This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2EC-H7VkPWi86CQBdfT-ccJ70gs.roa File: 2EC-H7VkPWi86CQBdfT-ccJ70gs.roa (raw, json) Hash identifier: uRkyuU1j5BoKPUyqyJVVVXMT4xxmtGQMXPAOX+G1tgA= Subject key identifier: D8:40:BE:1F:B5:64:3D:68:BC:E8:24:01:75:F4:FE:71:C2:7B:D2:0B Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Certificate serial: 019A96FDF827E40BACBF70163E8AA1A40CED Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2EC-H7VkPWi86CQBdfT-ccJ70gs.roa Signing time: Tue 18 Nov 2025 12:43:37 +0000 ROA not before: Tue 18 Nov 2025 12:43:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212128 IP address blocks: 176.103.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:96:fd:f8:27:e4:0b:ac:bf:70:16:3e:8a:a1:a4:0c:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184 Validity Not Before: Nov 18 12:43:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d840be1fb5643d68bce8240175f4fe71c27bd20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:90:f0:ed:11:54:91:b5:12:cb:f7:57:01:ba: 3e:09:e4:37:2f:fe:cc:67:30:0f:66:bd:f0:87:a5: 78:67:bd:ba:d2:22:54:b9:97:c5:cd:91:7c:fb:90: bd:63:4d:40:b5:a0:25:ea:b0:85:c3:e5:b9:7d:9d: f6:31:1e:4e:4e:25:c3:2c:91:13:5c:59:ba:41:96: 71:3a:d0:8f:63:2c:67:c5:5d:2f:60:33:ea:10:c0: 97:65:a9:dc:ee:d3:5c:61:39:64:7a:85:35:60:78: 5f:08:d1:1a:36:62:ac:4e:94:55:f5:01:a1:fa:8e: 0d:e1:ea:05:ac:d2:11:0c:52:2c:7e:37:41:87:f8: 4d:41:c1:f2:df:c5:58:6a:51:a8:1c:a1:ad:79:7d: f1:e0:8d:e4:cb:37:ad:49:3d:4d:fa:81:91:37:5c: f0:1d:ba:cc:81:02:cc:15:a2:81:05:cb:30:5a:1f: 0c:33:0f:e4:1f:b3:72:33:99:f1:79:e3:aa:a8:53: e7:a8:0c:f6:97:b5:da:3d:0c:9a:62:94:a7:7f:4c: e8:89:9b:97:88:6e:a5:13:61:76:33:9f:66:c6:f0: ca:e6:02:6c:54:39:57:2c:79:08:cc:88:64:93:2d: c6:85:15:a6:d4:d5:1e:44:01:f7:4a:be:e7:76:52: df:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:40:BE:1F:B5:64:3D:68:BC:E8:24:01:75:F4:FE:71:C2:7B:D2:0B X509v3 Authority Key Identifier: keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/2EC-H7VkPWi86CQBdfT-ccJ70gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.83.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:97:16:a0:de:0e:ea:f0:ee:85:da:81:4d:75:e5:95:2b:b3: 05:e3:67:ad:3a:76:30:a4:1e:47:0b:48:98:ac:8d:dd:cf:c6: 54:17:d7:f2:6d:4b:23:0c:82:0f:ba:e0:29:19:c7:34:9a:29: 24:2e:39:f0:d3:67:53:9d:9b:8b:cf:2e:4a:86:58:78:27:99: 87:b0:56:d8:e8:db:6e:6d:22:95:ca:67:e9:eb:92:fe:58:36: 55:9c:0e:72:31:65:f3:7f:71:7a:25:20:87:30:fe:9b:36:67: a6:d3:d0:7e:22:d0:c7:79:c5:80:a5:63:2d:47:66:ce:1e:16: c7:b9:a8:80:b7:73:88:5c:2d:78:70:89:43:53:4c:a8:a5:26: 3a:8b:ea:f5:27:9e:e1:a0:2f:24:a1:3d:05:dd:0a:f8:e3:92: d0:98:02:43:ca:19:78:85:d6:29:23:4f:ca:61:db:4b:16:50: 67:8b:5b:e0:db:87:be:10:48:14:43:26:62:77:78:64:55:3c: 54:59:5d:d9:ae:f4:1f:32:26:c8:6e:7a:fe:ce:d3:fb:6f:5d: aa:13:bf:50:d5:f2:1a:c6:55:f4:51:bd:3c:74:52:68:b7:7d: 1d:09:b9:c7:fa:37:f3:7d:0a:2f:fa:b6:ec:55:09:8c:1e:09: 6d:29:bb:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqW/fgn5Ausv3AWPoqhpAztMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NWExZGExY2IxYzkyMGFlMmY5Yjc0ODI3MGZkZWQ4NzM3 YTkxODQwHhcNMjUxMTE4MTI0MzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkODQwYmUxZmI1NjQzZDY4YmNlODI0MDE3NWY0ZmU3MWMyN2JkMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpDw7RFUkbUSy/dXAbo+CeQ3L/7M ZzAPZr3wh6V4Z7260iJUuZfFzZF8+5C9Y01AtaAl6rCFw+W5fZ32MR5OTiXDLJET XFm6QZZxOtCPYyxnxV0vYDPqEMCXZanc7tNcYTlkeoU1YHhfCNEaNmKsTpRV9QGh +o4N4eoFrNIRDFIsfjdBh/hNQcHy38VYalGoHKGteX3x4I3kyzetST1N+oGRN1zw HbrMgQLMFaKBBcswWh8MMw/kH7NyM5nxeeOqqFPnqAz2l7XaPQyaYpSnf0zoiZuX iG6lE2F2M59mxvDK5gJsVDlXLHkIzIhkky3GhRWm1NUeRAH3Sr7ndlLfgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNhAvh+1ZD1ovOgkAXX0/nHCe9ILMB8GA1UdIwQY MBaAFMZaHaHLHJIK4vm3SCcP3thzepGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAt MzZiYWM4ZDkxZTJlLzEvMkVDLUg3VmtQV2k4NkNRQmRmVC1jY0o3MGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80ZjU0YjQtMDA5Zi00NmNlLTlhYzAtMzZiYWM4ZDkxZTJl LzEveGxvZG9jc2NrZ3JpLWJkSUp3X2UySE42a1lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGdTMA0G CSqGSIb3DQEBCwUAA4IBAQBNlxag3g7q8O6F2oFNdeWVK7MF42etOnYwpB5HC0iY rI3dz8ZUF9fybUsjDIIPuuApGcc0mikkLjnw02dTnZuLzy5Khlh4J5mHsFbY6Ntu bSKVymfp65L+WDZVnA5yMWXzf3F6JSCHMP6bNmem09B+ItDHecWApWMtR2bOHhbH uaiAt3OIXC14cIlDU0yopSY6i+r1J57hoC8koT0F3Qr445LQmAJDyhl4hdYpI0/K YdtLFlBni1vg24e+EEgUQyZid3hkVTxUWV3ZrvQfMibIbnr+ztP7b12qE79Q1fIa xlX0Ub08dFJot30dCbnH+jfzfQov+rbsVQmMHgltKbsk -----END CERTIFICATE-----Generated at Sat Dec 6 16:18:36 2025 by rpki-client