:b0:c5:4c:9c:03:35:a2:5d:ec:33:43:40: 9c:f8:3c:48:00:d4:2a:c5:aa:d8:b6:bf:31:b7:4d:39:f0:57: 01:5e:81:f8:e7:6c:fc:b9:79:81:32:af:90:e0:36:75:5e:8c: a2:7b:1c:1e:8a:4a:db:23:2e:3b:c2:0d:ee:16:4c:04:b9:1c: c2:f8:f4:6a:e2:3f:da:4c:f3:46:e0:88:93:c8:f9:97:ac:7c: 02:19:63:3d:ed:29:ed:2a:10:c2:ef:40:5a:18:35:85:cb:6e: 4f:93:3f:07:d0:3e:d2:49:19:34:6d:1a:50:bb:7e:08:6a:eb: 13:b4:db:18:86:7f:d1:a1:c0:b1:a8:fb:b5:93:f6:e2:79:95: 7f:4e:21:e1:e8:de:77:15:08:ae:0d:2b:39:d5:e3:74:61:6e: f4:78:28:f0:9c:0e:9a:de:a5:2f:36:57:db:93:e4:a5:2f:83: 40:05:bc:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nax4PuB+8Yz45NUxKEMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYmFhMGI0MDI4ZjA3M2MwNTY0YTY1OGI0ZmI4ODg2Y2Jj OGQzZWIwHhcNMjYwMTAxMjAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjQ5MDRkZDdiNDRmNTk5ZDJiMjk0NzUzOWNjMjk1NjlkMTNjOTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9g47ILQft3NMyE+FNDaUp7FuVYy icCWzp2kQtxgGL/zvkBHG+gRo1a67mQcXQtSnsrvB8rj2ZXu/aGN+pkBdCqNKZ53 wnhyCG5oqe34gmqafDBuMMTUW/cS96HjP/Xs6MP3t2bMWwMrmRyj8tX1JhSO3WbO mWZkiHeFViJGs9X4W5/lQy/sb1kFyijBZA3LXMtjZ5PTjbcFZz3wTVyYPP/tWX7F ctNvke5no/4Qp8/5pgnqEHxWAJ2e3z6cNr2qjUO+cUrefOsaWLOaJ52sEyviuCEA 9OC35zc1mnJLX01Zn3RVG8mISwlu8x1dD/zkNpuDLI+50H3+2jUrOlW5jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZJBN17RPWZ0rKUdTnMKVadE8lfMB8GA1UdIwQY MBaAFHq6oLQCjwc8BWSmWLT7iIbLyNPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEt YmFlZGM3OWFlN2UxLzEvNWtrRTNYdEU5Wm5Tc3BSMU9jd3BWcDBUeVY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZGY3ZWMtMmFmZS00NTMyLWI0MGEtYmFlZGM3OWFlN2Ux LzEvZXJxZ3RBS1BCendGWktaWXRQdUloc3ZJMC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufcMA0G CSqGSIb3DQEBCwUAA4IBAQBK0zWClNPaTP5uMeD47qa+4m5rZSts80fsVBgbjGEs 2NsiGvvJ03m9SfH0hH0EFue5T1JZGVO8Yf0YwG3LSo6BsDSoJ3rt2qUFhiBsTgew xUycAzWiXewzQ0Cc+DxIANQqxarYtr8xt0058FcBXoH452z8uXmBMq+Q4DZ1Xoyi exweikrbIy47wg3uFkwEuRzC+PRq4j/aTPNG4IiTyPmXrHwCGWM97SntKhDC70Ba GDWFy25Pkz8H0D7SSRk0bRpQu34IausTtNsYhn/RocCxqPu1k/bieZV/TiHh6N53 FQiuDSs51eN0YW70eCjwnA6a3qUvNlfbk+SlL4NABbwu -----END CERTIFICATE-----Generated at Mon Jan 12 03:09:39 2026 by rpki-client