This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/iYUev_wikt3902TuQUS_qA3tCJ8.roa File: iYUev_wikt3902TuQUS_qA3tCJ8.roa (raw, json) Hash identifier: VqRpsKYPKrdIKnSJSQ7Ajn2eZlKMNhnr5TrpIZme+3o= Subject key identifier: 89:85:1E:BF:FC:22:92:DD:FD:D3:64:EE:41:44:BF:A8:0D:ED:08:9F Certificate issuer: /CN=1af1487e4d0e26c53d593ece6e14712221e24010 Certificate serial: 019B7A5A21A8F680BD6BE51F3F465BFFF0C7 Authority key identifier: 1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/iYUev_wikt3902TuQUS_qA3tCJ8.roa Signing time: Thu 01 Jan 2026 16:18:05 +0000 ROA not before: Thu 01 Jan 2026 16:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39934 IP address blocks: 185.224.4.0/24 maxlen: 24 185.224.5.0/24 maxlen: 24 185.224.6.0/24 maxlen: 24 185.224.7.0/24 maxlen: 24 2a0c:b400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.mft rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:21:a8:f6:80:bd:6b:e5:1f:3f:46:5b:ff:f0:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af1487e4d0e26c53d593ece6e14712221e24010 Validity Not Before: Jan 1 16:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89851ebffc2292ddfdd364ee4144bfa80ded089f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:80:dc:22:b9:df:38:be:7d:2b:8d:4d:18:02: 4e:21:88:d6:c6:9b:cc:62:60:97:b9:b5:73:dd:61: 08:a9:f7:ec:18:bd:23:d5:5a:8f:c7:66:ec:95:bb: fa:9e:59:c1:ae:0d:9e:da:00:8b:fa:b4:67:50:e1: 61:86:23:81:1e:62:56:a2:3b:63:60:99:06:7e:cc: 31:9f:6a:f0:06:a8:74:30:d9:77:f7:5c:b0:69:8b: 82:d4:8d:98:f9:3b:d5:82:23:4a:37:b9:a3:5e:ff: ab:82:0b:34:21:6c:df:85:0c:75:27:1c:2c:35:8a: b6:29:a7:9f:9b:f2:c5:38:e5:84:86:4e:98:46:e2: 38:0a:dc:f9:a6:0b:e4:de:66:f2:38:19:80:af:f6: 49:1d:db:23:34:26:64:e4:ec:6d:6e:a6:df:34:08: 99:00:c6:4d:fa:27:2f:19:66:27:de:00:6f:c8:4e: a3:e2:96:07:2b:d2:f4:e6:f6:7d:2c:5e:3e:ea:07: e2:d4:d7:de:1e:71:00:59:3d:0e:ae:0e:6d:7c:8a: 76:77:83:5e:7b:6c:2a:f3:c3:40:1c:a7:4d:96:05: 2a:ae:a3:68:ea:b1:ea:67:bc:2a:42:13:d6:02:7c: 32:e0:99:6f:46:a1:97:43:04:4d:60:06:91:01:ab: d7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:85:1E:BF:FC:22:92:DD:FD:D3:64:EE:41:44:BF:A8:0D:ED:08:9F X509v3 Authority Key Identifier: keyid:1A:F1:48:7E:4D:0E:26:C5:3D:59:3E:CE:6E:14:71:22:21:E2:40:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvFIfk0OJsU9WT7ObhRxIiHiQBA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/iYUev_wikt3902TuQUS_qA3tCJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/b70761-bfd2-44b9-b60a-5969d6eb9b0d/1/GvFIfk0OJsU9WT7ObhRxIiHiQBA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.224.4.0/22 