This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/I_ecBbii9WMS-xscmeRtbpKrhSo.roa File: I_ecBbii9WMS-xscmeRtbpKrhSo.roa (raw, json) Hash identifier: ZkycRFhn+SYuv4ysUEIlsNeF6vjl8gsTu3WtZg0CKCM= Subject key identifier: 23:F7:9C:05:B8:A2:F5:63:12:FB:1B:1C:99:E4:6D:6E:92:AB:85:2A Certificate issuer: /CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1 Certificate serial: 019B7AC9057D0B76223B7D1ACC31DE9DC020 Authority key identifier: 2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/I_ecBbii9WMS-xscmeRtbpKrhSo.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62187 IP address blocks: 37.235.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.mft rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:05:7d:0b:76:22:3b:7d:1a:cc:31:de:9d:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac78fd517a75f77f3f4fd229ac5e6732560c6e1 Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23f79c05b8a2f56312fb1b1c99e46d6e92ab852a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:f1:86:a3:f6:59:ef:09:68:67:7c:b2:3f: 60:39:4f:6a:80:dc:40:29:16:5e:b3:9f:9c:23:65: 9d:06:ba:82:7f:35:93:0e:df:f8:f2:6d:49:99:b1: 1e:f8:53:1c:c6:ab:98:6d:54:24:61:a2:27:38:c0: 32:fe:cd:40:6b:57:ff:96:4c:0c:79:43:17:1a:d3: 7c:70:02:5d:2a:bb:49:3d:19:48:37:2c:10:82:a3: 90:db:78:e6:0c:67:b2:43:d9:39:2c:8b:34:02:ab: b2:62:b0:71:34:b8:1d:43:33:eb:61:2a:d7:58:b4: b0:cd:61:34:27:c0:6e:d6:fa:5c:95:fe:ac:cc:b3: b6:2d:0e:c4:ec:6e:98:98:d8:58:87:5c:6b:63:71: 20:69:d0:a9:cc:25:5c:88:fb:b0:07:60:00:fe:14: 9d:be:ad:13:b7:a4:df:d6:0e:91:19:f2:91:44:96: 49:dc:6f:3e:89:94:2e:67:70:81:00:a7:48:50:99: 0a:f0:d3:14:8d:5b:88:c7:07:19:b1:bf:2a:89:cd: c8:14:d0:7c:99:03:c5:40:a5:63:4e:d2:ae:dd:e0: f5:0b:1e:6a:b5:c2:5a:d8:ba:d4:50:40:60:20:2a: b6:97:62:09:87:67:e1:0e:e7:82:7b:7c:23:2a:72: f1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F7:9C:05:B8:A2:F5:63:12:FB:1B:1C:99:E4:6D:6E:92:AB:85:2A X509v3 Authority Key Identifier: keyid:2A:C7:8F:D5:17:A7:5F:77:F3:F4:FD:22:9A:C5:E6:73:25:60:C6:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KseP1RenX3fz9P0imsXmcyVgxuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/I_ecBbii9WMS-xscmeRtbpKrhSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c8f02b-0abc-41fe-bc54-ac800c6d976f/1/KseP1RenX3fz9P0imsXmcyVgxuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.79.0/24 Signature Algorithm: sha256WithRSAEncryption 67:fb:0e:e4:e1:a7:a5:51:aa:c9:19:6a:7b:48:af:21:3d:f0: 85:d8:1b:c9:53:ac:b7:3c:7b:bc:03:45:13:97:55:1a:21:b0: ff:02:26:fc:63:ca:27:e0:13:ce:fe:ee:0a:59:39:a5:67:d9: a5:a2:46:bf:59:bf:91:f8:17:bb:6d:41:03:19:ca:3b:02:15: cb:b9:ef:d6:dd:0c:ce:5b:a8:3a:5c:7f:ab:be:3a:de:9e:35: 50:14:be:ca:5e:54:b0:ac:76:91:81:54:7a:ef:ec:6b:1a:04: 35:0c:4d:ad:2a:d3:b9:8c:8f:65:85:f0:80:2c:a6:3c:c0:15: e4:2a:e1:2a:32:12:4c:c7:25:77:c3:2f:b2:b3:2b:3d:ee:d8: 6d:c0:6c:9c:b6:11:ce:f9:94:a3:c6:8b:f0:25:22:a5:ed:8f: 92:b5:db:25:88:b1:67:40:1c:4c:11:62:77:69:31:04:e6:2b: 64:a0:a4:bb:d6:a4:f5:05:54:68:4e:a6:75:15:a0:5e:87:0b: 35:ea:cf:06:bc:d2:94:f1:e9:e9:bb:e4:43:a1:28:8c:89:bb: f7:11:0e:2b:ab:42:89:c5:a8:53:b4:24:5b:bd:2b:6e:46:ea: 48:3c:18:38:2f:cc:46:a2:68:35:73:42:27:2e:0b:dd:5d:91: 6a:ed:a9:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yQV9C3YiO30azDHencAgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzc4ZmQ1MTdhNzVmNzdmM2Y0ZmQyMjlhYzVlNjczMjU2 MGM2ZTEwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2Y3OWMwNWI4YTJmNTYzMTJmYjFiMWM5OWU0NmQ2ZTkyYWI4NTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtrxhqP2We8JaGd8sj9gOU9qgNxA KRZes5+cI2WdBrqCfzWTDt/48m1JmbEe+FMcxquYbVQkYaInOMAy/s1Aa1f/lkwM eUMXGtN8cAJdKrtJPRlINywQgqOQ23jmDGeyQ9k5LIs0AquyYrBxNLgdQzPrYSrX WLSwzWE0J8Bu1vpclf6szLO2LQ7E7G6YmNhYh1xrY3EgadCpzCVciPuwB2AA/hSd vq0Tt6Tf1g6RGfKRRJZJ3G8+iZQuZ3CBAKdIUJkK8NMUjVuIxwcZsb8qic3IFNB8 mQPFQKVjTtKu3eD1Cx5qtcJa2LrUUEBgICq2l2IJh2fhDueCe3wjKnLxIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCP3nAW4ovVjEvsbHJnkbW6Sq4UqMB8GA1UdIwQY MBaAFCrHj9UXp1938/T9IprF5nMlYMbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQt YWM4MDBjNmQ5NzZmLzEvSV9lY0JiaWk5V01TLXhzY21lUnRicEtyaFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jOGYwMmItMGFiYy00MWZlLWJjNTQtYWM4MDBjNmQ5NzZm LzEvS3NlUDFSZW5YM2Z6OVAwaW1zWG1jeVZneHVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJetPMA0G CSqGSIb3DQEBCwUAA4IBAQBn+w7k4aelUarJGWp7SK8hPfCF2BvJU6y3PHu8A0UT l1UaIbD/Aib8Y8on4BPO/u4KWTmlZ9mloka/Wb+R+Be7bUEDGco7AhXLue/W3QzO W6g6XH+rvjrenjVQFL7KXlSwrHaRgVR67+xrGgQ1DE2tKtO5jI9lhfCALKY8wBXk KuEqMhJMxyV3wy+ysys97thtwGycthHO+ZSjxovwJSKl7Y+StdsliLFnQBxMEWJ3 aTEE5itkoKS71qT1BVRoTqZ1FaBehws16s8GvNKU8enpu+RDoSiMibv3EQ4rq0KJ xahTtCRbvStuRupIPBg4L8xGomg1c0InLgvdXZFq7ali -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:05 2026 by rpki-client