This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/6e697LuZ9jS9gA2F89nGR0cFK-I.roa File: 6e697LuZ9jS9gA2F89nGR0cFK-I.roa (raw, json) Hash identifier: ci7j6TFk0kfg5Gm37B2a5yzK2NylCLyZsggMovKNNBs= Subject key identifier: E9:EE:BD:EC:BB:99:F6:34:BD:80:0D:85:F3:D9:C6:47:47:05:2B:E2 Certificate issuer: /CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Certificate serial: 019B7759403D0D1DA59B52F49958F1A9E328 Authority key identifier: 2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/6e697LuZ9jS9gA2F89nGR0cFK-I.roa Signing time: Thu 01 Jan 2026 02:18:16 +0000 ROA not before: Thu 01 Jan 2026 02:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136787 IP address blocks: 185.212.160.0/24 maxlen: 24 185.212.161.0/24 maxlen: 24 185.212.162.0/24 maxlen: 24 185.212.163.0/24 maxlen: 24 185.245.24.0/24 maxlen: 24 185.245.25.0/24 maxlen: 24 185.245.26.0/24 maxlen: 24 185.245.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.mft rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:40:3d:0d:1d:a5:9b:52:f4:99:58:f1:a9:e3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2abcc5c664a4a82305892a8c433e94ffe32dadb7 Validity Not Before: Jan 1 02:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9eebdecbb99f634bd800d85f3d9c64747052be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a5:bc:e3:cf:da:9d:96:98:c6:df:c5:18:a4: 0e:5b:99:88:84:2e:5b:3f:8c:43:89:49:6f:4b:85: 6e:11:b7:2c:5e:cf:55:13:96:fc:e8:74:dc:f2:c3: a0:c0:aa:2b:b0:56:18:52:fd:5b:32:97:41:6c:85: b8:6d:35:2c:e0:76:67:a9:6a:ff:7d:54:5e:d8:01: c5:29:00:f2:46:b2:d7:d7:dc:a8:d5:ba:25:68:d5: 0c:d2:88:bf:88:c5:7b:a2:f6:fb:5a:2b:c3:3f:de: 63:f4:3c:c1:ed:7a:f0:40:da:ee:cf:fe:47:db:f1: fd:32:77:f5:6d:24:76:8a:ac:33:2f:e8:4a:bf:50: 73:f2:73:9f:5d:0c:8d:f3:3d:25:a6:2e:e9:8d:96: 30:2f:a9:54:fe:e3:53:49:e6:cd:56:fe:27:22:fc: c2:cf:a9:b0:94:99:ce:4d:e1:30:7a:72:06:3a:7b: eb:d5:6c:d7:75:de:76:b0:4e:5d:a4:1a:21:9a:39: 74:90:18:30:32:7d:62:47:63:17:a0:49:82:a2:78: 8e:68:ca:e6:8e:d7:ae:d5:92:85:98:24:08:7e:2c: 83:f5:a1:29:20:ca:d7:93:01:80:3d:eb:ac:3a:f9: 73:93:60:00:d7:48:fb:14:f3:e0:3a:62:7b:e1:18: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EE:BD:EC:BB:99:F6:34:BD:80:0D:85:F3:D9:C6:47:47:05:2B:E2 X509v3 Authority Key Identifier: keyid:2A:BC:C5:C6:64:A4:A8:23:05:89:2A:8C:43:3E:94:FF:E3:2D:AD:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/6e697LuZ9jS9gA2F89nGR0cFK-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dc7345-75cb-4420-a3f0-65fb10a06e89/1/KrzFxmSkqCMFiSqMQz6U_-Mtrbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.160.0/22 