This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/ieoHlH36HWDIPWckSlvGHJy24ZU.roa File: ieoHlH36HWDIPWckSlvGHJy24ZU.roa (raw, json) Hash identifier: j9WOIqYDUZqSN+7FGuaKTEgZ+HNu/dxrw2EWxoIKCOg= Subject key identifier: 89:EA:07:94:7D:FA:1D:60:C8:3D:67:24:4A:5B:C6:1C:9C:B6:E1:95 Certificate issuer: /CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d Certificate serial: 019B77C68D104FEEAEBAD9EE5C86B8FC1B15 Authority key identifier: 17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/ieoHlH36HWDIPWckSlvGHJy24ZU.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204035 IP address blocks: 185.94.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.mft rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8d:10:4f:ee:ae:ba:d9:ee:5c:86:b8:fc:1b:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17e69ddc29a05b2c45ee3cc5a2340b2e4c6dad5d Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89ea07947dfa1d60c83d67244a5bc61c9cb6e195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d8:e9:42:4f:e2:11:f7:81:5d:7a:0e:15:3d: d3:af:89:57:88:7c:9d:b9:2e:66:e4:dc:e2:88:9c: ca:e3:ec:6e:90:c8:e9:a2:b0:ba:62:5f:a2:09:5d: fc:e6:ae:e1:37:39:cd:11:86:d2:b4:5e:7d:b3:f9: 31:ce:7f:46:82:ed:c8:52:c9:15:27:15:22:0a:a4: b7:9b:f4:b5:2b:a0:72:91:3e:80:4f:a6:43:db:70: be:e7:b2:4c:0c:1a:12:2a:38:e3:f2:7d:b9:77:ed: 7c:9b:8b:70:3b:d4:0f:24:49:d0:34:b8:bf:a1:e5: d5:57:15:da:37:6c:ec:89:33:ff:bc:cd:85:01:f4: 6f:97:dd:e1:e6:24:a5:31:21:b4:1c:8a:c2:f3:66: 5b:66:d1:33:99:d5:09:20:bd:60:07:66:ca:24:26: 1e:8a:71:fa:27:91:cd:69:61:40:44:ad:f0:3a:17: ca:f4:36:dc:cd:b2:64:36:37:91:c8:59:11:e1:33: 1b:dd:0c:2c:16:bd:c1:d8:16:58:e0:5d:e3:f0:a6: 4e:d4:a4:dc:be:3b:24:44:43:63:fb:b9:88:f5:fd: 5f:91:42:bf:80:99:30:cd:ce:9d:e9:97:4e:b6:6f: fc:ab:d7:7f:56:de:de:05:f8:20:db:40:11:96:a0: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EA:07:94:7D:FA:1D:60:C8:3D:67:24:4A:5B:C6:1C:9C:B6:E1:95 X509v3 Authority Key Identifier: keyid:17:E6:9D:DC:29:A0:5B:2C:45:EE:3C:C5:A2:34:0B:2E:4C:6D:AD:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-ad3CmgWyxF7jzFojQLLkxtrV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/ieoHlH36HWDIPWckSlvGHJy24ZU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c8cc63-5305-4636-b336-e7176786f74a/1/F-ad3CmgWyxF7jzFojQLLkxtrV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.254.0/23 Signature Algorithm: sha256WithRSAEncryption 42:73:a7:26:3d:4f:1b:8f:08:e8:05:a9:5e:50:22:ea:6b:19: 39:51:76:eb:ae:9f:50:c8:b4:75:3a:0b:bc:9e:e9:bf:3d:12: 12:0c:6c:33:0f:c5:e3:a6:8a:e6:b4:7a:58:f1:66:df:9d:13: f8:cf:fd:e1:46:29:8e:47:65:c4:1e:0e:c5:d9:96:ec:01:fd: 16:b5:22:2e:1c:66:68:cd:f2:4d:5f:9b:2c:d7:fc:db:2b:e8: be:b5:7d:6c:80:c3:37:28:cc:aa:f8:25:ed:51:93:9d:ec:9e: db:e9:c5:f5:26:69:9b:23:e3:ff:c1:d9:ef:fa:42:46:95:f7: 52:c7:a6:4e:11:be:55:d0:c0:e7:e1:4d:13:0f:d8:fb:0a:66: 73:d7:2e:a5:d6:47:3e:e3:d8:ee:b1:56:9f:1f:88:11:f4:35: 7d:25:b1:d6:5c:66:6d:bc:3e:62:ee:2e:7f:d7:a2:a5:6b:4a: 45:dc:bd:88:34:b7:18:3c:bd:51:81:8b:a8:cb:e2:79:6a:3a: 8c:73:09:26:05:f1:b5:94:9a:cf:b8:20:be:d6:a3:7f:80:3d: 1d:c5:45:36:84:68:f1:1b:37:f9:a7:a6:65:f9:66:8a:2d:6b: eb:94:73:b5:af:9a:16:3b:41:62:14:8f:ea:24:7c:32:ad:82: 3b:a6:d3:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo0QT+6uutnuXIa4/BsVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZTY5ZGRjMjlhMDViMmM0NWVlM2NjNWEyMzQwYjJlNGM2 ZGFkNWQwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWVhMDc5NDdkZmExZDYwYzgzZDY3MjQ0YTViYzYxYzljYjZlMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0djpQk/iEfeBXXoOFT3Tr4lXiHyd uS5m5NziiJzK4+xukMjporC6Yl+iCV385q7hNznNEYbStF59s/kxzn9Ggu3IUskV JxUiCqS3m/S1K6BykT6AT6ZD23C+57JMDBoSKjjj8n25d+18m4twO9QPJEnQNLi/ oeXVVxXaN2zsiTP/vM2FAfRvl93h5iSlMSG0HIrC82ZbZtEzmdUJIL1gB2bKJCYe inH6J5HNaWFARK3wOhfK9DbczbJkNjeRyFkR4TMb3QwsFr3B2BZY4F3j8KZO1KTc vjskRENj+7mI9f1fkUK/gJkwzc6d6ZdOtm/8q9d/Vt7eBfgg20ARlqD6XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInqB5R9+h1gyD1nJEpbxhyctuGVMB8GA1UdIwQY MBaAFBfmndwpoFssRe48xaI0Cy5Mba1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYt ZTcxNzY3ODZmNzRhLzEvaWVvSGxIMzZIV0RJUFdja1NsdkdISnkyNFpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jOGNjNjMtNTMwNS00NjM2LWIzMzYtZTcxNzY3ODZmNzRh LzEvRi1hZDNDbWdXeXhGN2p6Rm9qUUxMa3h0clYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuV7+MA0G CSqGSIb3DQEBCwUAA4IBAQBCc6cmPU8bjwjoBaleUCLqaxk5UXbrrp9QyLR1Ogu8 num/PRISDGwzD8XjpormtHpY8WbfnRP4z/3hRimOR2XEHg7F2ZbsAf0WtSIuHGZo zfJNX5ss1/zbK+i+tX1sgMM3KMyq+CXtUZOd7J7b6cX1JmmbI+P/wdnv+kJGlfdS x6ZOEb5V0MDn4U0TD9j7CmZz1y6l1kc+49jusVafH4gR9DV9JbHWXGZtvD5i7i5/ 16Kla0pF3L2INLcYPL1RgYuoy+J5ajqMcwkmBfG1lJrPuCC+1qN/gD0dxUU2hGjx Gzf5p6Zl+WaKLWvrlHO1r5oWO0FiFI/qJHwyrYI7ptMH -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:04 2026 by rpki-client