This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/ECXIzFT9fepBNclb1K3f0soMTMI.roa File: ECXIzFT9fepBNclb1K3f0soMTMI.roa (raw, json) Hash identifier: kie5Trf/wMm9ar/CMryyHcm/iNefqFWM8mxR0DMVctk= Subject key identifier: 10:25:C8:CC:54:FD:7D:EA:41:35:C9:5B:D4:AD:DF:D2:CA:0C:4C:C2 Certificate issuer: /CN=091472e52047b5f7753ef1526dda38ed428bfe47 Certificate serial: 019B77C74B9773C76029B4A64BA6B2E69638 Authority key identifier: 09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/ECXIzFT9fepBNclb1K3f0soMTMI.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207095 IP address blocks: 185.166.52.0/24 maxlen: 24 185.166.53.0/24 maxlen: 24 185.166.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.mft rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4b:97:73:c7:60:29:b4:a6:4b:a6:b2:e6:96:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091472e52047b5f7753ef1526dda38ed428bfe47 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1025c8cc54fd7dea4135c95bd4addfd2ca0c4cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:19:2c:6a:30:b9:82:38:7e:bf:56:6a:e9:78: 45:3a:af:f3:12:18:72:b7:69:11:fe:67:67:2a:c2: 09:85:cd:79:68:6e:05:08:53:01:07:73:bd:6e:4f: 2f:36:4f:a4:fc:10:c5:22:46:31:76:e5:6a:01:6a: 7c:ec:aa:3e:13:3a:07:6f:15:bb:e2:46:35:e6:05: 34:12:83:3c:e7:08:d4:62:bf:22:0f:09:a2:ca:b6: 23:67:76:93:f9:7d:ab:41:91:db:75:9c:45:44:8c: cd:d8:95:c5:cf:2c:e7:59:54:03:e1:f3:46:e6:ad: e3:ab:96:83:9e:dc:40:a3:84:f8:52:f7:55:3f:72: 46:a2:6d:d9:ef:7a:dc:29:96:a4:e0:cf:83:cd:33: 86:b0:67:35:4e:cd:2c:a8:50:61:5b:7e:65:b2:84: db:99:cf:25:e8:e7:04:bf:e4:17:43:40:91:d9:3e: ef:bc:82:ea:60:00:60:ed:42:72:89:2b:cf:41:70: 27:97:f7:5a:83:cf:f7:7a:9e:f1:d0:cc:f3:ba:60: 1e:7d:8d:e7:39:bd:00:c8:df:81:b3:a7:69:75:b6: 75:16:dc:a4:84:e6:b3:c7:99:a1:ec:4f:d2:67:0b: 0e:87:b5:36:89:c4:f6:3f:be:b8:35:7f:80:ce:f3: d4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:25:C8:CC:54:FD:7D:EA:41:35:C9:5B:D4:AD:DF:D2:CA:0C:4C:C2 X509v3 Authority Key Identifier: keyid:09:14:72:E5:20:47:B5:F7:75:3E:F1:52:6D:DA:38:ED:42:8B:FE:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRRy5SBHtfd1PvFSbdo47UKL_kc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/ECXIzFT9fepBNclb1K3f0soMTMI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fc3591-3d78-4d9b-94ea-a65b9f607e3e/1/CRRy5SBHtfd1PvFSbdo47UKL_kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.52.0/23 185.166.55.0/24 