185.245.24.0/22 Signature Algorithm: sha256WithRSAEncryption 09:81:f1:40:73:20:ec:31:87:56:cd:1e:23:80:26:24:bc:f3: b5:09:87:03:2f:de:b1:d4:4f:50:d6:87:4c:9b:4e:e5:69:b5: c6:29:4b:66:80:2f:8c:81:a6:fe:c9:92:eb:b4:e8:29:5f:e9: e7:31:c5:22:6d:34:d1:7b:e4:39:ec:13:8e:d0:8c:a6:24:5f: f7:38:10:75:c5:2b:cf:24:a2:79:33:5b:73:e8:16:b0:46:d7: eb:e2:d1:05:7e:7d:de:e8:2c:fa:02:f3:87:87:fd:9d:11:26: d5:c0:0e:27:60:a8:4a:80:60:5b:e9:de:d2:72:7e:93:de:b0: 72:5f:93:9a:63:8c:d7:8b:c7:ac:0e:f0:e3:50:29:b1:cb:5f: c0:cc:99:0e:fd:9d:68:8e:04:bc:84:08:27:2d:10:e2:f2:71: 7d:a6:5f:b8:d0:cc:7d:69:a3:ce:ac:14:63:f7:d3:4b:a3:3e: 66:2d:0f:cc:00:bb:eb:93:b0:77:36:29:87:4a:bf:78:9c:db: ed:56:97:be:3b:12:c2:0a:e0:a8:06:a2:0e:50:c5:49:b3:f5: 1b:7c:48:62:74:99:53:58:8f:87:44:67:a6:53:72:4c:d7:b5: eb:71:13:2d:5b:a2:cf:14:86:a6:3a:4d:ff:28:36:fd:55:1d: 33:7f:26:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3WUA9DR2lm1L0mVjxqeMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYmNjNWM2NjRhNGE4MjMwNTg5MmE4YzQzM2U5NGZmZTMy ZGFkYjcwHhcNMjYwMTAxMDIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWVlYmRlY2JiOTlmNjM0YmQ4MDBkODVmM2Q5YzY0NzQ3MDUyYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aW848/anZaYxt/FGKQOW5mIhC5b P4xDiUlvS4VuEbcsXs9VE5b86HTc8sOgwKorsFYYUv1bMpdBbIW4bTUs4HZnqWr/ fVRe2AHFKQDyRrLX19yo1bolaNUM0oi/iMV7ovb7WivDP95j9DzB7XrwQNruz/5H 2/H9Mnf1bSR2iqwzL+hKv1Bz8nOfXQyN8z0lpi7pjZYwL6lU/uNTSebNVv4nIvzC z6mwlJnOTeEwenIGOnvr1WzXdd52sE5dpBohmjl0kBgwMn1iR2MXoEmConiOaMrm jteu1ZKFmCQIfiyD9aEpIMrXkwGAPeusOvlzk2AA10j7FPPgOmJ74RicdQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOnuvey7mfY0vYANhfPZxkdHBSviMB8GA1UdIwQY MBaAFCq8xcZkpKgjBYkqjEM+lP/jLa23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAt NjVmYjEwYTA2ZTg5LzEvNmU2OTdMdVo5alM5Z0EyRjg5bkdSMGNGSy1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9kYzczNDUtNzVjYi00NDIwLWEzZjAtNjVmYjEwYTA2ZTg5 LzEvS3J6RnhtU2txQ01GaVNxTVF6NlVfLU10cmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCudSgAwQC ufUYMA0GCSqGSIb3DQEBCwUAA4IBAQAJgfFAcyDsMYdWzR4jgCYkvPO1CYcDL96x 1E9Q1odMm07labXGKUtmgC+Mgab+yZLrtOgpX+nnMcUibTTRe+Q57BOO0IymJF/3 OBB1xSvPJKJ5M1tz6BawRtfr4tEFfn3e6Cz6AvOHh/2dESbVwA4nYKhKgGBb6d7S cn6T3rByX5OaY4zXi8esDvDjUCmxy1/AzJkO/Z1ojgS8hAgnLRDi8nF9pl+40Mx9 aaPOrBRj99NLoz5mLQ/MALvrk7B3NimHSr94nNvtVpe+OxLCCuCoBqIOUMVJs/Ub fEhidJlTWI+HRGemU3JM17XrcRMtW6LPFIamOk3/KDb9VR0zfyY2 -----END CERTIFICATE-----Generated at Sun Jan 25 11:40:31 2026 by rpki-client