This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa File: 1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa (raw, json) Hash identifier: cpDfMfPiZXy/W2RKpZ3tOoiYzzn5p48oWWpMJPOqaF8= Subject key identifier: D5:E7:10:10:C9:F8:9D:2C:C6:CB:8A:0E:6D:E5:E0:4F:B7:BA:FC:24 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39D3D7D45DD34DE7B6D67EA21E8A9 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa Signing time: Thu 01 Jan 2026 22:17:58 +0000 ROA not before: Thu 01 Jan 2026 22:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202391 IP address blocks: 79.132.204.0/24 maxlen: 24 79.132.209.0/24 maxlen: 24 185.82.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9d:3d:7d:45:dd:34:de:7b:6d:67:ea:21:e8:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5e71010c9f89d2cc6cb8a0e6de5e04fb7bafc24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e9:7e:65:fb:9c:e2:bf:b7:c4:da:5c:c7:66: f4:b3:b5:7d:b0:44:c3:fa:54:8c:6c:8d:4a:ad:8c: c5:53:bb:ab:c4:99:cf:ee:b4:3c:57:0d:6d:89:f4: 69:23:7b:8c:1a:be:a3:c0:6b:3a:d2:49:d5:32:07: 78:d2:85:7a:53:c4:c8:14:eb:25:2a:c9:e1:4f:c4: 3d:44:8e:29:f8:1d:76:86:93:ba:90:2b:0e:26:be: a4:be:68:66:04:ff:d3:eb:fc:db:b6:b9:db:60:57: 7a:98:b8:bc:64:1d:ea:d2:c0:c5:8c:f3:da:f1:6d: 03:f1:9a:03:cf:35:70:f5:26:89:ee:75:cf:23:bb: 18:59:44:24:73:a1:74:6c:1e:3a:ac:73:48:af:c8: 2d:70:6c:31:d2:51:93:07:4a:3c:44:c3:f1:5b:70: 5b:aa:5c:31:d2:19:f9:b3:bc:85:8b:74:c0:3a:a8: 87:c7:ec:f9:d7:fc:4a:a7:bf:26:9f:fd:69:7a:a1: 00:f3:a8:86:58:53:f2:1b:9e:bc:5d:50:65:03:d7: f1:ba:3b:36:2a:18:6e:79:f0:91:00:58:5e:97:5b: 12:a1:aa:c1:eb:2c:2c:9b:3a:33:05:c5:a0:7b:d3: bf:a2:be:6a:ed:1d:21:93:fa:72:ee:e8:43:27:25: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:10:10:C9:F8:9D:2C:C6:CB:8A:0E:6D:E5:E0:4F:B7:BA:FC:24 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/1ecQEMn4nSzGy4oObeXgT7e6_CQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.204.0/24 79.132.209.0/24 185.82.166.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:96:6a:63:96:c6:4e:0b:57:cb:fb:0f:06:b2:c8:19:98:c1: 20:eb:9b:b8:cf:15:a9:ff:1b:c8:cd:26:89:35:ac:ce:67:29: e2:85:9a:28:94:24:d6:d4:b3:c4:4f:68:33:85:f8:69:9d:9c: 3d:a8:9a:5b:ac:77:69:b8:e1:03:06:a1:72:15:95:16:a5:93: 78:d5:16:cb:a8:d8:9e:d5:f2:c6:2f:5a:aa:64:fc:a7:2b:9d: fe:87:7c:da:a6:4e:21:f5:89:91:98:ae:e2:0e:49:e2:a1:7a: ea:c8:8e:03:7f:4b:82:0d:95:35:9c:57:7e:f2:5b:c3:f2:38: 70:c4:a1:c7:50:c2:6a:b0:15:ed:eb:67:6c:66:ae:d2:39:13: 4c:da:76:12:c0:7d:28:db:9a:ee:53:db:90:fa:11:51:c3:73: cc:ff:6d:d3:9b:7a:fa:f2:cb:2b:18:e4:67:2b:d0:26:39:d7: ac:90:9d:5b:57:94:96:20:b6:72:2c:52:c6:dd:60:77:ac:48: 3a:73:1b:da:8f:65:02:ad:aa:77:a0:43:3c:83:52:63:90:88: c1:64:24:a9:f3:70:5d:75:67:c2:59:01:7d:8a:5d:cf:1c:3b: ca:f5:d5:e3:d6:90:9d:06:05:dd:4a:8b:30:f9:4b:26:42:7f: 48:71:13:53 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7o509fUXdNN57bWfqIeipMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWU3MTAxMGM5Zjg5ZDJjYzZjYjhhMGU2ZGU1ZTA0ZmI3YmFmYzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnel+Zfuc4r+3xNpcx2b0s7V9sETD +lSMbI1KrYzFU7urxJnP7rQ8Vw1tifRpI3uMGr6jwGs60knVMgd40oV6U8TIFOsl KsnhT8Q9RI4p+B12hpO6kCsOJr6kvmhmBP/T6/zbtrnbYFd6mLi8ZB3q0sDFjPPa 8W0D8ZoDzzVw9SaJ7nXPI7sYWUQkc6F0bB46rHNIr8gtcGwx0lGTB0o8RMPxW3Bb qlwx0hn5s7yFi3TAOqiHx+z51/xKp78mn/1peqEA86iGWFPyG568XVBlA9fxujs2 KhhuefCRAFhel1sSoarB6ywsmzozBcWge9O/or5q7R0hk/py7uhDJyVmUQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNXnEBDJ+J0sxsuKDm3l4E+3uvwkMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvMWVjUUVNbjRuU3pHeTRvT2JlWGdUN2U2X0NRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT4TMAwQA T4TRAwQBuVKmMA0GCSqGSIb3DQEBCwUAA4IBAQBLlmpjlsZOC1fL+w8GssgZmMEg 65u4zxWp/xvIzSaJNazOZynihZoolCTW1LPET2gzhfhpnZw9qJpbrHdpuOEDBqFy FZUWpZN41RbLqNie1fLGL1qqZPynK53+h3zapk4h9YmRmK7iDknioXrqyI4Df0uC DZU1nFd+8lvD8jhwxKHHUMJqsBXt62dsZq7SORNM2nYSwH0o25ruU9uQ+hFRw3PM /23Tm3r68ssrGORnK9AmOdeskJ1bV5SWILZyLFLG3WB3rEg6cxvaj2UCrap3oEM8 g1JjkIjBZCSp83BddWfCWQF9il3PHDvK9dXj1pCdBgXdSosw+UsmQn9IcRNT -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:54 2026 by rpki-client