This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/eCfciMd8WvfOpLwSmZnFxhRFtP8.roa File: eCfciMd8WvfOpLwSmZnFxhRFtP8.roa (raw, json) Hash identifier: mnu1L5F4WUL4nlzWuT0asBSz38ZR2rhi6ZOxZOIl63c= Subject key identifier: 78:27:DC:88:C7:7C:5A:F7:CE:A4:BC:12:99:99:C5:C6:14:45:B4:FF Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Certificate serial: 019B7C7F17192D643DCC6B63F13A85B8079D Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/eCfciMd8WvfOpLwSmZnFxhRFtP8.roa Signing time: Fri 02 Jan 2026 02:17:42 +0000 ROA not before: Fri 02 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216433 IP address blocks: 89.39.123.0/24 maxlen: 24 2a13:b140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:17:19:2d:64:3d:cc:6b:63:f1:3a:85:b8:07:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Validity Not Before: Jan 2 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7827dc88c77c5af7cea4bc129999c5c61445b4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:3d:8a:da:44:ab:70:b0:08:59:32:86:35: 7d:30:8d:09:62:05:1e:c6:9c:5f:6a:54:2e:b3:f8: 1d:e2:45:27:30:97:2c:e9:b3:2d:11:e7:23:47:ae: 04:d1:0f:7a:d0:45:d3:19:c4:02:3e:47:36:da:6f: ef:59:cd:06:12:47:d0:bd:85:01:57:e3:58:31:48: 11:26:59:91:4d:0c:2e:9a:32:97:33:0f:c1:e3:25: b9:91:b9:43:0c:a0:b1:e0:eb:95:16:1e:d4:7c:6e: eb:e5:c9:ec:99:19:ce:b0:2a:90:c5:60:be:0e:76: f0:68:3f:ae:46:23:d5:19:c6:a4:4b:29:4c:f6:5a: 03:97:9f:77:03:c7:ac:44:29:a1:62:fd:7b:12:30: b8:62:09:6f:67:f4:ae:a4:d6:53:f0:50:82:ed:de: c7:5e:f1:ce:df:c9:4c:ce:db:51:17:b4:f1:e5:1d: 65:17:eb:61:3d:cf:50:09:d7:b2:d2:78:ad:2f:50: f3:57:a7:23:6f:0c:57:2d:69:05:a2:91:a5:66:ba: ab:1b:07:2c:80:46:c2:d5:b9:a9:95:eb:1b:61:f2: 72:ca:b2:69:1c:a7:39:34:bf:d7:89:19:be:d8:de: 42:23:7a:b1:da:b1:36:1e:e8:ea:59:72:28:71:91: 99:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:27:DC:88:C7:7C:5A:F7:CE:A4:BC:12:99:99:C5:C6:14:45:B4:FF X509v3 Authority Key Identifier: keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/eCfciMd8WvfOpLwSmZnFxhRFtP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.123.0/24 IPv6: 2a13:b140::/29 Signature Algorithm: sha256WithRSAEncryption a4:4e:4f:a4:1d:63:ba:95:f0:ac:59:67:d4:a8:15:a3:d0:e2: 52:9f:7d:95:ec:34:d4:ac:b3:6f:ca:c3:ec:f3:dd:88:db:93: f1:4d:c1:4b:49:26:ea:26:69:61:2e:56:13:c2:38:58:a7:cb: a1:20:83:e3:92:0a:c9:82:5b:34:f4:a3:93:07:fa:91:52:17: aa:25:0a:33:3a:17:1f:ef:a7:7b:b1:8b:41:02:e1:cc:53:74: 5a:b2:bb:09:c0:f1:c7:3f:18:57:bc:ad:5d:60:1c:64:62:38: e4:fc:ae:70:bf:e6:94:df:88:bf:a2:50:a6:b3:81:a2:c5:ff: 11:fe:c4:c5:23:9e:54:1f:7e:74:01:2d:bb:ab:55:29:df:5a: 02:fb:b7:b7:91:9a:e0:cb:09:23:1e:6d:af:1e:22:b0:dc:bb: b4:10:09:2f:2a:28:fb:49:bf:89:f5:2d:6d:68:99:44:33:bc: 9a:3a:8c:5e:88:8a:de:84:5b:74:01:f4:42:91:bc:75:f2:64: c2:23:ea:81:89:80:da:fd:93:3d:f4:6a:2d:b8:2f:ca:a1:24: ed:c7:d9:60:aa:dc:f1:c9:a8:85:d8:27:f2:35:ab:4d:68:e5: 1f:79:57:79:a1:98:fc:17:4a:d2:e0:4f:50:7d:40:8d:58:96: ba:20:70:b5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8fxcZLWQ9zGtj8TqFuAedMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy MmMwZDgwHhcNMjYwMTAyMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODI3ZGM4OGM3N2M1YWY3Y2VhNGJjMTI5OTk5YzVjNjE0NDViNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuw9itpEq3CwCFkyhjV9MI0JYgUe xpxfalQus/gd4kUnMJcs6bMtEecjR64E0Q960EXTGcQCPkc22m/vWc0GEkfQvYUB V+NYMUgRJlmRTQwumjKXMw/B4yW5kblDDKCx4OuVFh7UfG7r5cnsmRnOsCqQxWC+ DnbwaD+uRiPVGcakSylM9loDl593A8esRCmhYv17EjC4YglvZ/SupNZT8FCC7d7H XvHO38lMzttRF7Tx5R1lF+thPc9QCdey0nitL1DzV6cjbwxXLWkFopGlZrqrGwcs gEbC1bmplesbYfJyyrJpHKc5NL/XiRm+2N5CI3qx2rE2HujqWXIocZGZuwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHgn3IjHfFr3zqS8EpmZxcYURbT/MB8GA1UdIwQY MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt ODU5NWI0NTAwODg0LzEvZUNmY2lNZDhXdmZPcEx3U21abkZ4aFJGdFA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0 LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWSd7MA0E AgACMAcDBQMqE7FAMA0GCSqGSIb3DQEBCwUAA4IBAQCkTk+kHWO6lfCsWWfUqBWj 0OJSn32V7DTUrLNvysPs892I25PxTcFLSSbqJmlhLlYTwjhYp8uhIIPjkgrJgls0 9KOTB/qRUheqJQozOhcf76d7sYtBAuHMU3RasrsJwPHHPxhXvK1dYBxkYjjk/K5w v+aU34i/olCms4Gixf8R/sTFI55UH350AS27q1Up31oC+7e3kZrgywkjHm2vHiKw 3Lu0EAkvKij7Sb+J9S1taJlEM7yaOoxeiIrehFt0AfRCkbx18mTCI+qBiYDa/ZM9 9GotuC/KoSTtx9lgqtzxyaiF2CfyNatNaOUfeVd5oZj8F0rS4E9QfUCNWJa6IHC1 -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:34 2026 by rpki-client