This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/ecknfRAIvluVmZ7la5oiT_2luz4.roa File: ecknfRAIvluVmZ7la5oiT_2luz4.roa (raw, json) Hash identifier: HiuC3Vr01IHEO7h5/vdTPtdaVoDtm8DnoIetX64bo4k= Subject key identifier: 79:C9:27:7D:10:08:BE:5B:95:99:9E:E5:6B:9A:22:4F:FD:A5:BB:3E Certificate issuer: /CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460 Certificate serial: 019B7D5BB53DEC56ADC3FB42677D238B2F72 Authority key identifier: AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/ecknfRAIvluVmZ7la5oiT_2luz4.roa Signing time: Fri 02 Jan 2026 06:18:40 +0000 ROA not before: Fri 02 Jan 2026 06:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202526 IP address blocks: 185.161.152.0/22 maxlen: 22 2a07:c5c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.mft rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b5:3d:ec:56:ad:c3:fb:42:67:7d:23:8b:2f:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2cdf27d9de65eb24e5cfc9d310e4c8a0301460 Validity Not Before: Jan 2 06:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79c9277d1008be5b95999ee56b9a224ffda5bb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:e2:33:9c:fd:93:ef:65:41:f4:33:ff:d2: 9e:80:0e:f2:31:30:46:cb:8b:7e:d8:0a:4a:db:6c: 7b:4d:15:24:40:ec:9a:91:0f:4b:1d:84:b6:28:92: da:37:a4:a9:fc:e9:31:63:e9:f1:33:29:56:e8:62: e6:42:f3:12:e1:e7:d2:8b:fd:11:ee:42:dd:39:76: 23:f3:56:37:c1:d1:b6:eb:7b:5f:99:01:2c:62:7e: 5a:62:ab:e3:98:e1:c1:1e:fc:d0:3e:f7:58:5e:5c: 54:1a:75:1c:0b:ac:48:b7:f2:9b:55:c7:d9:09:75: 7a:2e:1e:cf:bf:2b:6b:50:ba:6d:d0:f8:00:a0:38: ef:c7:f3:d9:67:f4:c2:bd:0f:93:c9:f8:74:ba:7b: ba:fc:90:cd:ea:90:5d:d7:cf:06:ae:e8:2e:2a:14: b5:ec:09:2a:af:5d:d5:95:75:2c:da:16:e1:d7:c7: b0:95:67:7c:26:a4:66:ac:09:4e:c3:77:d9:83:2e: 4d:be:31:22:6c:af:5e:34:e0:24:c8:78:ec:31:e1: 76:b6:f1:56:bd:5a:e6:73:11:05:7f:84:5a:b7:43: 97:78:8b:9b:34:19:6e:72:0a:7e:3c:e5:5c:f1:57: 61:b6:bc:85:d3:37:3b:2e:8f:85:3c:fa:54:9b:81: 32:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C9:27:7D:10:08:BE:5B:95:99:9E:E5:6B:9A:22:4F:FD:A5:BB:3E X509v3 Authority Key Identifier: keyid:AD:2C:DF:27:D9:DE:65:EB:24:E5:CF:C9:D3:10:E4:C8:A0:30:14:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzfJ9neZesk5c_J0xDkyKAwFGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/ecknfRAIvluVmZ7la5oiT_2luz4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ed634b-39f7-4b9c-86e4-1e9238cf028c/1/rSzfJ9neZesk5c_J0xDkyKAwFGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.152.0/22 