This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/ecnEX_gI9OgE5pHNzy6z6ZlC1JU.roa File: ecnEX_gI9OgE5pHNzy6z6ZlC1JU.roa (raw, json) Hash identifier: W9dlzbQukUw0SKncoOMnmQN5HPveQXtHqzANhp1lAbE= Subject key identifier: 79:C9:C4:5F:F8:08:F4:E8:04:E6:91:CD:CF:2E:B3:E9:99:42:D4:95 Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019A91A4565F2624209F39F6DD46F270006F Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/ecnEX_gI9OgE5pHNzy6z6ZlC1JU.roa Signing time: Mon 17 Nov 2025 11:47:37 +0000 ROA not before: Mon 17 Nov 2025 11:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4601 IP address blocks: 147.189.216.0/21 maxlen: 21 193.5.16.0/22 maxlen: 22 2a0d:3dc0::/29 maxlen: 29 2a0d:3dc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:a4:56:5f:26:24:20:9f:39:f6:dd:46:f2:70:00:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Nov 17 11:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=79c9c45ff808f4e804e691cdcf2eb3e99942d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:c2:31:cf:87:9c:f3:71:6f:2a:2e:53:0f: 7f:f8:0c:76:4b:43:75:4c:db:da:6e:87:2a:ab:43: 74:d0:6b:c2:c8:e8:fb:a1:47:6a:e4:26:f1:06:e6: a5:d1:74:7b:fb:80:c5:b7:7c:d5:5c:6c:2b:30:93: 45:59:73:b0:35:93:2a:24:e5:21:a8:f0:9c:e4:47: 77:51:5e:f3:ae:d9:23:37:95:31:9b:da:9c:ef:19: 23:75:dc:cf:e8:bf:21:74:7d:1d:72:0c:94:dc:65: d7:83:d3:95:6c:ea:79:20:66:89:d9:b3:30:66:22: 40:69:49:29:83:ce:54:9d:98:16:4a:c0:ed:f7:1e: ce:ad:dc:94:e7:68:c1:af:df:f5:f6:6a:76:4b:e2: e7:29:f3:db:06:97:72:77:de:ba:91:69:80:79:f7: e3:0b:3a:bd:ea:66:9f:d9:eb:5c:97:08:77:b0:7e: 00:ad:c6:64:84:e2:3c:ec:64:94:4f:2e:2a:4f:cb: f0:20:cd:03:8a:ad:89:c7:9c:e9:d2:30:1c:4d:bf: 73:e4:73:9b:34:82:5a:3e:24:8e:54:dd:9b:7e:bc: 27:a4:c7:5a:79:1f:d2:80:9e:30:f8:2d:5d:e1:e4: db:ba:38:ff:ad:8c:29:58:1a:66:6b:95:55:80:60: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C9:C4:5F:F8:08:F4:E8:04:E6:91:CD:CF:2E:B3:E9:99:42:D4:95 X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/ecnEX_gI9OgE5pHNzy6z6ZlC1JU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.216.0/21 193.5.16.0/22 IPv6: 2a0d:3dc0::/29 Signature Algorithm: sha256WithRSAEncryption 91:3e:fe:07:7e:52:b1:f6:8f:5c:1b:b1:19:58:77:ec:c8:ea: ca:01:a5:4f:d5:9e:46:ac:7d:6a:ab:6f:d9:26:4e:e5:8b:54: 72:4e:be:d0:5e:20:2c:3a:14:e5:f6:b3:f7:30:95:b1:60:83: 4e:2b:c7:77:70:81:df:ef:51:d4:41:44:95:91:23:3e:15:73: 31:3f:9a:42:b9:8a:a5:b5:ca:de:3a:b8:0d:a1:35:28:93:b1: 9b:a3:25:d1:cb:3f:8e:b0:80:bd:90:00:f5:e4:91:b4:2f:ad: 65:09:ad:9f:4a:38:82:fb:06:3d:3d:f9:00:46:25:34:8f:75: fa:77:26:f0:87:07:81:36:39:92:91:bc:95:5c:f7:9b:f3:7e: b8:e6:bd:d9:66:c6:83:18:5e:84:2d:4f:04:1d:f7:64:00:90: a2:71:f8:a5:33:80:0a:9c:ec:e8:19:e0:0b:c8:2b:08:8a:2b: 53:e4:6a:ce:09:70:87:19:7f:ad:5c:30:20:d4:e3:2d:30:77: 38:b9:5f:2d:ef:18:7b:bc:31:9c:7b:94:ad:cf:0c:87:4f:ba: 9a:b8:5e:6c:88:05:2b:da:0c:67:9d:f8:b0:10:09:92:01:19: cf:d4:2e:af:48:07:e4:c5:ea:00:5f:84:3d:a3:19:b6:07:40: cf:ec:ed:15 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqRpFZfJiQgnzn23UbycABvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjUxMTE3MTE0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWM5YzQ1ZmY4MDhmNGU4MDRlNjkxY2RjZjJlYjNlOTk5NDJkNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03bCMc+HnPNxbyouUw9/+Ax2S0N1 TNvabocqq0N00GvCyOj7oUdq5CbxBual0XR7+4DFt3zVXGwrMJNFWXOwNZMqJOUh qPCc5Ed3UV7zrtkjN5Uxm9qc7xkjddzP6L8hdH0dcgyU3GXXg9OVbOp5IGaJ2bMw ZiJAaUkpg85UnZgWSsDt9x7OrdyU52jBr9/19mp2S+LnKfPbBpdyd966kWmAeffj Czq96maf2etclwh3sH4ArcZkhOI87GSUTy4qT8vwIM0Diq2Jx5zp0jAcTb9z5HOb NIJaPiSOVN2bfrwnpMdaeR/SgJ4w+C1d4eTbujj/rYwpWBpma5VVgGD+mQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHnJxF/4CPToBOaRzc8us+mZQtSVMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvZWNuRVhfZ0k5T2dFNXBITnp5Nno2WmxDMUpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDk73YAwQC wQUQMA0EAgACMAcDBQMqDT3AMA0GCSqGSIb3DQEBCwUAA4IBAQCRPv4HflKx9o9c G7EZWHfsyOrKAaVP1Z5GrH1qq2/ZJk7li1RyTr7QXiAsOhTl9rP3MJWxYINOK8d3 cIHf71HUQUSVkSM+FXMxP5pCuYqltcreOrgNoTUok7GboyXRyz+OsIC9kAD15JG0 L61lCa2fSjiC+wY9PfkARiU0j3X6dybwhweBNjmSkbyVXPeb83645r3ZZsaDGF6E LU8EHfdkAJCicfilM4AKnOzoGeALyCsIiitT5GrOCXCHGX+tXDAg1OMtMHc4uV8t 7xh7vDGce5StzwyHT7qauF5siAUr2gxnnfiwEAmSARnP1C6vSAfkxeoAX4Q9oxm2 B0DP7O0V -----END CERTIFICATE-----Generated at Sat Dec 6 05:41:43 2025 by rpki-client