This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iFaMxfToISMhuIOtnklJbKH8sU0.roa File: iFaMxfToISMhuIOtnklJbKH8sU0.roa (raw, json) Hash identifier: kU5eLBTCsLrlHtahyO4pMWGlPVbZxhPgtGU2m2KhHJU= Subject key identifier: 88:56:8C:C5:F4:E8:21:23:21:B8:83:AD:9E:49:49:6C:A1:FC:B1:4D Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019B7FF17B42557EA3619640145D568A9E73 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iFaMxfToISMhuIOtnklJbKH8sU0.roa Signing time: Fri 02 Jan 2026 18:21:30 +0000 ROA not before: Fri 02 Jan 2026 18:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152672 IP address blocks: 185.39.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:7b:42:55:7e:a3:61:96:40:14:5d:56:8a:9e:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Jan 2 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88568cc5f4e8212321b883ad9e49496ca1fcb14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0c:35:3f:20:0f:fd:47:e5:64:75:de:6a:54: 33:1c:ba:12:5f:d0:79:fe:f4:e2:e7:2d:df:8e:d3: 1d:c2:31:32:eb:cf:dd:71:8d:9a:34:6e:e5:85:83: ee:34:6e:1c:26:88:42:d8:f8:cd:13:f4:c6:50:bf: cb:a8:a7:cb:dc:4c:a7:2b:46:98:ea:41:17:7c:11: 63:56:89:03:40:67:d9:97:b4:39:95:ac:98:9f:cf: 6a:6e:94:20:6a:81:b7:75:da:ee:13:da:83:43:d7: bb:e5:e1:a2:34:c2:df:23:6a:19:e6:af:d3:40:d0: c2:81:c5:2e:37:8e:c3:ff:1b:77:9c:de:67:bb:af: db:9e:db:6c:d7:b4:c6:e4:c1:a9:58:6f:04:7a:fd: e1:8a:db:97:6c:46:6d:56:3a:b5:ed:ad:b4:e4:f1: 2f:72:3e:b7:21:fb:2a:73:83:ad:96:ec:8e:6f:f3: 00:a1:b7:d0:59:55:86:5f:2e:93:e0:68:5d:54:5d: 0b:52:ac:dc:4d:55:c8:e2:c4:cd:33:32:9e:3c:8c: 0b:59:74:a3:b9:c2:40:66:eb:bd:95:b8:88:49:70: 65:38:90:5c:ce:1f:f1:b7:45:b1:a6:a9:83:2f:01: a7:87:3f:cd:c7:a5:bf:6b:06:b2:3e:1f:92:ea:40: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:56:8C:C5:F4:E8:21:23:21:B8:83:AD:9E:49:49:6C:A1:FC:B1:4D X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/iFaMxfToISMhuIOtnklJbKH8sU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.51.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:0c:5d:f4:10:0f:9d:8a:64:a2:21:92:b0:7f:15:de:38:3b: bc:0f:be:c5:32:7f:20:8d:8b:97:be:15:e0:e1:5f:40:7b:de: 49:f6:ee:6a:de:31:24:74:da:50:ed:76:7c:f3:84:fd:61:bc: 2c:1b:4f:b2:fd:92:51:b5:9a:8d:2c:b8:45:c1:53:67:6d:bd: 3a:ed:1a:ee:1c:b8:5b:d2:d0:b7:b3:ba:7b:24:c2:ae:44:a0: d7:8a:7b:f3:9f:22:c4:b6:c4:28:8e:fb:8c:b7:ae:5e:b0:49: e7:00:bf:a0:f9:8a:bd:84:b1:da:6a:09:93:5a:d7:28:b9:47: 50:cb:a7:a2:c7:c8:67:32:61:5b:e5:a7:00:73:02:32:6b:22: 1c:07:ea:03:92:ce:45:38:ab:6e:55:ab:89:bf:39:8c:0c:2b: e1:97:8f:d6:7c:8e:eb:c9:3d:f7:3d:5e:4a:8b:43:27:73:26: ad:58:42:92:bc:75:1f:e5:62:2d:24:3a:a0:c4:37:2c:59:0c: 3f:f1:37:7d:bb:66:40:eb:7a:a3:7d:5a:6d:f2:46:94:13:fa: 6f:a9:fb:c0:37:7e:37:12:7b:3a:ef:ea:69:31:56:67:3c:34: f0:b1:17:7e:97:b1:35:39:61:5c:f8:a1:b6:47:05:3d:d3:67: ed:3a:b7:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8XtCVX6jYZZAFF1Wip5zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjYwMTAyMTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODU2OGNjNWY0ZTgyMTIzMjFiODgzYWQ5ZTQ5NDk2Y2ExZmNiMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmww1PyAP/UflZHXealQzHLoSX9B5 /vTi5y3fjtMdwjEy68/dcY2aNG7lhYPuNG4cJohC2PjNE/TGUL/LqKfL3EynK0aY 6kEXfBFjVokDQGfZl7Q5layYn89qbpQgaoG3ddruE9qDQ9e75eGiNMLfI2oZ5q/T QNDCgcUuN47D/xt3nN5nu6/bntts17TG5MGpWG8Eev3hituXbEZtVjq17a205PEv cj63Ifsqc4OtluyOb/MAobfQWVWGXy6T4GhdVF0LUqzcTVXI4sTNMzKePIwLWXSj ucJAZuu9lbiISXBlOJBczh/xt0WxpqmDLwGnhz/Nx6W/awayPh+S6kDLLQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhWjMX06CEjIbiDrZ5JSWyh/LFNMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvaUZhTXhmVG9JU01odUlPdG5rbEpiS0g4c1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSczMA0G CSqGSIb3DQEBCwUAA4IBAQBaDF30EA+dimSiIZKwfxXeODu8D77FMn8gjYuXvhXg 4V9Ae95J9u5q3jEkdNpQ7XZ884T9YbwsG0+y/ZJRtZqNLLhFwVNnbb067RruHLhb 0tC3s7p7JMKuRKDXinvznyLEtsQojvuMt65esEnnAL+g+Yq9hLHaagmTWtcouUdQ y6eix8hnMmFb5acAcwIyayIcB+oDks5FOKtuVauJvzmMDCvhl4/WfI7ryT33PV5K i0MncyatWEKSvHUf5WItJDqgxDcsWQw/8Td9u2ZA63qjfVpt8kaUE/pvqfvAN343 Ens67+ppMVZnPDTwsRd+l7E1OWFc+KG2RwU902ftOrfj -----END CERTIFICATE-----Generated at Sat Jan 10 12:49:15 2026 by rpki-client