This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa File: Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa (raw, json) Hash identifier: P5cxezkPKyfNQVX7JIKGSuvktL5d4uVzE/ictGTTWaU= Subject key identifier: 11:CE:B1:C7:52:C6:38:0A:A7:3B:7C:6B:F1:35:E5:2B:6E:56:5C:E2 Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13F21C937178EA390B9FA69FEBB4DA Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa Signing time: Fri 02 Jan 2026 14:19:32 +0000 ROA not before: Fri 02 Jan 2026 14:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45051 IP address blocks: 91.203.168.0/22 maxlen: 22 91.203.168.0/24 maxlen: 24 91.203.169.0/24 maxlen: 24 91.203.170.0/24 maxlen: 24 91.203.171.0/24 maxlen: 24 212.75.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:f2:1c:93:71:78:ea:39:0b:9f:a6:9f:eb:b4:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11ceb1c752c6380aa73b7c6bf135e52b6e565ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:1d:74:06:33:f5:d1:ae:e0:5d:a0:59:1f: 63:39:a6:e5:c0:fa:68:8e:8a:21:2d:c5:2f:c9:0b: 9c:2a:7d:a7:93:e6:42:6e:90:8e:c0:5c:37:c6:5b: fe:1b:36:05:ec:a9:64:6d:7c:b5:ee:dd:4f:4f:c9: 07:29:b4:eb:c8:ee:e3:18:78:b8:cc:a9:8e:6d:7e: 86:09:89:41:d3:2d:4a:ae:cd:ff:fa:8f:3a:e8:ad: e1:cb:f9:f3:51:c4:ab:3a:37:4c:e9:31:40:e9:29: ef:7a:1f:3f:be:1f:a7:c8:01:2b:f4:b7:a5:b7:05: 82:9b:67:bc:01:4b:29:47:83:96:0a:f8:22:48:c6: 59:af:1b:50:69:ff:06:af:9a:00:08:7d:58:79:d6: 1b:28:27:6a:ab:1a:09:4b:ca:b4:7e:2b:f9:af:1f: 92:7a:d7:95:2a:83:65:77:b3:df:26:e8:56:97:a8: 70:ee:cc:c9:9e:4e:87:b9:9f:bf:f6:ee:90:2c:bc: 8d:db:ec:c9:99:00:5c:d1:c2:01:b2:17:ec:09:81: d9:cb:7c:a4:87:09:3b:34:00:4f:c2:16:14:d9:fe: 9c:75:aa:eb:9a:51:74:f5:bc:29:cf:81:d0:fc:d1: a7:8e:f2:d1:11:61:5a:95:e7:fc:0c:fd:cb:54:ae: c0:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CE:B1:C7:52:C6:38:0A:A7:3B:7C:6B:F1:35:E5:2B:6E:56:5C:E2 X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/Ec6xx1LGOAqnO3xr8TXlK25WXOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.168.0/22 212.75.224.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:e9:06:5e:be:7a:48:63:b6:cc:19:bd:8b:03:dd:0a:65:54: 00:e1:be:fa:57:11:d8:21:94:d1:f2:b9:5b:c7:ce:0e:8b:8a: 5a:33:f8:7d:e0:13:1c:da:3e:27:b0:f9:e3:d6:44:9b:b8:a1: f2:81:8a:f2:c3:83:4e:5d:1a:bc:78:00:83:63:76:31:21:86: 09:87:89:46:13:55:b3:5b:84:91:03:37:b3:01:5b:12:88:09: 85:8d:e7:a7:da:1b:01:2c:d8:d0:5a:a6:3c:f5:5f:80:c3:14: 09:8a:79:90:9b:5f:7d:94:5a:07:01:82:f9:05:74:a8:cb:cb: d5:e6:f2:77:cb:d1:fe:d3:e9:22:9b:b8:82:02:18:d7:93:d0: 78:bb:32:45:4b:b6:1b:f0:4b:e2:58:13:86:af:62:44:ea:1e: d8:38:e3:0c:6e:76:f0:f2:aa:3d:67:be:5d:7a:4f:76:08:45: e5:1c:e6:2a:5e:09:e5:05:11:bf:20:95:6e:3c:0c:ef:1d:df: 41:4d:c8:41:76:64:02:7b:cc:40:cd:1e:78:23:18:dd:e0:ae: 34:13:a2:a9:0e:7b:c3:6a:20:32:9a:5d:97:7b:4a:87:c9:77: a0:4b:c5:e9:a9:9f:ed:78:67:e2:19:d5:e2:26:23:b4:f9:ef: 53:32:37:30 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E/Ick3F46jkLn6af67TaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWNlYjFjNzUyYzYzODBhYTczYjdjNmJmMTM1ZTUyYjZlNTY1Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/IddAYz9dGu4F2gWR9jOablwPpo joohLcUvyQucKn2nk+ZCbpCOwFw3xlv+GzYF7KlkbXy17t1PT8kHKbTryO7jGHi4 zKmObX6GCYlB0y1Krs3/+o866K3hy/nzUcSrOjdM6TFA6Snveh8/vh+nyAEr9Lel twWCm2e8AUspR4OWCvgiSMZZrxtQaf8Gr5oACH1YedYbKCdqqxoJS8q0fiv5rx+S eteVKoNld7PfJuhWl6hw7szJnk6HuZ+/9u6QLLyN2+zJmQBc0cIBshfsCYHZy3yk hwk7NABPwhYU2f6cdarrmlF09bwpz4HQ/NGnjvLREWFalef8DP3LVK7ADwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBHOscdSxjgKpzt8a/E15StuVlziMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvRWM2eHgxTEdPQXFuTzN4cjhUWGxLMjVXWE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8uoAwQF 1EvgMA0GCSqGSIb3DQEBCwUAA4IBAQBO6QZevnpIY7bMGb2LA90KZVQA4b76VxHY IZTR8rlbx84Oi4paM/h94BMc2j4nsPnj1kSbuKHygYryw4NOXRq8eACDY3YxIYYJ h4lGE1WzW4SRAzezAVsSiAmFjeen2hsBLNjQWqY89V+AwxQJinmQm199lFoHAYL5 BXSoy8vV5vJ3y9H+0+kim7iCAhjXk9B4uzJFS7Yb8EviWBOGr2JE6h7YOOMMbnbw 8qo9Z75dek92CEXlHOYqXgnlBRG/IJVuPAzvHd9BTchBdmQCe8xAzR54Ixjd4K40 E6KpDnvDaiAyml2Xe0qHyXegS8XpqZ/teGfiGdXiJiO0+e9TMjcw -----END CERTIFICATE-----Generated at Thu Feb 5 05:56:24 2026 by rpki-client