This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/EC5zuekV6ffZvS8sEG5dT8I7z58.roa File: EC5zuekV6ffZvS8sEG5dT8I7z58.roa (raw, json) Hash identifier: SkvprZ2AbqwrD6Q2wdsl02uL6GJA62sF8yMiWwIEPFQ= Subject key identifier: 10:2E:73:B9:E9:15:E9:F7:D9:BD:2F:2C:10:6E:5D:4F:C2:3B:CF:9F Certificate issuer: /CN=c115f1341a87140a122dc8f96502b72449057e60 Certificate serial: 019B775911ED47C916FE61F10274E5B6A680 Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/EC5zuekV6ffZvS8sEG5dT8I7z58.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212991 IP address blocks: 185.158.206.0/24 maxlen: 24 2a0c:8d80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:11:ed:47:c9:16:fe:61:f1:02:74:e5:b6:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=102e73b9e915e9f7d9bd2f2c106e5d4fc23bcf9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:31:cd:fa:c4:e8:f5:38:14:7a:cb:ed:90:c7: 4d:30:ed:c4:3f:ca:5b:6e:36:ff:bd:de:09:36:1f: 2f:8f:fc:8f:2a:5d:86:3e:ed:fe:51:9e:0f:c5:5e: 06:3a:cb:51:1e:02:22:c0:88:68:ac:5e:30:ff:67: 58:e2:94:eb:da:ef:04:fd:a5:15:e0:bc:1a:5d:93: a2:82:6f:b2:73:fc:ae:4a:7b:76:37:a5:fa:98:b4: ba:28:30:cd:3c:4e:eb:29:5c:84:04:72:ab:8b:e0: f2:b9:07:cd:99:d0:b2:28:6c:1d:28:2f:ac:4a:2c: b0:59:25:50:d8:99:18:9e:dd:5b:3b:dd:34:05:6a: 11:fc:3a:1a:85:ae:3e:58:15:b2:62:b3:03:a9:76: 26:a6:2c:b1:cb:a2:70:c8:6e:5b:e2:72:68:ef:d2: dd:84:8b:cf:ba:83:be:8a:40:8d:bb:49:51:d9:85: 7a:64:72:82:64:70:69:59:66:a9:fd:17:08:14:f6: 43:7b:73:00:eb:e2:7d:d7:0f:58:1f:ab:28:38:22: 34:09:f4:22:2c:38:8d:c1:88:16:a4:e4:45:b7:bd: 4d:40:e2:26:6b:b2:10:8e:e4:b9:70:ca:45:78:bd: 58:ce:7e:70:cc:48:4f:6e:9a:57:e9:c7:2c:fc:5e: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2E:73:B9:E9:15:E9:F7:D9:BD:2F:2C:10:6E:5D:4F:C2:3B:CF:9F X509v3 Authority Key Identifier: keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/EC5zuekV6ffZvS8sEG5dT8I7z58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.206.0/24 IPv6: 2a0c:8d80::/29 Signature Algorithm: sha256WithRSAEncryption 78:27:23:fe:41:82:99:cb:80:eb:c8:e4:9a:1c:97:e0:13:06: dc:51:92:84:9f:ab:33:c0:88:c2:de:99:36:6a:df:2d:37:45: 8f:2b:c8:92:be:ec:3c:c0:07:d3:75:a6:dd:d5:cd:79:64:bf: 04:4c:ee:96:bf:d4:1b:e6:47:ee:10:a8:00:d0:5e:8b:76:1b: 6e:4f:6b:4d:26:ed:78:fd:4c:e3:7a:f0:94:ae:e7:03:e8:02: 62:55:55:60:30:90:3c:ff:29:32:d6:c7:d9:4c:0c:3d:29:5a: d2:61:52:74:77:86:29:40:22:13:a2:30:d3:69:5c:16:2a:06: e1:89:02:82:ba:64:45:a3:a9:71:b4:17:df:33:c4:7f:08:57: f4:c3:48:6d:44:90:88:d4:a3:cf:c1:47:79:d4:8f:6c:19:be: b7:26:d0:39:74:73:4a:56:8e:92:9d:f0:35:00:8d:1a:05:af: 5a:eb:2f:24:d9:e3:9a:47:a6:9c:ea:86:15:ad:65:52:a2:4d: 5f:5c:f1:db:c7:d6:cc:04:72:7a:df:49:4e:be:6a:db:d6:47: 20:bf:d6:14:02:ac:72:45:22:d8:6a:91:c2:6f:ad:bf:74:c7: d0:54:be:19:b4:8a:53:23:02:93:e6:cc:cd:14:d3:54:71:f2: ee:a4:9b:ff -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WRHtR8kW/mHxAnTltqaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMTVmMTM0MWE4NzE0MGExMjJkYzhmOTY1MDJiNzI0NDkw NTdlNjAwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDJlNzNiOWU5MTVlOWY3ZDliZDJmMmMxMDZlNWQ0ZmMyM2JjZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzHN+sTo9TgUesvtkMdNMO3EP8pb bjb/vd4JNh8vj/yPKl2GPu3+UZ4PxV4GOstRHgIiwIhorF4w/2dY4pTr2u8E/aUV 4LwaXZOigm+yc/yuSnt2N6X6mLS6KDDNPE7rKVyEBHKri+DyuQfNmdCyKGwdKC+s SiywWSVQ2JkYnt1bO900BWoR/Doaha4+WBWyYrMDqXYmpiyxy6JwyG5b4nJo79Ld hIvPuoO+ikCNu0lR2YV6ZHKCZHBpWWap/RcIFPZDe3MA6+J91w9YH6soOCI0CfQi LDiNwYgWpORFt71NQOIma7IQjuS5cMpFeL1Yzn5wzEhPbppX6ccs/F6gyQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBAuc7npFen32b0vLBBuXU/CO8+fMB8GA1UdIwQY MBaAFMEV8TQahxQKEi3I+WUCtyRJBX5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmFhOTYtYWE4Zi00ZmQ0LWI5ZTgt MzczYTBkM2M0NTM0LzEvRUM1enVla1Y2ZmZadlM4c0VHNWRUOEk3ejU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNmFhOTYtYWE4Zi00ZmQ0LWI5ZTgtMzczYTBkM2M0NTM0 LzEvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZ7OMA0E AgACMAcDBQMqDI2AMA0GCSqGSIb3DQEBCwUAA4IBAQB4JyP+QYKZy4DryOSaHJfg EwbcUZKEn6szwIjC3pk2at8tN0WPK8iSvuw8wAfTdabd1c15ZL8ETO6Wv9Qb5kfu EKgA0F6LdhtuT2tNJu14/UzjevCUrucD6AJiVVVgMJA8/yky1sfZTAw9KVrSYVJ0 d4YpQCITojDTaVwWKgbhiQKCumRFo6lxtBffM8R/CFf0w0htRJCI1KPPwUd51I9s Gb63JtA5dHNKVo6SnfA1AI0aBa9a6y8k2eOaR6ac6oYVrWVSok1fXPHbx9bMBHJ6 30lOvmrb1kcgv9YUAqxyRSLYapHCb62/dMfQVL4ZtIpTIwKT5szNFNNUcfLupJv/ -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:58 2026 by rpki-client