This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/ECrRKyyp-LiX1od5u6h9jQbQyd8.roa File: ECrRKyyp-LiX1od5u6h9jQbQyd8.roa (raw, json) Hash identifier: G+0jVdYZJlndG8ZNfCVw49ceooT9pB50RNi/efo30+s= Subject key identifier: 10:2A:D1:2B:2C:A9:F8:B8:97:D6:87:79:BB:A8:7D:8D:06:D0:C9:DF Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb Certificate serial: 019B7F15382C2FDC6E755C11B691DE8B7EF9 Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/ECrRKyyp-LiX1od5u6h9jQbQyd8.roa Signing time: Fri 02 Jan 2026 14:20:55 +0000 ROA not before: Fri 02 Jan 2026 14:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199629 IP address blocks: 185.10.144.0/22 maxlen: 24 2a03:3a40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:38:2c:2f:dc:6e:75:5c:11:b6:91:de:8b:7e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb Validity Not Before: Jan 2 14:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=102ad12b2ca9f8b897d68779bba87d8d06d0c9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:29:29:c8:ea:62:4e:de:a6:69:bb:b7:57: 20:d1:c8:a8:21:9a:3c:19:40:11:49:ea:0e:8e:1f: f9:08:d7:15:fd:eb:82:13:5c:44:6f:5c:a5:72:48: c4:fc:99:d3:fa:cb:80:84:f6:51:51:6f:8f:8b:c3: 5a:f8:ce:de:e1:cf:a5:a4:b2:45:f0:eb:be:0d:38: 93:72:bf:73:88:b0:d5:d2:58:a3:8b:73:c3:6f:dc: 49:16:ad:08:ea:91:67:d6:e6:4a:29:cd:53:9e:fb: a9:e4:b7:4f:df:47:48:97:75:b8:17:a0:0a:ce:f3: 67:36:4e:9d:ac:a7:d8:75:91:81:c5:75:d9:80:2c: ae:b9:80:66:c1:21:a3:ea:cb:7c:8e:58:32:b6:56: 04:1c:40:15:25:6e:12:95:ee:d0:43:86:d4:54:5e: 87:93:db:47:3b:b6:7c:34:ba:59:62:1b:13:98:a9: 16:b0:17:6c:25:56:ce:68:48:7a:f9:84:5b:5b:53: 51:ac:f7:65:84:b9:e9:a2:b3:53:e1:c1:36:a0:1c: 48:35:31:3c:45:c3:01:e1:3f:f7:41:da:0d:a9:59: fb:27:0e:99:fc:83:a5:70:9d:1d:c4:a0:ad:ae:f4: 33:f3:bd:cc:7d:47:1d:04:ff:0a:9b:c3:a5:39:4f: 13:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:2A:D1:2B:2C:A9:F8:B8:97:D6:87:79:BB:A8:7D:8D:06:D0:C9:DF X509v3 Authority Key Identifier: keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/ECrRKyyp-LiX1od5u6h9jQbQyd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.10.144.0/22 IPv6: 2a03:3a40::/32 Signature Algorithm: sha256WithRSAEncryption 60:83:60:20:6a:f5:79:e8:69:f6:71:b3:fd:a6:f1:4c:0b:3b: e0:fe:13:51:12:4c:26:c8:c0:33:7f:0d:c7:d7:33:30:98:a3: b0:de:9a:a9:e0:e7:27:5a:a9:29:fc:23:b9:3b:33:6f:69:18: 26:32:ec:5a:a6:c6:e3:e9:42:1b:c9:39:54:9f:03:7b:1d:39: 00:c3:5c:ed:46:05:5f:39:0c:23:66:c5:ae:4e:34:5a:1c:83: 6f:5f:05:62:40:3a:37:07:18:c3:f9:05:c3:ed:c8:e4:4c:20: f9:83:3e:01:26:bf:c5:75:51:8f:0c:3f:5e:aa:c7:d6:56:48: e2:f2:ee:7f:49:46:e1:fd:6b:88:0c:cd:ea:bd:fb:61:52:7c: fb:cf:80:af:f9:45:75:1e:e4:f1:1e:e9:4e:81:f4:d1:0b:97: c9:93:86:93:0d:74:b9:f3:4b:01:ca:f8:43:f0:a2:8a:46:83: 25:7d:eb:2f:7a:10:8a:52:88:aa:29:c7:9f:54:a1:57:35:ab: 4e:d0:e1:0e:07:20:20:d2:2b:b3:41:6d:4b:f9:db:db:33:32: 6e:9b:42:7d:7b:54:eb:7d:df:89:4c:e6:9d:73:6a:7c:1c:14: c2:73:2d:f3:8f:d1:46:fc:a9:7d:20:ab:dd:ff:1a:cb:62:de: 8a:6f:69:19 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FTgsL9xudVwRtpHei375MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODBkMTY1NjliYjI0YTMyOGUyN2I0N2Y3ZDc1MTY1OTcy NWRlZmIwHhcNMjYwMTAyMTQyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDJhZDEyYjJjYTlmOGI4OTdkNjg3NzliYmE4N2Q4ZDA2ZDBjOWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsREpKcjqYk7epmm7t1cg0cioIZo8 GUARSeoOjh/5CNcV/euCE1xEb1ylckjE/JnT+suAhPZRUW+Pi8Na+M7e4c+lpLJF 8Ou+DTiTcr9ziLDV0liji3PDb9xJFq0I6pFn1uZKKc1Tnvup5LdP30dIl3W4F6AK zvNnNk6drKfYdZGBxXXZgCyuuYBmwSGj6st8jlgytlYEHEAVJW4Sle7QQ4bUVF6H k9tHO7Z8NLpZYhsTmKkWsBdsJVbOaEh6+YRbW1NRrPdlhLnporNT4cE2oBxINTE8 RcMB4T/3QdoNqVn7Jw6Z/IOlcJ0dxKCtrvQz873MfUcdBP8Km8OlOU8TMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBAq0Sssqfi4l9aHebuofY0G0MnfMB8GA1UdIwQY MBaAFHWA0WVpuySjKOJ7R/fXUWWXJd77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYt NzlmYmQzODVhNTUwLzEvRUNyUkt5eXAtTGlYMW9kNXU2aDlqUWJReWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYtNzlmYmQzODVhNTUw LzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQqQMA0E AgACMAcDBQAqAzpAMA0GCSqGSIb3DQEBCwUAA4IBAQBgg2AgavV56Gn2cbP9pvFM Czvg/hNREkwmyMAzfw3H1zMwmKOw3pqp4OcnWqkp/CO5OzNvaRgmMuxapsbj6UIb yTlUnwN7HTkAw1ztRgVfOQwjZsWuTjRaHINvXwViQDo3BxjD+QXD7cjkTCD5gz4B Jr/FdVGPDD9eqsfWVkji8u5/SUbh/WuIDM3qvfthUnz7z4Cv+UV1HuTxHulOgfTR C5fJk4aTDXS580sByvhD8KKKRoMlfesvehCKUoiqKcefVKFXNatO0OEOByAg0iuz QW1L+dvbMzJum0J9e1Trfd+JTOadc2p8HBTCcy3zj9FG/Kl9IKvd/xrLYt6Kb2kZ -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:34 2026 by rpki-client