This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa File: ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa (raw, json) Hash identifier: vGQVzQW6eOz/ocuImvFOzh/r1Lw9xkrPt/351GBE1Vg= Subject key identifier: 10:28:B5:BE:7A:94:33:E7:F1:21:F3:20:C6:CE:99:EB:33:E7:E4:6F Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6 Certificate serial: 019B7A5A93F90803DAAEAD951699E6A0984B Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20634 IP address blocks: 185.213.56.0/22 maxlen: 22 195.170.175.0/24 maxlen: 24 2a0b:83c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:93:f9:08:03:da:ae:ad:95:16:99:e6:a0:98:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1028b5be7a9433e7f121f320c6ce99eb33e7e46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:30:8e:10:29:cb:47:16:80:b5:1c:95:3f:bf: 51:40:3e:72:a8:c6:d3:42:4d:8a:3e:bc:4f:aa:4e: 75:47:1f:53:c2:db:cc:9a:06:f9:b3:8d:de:32:e2: 87:17:52:5f:0e:69:f6:ea:84:3c:3d:1b:6e:f6:6d: dd:31:2e:11:8a:cb:59:6b:54:0b:10:8f:55:b8:0f: 72:b7:e6:c3:f6:e0:b3:f7:5b:d6:f0:3a:b3:fe:33: 06:cc:52:ab:93:65:c7:ca:8b:75:c4:9f:45:d6:61: fe:da:91:a6:61:4b:37:85:13:95:a3:d2:d1:f6:3d: 01:1b:58:1f:a7:b6:67:71:cf:67:6f:b3:6d:70:22: 4a:91:56:6d:76:15:60:cd:52:62:9d:18:20:b2:65: f7:d8:d7:b5:f1:09:2a:00:30:85:28:c4:42:90:10: 20:3b:eb:73:0b:13:89:d5:e0:cf:75:b7:66:d0:f4: 49:20:e8:3b:5f:13:16:9a:47:6a:29:02:e4:5d:53: 81:56:f5:da:25:9d:9d:ef:09:ff:25:4b:97:5c:8f: 81:ac:a4:6e:31:47:72:a3:a8:68:15:24:1d:0a:27: f5:4d:f1:f3:f9:1c:8b:ce:38:53:21:25:07:68:2e: 13:06:db:e3:ad:dd:92:6a:de:35:a0:bc:dd:73:64: 39:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:28:B5:BE:7A:94:33:E7:F1:21:F3:20:C6:CE:99:EB:33:E7:E4:6F X509v3 Authority Key Identifier: keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ECi1vnqUM-fxIfMgxs6Z6zPn5G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.56.0/22 195.170.175.0/24 IPv6: 2a0b:83c0::/29 Signature Algorithm: sha256WithRSAEncryption 6e:d6:6c:c1:41:f7:4e:d3:46:64:5a:fd:a4:8e:ee:b1:ff:c8: 62:17:c7:d6:0b:93:2e:1b:ab:79:f1:1a:1c:50:63:4d:b0:d5: e7:fe:6b:bf:e2:5f:fb:56:8d:f1:cb:d4:93:b3:b4:b0:5d:9a: c5:95:1d:2c:b1:c2:a5:eb:4b:ac:b1:db:3c:42:0c:68:3c:10: 91:07:cc:b7:f3:58:e5:2a:ea:a8:b3:2a:69:45:bb:d7:7a:eb: 24:81:a4:d9:65:45:a1:a7:e3:5b:61:8a:09:fe:b2:73:ab:73: 09:1f:04:52:d9:71:7a:2b:e6:28:b6:e1:4b:81:04:5e:7e:70: 1f:bc:48:44:9e:f3:25:cf:2b:4f:0c:06:36:79:b1:1d:17:d3: 9c:a0:9e:f3:24:8b:3b:46:80:fc:3b:1e:d8:81:5f:00:39:43: c6:8e:d0:97:c8:97:f6:8a:a0:a7:be:05:b6:a2:6d:0f:b3:de: 13:f4:11:00:d7:31:59:5f:18:5d:65:e2:7a:db:3b:13:ff:dd: 5e:28:20:18:37:3d:2d:4f:9f:bf:89:c7:08:3e:a6:e6:f6:49: 30:ad:50:72:17:62:ac:aa:be:4b:f8:8e:70:d2:eb:94:dc:54: a4:6b:2f:a2:64:29:a5:8b:96:08:69:fc:61:a0:e4:8d:69:d1: a5:ae:ec:0b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WpP5CAParq2VFpnmoJhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMjM1ODViZmNkZDA2MWNhOTQ2ZTJkOWVhOGI5N2U0NWI5 YzMxZDYwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDI4YjViZTdhOTQzM2U3ZjEyMWYzMjBjNmNlOTllYjMzZTdlNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTCOECnLRxaAtRyVP79RQD5yqMbT Qk2KPrxPqk51Rx9TwtvMmgb5s43eMuKHF1JfDmn26oQ8PRtu9m3dMS4RistZa1QL EI9VuA9yt+bD9uCz91vW8Dqz/jMGzFKrk2XHyot1xJ9F1mH+2pGmYUs3hROVo9LR 9j0BG1gfp7Zncc9nb7NtcCJKkVZtdhVgzVJinRggsmX32Ne18QkqADCFKMRCkBAg O+tzCxOJ1eDPdbdm0PRJIOg7XxMWmkdqKQLkXVOBVvXaJZ2d7wn/JUuXXI+BrKRu MUdyo6hoFSQdCif1TfHz+RyLzjhTISUHaC4TBtvjrd2Sat41oLzdc2Q5JQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBAotb56lDPn8SHzIMbOmesz5+RvMB8GA1UdIwQY MBaAFK8jWFv83QYcqUbi2eqLl+RbnDHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMt NzkzNDRkYTNhMmU2LzEvRUNpMXZucVVNLWZ4SWZNZ3hzNlo2elBuNUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMtNzkzNDRkYTNhMmU2 LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCudU4AwQA w6qvMA0EAgACMAcDBQMqC4PAMA0GCSqGSIb3DQEBCwUAA4IBAQBu1mzBQfdO00Zk Wv2kju6x/8hiF8fWC5MuG6t58RocUGNNsNXn/mu/4l/7Vo3xy9STs7SwXZrFlR0s scKl60ussds8QgxoPBCRB8y381jlKuqosyppRbvXeuskgaTZZUWhp+NbYYoJ/rJz q3MJHwRS2XF6K+YotuFLgQRefnAfvEhEnvMlzytPDAY2ebEdF9OcoJ7zJIs7RoD8 Ox7YgV8AOUPGjtCXyJf2iqCnvgW2om0Ps94T9BEA1zFZXxhdZeJ62zsT/91eKCAY Nz0tT5+/iccIPqbm9kkwrVByF2Ksqr5L+I5w0uuU3FSkay+iZCmli5YIafxhoOSN adGlruwL -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:19 2026 by rpki-client