This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/I9nUczY20Zb-qB4txSR8cQbIwOU.roa File: I9nUczY20Zb-qB4txSR8cQbIwOU.roa (raw, json) Hash identifier: tVztN2aCOWmTRMBNdBunPfUafnJabZOVueK23yoz3NY= Subject key identifier: 23:D9:D4:73:36:36:D1:96:FE:A8:1E:2D:C5:24:7C:71:06:C8:C0:E5 Certificate issuer: /CN=ef478021f72a21b77142a44d815dde9ef2684cbc Certificate serial: 019B7DC898C96CE748975E5D6D2179DAEDDC Authority key identifier: EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/I9nUczY20Zb-qB4txSR8cQbIwOU.roa Signing time: Fri 02 Jan 2026 08:17:36 +0000 ROA not before: Fri 02 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203675 IP address blocks: 185.82.108.0/22 maxlen: 22 185.82.108.0/24 maxlen: 24 185.82.109.0/24 maxlen: 24 185.82.110.0/24 maxlen: 24 185.82.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.mft rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:98:c9:6c:e7:48:97:5e:5d:6d:21:79:da:ed:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef478021f72a21b77142a44d815dde9ef2684cbc Validity Not Before: Jan 2 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23d9d4733636d196fea81e2dc5247c7106c8c0e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:c1:ce:94:0e:d1:43:81:bf:bc:7c:a3:81: c5:39:0c:89:b6:4b:c8:10:3c:42:16:86:6e:0e:32: 55:d7:d7:c6:2f:2c:b3:41:7c:de:9c:97:46:12:f8: 15:e0:5b:38:35:bd:f8:c6:76:95:e0:e1:70:d5:3c: c7:36:40:c2:21:97:f5:5e:d5:03:85:82:73:d7:a5: 17:c1:69:b6:bb:4c:1c:c3:aa:03:a8:25:3d:a0:07: 95:13:3c:5d:3c:e6:ab:d3:7e:ce:f4:00:64:e6:19: 1b:f7:2b:dd:90:1e:85:29:fd:4e:1a:aa:9e:2e:61: 32:45:d3:5c:9d:89:a4:1e:7b:85:2c:fc:f2:0a:02: e3:07:25:da:ad:f9:fd:82:3d:1e:dd:9a:cc:32:b7: 3f:7a:1a:3c:04:d7:11:2a:51:1e:94:64:47:f0:8d: 57:88:a5:c6:02:72:dc:ee:a4:87:b0:36:7a:f9:a1: d7:f1:68:0d:59:2a:a1:07:44:79:5d:5d:45:68:28: 9a:d6:f0:92:d1:94:63:17:42:6c:30:38:ba:b7:07: e2:f1:c6:6c:d9:13:d9:bb:9d:bd:2c:7e:a9:30:d4: da:b7:68:9f:0d:ce:9e:5d:30:ae:45:db:b9:e1:57: 74:79:69:09:1f:70:41:a6:2d:a8:23:c0:b2:ce:14: 54:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D9:D4:73:36:36:D1:96:FE:A8:1E:2D:C5:24:7C:71:06:C8:C0:E5 X509v3 Authority Key Identifier: keyid:EF:47:80:21:F7:2A:21:B7:71:42:A4:4D:81:5D:DE:9E:F2:68:4C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70eAIfcqIbdxQqRNgV3envJoTLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/I9nUczY20Zb-qB4txSR8cQbIwOU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5172eb-6fb8-4216-8d81-3443464b9209/1/70eAIfcqIbdxQqRNgV3envJoTLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.82.108.0/22 