This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ETcdD7ybI7Z6EpSh3nGxU9xmARQ.roa File: ETcdD7ybI7Z6EpSh3nGxU9xmARQ.roa (raw, json) Hash identifier: 9Pt1kuCP3lCt4X+gLX+aV7SJEa35XKCD6mWV457+51E= Subject key identifier: 11:37:1D:0F:BC:9B:23:B6:7A:12:94:A1:DE:71:B1:53:DC:66:01:14 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABD55B19B924274950EC309519464 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ETcdD7ybI7Z6EpSh3nGxU9xmARQ.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47981 IP address blocks: 194.225.184.0/21 maxlen: 21 194.225.184.0/22 maxlen: 22 194.225.184.0/23 maxlen: 23 194.225.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:bd:55:b1:9b:92:42:74:95:0e:c3:09:51:94:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11371d0fbc9b23b67a1294a1de71b153dc660114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:18:b0:e0:34:eb:ab:00:1d:ec:50:d4:06:2a: ac:07:10:ea:f9:2c:cc:71:f6:f7:8c:98:95:49:35: 72:95:67:c2:3f:64:4b:d9:a0:b0:e3:8b:a5:cf:da: 7f:6a:ca:3d:86:57:eb:68:4a:fe:02:6e:1c:50:11: 1f:76:d6:55:a3:d5:b5:f0:50:f6:d4:72:c3:6f:8a: aa:01:9b:0a:7f:3a:07:24:74:b7:9e:85:0f:d0:f1: e8:fd:ee:e5:2f:3a:0b:4b:84:cf:c2:d4:b6:00:41: f2:ee:3a:be:75:a0:aa:60:55:38:68:41:59:7a:34: 49:8b:60:a1:5e:a1:0c:98:c0:06:f2:4b:a8:4d:00: 97:84:64:0f:b7:fb:91:4a:57:43:1a:b2:9e:cc:48: 29:a4:88:48:cc:65:08:f0:a7:56:bc:62:e1:29:99: c3:f5:ea:17:1a:1f:55:18:5b:39:c1:94:74:55:f8: 63:df:64:cb:29:93:6f:bc:7a:0f:93:ef:49:2b:bd: c5:0a:bf:7a:7e:d7:04:4e:19:c3:76:24:60:a8:9e: 32:b3:33:a5:3d:0b:73:2e:97:9c:6f:f8:ed:74:63: 3b:8b:06:9f:2a:67:9a:8e:24:9d:7b:fe:e0:3e:fd: 42:7b:c8:31:33:05:25:1f:41:e8:1e:06:84:98:b8: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:37:1D:0F:BC:9B:23:B6:7A:12:94:A1:DE:71:B1:53:DC:66:01:14 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ETcdD7ybI7Z6EpSh3nGxU9xmARQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.184.0/21 Signature Algorithm: sha256WithRSAEncryption af:55:dd:61:bb:2b:ca:38:54:ef:44:5b:9a:c4:77:67:25:a8: 9e:cb:82:dc:47:06:c2:0e:24:d4:af:ab:95:57:ac:cb:4c:18: 90:86:24:7f:fd:04:0b:a9:e4:05:b0:fc:d4:d5:7c:f0:6d:ba: c7:60:ed:89:a3:43:d8:66:48:88:99:90:b5:87:15:6d:d2:54: 15:98:b4:16:a1:34:4c:0f:db:3d:b3:1d:bd:6f:22:37:cd:62: 28:ba:3e:a5:f9:1b:0c:55:1d:9d:8c:c2:37:7d:21:f1:4b:44: dd:f2:14:b8:f3:10:08:b7:57:0f:1e:f0:90:96:a5:f8:c9:30: 08:0e:34:0a:1e:c8:6e:dd:5c:d6:ac:b0:2d:c9:b3:53:00:3e: 27:8a:12:b3:8d:bd:77:a5:19:1d:a8:da:20:b6:1b:97:e4:5a: 06:1d:09:72:ee:0e:23:ab:d3:f2:57:16:b3:91:d6:94:d1:7f: e7:90:10:d5:19:13:4a:30:0e:99:78:31:39:d4:40:b4:1e:7b: 4d:ab:66:ae:13:eb:c6:f0:96:02:f2:85:9a:55:54:a0:c3:b8: 83:36:90:99:20:80:d7:16:1f:cd:6d:89:d0:f9:a3:e9:50:a2: 61:0f:93:a4:ee:ee:ce:6e:6a:56:99:53:d1:8b:20:a4:01:d3: 03:a1:d5:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yr1VsZuSQnSVDsMJUZRkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTM3MWQwZmJjOWIyM2I2N2ExMjk0YTFkZTcxYjE1M2RjNjYwMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Riw4DTrqwAd7FDUBiqsBxDq+SzM cfb3jJiVSTVylWfCP2RL2aCw44ulz9p/aso9hlfraEr+Am4cUBEfdtZVo9W18FD2 1HLDb4qqAZsKfzoHJHS3noUP0PHo/e7lLzoLS4TPwtS2AEHy7jq+daCqYFU4aEFZ ejRJi2ChXqEMmMAG8kuoTQCXhGQPt/uRSldDGrKezEgppIhIzGUI8KdWvGLhKZnD 9eoXGh9VGFs5wZR0Vfhj32TLKZNvvHoPk+9JK73FCr96ftcEThnDdiRgqJ4yszOl PQtzLpecb/jtdGM7iwafKmeajiSde/7gPv1Ce8gxMwUlH0HoHgaEmLinywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBE3HQ+8myO2ehKUod5xsVPcZgEUMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvRVRjZEQ3eWJJN1o2RXBTaDNuR3hVOXhtQVJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwuG4MA0G CSqGSIb3DQEBCwUAA4IBAQCvVd1huyvKOFTvRFuaxHdnJaiey4LcRwbCDiTUr6uV V6zLTBiQhiR//QQLqeQFsPzU1XzwbbrHYO2Jo0PYZkiImZC1hxVt0lQVmLQWoTRM D9s9sx29byI3zWIouj6l+RsMVR2djMI3fSHxS0Td8hS48xAIt1cPHvCQlqX4yTAI DjQKHshu3VzWrLAtybNTAD4nihKzjb13pRkdqNogthuX5FoGHQly7g4jq9PyVxaz kdaU0X/nkBDVGRNKMA6ZeDE51EC0HntNq2auE+vG8JYC8oWaVVSgw7iDNpCZIIDX Fh/NbYnQ+aPpUKJhD5Ok7u7ObmpWmVPRiyCkAdMDodXs -----END CERTIFICATE-----Generated at Mon Jan 26 01:42:37 2026 by rpki-client