This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/ecvQXZ3AprCLKejnaTOVVFlxHok.roa File: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (raw, json) Hash identifier: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA= Subject key identifier: 79:CB:D0:5D:9D:C0:A6:B0:8B:29:E8:E7:69:33:95:54:59:71:1E:89 Certificate issuer: /CN=07d44a52778aa65f736e72436003f6654f268318 Certificate serial: 019B797E9454942E5F7205F96FDA0B0D55C1 Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/ecvQXZ3AprCLKejnaTOVVFlxHok.roa Signing time: Thu 01 Jan 2026 12:18:17 +0000 ROA not before: Thu 01 Jan 2026 12:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 193.224.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:94:54:94:2e:5f:72:05:f9:6f:da:0b:0d:55:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d44a52778aa65f736e72436003f6654f268318 Validity Not Before: Jan 1 12:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79cbd05d9dc0a6b08b29e8e76933955459711e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:f0:66:e4:1b:40:fc:00:d2:dc:f5:2d:3f: 35:d4:3b:3b:df:b3:30:22:1e:71:1e:d5:5c:58:a3: 31:05:49:67:76:c4:95:a6:2e:7e:be:06:96:70:92: 7d:46:bc:b7:a9:26:44:80:62:3c:f2:b8:5f:79:4f: aa:c4:be:bf:3b:d5:71:6a:82:1d:99:c2:70:f4:1e: c6:9d:5d:df:28:9a:c4:2c:c5:5c:dc:26:78:3d:46: ab:9b:b6:c1:df:e8:90:db:7c:5e:fe:aa:6b:f0:98: b2:9d:4b:e4:2e:01:da:b0:b7:d3:ad:33:2b:06:af: c3:5b:19:58:8c:f1:63:61:b4:78:b2:fd:c3:ae:fb: 9d:a4:ef:65:96:01:c6:92:29:ea:2d:a1:05:c1:47: a9:ee:41:5b:78:37:cc:bd:14:c4:b0:90:42:c5:a1: b4:53:85:80:a4:cf:46:37:1c:f0:9d:5d:fc:50:9e: 11:99:d4:61:b2:37:f1:7c:d8:b7:58:db:ab:d1:29: 45:17:57:f5:77:c7:d7:3b:41:67:54:82:ad:06:e4: cd:7c:86:87:a0:db:0f:6d:65:e1:f7:5c:3b:40:1b: 4c:b3:bb:4a:d5:e6:e1:23:44:34:df:2b:1d:c2:89: 27:7d:5b:dc:4a:19:57:b4:46:e3:14:1c:fc:95:b9: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:D0:5D:9D:C0:A6:B0:8B:29:E8:E7:69:33:95:54:59:71:1E:89 X509v3 Authority Key Identifier: keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/ecvQXZ3AprCLKejnaTOVVFlxHok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.224.239.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:bc:2e:0f:3d:c9:ea:7c:a8:5f:72:6b:45:b7:70:aa:3e:bd: 7f:38:a2:7c:aa:6b:66:6f:45:d6:52:82:a9:93:4c:23:16:f6: 38:92:d7:ca:eb:0e:5b:c5:4c:04:76:f8:73:a2:61:85:99:3c: 17:00:b9:2e:6d:37:0c:ab:54:fb:cb:5b:43:35:00:6a:bb:46: 85:e1:a9:7e:7f:ab:0c:8d:f2:34:6b:60:45:35:8d:c4:98:08: 2e:87:dc:bd:b3:b0:b6:63:5f:4e:c3:18:d3:1b:01:28:c8:aa: ea:08:c8:c5:83:f3:38:bd:e5:4e:ef:6d:bd:50:db:5f:82:e5: e9:96:7d:fa:e0:6d:26:d1:a6:b1:f3:66:63:8d:d6:7a:e2:e1: e8:e0:e0:6a:d0:4b:e6:f2:f5:72:dc:cc:7c:cd:bc:dc:59:e1: f9:ba:47:e5:7b:a2:4c:91:cb:d6:d0:fb:59:68:eb:59:b7:b9: 1a:bb:ce:a1:5b:da:a0:fd:c8:16:7d:27:22:04:74:c3:5c:94: 77:e6:b4:fd:68:a0:71:3e:9f:06:d9:4e:4a:26:53:62:7e:30: 4c:ab:e5:54:83:30:0a:ca:af:3a:5e:21:0b:52:65:6e:e0:e8: 6a:c3:b6:c9:19:57:57:31:27:cf:dc:86:b5:60:57:6b:75:0c: a8:f9:e1:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpRUlC5fcgX5b9oLDVXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDQ0YTUyNzc4YWE2NWY3MzZlNzI0MzYwMDNmNjY1NGYy NjgzMTgwHhcNMjYwMTAxMTIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWNiZDA1ZDlkYzBhNmIwOGIyOWU4ZTc2OTMzOTU1NDU5NzExZTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/wZuQbQPwA0tz1LT811Ds737Mw Ih5xHtVcWKMxBUlndsSVpi5+vgaWcJJ9Rry3qSZEgGI88rhfeU+qxL6/O9VxaoId mcJw9B7GnV3fKJrELMVc3CZ4PUarm7bB3+iQ23xe/qpr8JiynUvkLgHasLfTrTMr Bq/DWxlYjPFjYbR4sv3DrvudpO9llgHGkinqLaEFwUep7kFbeDfMvRTEsJBCxaG0 U4WApM9GNxzwnV38UJ4RmdRhsjfxfNi3WNur0SlFF1f1d8fXO0FnVIKtBuTNfIaH oNsPbWXh91w7QBtMs7tK1ebhI0Q03ysdwoknfVvcShlXtEbjFBz8lbm1yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnL0F2dwKawiyno52kzlVRZcR6JMB8GA1UdIwQY MBaAFAfUSlJ3iqZfc25yQ2AD9mVPJoMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGIt MWQyOGE2MGUwZTMwLzEvZWN2UVhaM0FwckNMS2VqbmFUT1ZWRmx4SG9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84MTNjYmMtNGZhNC00NjQ2LWE4ZGItMWQyOGE2MGUwZTMw LzEvQjlSS1VuZUtwbDl6Ym5KRFlBUDJaVThtZ3hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweDvMA0G CSqGSIb3DQEBCwUAA4IBAQB8vC4PPcnqfKhfcmtFt3CqPr1/OKJ8qmtmb0XWUoKp k0wjFvY4ktfK6w5bxUwEdvhzomGFmTwXALkubTcMq1T7y1tDNQBqu0aF4al+f6sM jfI0a2BFNY3EmAguh9y9s7C2Y19OwxjTGwEoyKrqCMjFg/M4veVO7229UNtfguXp ln364G0m0aax82ZjjdZ64uHo4OBq0Evm8vVy3Mx8zbzcWeH5ukfle6JMkcvW0PtZ aOtZt7kau86hW9qg/cgWfSciBHTDXJR35rT9aKBxPp8G2U5KJlNifjBMq+VUgzAK yq86XiELUmVu4Ohqw7bJGVdXMSfP3Ia1YFdrdQyo+eGs -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:00 2026 by rpki-client