This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/IpbgzIod3SCOC-4M-yKJq7eJBCY.roa File: IpbgzIod3SCOC-4M-yKJq7eJBCY.roa (raw, json) Hash identifier: s4j/BLtlxyZ9cBFkOSjluXgeEHFBUHkPfFueXlPAOPE= Subject key identifier: 22:96:E0:CC:8A:1D:DD:20:8E:0B:EE:0C:FB:22:89:AB:B7:89:04:26 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B791082066D441F76C973E9A681C4C11D Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/IpbgzIod3SCOC-4M-yKJq7eJBCY.roa Signing time: Thu 01 Jan 2026 10:18:03 +0000 ROA not before: Thu 01 Jan 2026 10:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39216 IP address blocks: 213.198.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:82:06:6d:44:1f:76:c9:73:e9:a6:81:c4:c1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2296e0cc8a1ddd208e0bee0cfb2289abb7890426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:6a:73:e3:97:8f:c3:9a:38:15:12:a0:5f: 7d:30:eb:79:2d:b8:23:8a:73:c4:19:67:78:70:c7: 47:04:90:74:4e:c0:a8:73:65:4e:f1:37:5b:3d:7e: 3b:09:7a:c0:65:3d:a1:e5:47:55:59:2f:87:7a:44: 7b:92:a4:f2:b3:dc:48:2c:40:ed:66:1d:a5:66:b1: 1f:bc:95:d9:b7:c9:42:8b:ec:01:a0:84:0d:43:64: 14:7c:e3:b1:1a:95:ec:d7:d1:b5:86:35:7e:ed:a5: 43:71:33:88:67:52:fe:df:0a:d6:d5:4a:d9:32:79: fc:c5:8c:ff:ee:d4:a1:ae:35:fe:1e:ce:8d:7e:a9: ad:63:ea:c1:a2:5a:c6:cc:1f:a9:a6:5f:c9:d9:fb: 13:bc:d4:65:49:e7:9b:b7:ab:40:ce:ee:99:96:92: 19:e8:2e:9c:9a:82:89:7f:3c:6e:f2:ba:ba:5e:25: 68:8a:c7:84:e1:14:a0:ab:05:e4:9e:f6:d4:e0:cd: d2:f6:aa:ca:98:1a:87:03:bd:ea:99:40:12:c8:ad: c7:d2:41:24:fb:a2:32:b3:84:22:d5:95:de:04:64: d4:f6:17:cc:0b:5a:3c:b5:77:03:fc:a0:83:db:22: 2a:eb:d8:59:63:70:e5:b3:fe:02:5a:00:d5:9a:2e: ff:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:96:E0:CC:8A:1D:DD:20:8E:0B:EE:0C:FB:22:89:AB:B7:89:04:26 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/IpbgzIod3SCOC-4M-yKJq7eJBCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.198.89.0/24 Signature Algorithm: sha256WithRSAEncryption 48:00:4b:97:dc:4f:bd:a6:d7:87:dd:5c:c8:0e:c9:bc:49:7a: 52:8b:44:7f:d3:34:cd:92:9f:45:96:00:79:b0:a5:37:63:c9: ec:e9:54:40:16:09:70:89:8f:7b:cc:e0:44:d6:78:15:5f:01: fa:9f:fb:eb:09:d8:69:79:e6:0d:81:6a:ea:6c:e0:09:b4:0b: f8:eb:d2:43:9e:50:6d:35:d2:05:2a:f5:06:c2:63:00:c2:a2: bd:36:34:83:22:f6:ff:a8:2b:44:9b:c6:0b:98:7f:8d:52:2c: ab:b4:ea:c0:4f:83:df:f7:25:22:28:a6:9c:ef:72:97:7f:23: e6:9b:2b:d1:f4:e5:f3:e7:13:30:bf:24:44:fa:96:25:33:4f: c2:45:28:64:4c:d3:63:8a:2f:a5:98:f8:bb:ba:77:85:76:51: 2c:98:4f:ea:79:12:db:53:bd:e6:f2:e6:4d:ff:d7:d8:c8:3f: 59:04:68:c9:a4:69:d9:38:08:66:7d:a2:59:f0:02:07:64:54: 3e:da:28:1b:e1:8f:46:1c:09:54:1d:78:1e:1c:7c:74:5c:11: bd:bb:5d:10:31:15:1a:ae:d2:e5:a8:32:45:96:74:86:c9:29: 6f:30:17:6a:57:c0:9b:5a:3b:74:69:c5:66:13:c5:0f:30:dd: 47:a1:9f:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EIIGbUQfdslz6aaBxMEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjk2ZTBjYzhhMWRkZDIwOGUwYmVlMGNmYjIyODlhYmI3ODkwNDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ytqc+OXj8OaOBUSoF99MOt5Lbgj inPEGWd4cMdHBJB0TsCoc2VO8TdbPX47CXrAZT2h5UdVWS+HekR7kqTys9xILEDt Zh2lZrEfvJXZt8lCi+wBoIQNQ2QUfOOxGpXs19G1hjV+7aVDcTOIZ1L+3wrW1UrZ Mnn8xYz/7tShrjX+Hs6NfqmtY+rBolrGzB+ppl/J2fsTvNRlSeebt6tAzu6ZlpIZ 6C6cmoKJfzxu8rq6XiVoiseE4RSgqwXknvbU4M3S9qrKmBqHA73qmUASyK3H0kEk +6Iys4Qi1ZXeBGTU9hfMC1o8tXcD/KCD2yIq69hZY3Dls/4CWgDVmi7/lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCKW4MyKHd0gjgvuDPsiiau3iQQmMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvSXBiZ3pJb2QzU0NPQy00TS15S0pxN2VKQkNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cZZMA0G CSqGSIb3DQEBCwUAA4IBAQBIAEuX3E+9pteH3VzIDsm8SXpSi0R/0zTNkp9FlgB5 sKU3Y8ns6VRAFglwiY97zOBE1ngVXwH6n/vrCdhpeeYNgWrqbOAJtAv469JDnlBt NdIFKvUGwmMAwqK9NjSDIvb/qCtEm8YLmH+NUiyrtOrAT4Pf9yUiKKac73KXfyPm myvR9OXz5xMwvyRE+pYlM0/CRShkTNNjii+lmPi7uneFdlEsmE/qeRLbU73m8uZN /9fYyD9ZBGjJpGnZOAhmfaJZ8AIHZFQ+2igb4Y9GHAlUHXgeHHx0XBG9u10QMRUa rtLlqDJFlnSGySlvMBdqV8CbWjt0acVmE8UPMN1HoZ9j -----END CERTIFICATE-----Generated at Mon Jan 12 12:27:09 2026 by rpki-client