Signature Algorithm: sha256WithRSAEncryption 73:ee:36:a8:2b:a8:f1:c4:fd:28:4d:02:05:68:28:76:e8:09: bd:eb:8c:3f:fb:f7:fb:9d:e2:0f:0f:e6:ed:23:2e:87:e0:15: b9:14:6a:e1:ea:3e:59:57:87:93:9f:6c:00:6c:b2:12:41:1b: 61:f3:91:38:37:20:a6:44:3d:55:7e:c2:90:e6:43:47:96:1f: 04:c4:55:55:c9:df:7b:ce:a7:82:54:01:33:56:d7:05:e4:a5: dd:87:f2:a0:a6:d9:e7:1c:89:f4:b0:dc:51:31:e8:12:ff:d2: bb:d6:db:f4:1a:9e:ed:ff:f4:97:1e:f8:eb:45:23:f5:1f:d8: df:78:ce:2e:73:e2:b3:a7:92:32:4c:7d:9a:d9:d7:c4:95:95: 4d:50:53:52:46:c4:df:28:d4:7e:41:45:f8:4d:2a:59:11:95: f8:83:f8:4a:de:64:05:db:79:69:0f:44:18:1a:fa:9d:1a:03: f9:87:fb:10:3b:3c:68:0b:12:cf:40:99:9e:a3:7f:05:e2:e0: 5b:d1:45:2e:41:ff:15:d4:f5:d5:73:6b:4d:cb:3f:a1:ae:c6: bc:75:21:6d:b7:ff:a1:10:5c:7a:34:01:d6:c3:fc:2d:36:65: bf:bc:3e:cd:08:ad:74:c7:bd:01:6b:16:95:a5:3f:a5:56:2f: 30:81:45:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJjJbOdIl15dbSF52u3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNDc4MDIxZjcyYTIxYjc3MTQyYTQ0ZDgxNWRkZTllZjI2 ODRjYmMwHhcNMjYwMTAyMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2Q5ZDQ3MzM2MzZkMTk2ZmVhODFlMmRjNTI0N2M3MTA2YzhjMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBrBzpQO0UOBv7x8o4HFOQyJtkvI EDxCFoZuDjJV19fGLyyzQXzenJdGEvgV4Fs4Nb34xnaV4OFw1TzHNkDCIZf1XtUD hYJz16UXwWm2u0wcw6oDqCU9oAeVEzxdPOar037O9ABk5hkb9yvdkB6FKf1OGqqe LmEyRdNcnYmkHnuFLPzyCgLjByXarfn9gj0e3ZrMMrc/eho8BNcRKlEelGRH8I1X iKXGAnLc7qSHsDZ6+aHX8WgNWSqhB0R5XV1FaCia1vCS0ZRjF0JsMDi6twfi8cZs 2RPZu529LH6pMNTat2ifDc6eXTCuRdu54Vd0eWkJH3BBpi2oI8CyzhRUwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPZ1HM2NtGW/qgeLcUkfHEGyMDlMB8GA1UdIwQY MBaAFO9HgCH3KiG3cUKkTYFd3p7yaEy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEt MzQ0MzQ2NGI5MjA5LzEvSTluVWN6WTIwWmItcUI0dHhTUjhjUWJJd09VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi81MTcyZWItNmZiOC00MjE2LThkODEtMzQ0MzQ2NGI5MjA5 LzEvNzBlQUlmY3FJYmR4UXFSTmdWM2VudkpvVEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVJsMA0G CSqGSIb3DQEBCwUAA4IBAQBz7jaoK6jxxP0oTQIFaCh26Am964w/+/f7neIPD+bt Iy6H4BW5FGrh6j5ZV4eTn2wAbLISQRth85E4NyCmRD1VfsKQ5kNHlh8ExFVVyd97 zqeCVAEzVtcF5KXdh/KgptnnHIn0sNxRMegS/9K71tv0Gp7t//SXHvjrRSP1H9jf eM4uc+Kzp5IyTH2a2dfElZVNUFNSRsTfKNR+QUX4TSpZEZX4g/hK3mQF23lpD0QY GvqdGgP5h/sQOzxoCxLPQJmeo38F4uBb0UUuQf8V1PXVc2tNyz+hrsa8dSFtt/+h EFx6NAHWw/wtNmW/vD7NCK10x70BaxaVpT+lVi8wgUWG -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:14 2026 by rpki-client