Signature Algorithm: sha256WithRSAEncryption ba:94:0e:1d:11:f9:94:50:ae:fd:17:fc:94:15:30:cb:da:1a: e3:ab:e2:cc:44:1f:8a:d1:19:f8:96:a4:1f:48:86:e2:f9:30: f4:9b:70:5b:80:8c:c7:d7:9e:00:10:34:b2:eb:35:ef:ac:88: 42:fa:08:15:89:26:7a:4d:99:5f:53:9d:78:87:3a:1a:d6:75: fb:e2:f2:56:8b:9a:24:50:3b:4c:73:45:3f:e7:15:8a:31:2f: 73:43:ac:f1:e7:ce:93:f1:97:56:e0:88:5d:98:dd:e4:70:4f: 8e:36:23:78:56:52:dd:58:38:06:ad:05:f6:58:87:5f:cb:75: bc:e5:bd:a4:59:e6:07:eb:0e:e4:06:ed:c9:4c:2d:2b:00:4c: a2:a7:73:5b:3e:38:1d:1b:4a:f3:09:fe:ee:ed:a1:da:4a:31: df:34:5e:51:98:c8:53:e3:87:08:c9:b1:cc:8a:d9:4d:f1:1e: 86:b6:4e:24:6e:d6:2f:25:95:23:42:4c:7f:5b:4d:24:41:7f: cf:ff:e9:c2:95:ef:07:ba:54:6d:ff:0d:d2:b0:f3:d3:54:2a: 31:60:78:f1:a3:b4:4d:69:39:1a:22:74:5a:96:49:44:8b:83: 75:bf:1f:e9:95:f0:68:45:7e:e4:e1:20:61:54:50:3f:ab:83: 19:0e:b1:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0uXc8dgKbSmS6ay5pY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MTQ3MmU1MjA0N2I1Zjc3NTNlZjE1MjZkZGEzOGVkNDI4 YmZlNDcwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDI1YzhjYzU0ZmQ3ZGVhNDEzNWM5NWJkNGFkZGZkMmNhMGM0Y2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRksajC5gjh+v1Zq6XhFOq/zEhhy t2kR/mdnKsIJhc15aG4FCFMBB3O9bk8vNk+k/BDFIkYxduVqAWp87Ko+EzoHbxW7 4kY15gU0EoM85wjUYr8iDwmiyrYjZ3aT+X2rQZHbdZxFRIzN2JXFzyznWVQD4fNG 5q3jq5aDntxAo4T4UvdVP3JGom3Z73rcKZak4M+DzTOGsGc1Ts0sqFBhW35lsoTb mc8l6OcEv+QXQ0CR2T7vvILqYABg7UJyiSvPQXAnl/dag8/3ep7x0MzzumAefY3n Ob0AyN+Bs6dpdbZ1FtykhOazx5mh7E/SZwsOh7U2icT2P764NX+AzvPUvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBAlyMxU/X3qQTXJW9St39LKDEzCMB8GA1UdIwQY MBaAFAkUcuUgR7X3dT7xUm3aOO1Ci/5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEt YTY1YjlmNjA3ZTNlLzEvRUNYSXpGVDlmZXBCTmNsYjFLM2Ywc29NVE1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mYzM1OTEtM2Q3OC00ZDliLTk0ZWEtYTY1YjlmNjA3ZTNl LzEvQ1JSeTVTQkh0ZmQxUHZGU2JkbzQ3VUtMX2tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuaY0AwQA uaY3MA0GCSqGSIb3DQEBCwUAA4IBAQC6lA4dEfmUUK79F/yUFTDL2hrjq+LMRB+K 0Rn4lqQfSIbi+TD0m3BbgIzH154AEDSy6zXvrIhC+ggViSZ6TZlfU514hzoa1nX7 4vJWi5okUDtMc0U/5xWKMS9zQ6zx586T8ZdW4IhdmN3kcE+ONiN4VlLdWDgGrQX2 WIdfy3W85b2kWeYH6w7kBu3JTC0rAEyip3NbPjgdG0rzCf7u7aHaSjHfNF5RmMhT 44cIybHMitlN8R6Gtk4kbtYvJZUjQkx/W00kQX/P/+nCle8HulRt/w3SsPPTVCox YHjxo7RNaTkaInRalklEi4N1vx/plfBoRX7k4SBhVFA/q4MZDrGb -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:35 2026 by rpki-client