This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/Edwl4zoG96dbPmsUFIhkRgXADTQ.roa File: Edwl4zoG96dbPmsUFIhkRgXADTQ.roa (raw, json) Hash identifier: IM2GNpBVkyKGNEQ7blWR/nLPMnuseIERVwBOhweWa0c= Subject key identifier: 11:DC:25:E3:3A:06:F7:A7:5B:3E:6B:14:14:88:64:46:05:C0:0D:34 Certificate issuer: /CN=2c128265b80991788d86e2262e9339038b4efa82 Certificate serial: 019B79ED41068AB429E2055286A369657F54 Authority key identifier: 2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/Edwl4zoG96dbPmsUFIhkRgXADTQ.roa Signing time: Thu 01 Jan 2026 14:19:10 +0000 ROA not before: Thu 01 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201637 IP address blocks: 185.140.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.mft rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:41:06:8a:b4:29:e2:05:52:86:a3:69:65:7f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c128265b80991788d86e2262e9339038b4efa82 Validity Not Before: Jan 1 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11dc25e33a06f7a75b3e6b141488644605c00d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:c9:b5:8e:66:ea:4f:17:8c:09:0d:eb:b5: 03:e3:a3:c0:c6:4c:21:0f:54:ff:0b:bf:52:28:5a: c1:c6:69:ff:6e:4c:ae:86:1f:98:4d:ab:91:83:e0: 59:b8:8d:6b:90:d2:ae:c3:3b:d3:f4:3d:1d:9d:6f: b8:8b:67:b0:e8:ac:e1:ad:b1:ee:99:be:78:d9:34: 1e:ce:00:da:f0:f0:4d:f1:7f:0a:0c:0a:59:30:e4: 82:aa:4b:f4:d2:e6:03:7b:c4:51:29:a7:25:ac:25: c2:59:67:6b:81:09:cf:b5:90:93:e8:aa:9d:e5:c1: 99:15:a8:c5:16:5d:01:32:ab:7e:cc:4e:59:9f:66: 1f:93:c5:83:e8:d4:bd:aa:81:ba:e9:d7:bc:48:74: c0:39:1b:67:87:c2:31:68:44:6a:32:ad:41:11:1a: 50:b4:ad:d3:88:cb:30:e0:97:6e:0b:d5:65:ae:fc: d2:11:35:39:d1:b7:34:40:d2:7d:20:6e:af:24:d3: bd:e1:75:c0:46:47:98:6c:d8:6c:a9:f6:8e:ac:50: 29:6e:7d:f3:af:23:b8:d7:13:bd:4a:6d:c8:51:1e: 0f:3e:cd:64:6b:4b:33:4c:27:3d:40:78:18:7f:03: 85:0e:2f:7e:1b:5e:ba:52:14:ac:c5:3c:c8:a2:ef: f0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DC:25:E3:3A:06:F7:A7:5B:3E:6B:14:14:88:64:46:05:C0:0D:34 X509v3 Authority Key Identifier: keyid:2C:12:82:65:B8:09:91:78:8D:86:E2:26:2E:93:39:03:8B:4E:FA:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LBKCZbgJkXiNhuImLpM5A4tO-oI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/Edwl4zoG96dbPmsUFIhkRgXADTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ecbffa-1166-4d1e-9f55-11575db64fbe/1/LBKCZbgJkXiNhuImLpM5A4tO-oI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.140.100.0/22 