This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/Ec-2-sBBaXW1azB4lY6gRGycP60.roa File: Ec-2-sBBaXW1azB4lY6gRGycP60.roa (raw, json) Hash identifier: 3Nh1xOi9IYnh19IBIvJ/NsERowhJFiSYsZXvECqtcPc= Subject key identifier: 11:CF:B6:FA:C0:41:69:75:B5:6B:30:78:95:8E:A0:44:6C:9C:3F:AD Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Certificate serial: 019B7C1322E38E2B4A1E017411E126198475 Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/Ec-2-sBBaXW1azB4lY6gRGycP60.roa Signing time: Fri 02 Jan 2026 00:19:47 +0000 ROA not before: Fri 02 Jan 2026 00:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39453 IP address blocks: 193.16.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:22:e3:8e:2b:4a:1e:01:74:11:e1:26:19:84:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Validity Not Before: Jan 2 00:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11cfb6fac0416975b56b3078958ea0446c9c3fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:8b:ef:1f:40:7d:70:cd:fe:ce:40:1b:97: 02:0b:25:66:d4:da:05:2b:c2:4d:0e:fb:69:6c:83: e1:93:80:d2:68:a8:33:50:36:d5:17:43:43:6f:f3: 9a:32:84:b9:00:3b:ad:09:29:6d:d8:65:b9:0f:96: fa:7b:39:12:3e:f7:41:33:8c:43:86:ee:65:b5:ff: 71:df:d0:79:91:58:2c:1f:6b:af:6b:fd:80:76:b0: 9a:83:56:58:02:c9:d5:5c:77:36:b2:ca:09:51:97: 71:f9:ff:fe:08:d6:6e:8e:8d:ac:f9:18:f8:19:c5: be:bf:e8:8e:5c:17:03:8e:28:e5:da:db:dd:33:24: 4f:00:98:dd:c9:3e:40:01:8d:8e:be:b6:df:34:7a: 24:1c:37:0e:cf:41:11:9e:1d:dc:af:f7:64:74:86: 4b:d4:e4:71:98:22:c6:15:68:59:e9:de:8f:fb:ae: 2d:77:83:6d:72:0d:23:96:6b:6b:78:71:3f:c7:32: 30:a1:57:46:31:64:90:25:92:c7:4a:81:2d:a0:2d: 09:f8:c2:11:84:0e:e1:66:a5:ca:cd:e4:d5:0c:a5: dd:b8:91:dc:f5:6d:3a:68:c1:d7:f6:a0:41:cc:6a: af:10:77:86:6b:bc:a1:92:a8:a7:79:f7:99:ac:63: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CF:B6:FA:C0:41:69:75:B5:6B:30:78:95:8E:A0:44:6C:9C:3F:AD X509v3 Authority Key Identifier: keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/Ec-2-sBBaXW1azB4lY6gRGycP60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.104.0/24 Signature Algorithm: sha256WithRSAEncryption 68:bd:1d:04:3d:6d:70:ec:c0:6e:67:a6:f7:12:9a:3f:c4:63: f9:6d:32:a7:03:04:37:36:c5:1d:85:7b:6c:f2:73:0c:c7:8d: c3:3b:12:38:1f:b9:18:96:80:70:a4:8b:07:63:f7:06:32:72: 70:2e:b9:6d:a2:8c:26:b3:da:fa:ad:ea:72:5d:22:0a:e3:61: 8c:ad:14:ca:22:97:a6:c0:28:db:6c:c9:8c:cb:39:4b:c4:49: 8d:78:78:8f:46:8d:2e:3e:83:ad:13:f7:95:fe:03:24:82:2e: d6:38:85:5a:7a:78:6d:82:eb:73:81:5e:72:02:cb:da:e4:9b: 6d:59:12:98:b2:ca:6b:34:a6:ae:32:e5:cd:64:bf:b5:b1:c9: ce:16:60:bc:ce:44:2c:4f:50:a5:70:e5:e5:22:f9:32:22:a7: ef:3a:7f:9e:3a:fc:d1:a8:6c:d6:8b:de:47:b1:4b:41:b9:e6: 08:0c:96:39:5f:6a:67:06:7d:a8:46:3f:9b:9d:55:c8:01:35: 1f:89:a1:46:9e:dd:a2:7e:72:84:ff:44:97:db:96:23:6e:c0: 73:dc:e3:92:91:4e:7f:6f:2a:4a:98:28:32:89:f6:5d:42:da: 90:dd:fe:92:dc:31:d3:ec:97:ba:f8:22:2e:07:7a:31:0a:96: c4:bd:1c:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EyLjjitKHgF0EeEmGYR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy ZDZmZjkwHhcNMjYwMTAyMDAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWNmYjZmYWMwNDE2OTc1YjU2YjMwNzg5NThlYTA0NDZjOWMzZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY6L7x9AfXDN/s5AG5cCCyVm1NoF K8JNDvtpbIPhk4DSaKgzUDbVF0NDb/OaMoS5ADutCSlt2GW5D5b6ezkSPvdBM4xD hu5ltf9x39B5kVgsH2uva/2AdrCag1ZYAsnVXHc2ssoJUZdx+f/+CNZujo2s+Rj4 GcW+v+iOXBcDjijl2tvdMyRPAJjdyT5AAY2OvrbfNHokHDcOz0ERnh3cr/dkdIZL 1ORxmCLGFWhZ6d6P+64td4Ntcg0jlmtreHE/xzIwoVdGMWSQJZLHSoEtoC0J+MIR hA7hZqXKzeTVDKXduJHc9W06aMHX9qBBzGqvEHeGa7yhkqinefeZrGNiVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHPtvrAQWl1tWsweJWOoERsnD+tMB8GA1UdIwQY MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt MjI3NTBjZmE2ZWJmLzEvRWMtMi1zQkJhWFcxYXpCNGxZNmdSR3ljUDYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRBoMA0G CSqGSIb3DQEBCwUAA4IBAQBovR0EPW1w7MBuZ6b3Epo/xGP5bTKnAwQ3NsUdhXts 8nMMx43DOxI4H7kYloBwpIsHY/cGMnJwLrltoowms9r6repyXSIK42GMrRTKIpem wCjbbMmMyzlLxEmNeHiPRo0uPoOtE/eV/gMkgi7WOIVaenhtgutzgV5yAsva5Jtt WRKYssprNKauMuXNZL+1scnOFmC8zkQsT1ClcOXlIvkyIqfvOn+eOvzRqGzWi95H sUtBueYIDJY5X2pnBn2oRj+bnVXIATUfiaFGnt2ifnKE/0SX25YjbsBz3OOSkU5/ bypKmCgyifZdQtqQ3f6S3DHT7Je6+CIuB3oxCpbEvRz4 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:20 2026 by rpki-client