This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/IVyr9TDbDX_pP70HeSId022KL1g.roa File: IVyr9TDbDX_pP70HeSId022KL1g.roa (raw, json) Hash identifier: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc= Subject key identifier: 21:5C:AB:F5:30:DB:0D:7F:E9:3F:BD:07:79:22:1D:D3:6D:8A:2F:58 Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Certificate serial: 019B7D5B594D1E522A34179FF8C065F1E11A Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/IVyr9TDbDX_pP70HeSId022KL1g.roa Signing time: Fri 02 Jan 2026 06:18:17 +0000 ROA not before: Fri 02 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34863 IP address blocks: 193.26.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:59:4d:1e:52:2a:34:17:9f:f8:c0:65:f1:e1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Validity Not Before: Jan 2 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=215cabf530db0d7fe93fbd0779221dd36d8a2f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:53:89:c0:2c:2d:8d:e7:29:2d:78:20:9a:8a: 8c:fd:2e:b6:04:09:04:f7:04:66:4f:e9:18:70:42: bb:a6:23:4e:5d:10:2b:93:eb:30:26:8c:c8:c1:6e: 2a:8a:1c:89:03:56:33:d4:d0:e6:50:a9:28:f4:c1: 6d:1a:d0:23:36:59:9e:67:b8:30:73:9d:34:da:1e: 05:fb:46:87:e6:42:4a:17:3c:6c:18:8e:72:fd:3e: 6f:c2:32:07:28:46:d6:f0:ea:5e:27:e4:c9:d0:40: 90:c9:d9:f5:6b:f5:2f:cc:fe:33:4a:e5:90:ae:ce: 0b:f1:49:46:06:11:a7:f6:3d:c6:ad:50:27:4f:6f: fc:c4:23:7e:36:af:62:b1:ea:5d:fa:ba:b4:15:8c: ac:a1:fd:e9:f5:27:42:0d:8e:97:73:07:b3:99:54: 98:eb:c5:69:ab:02:89:b9:fc:f3:e5:58:c3:a5:80: 07:96:a8:c6:83:20:5a:97:32:6b:10:db:9a:80:08: e8:2a:bc:14:15:c7:ff:ad:c8:c2:7a:b4:cf:55:5c: b2:58:32:53:2c:a5:76:8a:86:5b:64:45:28:48:d6: f5:f5:d1:38:de:d9:14:6c:39:59:62:5b:16:b3:10: 2b:1c:c5:05:6f:f4:68:42:44:4d:25:b8:0d:71:b3: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:AB:F5:30:DB:0D:7F:E9:3F:BD:07:79:22:1D:D3:6D:8A:2F:58 X509v3 Authority Key Identifier: keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/IVyr9TDbDX_pP70HeSId022KL1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.28.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:00:d3:72:8e:23:f4:a9:06:a0:93:34:73:7f:1d:4d:02:cf: f0:2a:85:f9:0d:1d:e0:d4:7f:64:cb:13:f7:58:82:7a:35:7f: 38:a6:c1:5d:9b:68:d3:cb:09:63:f0:a9:10:de:34:e7:9c:2c: 90:c1:8f:9d:11:f5:f9:25:37:12:de:b6:8c:57:5f:5b:64:2f: 81:c4:9d:f0:83:32:39:32:27:91:c8:51:72:04:7f:ab:d5:cc: b4:d5:e9:aa:1c:5c:4d:78:d3:dd:fe:85:60:56:1d:45:11:d4: f3:a8:38:9a:49:6d:5e:24:cf:15:5b:7e:3c:46:0f:a6:3c:6e: 2f:ca:8a:86:92:5b:6f:db:11:9f:2e:3f:07:f5:9d:2e:5f:96: 8c:78:26:8e:2f:d0:a4:b6:81:19:3b:f4:96:e8:d5:ca:b5:d4: b8:f2:d4:07:da:dd:31:dd:3c:00:20:ee:d3:ea:5a:4c:6f:26: bb:cd:d1:10:50:a0:07:53:92:67:e6:e1:73:0a:1b:01:10:43: c1:52:13:72:c5:38:e0:f3:82:79:72:2e:e6:25:e0:15:ba:ed: 04:f4:2b:ec:ce:80:56:20:62:12:5c:da:ca:2d:9b:0c:60:d6: bb:21:a6:5e:3d:c1:50:c0:83:59:29:6b:bc:64:5f:a4:a1:18: ae:8d:7b:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W1lNHlIqNBef+MBl8eEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3 YzNlM2QwHhcNMjYwMTAyMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTVjYWJmNTMwZGIwZDdmZTkzZmJkMDc3OTIyMWRkMzZkOGEyZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51OJwCwtjecpLXggmoqM/S62BAkE 9wRmT+kYcEK7piNOXRArk+swJozIwW4qihyJA1Yz1NDmUKko9MFtGtAjNlmeZ7gw c5002h4F+0aH5kJKFzxsGI5y/T5vwjIHKEbW8OpeJ+TJ0ECQydn1a/UvzP4zSuWQ rs4L8UlGBhGn9j3GrVAnT2/8xCN+Nq9isepd+rq0FYysof3p9SdCDY6XcwezmVSY 68VpqwKJufzz5VjDpYAHlqjGgyBalzJrENuagAjoKrwUFcf/rcjCerTPVVyyWDJT LKV2ioZbZEUoSNb19dE43tkUbDlZYlsWsxArHMUFb/RoQkRNJbgNcbPzswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFcq/Uw2w1/6T+9B3kiHdNtii9YMB8GA1UdIwQY MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt MWYyNDUwMDJkNjQwLzEvSVZ5cjlURGJEWF9wUDcwSGVTSWQwMjJLTDFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRocMA0G CSqGSIb3DQEBCwUAA4IBAQAMANNyjiP0qQagkzRzfx1NAs/wKoX5DR3g1H9kyxP3 WIJ6NX84psFdm2jTywlj8KkQ3jTnnCyQwY+dEfX5JTcS3raMV19bZC+BxJ3wgzI5 MieRyFFyBH+r1cy01emqHFxNeNPd/oVgVh1FEdTzqDiaSW1eJM8VW348Rg+mPG4v yoqGkltv2xGfLj8H9Z0uX5aMeCaOL9CktoEZO/SW6NXKtdS48tQH2t0x3TwAIO7T 6lpMbya7zdEQUKAHU5Jn5uFzChsBEEPBUhNyxTjg84J5ci7mJeAVuu0E9CvszoBW IGISXNrKLZsMYNa7IaZePcFQwINZKWu8ZF+koRiujXsu -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:01 2026 by rpki-client