This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EKCNCx3V2xF3VclZ7utIL40yaPg.roa File: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (raw, json) Hash identifier: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg= Subject key identifier: 10:A0:8D:0B:1D:D5:DB:11:77:55:C9:59:EE:EB:48:2F:8D:32:68:F8 Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Certificate serial: 019B7E379E2780F7588A75890E52ED3D62A2 Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EKCNCx3V2xF3VclZ7utIL40yaPg.roa Signing time: Fri 02 Jan 2026 10:18:52 +0000 ROA not before: Fri 02 Jan 2026 10:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58065 IP address blocks: 176.103.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9e:27:80:f7:58:8a:75:89:0e:52:ed:3d:62:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa Validity Not Before: Jan 2 10:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10a08d0b1dd5db117755c959eeeb482f8d3268f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:d8:9e:2e:c2:85:2c:04:25:be:39:82:ec: e8:f6:3f:84:8c:4f:44:89:49:57:a8:c7:c7:73:11: ce:78:df:84:77:86:a3:0b:ee:dc:c9:d3:b5:05:66: 7d:43:25:7f:f4:8d:b1:fc:72:bb:10:e2:86:33:2d: c7:53:b7:7e:d2:7e:5c:f0:d1:eb:cc:09:34:e4:4a: 2d:e1:b9:92:b1:f1:8d:40:b7:dd:16:b0:ba:b7:90: f9:d2:c3:ff:70:73:e7:3d:33:7c:54:87:e9:09:ae: 25:ce:50:0b:c7:b9:32:a6:ca:b7:73:88:0c:80:e9: 65:22:b9:9d:f8:7f:6c:8c:a6:cf:51:7b:02:0a:b1: 9d:3f:f4:e9:6b:6c:e0:79:3f:5f:9c:b0:7e:23:a5: 79:16:6d:a8:76:12:c2:c4:ed:5b:60:37:46:45:79: 24:40:cc:20:ae:54:f3:9c:e3:4b:91:35:c4:32:31: e0:34:29:eb:8f:f7:27:e7:1a:57:0a:7e:61:6a:16: f1:56:8a:27:16:55:bb:44:b7:51:09:2f:15:6b:f8: 04:90:10:d5:5d:ba:18:dc:fc:03:4b:96:2b:77:36: 20:05:f4:53:3d:8c:f2:8c:ed:26:1e:c2:5d:8a:6d: 8e:56:e4:32:59:be:ff:18:95:30:a8:88:60:d2:a5: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A0:8D:0B:1D:D5:DB:11:77:55:C9:59:EE:EB:48:2F:8D:32:68:F8 X509v3 Authority Key Identifier: keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/EKCNCx3V2xF3VclZ7utIL40yaPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.122.0/23 Signature Algorithm: sha256WithRSAEncryption 0f:14:ed:ba:d2:1e:5e:b6:d0:a5:72:3d:bb:74:e3:f3:73:ce: 97:90:c2:ac:6b:83:b3:11:6d:c0:9c:7d:98:61:50:8e:1a:a4: 69:30:22:88:f3:b5:7d:e5:88:ac:79:24:dc:03:c5:01:d3:d1: 5f:dd:da:3c:13:fc:45:4f:cd:31:73:55:f4:40:4d:75:44:eb: 0c:63:19:81:42:ae:f7:b4:e9:c0:11:bb:b3:53:c3:3d:e9:49: 97:ce:5f:de:35:72:21:64:59:4e:66:1e:3f:b1:17:0e:c3:ea: 98:67:fe:c9:cc:06:a9:de:0f:f6:c3:e3:d1:03:ce:7e:a0:5e: 1d:a5:db:74:e4:1d:38:be:5e:24:63:67:f6:71:cd:99:70:a4: 6e:c0:86:17:58:30:e7:be:c0:4f:53:0a:e2:75:6f:7a:06:87: 30:fe:7e:9e:ea:11:1d:37:95:7e:da:6c:97:06:32:0a:38:c6: c3:39:65:89:be:b1:07:90:fd:ff:fb:3c:91:c9:70:30:43:4e: 15:58:bd:53:c3:42:97:2d:13:e5:e9:2c:60:12:32:26:eb:ef: 74:38:72:6c:b9:2d:e6:92:1f:1c:4f:16:15:02:8c:0c:14:6a: f1:61:30:ad:e0:1c:7a:db:a1:9a:0f:d1:26:23:1d:54:f9:7b: e1:8d:e1:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N54ngPdYinWJDlLtPWKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWNiYmQ1YzJjZjQxOTVjYzZlYzdmMjFmNjA3NTgxYTAy MjRkYWEwHhcNMjYwMTAyMTAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGEwOGQwYjFkZDVkYjExNzc1NWM5NTllZWViNDgyZjhkMzI2OGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9DYni7ChSwEJb45guzo9j+EjE9E iUlXqMfHcxHOeN+Ed4ajC+7cydO1BWZ9QyV/9I2x/HK7EOKGMy3HU7d+0n5c8NHr zAk05Eot4bmSsfGNQLfdFrC6t5D50sP/cHPnPTN8VIfpCa4lzlALx7kypsq3c4gM gOllIrmd+H9sjKbPUXsCCrGdP/Tpa2zgeT9fnLB+I6V5Fm2odhLCxO1bYDdGRXkk QMwgrlTznONLkTXEMjHgNCnrj/cn5xpXCn5hahbxVoonFlW7RLdRCS8Va/gEkBDV XboY3PwDS5YrdzYgBfRTPYzyjO0mHsJdim2OVuQyWb7/GJUwqIhg0qWpHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCgjQsd1dsRd1XJWe7rSC+NMmj4MB8GA1UdIwQY MBaAFDScu9XCz0GVzG7H8h9gdYGgIk2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUt ZGMwNmRkODA1OTYwLzEvRUtDTkN4M1YyeEYzVmNsWjd1dElMNDB5YVBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9jZGY1ZjYtMmYxOC00MmM3LTkzMGUtZGMwNmRkODA1OTYw LzEvTkp5NzFjTFBRWlhNYnNmeUgyQjFnYUFpVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsGd6MA0G CSqGSIb3DQEBCwUAA4IBAQAPFO260h5ettClcj27dOPzc86XkMKsa4OzEW3AnH2Y YVCOGqRpMCKI87V95YiseSTcA8UB09Ff3do8E/xFT80xc1X0QE11ROsMYxmBQq73 tOnAEbuzU8M96UmXzl/eNXIhZFlOZh4/sRcOw+qYZ/7JzAap3g/2w+PRA85+oF4d pdt05B04vl4kY2f2cc2ZcKRuwIYXWDDnvsBPUwridW96Bocw/n6e6hEdN5V+2myX BjIKOMbDOWWJvrEHkP3/+zyRyXAwQ04VWL1Tw0KXLRPl6SxgEjIm6+90OHJsuS3m kh8cTxYVAowMFGrxYTCt4Bx626GaD9EmIx1U+XvhjeF2 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:35 2026 by rpki-client