This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/nE1ecoHCr0ohx7PmOrxsros4YrQ.roa File: nE1ecoHCr0ohx7PmOrxsros4YrQ.roa (raw, json) Hash identifier: lj8cnvzdQ0C14+FMuBCsMEdb4FCPBx82iuKKh+tVyos= Subject key identifier: 9C:4D:5E:72:81:C2:AF:4A:21:C7:B3:E6:3A:BC:6C:AE:8B:38:62:B4 Certificate issuer: /CN=06373eb821c966ba267a838d952fc4a418cba107 Certificate serial: 019B775969C99886ACF5A2053392F4132175 Authority key identifier: 06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/nE1ecoHCr0ohx7PmOrxsros4YrQ.roa Signing time: Thu 01 Jan 2026 02:18:27 +0000 ROA not before: Thu 01 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206559 IP address blocks: 185.183.36.0/22 maxlen: 22 194.105.132.0/23 maxlen: 23 2a0d:4980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.mft rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:69:c9:98:86:ac:f5:a2:05:33:92:f4:13:21:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06373eb821c966ba267a838d952fc4a418cba107 Validity Not Before: Jan 1 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c4d5e7281c2af4a21c7b3e63abc6cae8b3862b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:2d:72:32:28:41:39:9c:8d:0d:04:24:60: f6:c0:62:93:e2:43:4b:74:28:65:87:82:9a:73:07: 72:24:33:31:87:1f:63:58:16:f5:63:a2:b3:df:c3: c2:6a:08:f7:03:5e:92:21:24:fd:48:a4:38:76:b7: 5f:ea:7c:65:a5:87:20:fd:cf:46:5e:dc:50:78:37: ac:6f:99:ac:9c:3e:69:b9:aa:e9:79:af:66:ff:9b: 76:b9:3f:08:0a:9e:68:5f:01:84:01:75:3b:56:7e: d2:62:3d:00:59:ec:19:ee:6e:9d:25:f6:52:6f:91: 96:56:e6:f5:2e:41:ce:4f:07:75:97:11:43:6e:5f: 74:7d:f6:1f:86:60:55:62:42:41:73:e8:76:71:96: 2a:01:7d:70:15:11:67:e2:b6:fd:08:a4:7b:65:33: 66:5f:6e:3e:82:5a:99:8b:ec:c1:f7:9c:b5:28:4d: b1:b8:de:24:c8:33:11:e4:48:c8:8f:7c:68:b1:26: fd:9e:a3:9c:30:e2:6a:b2:8a:fb:b0:09:7b:51:9e: d4:b7:da:78:9b:96:82:4e:0f:f2:5b:f1:00:b2:41: 75:58:32:ff:fa:08:60:63:97:fb:60:01:75:80:81: e4:d7:6a:d2:7b:fe:32:e8:9c:d2:68:36:fd:79:82: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4D:5E:72:81:C2:AF:4A:21:C7:B3:E6:3A:BC:6C:AE:8B:38:62:B4 X509v3 Authority Key Identifier: keyid:06:37:3E:B8:21:C9:66:BA:26:7A:83:8D:95:2F:C4:A4:18:CB:A1:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjc-uCHJZromeoONlS_EpBjLoQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/nE1ecoHCr0ohx7PmOrxsros4YrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/7e47d7-b369-4baa-af4e-f33e3c5c65db/1/Bjc-uCHJZromeoONlS_EpBjLoQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.36.0/22 194.105.132.0/23 