This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/ECKViBV7wRLHTav2jF-AfG9JxzQ.roa File: ECKViBV7wRLHTav2jF-AfG9JxzQ.roa (raw, json) Hash identifier: ObO6UXIOSmhNDyTyxoQq4HbBjcMNfcy2i3MVlt06RT0= Subject key identifier: 10:22:95:88:15:7B:C1:12:C7:4D:AB:F6:8C:5F:80:7C:6F:49:C7:34 Certificate issuer: /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670 Certificate serial: 019B7C7FE036D71FDF95878DF53886C00D5B Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/ECKViBV7wRLHTav2jF-AfG9JxzQ.roa Signing time: Fri 02 Jan 2026 02:18:33 +0000 ROA not before: Fri 02 Jan 2026 02:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8998 IP address blocks: 91.203.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e0:36:d7:1f:df:95:87:8d:f5:38:86:c0:0d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670 Validity Not Before: Jan 2 02:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10229588157bc112c74dabf68c5f807c6f49c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8e:aa:18:c3:08:b2:20:96:33:26:4a:30:19: f1:e0:4b:66:fb:de:de:e5:8a:b5:3e:2e:61:8e:54: 0b:e9:53:71:31:f2:12:2b:a6:d6:c2:0b:23:a2:d8: 82:da:4c:40:fb:98:6c:c2:0d:db:af:4f:af:29:d4: 56:96:29:b2:1f:ef:c7:39:7d:8b:69:bc:ed:be:1d: 5c:54:76:07:f3:40:4d:e6:d3:80:13:05:cd:5c:ec: 47:a1:23:29:c9:1b:08:53:af:31:6c:d1:1c:f6:24: 95:4d:c1:b2:7e:46:d8:57:77:73:f8:c5:b7:d2:b6: 0f:4f:4d:3c:2a:c1:73:50:d2:db:be:fe:57:d5:32: 14:2d:18:7a:90:b9:43:34:ed:59:c2:e9:be:95:35: 35:0b:d3:68:94:26:34:37:ce:ca:cb:b3:0b:d4:41: 1c:70:9d:78:63:ca:ec:de:86:4e:74:cc:cb:79:67: 2c:25:8c:31:2b:b5:e9:c8:79:0c:bf:cf:0f:f8:ae: 1a:ae:8e:ed:77:f2:e5:01:aa:d2:be:b7:93:37:47: 0a:3a:c2:9d:43:17:e8:3f:10:72:0c:fe:c3:31:87: 84:f8:f2:9b:b6:45:06:14:0a:8e:eb:77:81:1d:e7: cd:30:31:f9:6a:85:05:b0:8f:fe:81:7f:23:57:b4: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:22:95:88:15:7B:C1:12:C7:4D:AB:F6:8C:5F:80:7C:6F:49:C7:34 X509v3 Authority Key Identifier: keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/ECKViBV7wRLHTav2jF-AfG9JxzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.203.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:9c:6b:f0:0f:84:c2:eb:81:82:46:14:22:59:55:d6:2f:97: ea:80:17:61:1c:ca:34:e3:1c:13:de:dc:bd:3c:14:4f:6a:d4: 9d:ad:a2:bb:b0:5c:ad:95:f7:69:f8:48:9a:34:41:00:2e:a4: 12:00:49:28:d5:85:8c:64:88:88:41:0b:0e:7a:dd:4b:70:79: e1:ed:80:80:01:eb:6f:0b:94:22:e6:71:b6:11:ae:27:f9:13: c9:97:ad:28:7f:65:f0:21:8e:4c:83:8c:c2:eb:10:6b:d3:e9: 2e:12:51:ae:3e:64:31:b5:55:94:e4:93:98:bf:ea:03:bd:49: 41:16:b3:ba:e6:40:45:5d:ef:b9:86:de:8f:bd:b4:b5:65:1d: e0:a4:f7:99:5a:02:95:25:2e:de:8c:0f:4b:ae:14:b9:c2:b4: 41:94:89:76:fc:2d:c8:ef:8b:7a:2c:a2:05:97:46:b5:37:89: cc:06:ae:e4:ee:59:e1:2d:ad:0f:23:85:a5:d2:f8:ce:d7:0d: fb:8a:d1:1f:10:7c:d3:00:5c:5c:64:79:6f:be:2f:bb:41:e6: 7e:29:5b:05:7f:88:44:3b:e6:5d:8e:83:f7:c8:3d:03:19:36: 53:67:74:bb:ae:3d:88:42:ef:0d:a8:18:85:12:4b:8c:fb:1f: eb:5f:40:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f+A21x/flYeN9TiGwA1bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDJmYzRkMjNmZDljMjQyMGM0MDQ5MTg3MTgwOGVjNTQy NGE2NzAwHhcNMjYwMTAyMDIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDIyOTU4ODE1N2JjMTEyYzc0ZGFiZjY4YzVmODA3YzZmNDljNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto6qGMMIsiCWMyZKMBnx4Etm+97e 5Yq1Pi5hjlQL6VNxMfISK6bWwgsjotiC2kxA+5hswg3br0+vKdRWlimyH+/HOX2L abztvh1cVHYH80BN5tOAEwXNXOxHoSMpyRsIU68xbNEc9iSVTcGyfkbYV3dz+MW3 0rYPT008KsFzUNLbvv5X1TIULRh6kLlDNO1Zwum+lTU1C9NolCY0N87Ky7ML1EEc cJ14Y8rs3oZOdMzLeWcsJYwxK7XpyHkMv88P+K4aro7td/LlAarSvreTN0cKOsKd QxfoPxByDP7DMYeE+PKbtkUGFAqO63eBHefNMDH5aoUFsI/+gX8jV7ThqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAilYgVe8ESx02r9oxfgHxvScc0MB8GA1UdIwQY MBaAFE3S/E0j/ZwkIMQEkYcYCOxUJKZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmIt ZWI4YjFlY2M0NzQxLzEvRUNLVmlCVjd3UkxIVGF2MmpGLUFmRzlKeHpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zZThlNDItZGZmYi00MzVkLWJkMmItZWI4YjFlY2M0NzQx LzEvVGRMOFRTUDluQ1FneEFTUmh4Z0k3RlFrcG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8smMA0G CSqGSIb3DQEBCwUAA4IBAQAqnGvwD4TC64GCRhQiWVXWL5fqgBdhHMo04xwT3ty9 PBRPatSdraK7sFytlfdp+EiaNEEALqQSAEko1YWMZIiIQQsOet1LcHnh7YCAAetv C5Qi5nG2Ea4n+RPJl60of2XwIY5Mg4zC6xBr0+kuElGuPmQxtVWU5JOYv+oDvUlB FrO65kBFXe+5ht6PvbS1ZR3gpPeZWgKVJS7ejA9LrhS5wrRBlIl2/C3I74t6LKIF l0a1N4nMBq7k7lnhLa0PI4Wl0vjO1w37itEfEHzTAFxcZHlvvi+7QeZ+KVsFf4hE O+ZdjoP3yD0DGTZTZ3S7rj2IQu8NqBiFEkuM+x/rX0D3 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:48 2026 by rpki-client