This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iuxiuHDba75hed3_79e3b5YuUp0.roa File: iuxiuHDba75hed3_79e3b5YuUp0.roa (raw, json) Hash identifier: ZTFMH1L06N86tP0CYfbN0aeQPxVef2v6/eO8q1EBWOE= Subject key identifier: 8A:EC:62:B8:70:DB:6B:BE:61:79:DD:FF:EF:D7:B7:6F:96:2E:52:9D Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12E4862A15C2239607451B07337BCB Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iuxiuHDba75hed3_79e3b5YuUp0.roa Signing time: Fri 02 Jan 2026 00:19:31 +0000 ROA not before: Fri 02 Jan 2026 00:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199163 IP address blocks: 185.121.68.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:e4:86:2a:15:c2:23:96:07:45:1b:07:33:7b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aec62b870db6bbe6179ddffefd7b76f962e529d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:07:02:23:82:e3:a3:77:a6:f7:a2:2a:d0:d4: f2:77:7e:7f:0b:dd:b2:03:ce:b8:55:f0:1d:e3:14: 19:fc:89:4c:1e:6a:f0:ac:71:59:eb:6c:06:74:ad: 64:27:ec:6e:5f:50:ad:23:06:c8:96:b2:f1:01:fc: d0:89:f7:09:2c:a8:dc:7d:f3:22:90:0c:95:36:22: 0c:3e:44:04:2b:64:da:59:cc:ad:f0:4b:55:65:48: 34:b0:84:d7:ee:74:13:d5:4b:11:43:e7:1e:23:40: 45:8e:04:2a:67:0c:54:4a:26:4b:11:8f:fa:11:cf: 1c:05:9b:1b:89:1b:0f:e0:8f:f2:35:11:f2:cb:f2: 82:7d:2c:8a:90:4a:b4:17:f1:a1:cd:95:a3:18:97: 3c:8a:2b:bd:a0:58:38:aa:ef:89:7d:fb:00:96:59: 97:4a:ee:f5:40:b5:46:84:86:bc:d5:2c:74:27:d5: 65:02:3d:1c:72:fa:7d:81:b8:ef:65:a0:61:51:10: d7:6a:b5:33:85:8d:1f:17:03:2e:64:27:b8:4f:63: 82:3b:bf:95:d5:ec:9f:47:b1:dd:a9:5f:db:33:67: 1e:52:64:c7:d0:f1:10:47:04:1a:26:17:61:16:35: 90:82:5b:58:76:7e:b0:d3:c1:5d:e2:e8:db:82:2d: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:62:B8:70:DB:6B:BE:61:79:DD:FF:EF:D7:B7:6F:96:2E:52:9D X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/iuxiuHDba75hed3_79e3b5YuUp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.68.0/24 Signature Algorithm: sha256WithRSAEncryption d1:cd:ba:1c:6a:c0:66:70:5c:63:44:10:33:ab:55:7f:67:31: d1:e8:a2:74:78:fa:51:c8:6e:03:42:8c:1e:76:f9:f7:0c:3c: 56:26:50:db:c2:8a:9c:c9:02:e1:7c:3f:28:aa:94:18:41:09: e4:72:35:99:7b:e2:ef:0f:60:f1:a4:d0:7e:20:05:7e:90:5d: 8c:38:69:26:36:3d:c5:4d:ee:d4:14:ce:34:95:77:cb:a4:44: 67:22:f6:5e:e2:32:4e:b5:b5:c7:95:58:eb:87:d6:a2:fe:d0: 8b:24:2b:3a:89:dd:a9:31:57:14:dd:b7:07:e2:1b:93:70:ca: 2f:e6:7e:a6:b1:26:16:76:2a:83:71:d3:bc:c1:dc:e3:97:ec: 5d:b4:80:6a:32:e6:5b:02:4e:ea:81:2f:3c:21:cc:c9:2b:b5: d1:8d:59:61:e3:b0:29:1d:25:34:5a:ed:de:4a:c7:75:46:b3: ba:c8:65:26:b5:ab:96:bf:a9:1a:cd:6e:94:80:70:29:ed:40: 11:72:06:aa:a1:0d:4b:5e:f2:00:28:30:cb:6f:76:c3:44:ec: 81:69:e2:5a:48:d1:01:41:ec:1a:5a:23:2a:1e:74:a9:31:c6: 4a:8e:dc:0c:a7:12:5d:b5:9b:95:0e:ca:11:ff:21:3a:60:8f: 09:c3:e9:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EuSGKhXCI5YHRRsHM3vLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWVjNjJiODcwZGI2YmJlNjE3OWRkZmZlZmQ3Yjc2Zjk2MmU1MjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAcCI4Ljo3em96Iq0NTyd35/C92y A864VfAd4xQZ/IlMHmrwrHFZ62wGdK1kJ+xuX1CtIwbIlrLxAfzQifcJLKjcffMi kAyVNiIMPkQEK2TaWcyt8EtVZUg0sITX7nQT1UsRQ+ceI0BFjgQqZwxUSiZLEY/6 Ec8cBZsbiRsP4I/yNRHyy/KCfSyKkEq0F/GhzZWjGJc8iiu9oFg4qu+JffsAllmX Su71QLVGhIa81Sx0J9VlAj0ccvp9gbjvZaBhURDXarUzhY0fFwMuZCe4T2OCO7+V 1eyfR7HdqV/bM2ceUmTH0PEQRwQaJhdhFjWQgltYdn6w08Fd4ujbgi3eFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrsYrhw22u+YXnd/+/Xt2+WLlKdMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvaXV4aXVIRGJhNzVoZWQzXzc5ZTNiNVl1VXAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXlEMA0G CSqGSIb3DQEBCwUAA4IBAQDRzbocasBmcFxjRBAzq1V/ZzHR6KJ0ePpRyG4DQowe dvn3DDxWJlDbwoqcyQLhfD8oqpQYQQnkcjWZe+LvD2DxpNB+IAV+kF2MOGkmNj3F Te7UFM40lXfLpERnIvZe4jJOtbXHlVjrh9ai/tCLJCs6id2pMVcU3bcH4huTcMov 5n6msSYWdiqDcdO8wdzjl+xdtIBqMuZbAk7qgS88IczJK7XRjVlh47ApHSU0Wu3e Ssd1RrO6yGUmtauWv6kazW6UgHAp7UARcgaqoQ1LXvIAKDDLb3bDROyBaeJaSNEB QewaWiMqHnSpMcZKjtwMpxJdtZuVDsoR/yE6YI8Jw+nF -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:28 2026 by rpki-client