This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/ecM-gHgE6M9J41zlzDS_1-AzB8I.roa File: ecM-gHgE6M9J41zlzDS_1-AzB8I.roa (raw, json) Hash identifier: +LY5r25j2bdDvxC01dbsptBEEJPiqxHayVsSILpuc6U= Subject key identifier: 79:C3:3E:80:78:04:E8:CF:49:E3:5C:E5:CC:34:BF:D7:E0:33:07:C2 Certificate issuer: /CN=bbf3a257f99528c3a924d269d1af438185c2006d Certificate serial: 019B790FF7880B409C78C6133721CE3D6DF7 Authority key identifier: BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/ecM-gHgE6M9J41zlzDS_1-AzB8I.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16145 IP address blocks: 80.87.240.0/21 maxlen: 21 185.150.192.0/23 maxlen: 23 185.150.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.mft rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f7:88:0b:40:9c:78:c6:13:37:21:ce:3d:6d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf3a257f99528c3a924d269d1af438185c2006d Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c33e807804e8cf49e35ce5cc34bfd7e03307c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:53:8a:87:10:2b:eb:ae:ce:87:ed:61:bf:08: fc:8f:3f:2d:e5:2f:8e:e7:33:d4:18:d2:54:9b:66: 00:29:a2:ed:da:2d:6e:5e:59:38:37:52:55:6d:8e: 25:a3:d8:89:16:ab:1b:5f:f9:d9:67:c9:c4:e3:36: 53:30:fe:52:00:60:86:b4:c3:9e:d8:1e:bc:c3:b8: 89:d5:b6:b6:63:2e:8f:5b:11:0e:d6:ba:68:6d:e4: f9:e4:df:57:9d:3a:58:5d:d3:f8:92:84:a0:01:a0: 22:4a:f9:12:84:9d:d3:dc:7b:39:49:01:98:b1:7b: 7e:fa:87:06:44:51:aa:30:c0:99:e8:1c:e5:c5:6c: e8:6e:2a:e3:f4:66:26:54:06:c8:41:1f:c2:92:0e: 21:98:03:03:90:b2:45:f6:2c:2f:4d:b2:ee:72:54: 8d:1e:55:ca:62:4b:46:9e:6b:a2:e2:7b:44:5f:2a: 84:93:07:f0:49:c7:fe:79:a1:0f:b2:c3:17:8a:2a: 25:b6:66:fa:ab:17:ab:23:00:25:9d:66:53:3a:7a: de:11:d5:8b:02:7f:be:76:bd:81:1d:aa:b2:99:32: 5c:8f:7c:26:13:32:e5:e3:b3:0b:dd:a8:44:0d:71: fb:10:50:cf:98:5a:c1:9a:25:65:44:b4:b6:0b:14: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C3:3E:80:78:04:E8:CF:49:E3:5C:E5:CC:34:BF:D7:E0:33:07:C2 X509v3 Authority Key Identifier: keyid:BB:F3:A2:57:F9:95:28:C3:A9:24:D2:69:D1:AF:43:81:85:C2:00:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_OiV_mVKMOpJNJp0a9DgYXCAG0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/ecM-gHgE6M9J41zlzDS_1-AzB8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4faaff-384f-402e-8b8c-45f77dfa2636/1/u_OiV_mVKMOpJNJp0a9DgYXCAG0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.87.240.0/21 185.150.192.0/22 Signature Algorithm: sha256WithRSAEncryption 32:70:97:26:c4:50:76:ea:59:73:4b:5a:3e:00:97:1a:14:22: 45:6e:40:33:2c:62:08:86:3a:25:33:47:84:07:04:40:30:3a: a2:a8:82:80:8f:d6:34:95:28:47:cd:fa:b0:e7:2e:f1:2d:b2: ca:79:ca:ee:dd:69:14:97:0d:b5:8b:ae:a4:e8:de:a8:66:31: d1:98:20:ec:99:b5:eb:87:98:b6:4e:1c:b2:1d:72:30:a8:c8: f8:7b:a7:03:da:34:cf:e7:79:40:24:75:af:4d:43:20:6d:24: 93:72:a6:2a:bd:6b:57:21:3c:00:1d:74:4c:a3:00:06:63:3f: 57:c9:7f:2f:aa:02:91:6e:0e:11:18:7b:b8:1e:01:a7:25:c7: 22:0a:f7:50:4f:74:52:87:7d:32:45:5f:01:fd:e7:e7:ca:51: 56:df:1c:59:4e:90:51:30:d4:24:28:35:db:71:45:8d:65:13: ca:10:cc:fe:39:49:36:51:47:2d:24:ef:67:3c:f9:6c:76:11: 61:36:c4:15:5f:f7:f3:03:6c:9e:6b:d6:47:38:7b:30:1f:e9: 81:0f:6f:8e:45:c0:34:30:68:d2:d7:d0:7d:72:92:00:37:0f: ac:7f:61:e3:24:bf:92:b2:1e:09:22:e4:f6:e6:f8:ea:48:ac: 54:43:2c:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5D/eIC0CceMYTNyHOPW33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjNhMjU3Zjk5NTI4YzNhOTI0ZDI2OWQxYWY0MzgxODVj MjAwNmQwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWMzM2U4MDc4MDRlOGNmNDllMzVjZTVjYzM0YmZkN2UwMzMwN2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlOKhxAr667Oh+1hvwj8jz8t5S+O 5zPUGNJUm2YAKaLt2i1uXlk4N1JVbY4lo9iJFqsbX/nZZ8nE4zZTMP5SAGCGtMOe 2B68w7iJ1ba2Yy6PWxEO1rpobeT55N9XnTpYXdP4koSgAaAiSvkShJ3T3Hs5SQGY sXt++ocGRFGqMMCZ6BzlxWzobirj9GYmVAbIQR/Ckg4hmAMDkLJF9iwvTbLuclSN HlXKYktGnmui4ntEXyqEkwfwScf+eaEPssMXiioltmb6qxerIwAlnWZTOnreEdWL An++dr2BHaqymTJcj3wmEzLl47ML3ahEDXH7EFDPmFrBmiVlRLS2CxTMpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHnDPoB4BOjPSeNc5cw0v9fgMwfCMB8GA1UdIwQY MBaAFLvzolf5lSjDqSTSadGvQ4GFwgBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMt NDVmNzdkZmEyNjM2LzEvZWNNLWdIZ0U2TTlKNDF6bHpEU18xLUF6QjhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80ZmFhZmYtMzg0Zi00MDJlLThiOGMtNDVmNzdkZmEyNjM2 LzEvdV9PaVZfbVZLTU9wSk5KcDBhOURnWVhDQUcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDUFfwAwQC uZbAMA0GCSqGSIb3DQEBCwUAA4IBAQAycJcmxFB26llzS1o+AJcaFCJFbkAzLGII hjolM0eEBwRAMDqiqIKAj9Y0lShHzfqw5y7xLbLKecru3WkUlw21i66k6N6oZjHR mCDsmbXrh5i2ThyyHXIwqMj4e6cD2jTP53lAJHWvTUMgbSSTcqYqvWtXITwAHXRM owAGYz9XyX8vqgKRbg4RGHu4HgGnJcciCvdQT3RSh30yRV8B/efnylFW3xxZTpBR MNQkKDXbcUWNZRPKEMz+OUk2UUctJO9nPPlsdhFhNsQVX/fzA2yea9ZHOHswH+mB D2+ORcA0MGjS19B9cpIANw+sf2HjJL+Ssh4JIuT25vjqSKxUQyxs -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:36 2026 by rpki-client