This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa File: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (raw, json) Hash identifier: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0= Subject key identifier: 10:2E:06:05:BD:4B:26:32:7B:A5:5F:3F:C7:4B:71:28:21:08:5D:28 Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8 Certificate serial: 019B7FF27CE06772E611705B51D2E9520C70 Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa Signing time: Fri 02 Jan 2026 18:22:36 +0000 ROA not before: Fri 02 Jan 2026 18:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39532 IP address blocks: 89.104.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:7c:e0:67:72:e6:11:70:5b:51:d2:e9:52:0c:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8 Validity Not Before: Jan 2 18:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=102e0605bd4b26327ba55f3fc74b712821085d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:cd:2f:5c:f0:69:e9:7f:f2:e4:e8:5d:9e: dc:1d:09:52:72:80:1f:db:d4:79:c4:96:cc:3e:4e: b2:b1:b7:ca:14:c1:05:42:ec:df:e1:5c:32:b1:e9: c7:41:87:4b:4e:38:a2:e4:dd:3b:3f:c9:8a:5c:a4: 6f:8a:89:55:21:61:4b:be:8f:49:5e:f3:c1:09:4b: ee:4c:d1:e1:cf:b1:5a:4a:3d:91:e8:c7:7a:33:1a: 70:b5:89:b2:33:b8:b9:07:dc:3d:08:7b:2c:8a:43: d0:34:9a:ea:d5:d6:54:2c:96:83:dd:01:0e:4a:0f: 49:f5:96:2b:8a:0f:84:ea:bb:c7:d8:fe:17:26:59: 9f:d8:1c:80:30:2b:8d:91:33:c2:c0:69:9b:d2:6a: 64:a7:eb:d2:02:51:9a:3d:f5:10:2c:a8:1a:b5:41: 1a:3f:98:4a:ad:37:ad:c5:f1:f9:5f:24:c6:59:53: 60:71:04:9a:96:1d:6a:bd:81:bf:a6:79:af:13:1f: 93:f1:10:39:e5:02:a1:15:a1:77:a4:be:79:2b:1a: e3:71:88:27:48:81:6c:dd:42:8a:a1:e5:5e:24:13: 4e:fc:eb:51:15:91:bf:19:d0:7c:2d:3f:81:00:7c: 87:2b:95:95:89:ef:42:ee:30:66:e9:f0:d9:04:0c: ad:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2E:06:05:BD:4B:26:32:7B:A5:5F:3F:C7:4B:71:28:21:08:5D:28 X509v3 Authority Key Identifier: keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.104.128.0/19 Signature Algorithm: sha256WithRSAEncryption 2a:66:6a:6d:33:f8:36:46:3e:bd:30:dc:dc:7b:f5:db:c6:2f: 39:4d:5a:d9:ad:8f:97:50:c1:10:ba:60:69:09:f9:31:79:ef: 30:e4:c2:c2:7d:77:a2:32:54:37:5f:df:a5:a9:08:db:11:e4: e8:07:34:d5:56:8f:0f:2d:09:ec:a5:aa:ef:ed:07:88:77:ab: 39:cc:d2:f1:40:8e:b0:d5:e3:7e:81:99:cb:fc:b6:fd:3e:76: a2:33:b4:22:5f:bd:c1:17:3d:d4:36:7e:ba:30:33:dc:71:6c: 76:1b:3b:78:ca:74:a2:12:51:27:d1:21:bd:98:d3:59:6f:7a: e6:06:fe:02:1c:a3:d0:1d:9b:d9:8a:b0:b3:fe:87:da:b2:88: 70:4d:ad:dc:15:b7:b4:72:c7:48:00:3b:45:cb:8b:b3:57:ba: 69:81:e0:c0:e9:78:aa:72:4e:db:3c:0c:c1:81:4d:e2:e3:11: ed:b2:99:07:14:b5:e5:ed:c0:b3:99:a0:b1:66:ec:e6:f4:90: de:49:23:c8:26:2d:c5:bd:9d:0e:ff:9e:55:72:21:a1:31:cf: 89:48:24:76:35:5e:6d:a5:8f:11:9f:66:fd:c6:42:1b:e2:88: 25:30:ef:5f:8b:04:0f:1f:ec:4a:25:72:9e:08:a4:fa:95:1c: 57:9b:1f:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8nzgZ3LmEXBbUdLpUgxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMDRlMWMyMDExNGQ3NzMxNjk0ZGRjNGYyNzdjNGRmMWJm ZmM0ZjgwHhcNMjYwMTAyMTgyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDJlMDYwNWJkNGIyNjMyN2JhNTVmM2ZjNzRiNzEyODIxMDg1ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraDNL1zwael/8uToXZ7cHQlScoAf 29R5xJbMPk6ysbfKFMEFQuzf4VwysenHQYdLTjii5N07P8mKXKRviolVIWFLvo9J XvPBCUvuTNHhz7FaSj2R6Md6MxpwtYmyM7i5B9w9CHssikPQNJrq1dZULJaD3QEO Sg9J9ZYrig+E6rvH2P4XJlmf2ByAMCuNkTPCwGmb0mpkp+vSAlGaPfUQLKgatUEa P5hKrTetxfH5XyTGWVNgcQSalh1qvYG/pnmvEx+T8RA55QKhFaF3pL55KxrjcYgn SIFs3UKKoeVeJBNO/OtRFZG/GdB8LT+BAHyHK5WVie9C7jBm6fDZBAytOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAuBgW9SyYye6VfP8dLcSghCF0oMB8GA1UdIwQY MBaAFOIE4cIBFNdzFpTdxPJ3xN8b/8T4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYt MTNkMzgwNzE1Y2VmLzEvRUM0R0JiMUxKako3cFY4X3gwdHhLQ0VJWFNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iOWRmNWEtYTQ1NC00ZTI3LTg2YWYtMTNkMzgwNzE1Y2Vm LzEvNGdUaHdnRVUxM01XbE4zRThuZkUzeHZfeFBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWWiAMA0G CSqGSIb3DQEBCwUAA4IBAQAqZmptM/g2Rj69MNzce/Xbxi85TVrZrY+XUMEQumBp Cfkxee8w5MLCfXeiMlQ3X9+lqQjbEeToBzTVVo8PLQnsparv7QeId6s5zNLxQI6w 1eN+gZnL/Lb9PnaiM7QiX73BFz3UNn66MDPccWx2Gzt4ynSiElEn0SG9mNNZb3rm Bv4CHKPQHZvZirCz/ofasohwTa3cFbe0csdIADtFy4uzV7ppgeDA6Xiqck7bPAzB gU3i4xHtspkHFLXl7cCzmaCxZuzm9JDeSSPIJi3FvZ0O/55VciGhMc+JSCR2NV5t pY8Rn2b9xkIb4oglMO9fiwQPH+xKJXKeCKT6lRxXmx90 -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:51 2026 by rpki-client