Signature Algorithm: sha256WithRSAEncryption cb:0f:64:a9:52:8a:5c:5b:38:97:98:d1:06:22:96:e2:4a:77: 7c:7a:f4:6e:9a:22:02:b1:cc:5c:f1:a2:c0:f2:53:5a:b5:03: d0:5e:12:52:c3:ea:3b:8c:95:8a:8d:b6:99:67:40:d9:95:56: 1f:2c:b4:d6:19:56:a1:83:e4:a7:92:fd:98:c6:a4:c0:dd:df: 2b:25:c1:99:9c:6c:db:04:21:c4:0e:06:74:81:97:8e:f2:46: dd:82:5c:d5:20:ea:fe:40:04:9b:9e:9a:a5:8b:b4:c2:bd:35: e0:65:33:b2:03:f6:a7:04:b2:92:c2:0c:0c:63:0f:41:9f:f1: 8c:c1:b0:80:c3:27:4a:cb:b3:be:75:ce:92:9c:bf:22:c0:fc: ca:13:88:e6:b6:4f:fb:ce:48:e0:7c:d6:76:fc:33:98:de:98: 58:3c:21:06:0b:15:72:78:b2:29:b0:9a:4f:82:05:20:b6:12: a2:70:f1:ba:c7:2a:2d:f2:ba:5c:2c:74:b5:a2:37:bc:34:62: 53:49:a0:48:4c:7c:3a:4c:8b:d4:ec:fc:21:60:ae:7b:7b:0b: b1:f2:1c:14:3b:c6:d7:cd:06:1c:80:97:38:7a:82:66:ae:12: 81:cb:a2:48:16:56:af:e1:60:ea:9c:c7:1f:b0:4f:88:74:c4: 1e:6a:4c:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57UEGirQp4gVShqNpZX9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMTI4MjY1YjgwOTkxNzg4ZDg2ZTIyNjJlOTMzOTAzOGI0 ZWZhODIwHhcNMjYwMTAxMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWRjMjVlMzNhMDZmN2E3NWIzZTZiMTQxNDg4NjQ0NjA1YzAwZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRTJtY5m6k8XjAkN67UD46PAxkwh D1T/C79SKFrBxmn/bkyuhh+YTauRg+BZuI1rkNKuwzvT9D0dnW+4i2ew6KzhrbHu mb542TQezgDa8PBN8X8KDApZMOSCqkv00uYDe8RRKaclrCXCWWdrgQnPtZCT6Kqd 5cGZFajFFl0BMqt+zE5Zn2Yfk8WD6NS9qoG66de8SHTAORtnh8IxaERqMq1BERpQ tK3TiMsw4JduC9VlrvzSETU50bc0QNJ9IG6vJNO94XXARkeYbNhsqfaOrFApbn3z ryO41xO9Sm3IUR4PPs1ka0szTCc9QHgYfwOFDi9+G166UhSsxTzIou/wCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHcJeM6BvenWz5rFBSIZEYFwA00MB8GA1UdIwQY MBaAFCwSgmW4CZF4jYbiJi6TOQOLTvqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUt MTE1NzVkYjY0ZmJlLzEvRWR3bDR6b0c5NmRiUG1zVUZJaGtSZ1hBRFRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lY2JmZmEtMTE2Ni00ZDFlLTlmNTUtMTE1NzVkYjY0ZmJl LzEvTEJLQ1piZ0prWGlOaHVJbUxwTTVBNHRPLW9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuYxkMA0G CSqGSIb3DQEBCwUAA4IBAQDLD2SpUopcWziXmNEGIpbiSnd8evRumiICscxc8aLA 8lNatQPQXhJSw+o7jJWKjbaZZ0DZlVYfLLTWGVahg+Snkv2YxqTA3d8rJcGZnGzb BCHEDgZ0gZeO8kbdglzVIOr+QASbnpqli7TCvTXgZTOyA/anBLKSwgwMYw9Bn/GM wbCAwydKy7O+dc6SnL8iwPzKE4jmtk/7zkjgfNZ2/DOY3phYPCEGCxVyeLIpsJpP ggUgthKicPG6xyot8rpcLHS1oje8NGJTSaBITHw6TIvU7PwhYK57ewux8hwUO8bX zQYcgJc4eoJmrhKBy6JIFlav4WDqnMcfsE+IdMQeakw6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:38 2026 by rpki-client