This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/esQiMgPaySQVW0k54pO3jc5Zyuc.roa File: esQiMgPaySQVW0k54pO3jc5Zyuc.roa (raw, json) Hash identifier: 2aftWcOZmt2bVeY6qt170y22emZnUo4u4rs+oiqH7rU= Subject key identifier: 7A:C4:22:32:03:DA:C9:24:15:5B:49:39:E2:93:B7:8D:CE:59:CA:E7 Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 019B7E3825A0BD235AD26D6AA06D603D251F Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/esQiMgPaySQVW0k54pO3jc5Zyuc.roa Signing time: Fri 02 Jan 2026 10:19:27 +0000 ROA not before: Fri 02 Jan 2026 10:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152179 IP address blocks: 185.126.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:25:a0:bd:23:5a:d2:6d:6a:a0:6d:60:3d:25:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: Jan 2 10:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ac4223203dac924155b4939e293b78dce59cae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:05:fc:b3:12:76:ce:cc:4b:7e:29:64:c3:9c: 48:46:af:b6:5c:8a:9c:7b:f8:26:99:d3:74:bd:c3: e3:6b:28:56:75:94:60:37:8d:0c:b9:f1:c5:b6:d3: 15:35:65:56:84:40:34:34:43:95:69:47:15:de:77: 9b:49:80:32:56:30:40:e8:b6:df:cb:0d:61:ab:f3: d2:0f:c9:90:0b:99:e4:af:19:2b:18:b4:ba:d2:cf: e4:51:2c:b8:48:be:2b:40:1c:38:1b:b6:19:07:6e: 21:bc:49:a1:99:46:24:e9:97:15:89:22:60:19:52: 64:5d:28:45:5e:5b:3c:06:4c:7b:78:24:19:0a:6c: a4:b7:52:cd:bc:00:1b:bb:be:1c:f1:01:3f:be:d4: 9e:e4:75:6e:d5:e3:bb:bf:da:fe:88:8c:8f:e0:32: 8e:74:04:68:71:1e:ed:d5:33:ea:72:e9:19:62:d2: 2d:01:8f:10:3b:35:f9:e0:98:60:19:3f:d3:8c:9c: 49:1b:3f:18:32:c6:24:5d:bd:ce:00:e4:f0:c6:7f: 7b:e8:56:85:47:5d:9d:d2:bd:18:88:52:49:b8:b2: 00:93:b0:69:ea:d7:1b:0a:f8:94:fc:e6:f6:fc:d0: 56:83:46:a0:36:39:68:5c:c7:76:3e:3c:ea:8d:e7: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C4:22:32:03:DA:C9:24:15:5B:49:39:E2:93:B7:8D:CE:59:CA:E7 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/esQiMgPaySQVW0k54pO3jc5Zyuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.126.134.0/23 Signature Algorithm: sha256WithRSAEncryption 85:cb:d3:8e:bb:b0:bb:6c:b5:8d:ed:f4:af:7d:bd:c4:1d:a4: 49:4d:62:7f:1e:30:90:c8:b9:66:e9:04:b3:9d:d6:7d:eb:19: 89:48:51:2b:8c:da:a8:d0:3f:bd:1a:ec:0a:df:fe:4c:63:77: 0d:73:e6:d3:92:16:14:b8:38:91:a3:c6:a8:a2:b6:c6:99:ea: 75:89:7e:4e:3b:2b:10:f4:e2:23:ef:3c:bf:0b:a1:33:41:e7: 59:5d:f6:89:80:03:27:58:1c:a1:e7:97:c0:cf:fc:e8:96:5a: a2:89:d3:39:f8:ff:5e:ec:b6:95:ff:2f:0e:4a:94:e6:a9:4d: 6c:1a:40:a7:7f:5b:fa:b4:86:26:e0:69:90:59:a6:c8:5c:6b: 3f:97:47:e9:c4:6d:a4:f6:e5:be:f1:4b:0a:e6:db:a9:89:45: cf:12:56:7f:ab:b4:ed:b0:db:02:81:c4:75:4a:53:fe:b6:74: f9:f6:93:9c:06:8b:33:66:24:c9:12:e4:34:83:0e:df:f3:17: 31:b1:eb:59:3a:59:1f:1d:93:d9:18:7a:ff:74:1c:e8:a4:b8: ee:43:72:03:36:59:de:63:8b:f2:7a:a1:b9:7f:5a:fa:9b:c0: ae:32:6d:72:2b:c8:e8:69:20:fc:f9:20:7a:8c:21:38:e5:e4: eb:43:87:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OCWgvSNa0m1qoG1gPSUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjYwMTAyMTAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWM0MjIzMjAzZGFjOTI0MTU1YjQ5MzllMjkzYjc4ZGNlNTljYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwX8sxJ2zsxLfilkw5xIRq+2XIqc e/gmmdN0vcPjayhWdZRgN40MufHFttMVNWVWhEA0NEOVaUcV3nebSYAyVjBA6Lbf yw1hq/PSD8mQC5nkrxkrGLS60s/kUSy4SL4rQBw4G7YZB24hvEmhmUYk6ZcViSJg GVJkXShFXls8Bkx7eCQZCmykt1LNvAAbu74c8QE/vtSe5HVu1eO7v9r+iIyP4DKO dARocR7t1TPqcukZYtItAY8QOzX54JhgGT/TjJxJGz8YMsYkXb3OAOTwxn976FaF R12d0r0YiFJJuLIAk7Bp6tcbCviU/Ob2/NBWg0agNjloXMd2Pjzqjedx9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHrEIjID2skkFVtJOeKTt43OWcrnMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvZXNRaU1nUGF5U1FWVzBrNTRwTzNqYzVaeXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuX6GMA0G CSqGSIb3DQEBCwUAA4IBAQCFy9OOu7C7bLWN7fSvfb3EHaRJTWJ/HjCQyLlm6QSz ndZ96xmJSFErjNqo0D+9GuwK3/5MY3cNc+bTkhYUuDiRo8aoorbGmep1iX5OOysQ 9OIj7zy/C6EzQedZXfaJgAMnWByh55fAz/zollqiidM5+P9e7LaV/y8OSpTmqU1s GkCnf1v6tIYm4GmQWabIXGs/l0fpxG2k9uW+8UsK5tupiUXPElZ/q7TtsNsCgcR1 SlP+tnT59pOcBoszZiTJEuQ0gw7f8xcxsetZOlkfHZPZGHr/dBzopLjuQ3IDNlne Y4vyeqG5f1r6m8CuMm1yK8joaSD8+SB6jCE45eTrQ4fe -----END CERTIFICATE-----Generated at Mon Jan 19 11:18:01 2026 by rpki-client