This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa File: ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa (raw, json) Hash identifier: 11RGKugOQUaTnt/hJwS9BTO4yUW3mvsWT6IHYcZEL9U= Subject key identifier: 79:C4:38:1B:2A:4D:29:E6:20:37:C7:E3:C7:B1:E0:84:BC:57:D4:2B Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Certificate serial: 019B7CED4F0B984E191C19497CC0E0B315DD Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41653 IP address blocks: 45.141.172.0/22 maxlen: 22 91.199.0.0/24 maxlen: 24 95.128.40.0/21 maxlen: 24 176.121.248.0/22 maxlen: 22 178.212.228.0/24 maxlen: 24 185.66.232.0/22 maxlen: 24 194.105.152.0/23 maxlen: 23 195.14.22.0/24 maxlen: 24 2a02:ec0::/32 maxlen: 48 2a0e:cec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4f:0b:98:4e:19:1c:19:49:7c:c0:e0:b3:15:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c4381b2a4d29e62037c7e3c7b1e084bc57d42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:26:d8:c4:be:12:a2:0e:b9:17:9c:c0:fb: 89:80:16:76:1a:9d:e0:cb:39:62:dc:5c:f9:9e:ee: d9:86:86:16:e3:a0:33:8f:79:12:9d:39:f8:fe:96: 0f:7c:ea:2b:5d:f9:b8:13:00:5f:84:7e:c6:81:94: 82:28:e9:58:7f:c4:89:cc:d9:6a:a9:38:7b:6c:7b: d5:17:d4:71:67:49:dc:08:fa:c2:f9:6e:27:b9:62: d2:35:77:63:ca:35:fa:d2:bb:64:bd:20:a6:50:66: 99:fa:57:7a:0d:9c:4a:4d:9a:72:3e:47:63:72:06: c2:65:0c:96:f6:91:bf:55:18:44:db:d0:66:55:4c: 9c:46:af:10:a8:fa:a9:6c:33:9a:c0:d0:f7:fc:29: d5:bb:28:61:22:49:45:92:41:ed:34:15:0e:d8:51: 52:5e:28:26:cb:c7:48:e8:b0:83:08:4d:8c:df:01: 52:e9:fb:6c:c8:10:36:26:9c:c4:84:ad:75:a6:ad: ef:6c:4e:e6:94:12:5f:41:fc:86:b4:d7:a3:15:d1: 79:88:ac:a5:f8:0c:ad:82:64:bd:ed:49:2a:99:0b: ea:f3:cd:a1:79:14:99:b9:0a:d4:9e:3a:62:1e:8d: 4c:a6:66:28:36:a8:80:15:1f:2c:2b:71:56:a5:8f: 45:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C4:38:1B:2A:4D:29:E6:20:37:C7:E3:C7:B1:E0:84:BC:57:D4:2B X509v3 Authority Key Identifier: keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/ecQ4GypNKeYgN8fjx7HghLxX1Cs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.172.0/22 91.199.0.0/24 95.128.40.0/21 176.121.248.0/22 178.212.228.0/24 185.66.232.0/22 194.105.152.0/23 195.14.22.0/24 IPv6: 2a02:ec0::/32 2a0e:cec0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:a4:50:5f:54:01:57:fb:98:7c:1c:89:78:5f:e4:8f:d3:42: ef:21:57:a4:54:c1:0b:8f:62:f6:5f:c6:7b:00:1e:3c:62:a4: 3f:40:2b:40:a0:5c:93:14:40:05:92:81:7f:6d:83:5a:7e:5c: c1:ae:fc:30:a0:9b:2c:11:3d:df:5d:b0:34:4b:cf:30:6b:83: ab:d1:2b:90:f4:79:9f:34:cf:a0:a3:57:90:98:bc:f2:72:72: 0f:3d:31:58:0d:d2:60:d5:16:cb:1c:77:bf:23:46:2a:b9:51: 14:67:21:78:03:47:3f:88:cc:d5:32:76:68:bf:ba:72:23:d3: d1:17:97:ad:64:c7:8f:2f:99:d7:de:c3:6a:d5:73:db:29:59: 44:41:d1:9d:45:c5:60:4b:bf:4f:ae:c7:76:48:e0:73:a0:65: 73:3a:61:1a:17:f8:c9:c8:24:f7:1f:47:86:d1:28:17:70:eb: 9b:4b:81:83:f8:cf:4c:91:88:0f:bb:c8:e7:cb:18:e5:27:44: 9c:56:e4:e7:32:5d:c6:89:ac:83:70:0e:5a:cb:73:33:34:ff: ba:c6:94:51:19:35:ab:ce:d2:64:b7:3b:3d:c6:70:a0:cb:6c: 4f:94:cd:27:23:69:cf:77:54:8a:77:6a:95:15:59:8d:b8:b4: 52:26:78:17 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt87U8LmE4ZHBlJfMDgsxXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1 NWY2NGIwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWM0MzgxYjJhNGQyOWU2MjAzN2M3ZTNjN2IxZTA4NGJjNTdkNDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta4m2MS+EqIOuRecwPuJgBZ2Gp3g yzli3Fz5nu7ZhoYW46Azj3kSnTn4/pYPfOorXfm4EwBfhH7GgZSCKOlYf8SJzNlq qTh7bHvVF9RxZ0ncCPrC+W4nuWLSNXdjyjX60rtkvSCmUGaZ+ld6DZxKTZpyPkdj cgbCZQyW9pG/VRhE29BmVUycRq8QqPqpbDOawND3/CnVuyhhIklFkkHtNBUO2FFS Xigmy8dI6LCDCE2M3wFS6ftsyBA2JpzEhK11pq3vbE7mlBJfQfyGtNejFdF5iKyl +AytgmS97UkqmQvq882heRSZuQrUnjpiHo1MpmYoNqiAFR8sK3FWpY9FbwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFHnEOBsqTSnmIDfH48ex4IS8V9QrMB8GA1UdIwQY MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt M2E2YTA2ZTE4OGMzLzEvZWNRNEd5cE5LZVlnTjhmang3SGdoTHhYMUNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQCLY2sAwQA W8cAAwQDX4AoAwQCsHn4AwQAstTkAwQCuULoAwQBwmmYAwQAww4WMBQEAgACMA4D BQAqAg7AAwUDKg7OwDANBgkqhkiG9w0BAQsFAAOCAQEAnaRQX1QBV/uYfByJeF/k j9NC7yFXpFTBC49i9l/GewAePGKkP0ArQKBckxRABZKBf22DWn5cwa78MKCbLBE9 312wNEvPMGuDq9ErkPR5nzTPoKNXkJi88nJyDz0xWA3SYNUWyxx3vyNGKrlRFGch eANHP4jM1TJ2aL+6ciPT0ReXrWTHjy+Z197DatVz2ylZREHRnUXFYEu/T67Hdkjg c6BlczphGhf4ycgk9x9HhtEoF3Drm0uBg/jPTJGID7vI58sY5SdEnFbk5zJdxoms g3AOWstzMzT/usaUURk1q87SZLc7PcZwoMtsT5TNJyNpz3dUindqlRVZjbi0UiZ4 Fw== -----END CERTIFICATE-----Generated at Tue Jan 20 00:06:24 2026 by rpki-client