IPv6: 2a0d:4980::/32 Signature Algorithm: sha256WithRSAEncryption 71:05:64:76:99:e7:ee:47:b7:83:b4:a3:af:81:fe:ab:7d:a3: 32:e2:9c:f8:e8:48:0f:3a:d0:8e:4a:f0:5f:f7:1c:ff:7c:e3: e1:fe:60:74:7d:4c:23:a5:7a:1b:51:01:af:98:c7:82:f1:1c: d4:cc:f5:f2:ce:c5:6c:f2:c1:42:55:f7:c8:3c:09:04:de:19: 7c:73:04:08:f9:7c:7e:2c:a7:37:e1:74:c4:ac:c8:b7:c7:1a: 3f:86:d4:53:bc:30:50:2e:e7:5e:ee:13:9c:74:e8:e1:a8:86: bb:2d:30:67:cc:6d:98:10:5e:77:a5:fc:73:1b:37:ee:5f:f1: c3:f2:a3:b7:57:17:f8:b5:ef:4f:2e:fd:96:0e:a4:35:17:6d: 60:18:66:1c:97:95:a5:9a:57:8a:d8:f5:67:3c:d5:65:b1:48: 30:89:59:a1:cc:e7:e4:0c:9f:26:a9:79:af:9d:b2:20:43:18: 53:a6:48:0d:c6:f9:cb:db:c0:e2:e7:f9:7d:23:8b:9f:31:3d: e6:c2:a4:59:f8:ab:a8:b7:7f:c9:4b:09:1b:38:66:a7:7a:e4: 43:73:8e:9b:ff:8d:a8:f1:fe:b4:46:fd:77:09:71:05:27:0f: 08:e4:7f:5a:ee:3d:26:bc:80:41:93:37:06:c9:16:91:87:63: e2:cd:17:9f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WWnJmIas9aIFM5L0EyF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzczZWI4MjFjOTY2YmEyNjdhODM4ZDk1MmZjNGE0MThj YmExMDcwHhcNMjYwMTAxMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzRkNWU3MjgxYzJhZjRhMjFjN2IzZTYzYWJjNmNhZThiMzg2MmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/stcjIoQTmcjQ0EJGD2wGKT4kNL dChlh4KacwdyJDMxhx9jWBb1Y6Kz38PCagj3A16SIST9SKQ4drdf6nxlpYcg/c9G XtxQeDesb5msnD5puarpea9m/5t2uT8ICp5oXwGEAXU7Vn7SYj0AWewZ7m6dJfZS b5GWVub1LkHOTwd1lxFDbl90ffYfhmBVYkJBc+h2cZYqAX1wFRFn4rb9CKR7ZTNm X24+glqZi+zB95y1KE2xuN4kyDMR5EjIj3xosSb9nqOcMOJqsor7sAl7UZ7Ut9p4 m5aCTg/yW/EAskF1WDL/+ghgY5f7YAF1gIHk12rSe/4y6JzSaDb9eYK8zwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJxNXnKBwq9KIcez5jq8bK6LOGK0MB8GA1UdIwQY MBaAFAY3PrghyWa6JnqDjZUvxKQYy6EHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi83ZTQ3ZDctYjM2OS00YmFhLWFmNGUt ZjMzZTNjNWM2NWRiLzEvbkUxZWNvSENyMG9oeDdQbU9yeHNyb3M0WXJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi83ZTQ3ZDctYjM2OS00YmFhLWFmNGUtZjMzZTNjNWM2NWRi LzEvQmpjLXVDSEpacm9tZW9PTmxTX0VwQmpMb1FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubckAwQB wmmEMA0EAgACMAcDBQAqDUmAMA0GCSqGSIb3DQEBCwUAA4IBAQBxBWR2mefuR7eD tKOvgf6rfaMy4pz46EgPOtCOSvBf9xz/fOPh/mB0fUwjpXobUQGvmMeC8RzUzPXy zsVs8sFCVffIPAkE3hl8cwQI+Xx+LKc34XTErMi3xxo/htRTvDBQLude7hOcdOjh qIa7LTBnzG2YEF53pfxzGzfuX/HD8qO3Vxf4te9PLv2WDqQ1F21gGGYcl5WlmleK 2PVnPNVlsUgwiVmhzOfkDJ8mqXmvnbIgQxhTpkgNxvnL28Di5/l9I4ufMT3mwqRZ +Kuot3/JSwkbOGaneuRDc46b/42o8f60Rv13CXEFJw8I5H9a7j0mvIBBkzcGyRaR h2PizRef -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:27 2026 by rpki-client