This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa File: ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa (raw, json) Hash identifier: DuzpyfUGkrhUWjfWoOLoDhF2rnXsz7gWT8YsIzumviQ= Subject key identifier: 79:C1:F1:B3:74:5D:27:92:A3:69:BF:91:34:59:69:9D:1F:E5:B0:24 Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7 Certificate serial: 019B7834E2F706F66DAC123A4EDC111BF41E Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59905 IP address blocks: 91.220.77.0/24 maxlen: 24 185.49.220.0/22 maxlen: 22 185.92.125.0/24 maxlen: 24 185.92.126.0/24 maxlen: 24 185.92.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e2:f7:06:f6:6d:ac:12:3a:4e:dc:11:1b:f4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c1f1b3745d2792a369bf913459699d1fe5b024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:4e:96:e6:c8:da:21:02:58:72:89:f8:e8: 32:7a:09:a0:5f:1c:c3:5e:c8:ec:53:4f:10:7f:e2: 95:b7:ae:2f:af:85:c0:46:20:f8:b3:1a:77:30:1c: a0:55:61:2f:27:d4:c1:8c:5a:68:5f:cf:1e:6d:dc: c3:65:00:cc:7c:3a:3e:ec:da:1b:9f:51:7d:e8:86: 63:e2:89:b7:7f:c1:0e:19:5c:06:db:fa:e6:c5:c9: d3:e3:36:8f:eb:6d:0b:e4:44:39:75:1f:69:5d:fd: 7c:05:b4:0a:dd:b5:a2:7e:05:7c:47:18:d5:40:d6: 55:d7:4c:f0:27:97:c2:b9:84:7f:be:78:be:44:f6: e8:c7:fe:97:3b:1d:0e:c4:f7:11:ec:9a:81:4d:1f: f8:9c:69:44:e1:92:35:89:c7:a4:40:0d:c4:ba:ab: 61:15:e4:68:e3:4e:da:bf:22:fd:c7:37:84:a0:2c: 2c:a8:8e:c2:30:96:82:bc:fb:1e:ea:63:cd:d3:57: 6e:c4:29:0f:90:e0:1b:59:68:4c:8a:b4:ca:3a:c3: 4b:c9:33:fa:18:26:3a:6c:ac:54:9f:9a:d3:af:d8: cd:24:a5:ad:fd:4e:d8:89:f1:ca:f1:5f:ff:1c:a3: 7d:fb:76:d6:93:95:1d:bd:57:0d:0d:12:29:9d:e8: e0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C1:F1:B3:74:5D:27:92:A3:69:BF:91:34:59:69:9D:1F:E5:B0:24 X509v3 Authority Key Identifier: keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/ecHxs3RdJ5Kjab-RNFlpnR_lsCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.77.0/24 185.49.220.0/22 185.92.125.0-185.92.127.255 Signature Algorithm: sha256WithRSAEncryption 78:a9:27:00:d4:68:7c:70:95:30:59:21:68:b2:b6:cc:d6:48: b8:25:bf:4b:a4:f0:36:17:19:29:ef:ad:0b:5f:c0:08:99:dc: c1:85:42:34:00:13:87:a6:1d:24:52:97:6f:fa:d8:e4:ce:a8: 3e:b0:73:c5:4d:c2:3d:4f:97:ad:37:54:55:47:b9:cc:cd:26: 8e:aa:fb:89:d3:3c:e7:43:ef:6a:09:78:f2:61:ba:9f:a7:c6: 80:5c:87:dd:b7:b4:01:fd:f5:aa:7d:64:d9:3d:84:62:7d:fb: 81:94:2c:fd:bf:08:dd:7c:46:22:28:40:9a:f7:bd:10:d0:f2: 46:2e:fc:0b:0b:02:7b:14:bc:4e:ba:d6:a4:53:eb:d1:94:8d: 06:30:14:c6:1b:5a:30:68:3d:64:8c:26:ff:fe:91:05:bd:ed: 89:0f:27:ec:63:4b:98:6e:d0:ca:d3:a2:b8:15:56:5f:50:6a: 4e:19:d1:37:57:2f:d5:fb:a0:52:c4:09:bb:cd:f4:b4:47:9d: 23:5a:35:fd:3f:97:4a:a8:6b:39:a6:7c:87:9e:d1:67:be:5a: 58:ae:4d:d3:86:1b:d5:1c:4e:6c:43:ed:9c:a7:53:71:1c:ba: 19:1c:1e:70:f3:80:ba:a4:6b:b1:9e:54:40:05:03:7e:71:69: be:1b:9e:83 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NOL3BvZtrBI6TtwRG/QeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNTBkZjc4ZmM3ODU4MTM3MjRlYzY2NjQ4ZGY5YjQ5NGY5 YjhkYTcwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWMxZjFiMzc0NWQyNzkyYTM2OWJmOTEzNDU5Njk5ZDFmZTViMDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcVOlubI2iECWHKJ+OgyegmgXxzD XsjsU08Qf+KVt64vr4XARiD4sxp3MBygVWEvJ9TBjFpoX88ebdzDZQDMfDo+7Nob n1F96IZj4om3f8EOGVwG2/rmxcnT4zaP620L5EQ5dR9pXf18BbQK3bWifgV8RxjV QNZV10zwJ5fCuYR/vni+RPbox/6XOx0OxPcR7JqBTR/4nGlE4ZI1icekQA3Euqth FeRo407avyL9xzeEoCwsqI7CMJaCvPse6mPN01duxCkPkOAbWWhMirTKOsNLyTP6 GCY6bKxUn5rTr9jNJKWt/U7YifHK8V//HKN9+3bWk5UdvVcNDRIpnejg/QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHnB8bN0XSeSo2m/kTRZaZ0f5bAkMB8GA1UdIwQY MBaAFANQ33j8eFgTck7GZkjfm0lPm42nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgt ZDI5MmFiN2NlOWZhLzEvZWNIeHMzUmRKNUtqYWItUk5GbHBuUl9sc0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hYjU4NmUtNGIyYS00N2Y2LWFjZTgtZDI5MmFiN2NlOWZh LzEvQTFEZmVQeDRXQk55VHNabVNOLWJTVS1iamFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAW9xNAwQC uTHcMAwDBAC5XH0DBAe5XAAwDQYJKoZIhvcNAQELBQADggEBAHipJwDUaHxwlTBZ IWiytszWSLglv0uk8DYXGSnvrQtfwAiZ3MGFQjQAE4emHSRSl2/62OTOqD6wc8VN wj1Pl603VFVHuczNJo6q+4nTPOdD72oJePJhup+nxoBch923tAH99ap9ZNk9hGJ9 +4GULP2/CN18RiIoQJr3vRDQ8kYu/AsLAnsUvE661qRT69GUjQYwFMYbWjBoPWSM Jv/+kQW97YkPJ+xjS5hu0MrTorgVVl9Qak4Z0TdXL9X7oFLECbvN9LRHnSNaNf0/ l0qoazmmfIee0We+WliuTdOGG9UcTmxD7ZynU3EcuhkcHnDzgLqka7GeVEAFA35x ab4bnoM= -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:18 2026 by rpki-client