IPv6: 2a0c:b400::/29 Signature Algorithm: sha256WithRSAEncryption 77:9b:f9:f0:72:55:19:aa:1b:d3:2a:46:2c:9f:54:6c:aa:89: ad:6c:2e:77:cf:a3:2c:75:13:8a:65:1d:fb:65:fc:ed:de:73: b9:9d:7d:1a:81:c8:20:ca:8e:87:f2:b2:fe:da:0a:74:db:fd: 0b:30:7f:6c:bf:cf:88:20:ad:b6:16:a0:d6:fc:56:8b:d4:bb: 89:25:9c:97:ae:2d:8c:f7:b0:ad:12:6b:75:c3:ce:9d:6d:b9: ce:3b:f9:93:b1:b7:09:55:47:2f:78:0f:21:ce:5c:28:0f:89: 8a:29:a9:9c:8f:ae:3f:8b:51:42:a8:d8:d1:c2:b5:9e:2b:da: 50:10:2c:83:e6:6d:8b:e2:6e:d4:a4:6f:e9:3c:b9:b3:f6:72: 71:9d:1c:f4:f2:27:81:39:a5:cf:3b:b3:5a:f6:02:19:d1:ba: 5b:99:2b:dc:44:08:f8:23:5b:df:9e:60:e4:49:78:04:58:26: f6:dd:1c:77:7d:f6:60:c8:72:3b:04:8c:81:45:8a:62:b3:2f: 83:0b:c6:3f:ff:e8:cc:97:b4:df:7f:76:36:8c:67:7f:ff:8a: c6:b2:c5:b0:bb:95:21:b8:ab:3f:4f:6a:24:9a:3c:f8:d6:03: 31:b7:77:3c:d2:2f:a2:9f:83:33:76:ea:4f:08:12:68:3c:36: ba:a0:a5:5e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WiGo9oC9a+UfP0Zb//DHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZjE0ODdlNGQwZTI2YzUzZDU5M2VjZTZlMTQ3MTIyMjFl MjQwMTAwHhcNMjYwMTAxMTYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTg1MWViZmZjMjI5MmRkZmRkMzY0ZWU0MTQ0YmZhODBkZWQwODlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IDcIrnfOL59K41NGAJOIYjWxpvM YmCXubVz3WEIqffsGL0j1VqPx2bslbv6nlnBrg2e2gCL+rRnUOFhhiOBHmJWojtj YJkGfswxn2rwBqh0MNl391ywaYuC1I2Y+TvVgiNKN7mjXv+rggs0IWzfhQx1Jxws NYq2Kaefm/LFOOWEhk6YRuI4Ctz5pgvk3mbyOBmAr/ZJHdsjNCZk5OxtbqbfNAiZ AMZN+icvGWYn3gBvyE6j4pYHK9L05vZ9LF4+6gfi1NfeHnEAWT0Org5tfIp2d4Ne e2wq88NAHKdNlgUqrqNo6rHqZ7wqQhPWAnwy4JlvRqGXQwRNYAaRAavXKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFImFHr/8IpLd/dNk7kFEv6gN7QifMB8GA1UdIwQY MBaAFBrxSH5NDibFPVk+zm4UcSIh4kAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEt NTk2OWQ2ZWI5YjBkLzEvaVlVZXZfd2lrdDM5MDJUdVFVU19xQTN0Q0o4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iNzA3NjEtYmZkMi00NGI5LWI2MGEtNTk2OWQ2ZWI5YjBk LzEvR3ZGSWZrME9Kc1U5V1Q3T2JoUnhJaUhpUUJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCueAEMA0E AgACMAcDBQMqDLQAMA0GCSqGSIb3DQEBCwUAA4IBAQB3m/nwclUZqhvTKkYsn1Rs qomtbC53z6MsdROKZR37Zfzt3nO5nX0agcggyo6H8rL+2gp02/0LMH9sv8+IIK22 FqDW/FaL1LuJJZyXri2M97CtEmt1w86dbbnOO/mTsbcJVUcveA8hzlwoD4mKKamc j64/i1FCqNjRwrWeK9pQECyD5m2L4m7UpG/pPLmz9nJxnRz08ieBOaXPO7Na9gIZ 0bpbmSvcRAj4I1vfnmDkSXgEWCb23Rx3ffZgyHI7BIyBRYpisy+DC8Y//+jMl7Tf f3Y2jGd//4rGssWwu5UhuKs/T2okmjz41gMxt3c80i+in4MzdupPCBJoPDa6oKVe -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:28 2026 by rpki-client