This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa File: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (raw, json) Hash identifier: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ= Subject key identifier: 23:E7:AD:4E:2C:A1:CE:4F:E8:4B:48:E2:C3:83:12:0D:99:3F:7B:D6 Certificate issuer: /CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Certificate serial: 019B7B35892FEE97C93F63F76E332D7C73F3 Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa Signing time: Thu 01 Jan 2026 20:17:44 +0000 ROA not before: Thu 01 Jan 2026 20:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 83.136.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:89:2f:ee:97:c9:3f:63:f7:6e:33:2d:7c:73:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7 Validity Not Before: Jan 1 20:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23e7ad4e2ca1ce4fe84b48e2c383120d993f7bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6a:fc:cd:12:b9:72:55:ff:6f:1f:8b:52:42: a2:f4:40:32:a9:a3:06:08:47:ba:db:5a:3a:ce:f4: 58:40:55:40:cf:7d:08:f4:b5:b6:80:30:f5:ea:28: b3:0e:ab:bd:db:07:09:73:a8:73:a7:d9:77:ae:7f: 82:b7:c6:cb:4c:34:a2:de:62:29:b4:33:2d:e9:f4: cf:8f:f3:60:9d:8a:3b:18:08:99:e4:07:e7:09:c9: df:c6:e5:3e:61:e5:06:f1:dd:93:43:ca:27:cb:b2: c8:15:53:a7:da:3c:b8:2f:e0:b0:04:85:b5:93:d2: b6:6a:90:c1:87:01:31:00:37:50:24:44:b8:e9:2d: 95:98:94:85:58:8e:a9:bd:6d:e7:a2:4b:0a:53:92: 66:e9:81:af:7d:14:bd:51:33:53:a0:9d:1a:a8:a9: c3:c6:56:c6:91:0f:c3:cf:d3:0a:f9:c0:75:45:7b: 97:2d:49:05:a6:b1:5a:9c:19:97:e3:dc:ba:a0:10: f1:f2:e3:af:42:be:07:e0:30:4e:42:85:31:fc:b8: 98:a4:91:ed:45:c2:56:d9:2c:3b:ee:57:28:81:38: 1b:1c:8f:d6:b1:c4:4b:5e:e7:ec:28:04:a3:07:de: cf:0d:09:92:63:21:0e:e3:c3:67:5c:43:10:94:6a: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E7:AD:4E:2C:A1:CE:4F:E8:4B:48:E2:C3:83:12:0D:99:3F:7B:D6 X509v3 Authority Key Identifier: keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.212.0/24 Signature Algorithm: sha256WithRSAEncryption 03:95:aa:e8:2a:f1:b9:cf:07:5d:5c:e5:76:a9:08:ce:81:4d: 0c:97:f2:d5:54:48:41:1f:41:93:66:76:94:0e:ea:cb:d8:d5: 2f:28:2e:f9:f1:c2:ad:aa:39:1c:0d:85:77:e6:96:11:b3:3b: 27:6c:c8:0c:27:9e:ec:98:a0:97:51:9b:32:12:09:9c:8a:0a: e6:6e:b0:64:61:97:70:c1:e1:9d:3b:99:29:cc:d2:c1:fb:8d: 6f:fa:0b:b3:06:bf:dd:66:f9:17:11:f1:ba:f0:72:fa:54:8d: 69:5d:83:40:d8:f2:7b:ae:20:94:57:ce:17:d1:3c:b7:0f:70: 9e:55:6b:46:f8:8d:fd:eb:bc:bd:c1:9d:f5:7c:29:64:f9:eb: ba:13:a3:32:84:29:8b:be:f1:06:de:66:19:1d:4f:a3:73:97: 91:b1:3e:ae:c5:96:6f:15:1f:58:72:76:31:9a:a6:68:f1:76: e6:f2:45:66:dd:16:5f:b3:f9:96:72:8e:68:a4:9a:77:a5:12: 60:58:7a:49:78:fe:36:ef:ee:b6:1a:75:05:78:ad:37:ec:aa: f8:c2:51:52:7c:ed:66:3b:f7:de:cf:fb:60:a5:b2:5f:df:ff: 2b:56:ad:6b:dd:f5:94:03:a9:94:d7:82:76:74:02:49:e5:bf: 60:04:94:1b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7NYkv7pfJP2P3bjMtfHPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4Nzk5ODhlMGY0OTk3MWEzMjZmNDE5ZTVjZmFjYmZkZGNj OTkzZTcwHhcNMjYwMTAxMjAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2U3YWQ0ZTJjYTFjZTRmZTg0YjQ4ZTJjMzgzMTIwZDk5M2Y3YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wr8zRK5clX/bx+LUkKi9EAyqaMG CEe621o6zvRYQFVAz30I9LW2gDD16iizDqu92wcJc6hzp9l3rn+Ct8bLTDSi3mIp tDMt6fTPj/NgnYo7GAiZ5AfnCcnfxuU+YeUG8d2TQ8ony7LIFVOn2jy4L+CwBIW1 k9K2apDBhwExADdQJES46S2VmJSFWI6pvW3noksKU5Jm6YGvfRS9UTNToJ0aqKnD xlbGkQ/Dz9MK+cB1RXuXLUkFprFanBmX49y6oBDx8uOvQr4H4DBOQoUx/LiYpJHt RcJW2Sw77lcogTgbHI/WscRLXufsKASjB97PDQmSYyEO48NnXEMQlGq4EQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCPnrU4soc5P6EtI4sODEg2ZP3vWMB8GA1UdIwQY MBaAFPh5mI4PSZcaMm9Bnlz6y/3cyZPnMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1IbVlqZzlKbHhveWIwR2VYUHJMX2R6SmstYy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0 LTA0NzBiNGJiMzBkYi8xL0ktZXRUaXloemtfb1Mwaml3NE1TRFprX2U5WS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDUvYWYzZDgxLTAwNDctNDEzYy05MWY0LTA0NzBiNGJiMzBk Yi8xLzEtSG1Zamc5Smx4b3liMEdlWFByTF9kekprLWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABTiNQw DQYJKoZIhvcNAQELBQADggEBAAOVqugq8bnPB11c5XapCM6BTQyX8tVUSEEfQZNm dpQO6svY1S8oLvnxwq2qORwNhXfmlhGzOydsyAwnnuyYoJdRmzISCZyKCuZusGRh l3DB4Z07mSnM0sH7jW/6C7MGv91m+RcR8brwcvpUjWldg0DY8nuuIJRXzhfRPLcP cJ5Va0b4jf3rvL3BnfV8KWT567oTozKEKYu+8QbeZhkdT6Nzl5GxPq7Flm8VH1hy djGapmjxdubyRWbdFl+z+ZZyjmikmnelEmBYekl4/jbv7rYadQV4rTfsqvjCUVJ8 7WY7997P+2Clsl/f/ytWrWvd9ZQDqZTXgnZ0Aknlv2AElBs= -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:01 2026 by rpki-client