This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa File: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (raw, json) Hash identifier: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc= Subject key identifier: 11:CC:B7:08:54:A7:53:03:8A:86:68:63:2A:4E:AB:F6:86:66:AE:05 Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Certificate serial: 019B7C80058E0854A3BEC06F4AFA437567A8 Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197305 IP address blocks: 46.243.16.0/24 maxlen: 24 46.243.17.0/24 maxlen: 24 46.243.18.0/24 maxlen: 24 46.243.19.0/24 maxlen: 24 46.243.20.0/24 maxlen: 24 46.243.21.0/24 maxlen: 24 46.243.22.0/24 maxlen: 24 46.243.23.0/24 maxlen: 24 2a03:6dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:05:8e:08:54:a3:be:c0:6f:4a:fa:43:75:67:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11ccb70854a753038a8668632a4eabf68666ae05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:73:89:36:ef:f2:d5:6d:8a:f0:8a:87:68: 20:16:cb:d1:b1:90:97:28:29:40:13:c9:1c:3b:13: ee:8a:1a:06:69:c6:e0:fb:e3:e9:3c:d3:aa:fe:6c: c2:e3:9d:c3:63:23:35:70:fe:ce:03:98:92:93:40: 01:19:0b:85:e9:f7:f0:3f:e0:e8:c6:de:af:95:fa: 90:7e:23:dd:53:e2:9d:7f:8e:5b:79:69:d6:ef:cf: 7d:a5:bc:cd:4b:e1:38:9f:2d:6a:35:0b:28:1b:95: bc:df:3c:d7:c2:e1:44:ad:95:ec:4a:d2:22:28:b5: 28:28:9d:0c:17:d0:71:b0:c6:2f:df:c9:f8:35:ed: ad:c4:e2:3b:97:01:8b:c3:0e:96:23:f0:85:64:bb: d0:32:d5:f5:bf:db:ea:14:d2:cc:1c:28:ae:87:2d: 93:ff:92:72:26:ad:8a:1d:76:63:62:ef:6f:b9:f3: 03:d0:80:99:da:ee:0e:f2:e3:b5:74:b7:9e:6f:f8: 17:67:d4:1e:ea:39:5d:c0:74:29:b8:82:64:a2:93: b7:86:1d:aa:fb:f8:92:9f:14:b3:01:66:ca:16:fc: 5f:02:c4:3e:76:49:4b:e4:42:80:93:a5:21:e9:b9: 00:72:ab:65:cb:a0:a5:5c:f5:84:66:91:51:ef:a9: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CC:B7:08:54:A7:53:03:8A:86:68:63:2A:4E:AB:F6:86:66:AE:05 X509v3 Authority Key Identifier: keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.16.0/21 IPv6: 2a03:6dc0::/32 Signature Algorithm: sha256WithRSAEncryption 4f:b0:ab:1c:87:42:f6:47:a4:46:54:c3:5e:cd:c5:6c:10:e7: 71:d9:f0:01:60:38:b2:7c:07:8f:86:11:30:ef:8a:a0:f0:49: fc:a0:da:a6:e8:3b:56:1f:cc:14:7b:f8:c6:ca:6e:1e:6c:50: f9:f4:d1:01:d8:f1:86:e1:a5:14:82:4b:c9:e5:50:5e:37:19: 77:aa:13:45:a0:0b:cc:30:bb:67:a9:c8:29:88:49:52:05:08: 20:eb:89:4c:10:c9:14:7d:1f:c9:01:78:2d:99:6f:46:2e:44: cf:d9:fd:0c:34:49:78:f6:dd:89:c9:24:68:b2:47:78:88:96: ed:8b:6c:e9:c6:0a:9e:d8:70:24:de:12:bd:f3:f9:c9:7f:53: 27:3e:a4:e4:6c:b4:d1:01:d2:44:bd:6a:7e:3f:0b:2b:a6:1e: 90:66:97:4f:ba:0d:62:e7:15:3d:82:73:c4:4e:ba:ef:d5:e1: ad:6c:80:d3:41:fa:cf:df:b6:24:65:1e:ad:fc:3b:1f:e8:71: 70:c7:fa:c5:1d:ee:48:e7:9a:d0:d4:a7:4f:77:6e:e8:c5:7a: 95:01:d9:00:69:0a:8f:eb:03:be:37:7c:9c:e0:e5:4f:5d:d6: 03:2b:7a:f7:af:0e:29:29:9b:57:24:5c:51:66:67:32:dc:21: 88:85:d6:21 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gAWOCFSjvsBvSvpDdWeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi Y2UxN2YwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWNjYjcwODU0YTc1MzAzOGE4NjY4NjMyYTRlYWJmNjg2NjZhZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo9ziTbv8tVtivCKh2ggFsvRsZCX KClAE8kcOxPuihoGacbg++PpPNOq/mzC453DYyM1cP7OA5iSk0ABGQuF6ffwP+Do xt6vlfqQfiPdU+Kdf45beWnW7899pbzNS+E4ny1qNQsoG5W83zzXwuFErZXsStIi KLUoKJ0MF9BxsMYv38n4Ne2txOI7lwGLww6WI/CFZLvQMtX1v9vqFNLMHCiuhy2T /5JyJq2KHXZjYu9vufMD0ICZ2u4O8uO1dLeeb/gXZ9Qe6jldwHQpuIJkopO3hh2q +/iSnxSzAWbKFvxfAsQ+dklL5EKAk6Uh6bkAcqtly6ClXPWEZpFR76kQywIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBHMtwhUp1MDioZoYypOq/aGZq4FMB8GA1UdIwQY MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt NDVjYWE2ZWY2NzAwLzEvRWN5M0NGU25Vd09LaG1oaktrNnI5b1ptcmdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLvMQMA0E AgACMAcDBQAqA23AMA0GCSqGSIb3DQEBCwUAA4IBAQBPsKsch0L2R6RGVMNezcVs EOdx2fABYDiyfAePhhEw74qg8En8oNqm6DtWH8wUe/jGym4ebFD59NEB2PGG4aUU gkvJ5VBeNxl3qhNFoAvMMLtnqcgpiElSBQgg64lMEMkUfR/JAXgtmW9GLkTP2f0M NEl49t2JySRoskd4iJbti2zpxgqe2HAk3hK98/nJf1MnPqTkbLTRAdJEvWp+Pwsr ph6QZpdPug1i5xU9gnPETrrv1eGtbIDTQfrP37YkZR6t/Dsf6HFwx/rFHe5I55rQ 1KdPd27oxXqVAdkAaQqP6wO+N3yc4OVPXdYDK3r3rw4pKZtXJFxRZmcy3CGIhdYh -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:36 2026 by rpki-client