This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/Ec0ted5ZLWfXwjz0K7rWlMUFoyI.roa File: Ec0ted5ZLWfXwjz0K7rWlMUFoyI.roa (raw, json) Hash identifier: f/yVcWuNTpI+P5LWDRS17H6SYZW8qcj9ImBeOhCMaec= Subject key identifier: 11:CD:2D:79:DE:59:2D:67:D7:C2:3C:F4:2B:BA:D6:94:C5:05:A3:22 Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019B7A5AB236FB74B29633D85CC2783B52A5 Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/Ec0ted5ZLWfXwjz0K7rWlMUFoyI.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41364 IP address blocks: 185.140.168.0/22 maxlen: 22 193.42.134.0/24 maxlen: 24 194.116.72.0/23 maxlen: 23 194.116.74.0/23 maxlen: 23 194.116.76.0/22 maxlen: 24 194.116.80.0/23 maxlen: 23 194.116.82.0/24 maxlen: 24 194.116.83.0/24 maxlen: 24 194.116.84.0/24 maxlen: 24 194.116.85.0/24 maxlen: 24 194.116.86.0/23 maxlen: 23 194.116.88.0/22 maxlen: 22 194.116.92.0/24 maxlen: 24 194.116.93.0/24 maxlen: 24 194.116.94.0/23 maxlen: 23 194.116.100.0/22 maxlen: 24 194.116.100.0/24 maxlen: 24 194.116.101.0/24 maxlen: 24 194.116.102.0/23 maxlen: 23 194.116.106.0/23 maxlen: 23 194.116.108.0/22 maxlen: 22 194.116.112.0/21 maxlen: 21 194.116.120.0/22 maxlen: 22 194.116.124.0/23 maxlen: 23 194.116.126.0/24 maxlen: 24 194.116.127.0/24 maxlen: 24 2a07:1ec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b2:36:fb:74:b2:96:33:d8:5c:c2:78:3b:52:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11cd2d79de592d67d7c23cf42bbad694c505a322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:c0:90:66:d9:8a:87:ca:19:74:32:3e:cf: 15:23:6f:86:79:28:54:8e:52:82:39:e3:ce:99:0d: 98:ea:4d:06:ab:9a:8e:59:9c:f8:01:9c:3e:aa:cf: ab:57:52:c1:c8:c5:a3:e2:bd:df:43:21:d2:7c:21: 49:2b:41:35:ce:e6:61:11:79:6f:ce:5d:d0:a4:a0: 03:2a:a0:07:ff:74:da:20:5b:9b:fc:1f:08:1a:97: 76:b5:f3:ab:07:79:a0:62:2e:2b:f1:a3:46:ca:3f: eb:d1:5a:63:55:75:9d:05:04:e1:74:56:71:a0:b2: 54:7c:a7:65:a1:2c:64:ad:dd:c2:b9:4c:2c:e7:c0: e6:42:ea:c4:69:4e:5c:00:70:74:e4:16:2a:37:0a: 71:38:c1:b5:d4:d3:f7:ef:e0:20:ec:ef:bf:f7:82: 32:52:9a:5a:04:80:09:a4:2b:26:7d:ca:86:70:c7: 5e:62:39:97:3b:2f:12:22:da:28:8d:63:9d:b2:68: 07:c2:4f:35:51:e6:e5:8a:49:e6:ce:d5:d8:8e:e1: d7:57:48:02:14:f2:5e:f3:e4:2e:23:0a:eb:55:59: 88:75:8c:d1:e7:d5:d4:c2:9a:bc:6c:cc:a7:75:34: 64:3a:9d:a3:19:57:be:f9:cc:84:cd:9e:1e:f7:c9: 10:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:2D:79:DE:59:2D:67:D7:C2:3C:F4:2B:BA:D6:94:C5:05:A3:22 