This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa File: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (raw, json) Hash identifier: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE= Subject key identifier: D1:F2:7E:CB:1C:9B:02:FF:90:16:53:4D:EA:9D:12:56:67:0B:08:2C Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483 Certificate serial: 019B7910E7615AE5339D39A5BA8954344C30 Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa Signing time: Thu 01 Jan 2026 10:18:29 +0000 ROA not before: Thu 01 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 193.104.169.0/24 maxlen: 24 195.200.230.0/23 maxlen: 23 2001:67c:b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e7:61:5a:e5:33:9d:39:a5:ba:89:54:34:4c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483 Validity Not Before: Jan 1 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f27ecb1c9b02ff9016534dea9d1256670b082c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:e0:5e:9f:30:5e:d5:22:e3:d9:3f:f8:03: 1a:c9:72:d7:ed:56:09:19:d8:c1:08:f8:c1:6b:b2: 00:bd:5b:34:91:ba:7b:12:9e:86:3b:58:00:f1:b3: 1d:7c:54:5b:dc:b9:0c:23:4b:0b:25:0b:69:74:b2: 08:fd:22:0d:2a:08:a0:11:68:11:59:c1:4f:58:f3: 68:88:5d:a6:f9:79:79:c6:7f:ec:1b:ac:e8:20:76: 12:61:56:ca:b7:ff:54:37:85:99:38:f0:26:f4:aa: b1:14:3b:ca:86:d1:a9:d4:b6:aa:ec:69:1d:47:7c: 38:3a:1a:0c:78:30:ad:93:92:d1:f5:6a:b0:df:f4: 5e:c1:35:10:b7:81:a1:29:8f:99:49:e5:8f:c0:e9: a6:d1:f8:3d:7c:aa:fb:51:0e:13:84:5c:0a:82:93: bb:87:56:c6:95:84:82:14:0d:62:1d:23:c5:26:85: 39:b8:84:51:04:71:14:92:68:08:d9:f3:72:08:7c: 3a:54:8a:87:36:f4:4b:46:f0:e0:77:e2:05:60:b3: c6:a4:6d:69:96:9e:59:79:dd:a0:b8:1b:53:41:8f: 49:80:aa:27:79:7e:27:a3:9c:46:2e:f0:77:ba:f6: 93:a8:d8:cc:f0:32:59:e1:d3:14:99:a0:03:4c:55: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F2:7E:CB:1C:9B:02:FF:90:16:53:4D:EA:9D:12:56:67:0B:08:2C X509v3 Authority Key Identifier: keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.104.169.0/24 195.200.230.0/23 IPv6: 2001:67c:b4::/48 Signature Algorithm: sha256WithRSAEncryption 07:b4:00:3a:8a:eb:ef:5c:55:7a:d7:40:d6:78:f5:99:c7:ce: e9:02:61:cd:e2:f5:ed:ab:9a:ef:72:d8:a1:e7:a8:6a:04:36: 9a:3e:a8:5d:8c:9d:a0:1c:7d:55:19:59:a5:dc:49:27:27:f1: 54:75:f0:72:1f:5f:94:17:87:d8:78:a4:9e:96:57:c9:09:85: 8e:ce:76:50:13:4d:93:de:37:05:c1:0d:ee:d4:c3:e6:34:a6: 0a:9f:1b:76:97:b2:47:f9:53:93:7f:fa:03:22:e9:8e:c2:78: 17:f5:0d:d8:e9:8c:81:21:ba:27:5b:70:ca:3b:46:4f:65:9b: 39:22:de:e5:61:05:7a:dc:af:bd:ec:98:92:b0:fa:09:48:48: b8:e4:5f:22:9b:7f:57:1b:c4:6c:7d:81:bc:66:64:34:a4:86: a9:5a:7a:fc:3e:24:b9:96:da:bb:e8:bd:94:a9:c5:9b:92:de: b3:88:75:05:bc:3e:7d:05:6d:1d:fb:f1:4c:81:79:2e:ae:72: c1:57:4c:6e:4d:bb:cc:ce:97:11:27:37:85:5f:c7:e5:35:3d: ed:98:3a:4a:88:5e:f0:37:54:69:90:1e:0c:81:b4:67:3b:f8: e2:e7:f6:d5:dc:f1:83:9d:c4:53:94:ae:c8:ca:0e:92:3f:d4: be:ba:2e:77 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt5EOdhWuUznTmluolUNEwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjhmOGZiZWE0OWJhZjU5ZmNlYzIyZTQ4YTlmZTIxNTdk ODY0ODMwHhcNMjYwMTAxMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWYyN2VjYjFjOWIwMmZmOTAxNjUzNGRlYTlkMTI1NjY3MGIwODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TrgXp8wXtUi49k/+AMayXLX7VYJ GdjBCPjBa7IAvVs0kbp7Ep6GO1gA8bMdfFRb3LkMI0sLJQtpdLII/SINKgigEWgR WcFPWPNoiF2m+Xl5xn/sG6zoIHYSYVbKt/9UN4WZOPAm9KqxFDvKhtGp1Laq7Gkd R3w4OhoMeDCtk5LR9Wqw3/RewTUQt4GhKY+ZSeWPwOmm0fg9fKr7UQ4ThFwKgpO7 h1bGlYSCFA1iHSPFJoU5uIRRBHEUkmgI2fNyCHw6VIqHNvRLRvDgd+IFYLPGpG1p lp5Zed2guBtTQY9JgKoneX4no5xGLvB3uvaTqNjM8DJZ4dMUmaADTFV8EQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFNHyfsscmwL/kBZTTeqdElZnCwgsMB8GA1UdIwQY MBaAFBq4+PvqSbr1n87CLkip/iFX2GSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lY2MxMDItYWQ3ZS00MTAxLWE3Mjct NTgwMThhMDMzMzBhLzEvMGZKLXl4eWJBdi1RRmxOTjZwMFNWbWNMQ0N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lY2MxMDItYWQ3ZS00MTAxLWE3MjctNTgwMThhMDMzMzBh LzEvR3JqNC0tcEp1dldmenNJdVNLbi1JVmZZWklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwWipAwQB w8jmMA8EAgACMAkDBwAgAQZ8ALQwDQYJKoZIhvcNAQELBQADggEBAAe0ADqK6+9c VXrXQNZ49ZnHzukCYc3i9e2rmu9y2KHnqGoENpo+qF2MnaAcfVUZWaXcSScn8VR1 8HIfX5QXh9h4pJ6WV8kJhY7OdlATTZPeNwXBDe7Uw+Y0pgqfG3aXskf5U5N/+gMi 6Y7CeBf1DdjpjIEhuidbcMo7Rk9lmzki3uVhBXrcr73smJKw+glISLjkXyKbf1cb xGx9gbxmZDSkhqlaevw+JLmW2rvovZSpxZuS3rOIdQW8Pn0FbR378UyBeS6ucsFX TG5Nu8zOlxEnN4Vfx+U1Pe2YOkqIXvA3VGmQHgyBtGc7+OLn9tXc8YOdxFOUrsjK DpI/1L66Lnc= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client