IPv6: 2a07:c5c0::/29 Signature Algorithm: sha256WithRSAEncryption 5a:c3:13:cf:30:9b:4e:5e:83:d6:1c:27:bf:a3:3b:84:2b:81: 99:86:9d:42:4e:76:d1:9a:84:8f:ad:8b:fc:55:d1:7a:e4:9e: 8f:46:16:f0:c6:6f:94:37:0f:82:ff:54:0a:ac:c8:0c:8e:fb: 61:bf:b1:19:45:a2:df:00:a4:ee:70:cc:51:a0:88:30:2b:32: 3e:f8:b0:08:c4:28:47:86:46:2c:a7:d9:d7:33:fa:08:7e:52: 05:c2:bb:5f:4b:23:ce:89:eb:cb:c5:f6:aa:41:02:5b:64:c3: 25:52:be:7b:11:29:f8:94:ed:d7:3a:f9:19:2e:be:e4:d3:9d: 26:f7:fa:ac:0e:3e:aa:22:d7:85:d8:a0:fb:a3:c6:7d:e4:cd: eb:c8:40:88:4c:14:68:78:5f:10:81:93:ff:53:26:ad:82:f1: 73:c9:ec:16:7b:67:57:31:1c:d2:20:1e:62:68:63:c5:da:4d: a2:41:4c:8c:b8:c8:1d:a6:27:4d:f8:b4:f1:cf:ac:94:77:84: d5:56:1d:50:db:47:10:37:80:e4:78:12:18:75:41:2f:2f:fc: 45:3d:c1:b7:90:86:a4:4c:7f:c3:b0:a0:7c:6b:32:e0:ef:8d: 22:22:f6:74:6d:13:1f:60:16:f2:eb:5b:c6:72:a7:32:46:8b: 19:b5:b3:fc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W7U97Fatw/tCZ30jiy9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmNkZjI3ZDlkZTY1ZWIyNGU1Y2ZjOWQzMTBlNGM4YTAz MDE0NjAwHhcNMjYwMTAyMDYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWM5Mjc3ZDEwMDhiZTViOTU5OTllZTU2YjlhMjI0ZmZkYTViYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA3iM5z9k+9lQfQz/9KegA7yMTBG y4t+2ApK22x7TRUkQOyakQ9LHYS2KJLaN6Sp/OkxY+nxMylW6GLmQvMS4efSi/0R 7kLdOXYj81Y3wdG263tfmQEsYn5aYqvjmOHBHvzQPvdYXlxUGnUcC6xIt/KbVcfZ CXV6Lh7PvytrULpt0PgAoDjvx/PZZ/TCvQ+Tyfh0unu6/JDN6pBd188GruguKhS1 7Akqr13VlXUs2hbh18ewlWd8JqRmrAlOw3fZgy5NvjEibK9eNOAkyHjsMeF2tvFW vVrmcxEFf4Rat0OXeIubNBlucgp+POVc8VdhtryF0zc7Lo+FPPpUm4EyCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHnJJ30QCL5blZme5WuaIk/9pbs+MB8GA1UdIwQY MBaAFK0s3yfZ3mXrJOXPydMQ5MigMBRgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQt MWU5MjM4Y2YwMjhjLzEvZWNrbmZSQUl2bHVWbVo3bGE1b2lUXzJsdXo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lZDYzNGItMzlmNy00YjljLTg2ZTQtMWU5MjM4Y2YwMjhj LzEvclN6Zko5bmVaZXNrNWNfSjB4RGt5S0F3RkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaGYMA0E AgACMAcDBQMqB8XAMA0GCSqGSIb3DQEBCwUAA4IBAQBawxPPMJtOXoPWHCe/ozuE K4GZhp1CTnbRmoSPrYv8VdF65J6PRhbwxm+UNw+C/1QKrMgMjvthv7EZRaLfAKTu cMxRoIgwKzI++LAIxChHhkYsp9nXM/oIflIFwrtfSyPOievLxfaqQQJbZMMlUr57 ESn4lO3XOvkZLr7k050m9/qsDj6qIteF2KD7o8Z95M3ryECITBRoeF8QgZP/Uyat gvFzyewWe2dXMRzSIB5iaGPF2k2iQUyMuMgdpidN+LTxz6yUd4TVVh1Q20cQN4Dk eBIYdUEvL/xFPcG3kIakTH/DsKB8azLg740iIvZ0bRMfYBby61vGcqcyRosZtbP8 -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:23 2026 by rpki-client