X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/Ec0ted5ZLWfXwjz0K7rWlMUFoyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.168.0/22 193.42.134.0/24 194.116.72.0-194.116.95.255 194.116.100.0/22 194.116.106.0-194.116.127.255 IPv6: 2a07:1ec0::/29 Signature Algorithm: sha256WithRSAEncryption 03:0b:55:f2:e0:de:b7:bd:91:ec:5f:57:73:14:1f:da:d5:00: 6f:f9:d7:54:77:7a:57:7e:d4:80:e0:70:4f:8a:ad:ab:b2:ac: e5:65:51:26:42:e2:04:a3:12:00:4f:89:73:c1:6b:b9:c5:29: 65:fd:f5:de:ad:24:b1:24:d3:f7:e8:29:ff:e7:27:68:b6:21: ec:a2:9a:ef:34:b4:ca:95:6f:86:0c:5e:68:5e:a9:e1:68:fc: 41:c3:d9:83:b0:27:da:31:bd:8d:12:4f:7e:e2:9c:84:96:a7: c0:f5:e4:55:b6:e0:a3:c9:da:5b:15:b6:98:81:eb:54:51:9c: 6b:f0:3d:19:01:17:41:a0:95:e0:e0:32:de:94:ed:c7:14:c4: 75:cd:a6:54:02:4c:67:8f:38:68:28:3d:ce:4e:19:13:67:e4: 16:0e:fa:49:a6:78:db:74:28:7e:d5:39:c2:5e:0e:ce:f1:c9: f7:80:9d:10:96:17:4c:3a:94:d6:8a:14:f4:74:8e:e8:0b:f3: 24:5f:84:57:5c:99:f1:45:7d:21:da:fc:cb:2a:80:05:49:d3: a0:8e:aa:bd:44:ac:bf:d4:6b:16:19:29:9d:da:93:8a:b2:a0: df:e6:c4:11:09:6f:07:af:3b:21:51:39:f4:3a:2b:10:8c:61: 4f:b3:70:b8 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt6WrI2+3SyljPYXMJ4O1KlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWNkMmQ3OWRlNTkyZDY3ZDdjMjNjZjQyYmJhZDY5NGM1MDVhMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPzAkGbZiofKGXQyPs8VI2+GeShU jlKCOePOmQ2Y6k0Gq5qOWZz4AZw+qs+rV1LByMWj4r3fQyHSfCFJK0E1zuZhEXlv zl3QpKADKqAH/3TaIFub/B8IGpd2tfOrB3mgYi4r8aNGyj/r0VpjVXWdBQThdFZx oLJUfKdloSxkrd3CuUws58DmQurEaU5cAHB05BYqNwpxOMG11NP37+Ag7O+/94Iy UppaBIAJpCsmfcqGcMdeYjmXOy8SItoojWOdsmgHwk81UebliknmztXYjuHXV0gC FPJe8+QuIwrrVVmIdYzR59XUwpq8bMyndTRkOp2jGVe++cyEzZ4e98kQvwIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFBHNLXneWS1n18I89Cu61pTFBaMiMB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvRWMwdGVkNVpMV2ZYd2p6MEs3cldsTVVGb3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQCuYyoAwQA wSqGMAwDBAPCdEgDBAXCdEADBALCdGQwDAMEAcJ0agMEB8J0ADANBAIAAjAHAwUD KgcewDANBgkqhkiG9w0BAQsFAAOCAQEAAwtV8uDet72R7F9XcxQf2tUAb/nXVHd6 V37UgOBwT4qtq7Ks5WVRJkLiBKMSAE+Jc8FrucUpZf313q0ksSTT9+gp/+cnaLYh 7KKa7zS0ypVvhgxeaF6p4Wj8QcPZg7An2jG9jRJPfuKchJanwPXkVbbgo8naWxW2 mIHrVFGca/A9GQEXQaCV4OAy3pTtxxTEdc2mVAJMZ484aCg9zk4ZE2fkFg76SaZ4 23QoftU5wl4OzvHJ94CdEJYXTDqU1ooU9HSO6AvzJF+EV1yZ8UV9Idr8yyqABUnT oI6qvUSsv9RrFhkpndqTirKg3+bEEQlvB687IVE59DorEIxhT7NwuA== -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:43 2026 by rpki-client