This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/ecFOCtyMPZjujJaE-20dAfii9DM.roa File: ecFOCtyMPZjujJaE-20dAfii9DM.roa (raw, json) Hash identifier: 2c3Yb3DHYLd5Kr4mOCYbpGtoKCki3dzbhWvRjPGqV24= Subject key identifier: 79:C1:4E:0A:DC:8C:3D:98:EE:8C:96:84:FB:6D:1D:01:F8:A2:F4:33 Certificate issuer: /CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Certificate serial: 019B7C11C17EE13FAF29018BA103492C8684 Authority key identifier: 53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/ecFOCtyMPZjujJaE-20dAfii9DM.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 147.122.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.mft rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c1:7e:e1:3f:af:29:01:8b:a1:03:49:2c:86:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=533605742b7e122fcfb2aeba9fb10d6fca48e78e Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c14e0adc8c3d98ee8c9684fb6d1d01f8a2f433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:62:7f:52:95:82:76:c2:8b:12:5e:83:0a:89: 9f:61:53:0d:81:46:bd:78:97:9a:7a:59:73:17:d2: 1f:35:7b:63:59:49:7a:68:95:7e:2e:bb:59:4a:bf: f0:7c:7f:23:cb:23:1c:a9:f9:f0:7f:99:7f:53:5a: 35:b3:0b:c5:6f:bc:95:b5:4e:ef:2e:0d:52:57:d7: 36:ae:98:44:6d:f3:af:50:9e:ff:7d:3b:ea:a1:34: 62:0d:28:82:2e:fb:dd:93:9e:88:04:c8:5a:a8:be: fc:76:0f:32:7c:dd:ce:c6:e3:84:d5:cc:44:a3:a5: 48:90:5c:f9:ba:d1:8c:af:54:3d:ff:7a:0c:f9:ea: ef:64:f2:22:f6:ba:8e:2c:c4:00:74:5f:2d:c0:3a: 1d:13:9f:2c:d3:c4:53:49:fd:c3:54:1d:1a:36:bf: 85:7a:63:59:23:e9:4a:fd:91:e7:e2:8c:62:e4:9f: 7b:e7:f6:01:89:d9:f1:b8:51:4f:de:2d:0f:b7:52: 8f:27:a1:07:b0:25:4e:e1:bc:70:68:b2:27:b3:b7: 7e:d8:df:af:8c:18:94:f7:0a:fc:13:eb:5d:22:7b: 28:11:36:79:fc:12:88:4c:02:d6:f5:21:9c:f3:9e: 38:8c:a7:21:f7:ca:5f:ba:0e:d8:b5:a8:c0:b4:7e: da:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C1:4E:0A:DC:8C:3D:98:EE:8C:96:84:FB:6D:1D:01:F8:A2:F4:33 X509v3 Authority Key Identifier: keyid:53:36:05:74:2B:7E:12:2F:CF:B2:AE:BA:9F:B1:0D:6F:CA:48:E7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYFdCt-Ei_Psq66n7ENb8pI544.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/ecFOCtyMPZjujJaE-20dAfii9DM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f2c8a5-3b43-4baa-8a0e-4ff90d378642/1/UzYFdCt-Ei_Psq66n7ENb8pI544.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.122.0.0/16 Signature Algorithm: sha256WithRSAEncryption d3:46:d2:3d:9e:59:a7:16:64:ab:f7:5d:3e:4b:c5:5b:0b:58: fd:99:d7:b1:fb:7c:33:7c:18:4d:82:d1:e7:02:2d:07:65:9e: 13:bb:a4:7b:05:c3:3e:08:32:e1:6f:fe:f6:6e:63:d1:90:fe: fa:e7:ed:5d:e0:f5:dc:de:e3:7f:b6:17:92:a8:d8:9e:ec:d5: 97:63:cf:25:6c:74:60:fd:af:95:ea:9a:8a:ea:a0:b6:1b:ba: 6f:ea:02:29:9e:44:85:8d:87:96:78:40:01:5d:b2:b8:4b:ab: 70:82:4b:b2:80:e3:23:9f:d6:98:be:77:9c:2a:e9:4b:57:28: c8:b3:df:06:3d:03:3c:43:49:d9:2c:db:32:d5:61:cb:f1:81: fa:28:8a:4c:db:af:4d:94:e7:95:23:d6:5a:92:37:0d:41:c9: 69:0d:84:15:cd:15:02:f0:3e:28:24:de:4c:09:38:68:29:57: 97:cc:27:24:e1:01:53:4d:3c:4f:92:85:c7:9c:57:30:99:c2: b5:59:08:31:5a:73:d4:a6:82:8f:87:fc:67:2a:4a:66:59:06: f4:7b:eb:2b:74:91:5d:7f:22:0f:cc:2a:ba:b3:0f:8d:85:98: 02:31:e4:39:78:36:f2:d5:82:fa:60:17:06:2e:35:46:af:ae: fe:8d:3a:96 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8EcF+4T+vKQGLoQNJLIaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzYwNTc0MmI3ZTEyMmZjZmIyYWViYTlmYjEwZDZmY2E0 OGU3OGUwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWMxNGUwYWRjOGMzZDk4ZWU4Yzk2ODRmYjZkMWQwMWY4YTJmNDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2J/UpWCdsKLEl6DComfYVMNgUa9 eJeaellzF9IfNXtjWUl6aJV+LrtZSr/wfH8jyyMcqfnwf5l/U1o1swvFb7yVtU7v Lg1SV9c2rphEbfOvUJ7/fTvqoTRiDSiCLvvdk56IBMhaqL78dg8yfN3OxuOE1cxE o6VIkFz5utGMr1Q9/3oM+ervZPIi9rqOLMQAdF8twDodE58s08RTSf3DVB0aNr+F emNZI+lK/ZHn4oxi5J975/YBidnxuFFP3i0Pt1KPJ6EHsCVO4bxwaLIns7d+2N+v jBiU9wr8E+tdInsoETZ5/BKITALW9SGc8544jKch98pfug7YtajAtH7aWQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFHnBTgrcjD2Y7oyWhPttHQH4ovQzMB8GA1UdIwQY MBaAFFM2BXQrfhIvz7Kuup+xDW/KSOeOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUt NGZmOTBkMzc4NjQyLzEvZWNGT0N0eU1QWmp1akphRS0yMGRBZmlpOURNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9mMmM4YTUtM2I0My00YmFhLThhMGUtNGZmOTBkMzc4NjQy LzEvVXpZRmRDdC1FaV9Qc3E2Nm43RU5iOHBJNTQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAk3owDQYJ KoZIhvcNAQELBQADggEBANNG0j2eWacWZKv3XT5LxVsLWP2Z17H7fDN8GE2C0ecC LQdlnhO7pHsFwz4IMuFv/vZuY9GQ/vrn7V3g9dze43+2F5Ko2J7s1ZdjzyVsdGD9 r5XqmorqoLYbum/qAimeRIWNh5Z4QAFdsrhLq3CCS7KA4yOf1pi+d5wq6UtXKMiz 3wY9AzxDSdks2zLVYcvxgfooikzbr02U55Uj1lqSNw1ByWkNhBXNFQLwPigk3kwJ OGgpV5fMJyThAVNNPE+ShcecVzCZwrVZCDFac9Smgo+H/GcqSmZZBvR76yt0kV1/ Ig/MKrqzD42FmAIx5Dl4NvLVgvpgFwYuNUavrv6NOpY= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:48 2026 by rpki-client