This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/i1ce_KCZyzzJnWCLHJltrqd5osU.roa File: i1ce_KCZyzzJnWCLHJltrqd5osU.roa (raw, json) Hash identifier: YFwwgtjx89C2fEmhpNXxjUv1MUQKaMCAp+nvJdfMp5o= Subject key identifier: 8B:57:1E:FC:A0:99:CB:3C:C9:9D:60:8B:1C:99:6D:AE:A7:79:A2:C5 Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417 Certificate serial: 019B7C802A892B21E8F20603F4D82B4A7A71 Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/i1ce_KCZyzzJnWCLHJltrqd5osU.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40065 IP address blocks: 193.134.208.0/24 maxlen: 24 193.134.209.0/24 maxlen: 24 193.134.210.0/24 maxlen: 24 193.134.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:2a:89:2b:21:e8:f2:06:03:f4:d8:2b:4a:7a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b571efca099cb3cc99d608b1c996daea779a2c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:b4:fd:4a:1b:54:c0:69:d6:19:74:9c:82: fc:d5:13:20:d0:fa:75:51:28:fd:2e:15:e8:13:0e: ed:d6:29:5c:38:b1:19:ea:15:63:d0:cb:2a:26:34: 1d:b5:11:85:ad:91:fe:9c:2c:fc:b4:df:71:6c:54: d4:1e:dd:77:b0:8c:76:28:0e:46:fe:63:a4:19:ce: 2e:39:85:7e:5e:72:a6:33:c1:6b:a2:2e:4b:89:57: 79:b8:02:03:00:73:88:f3:74:1a:b6:29:9b:a2:04: 99:05:2b:ef:1f:21:f0:f6:4f:45:25:4b:4b:a4:ad: f2:e3:b5:42:31:b8:4a:2b:31:ee:4b:ff:cc:1a:30: 03:44:bb:d8:15:bc:1c:be:78:0f:7b:b7:1d:00:00: 82:35:4b:a1:43:28:4d:b4:2a:18:56:b4:eb:0b:4c: 14:ff:a4:c1:27:3f:50:68:df:8c:d1:e6:0e:cd:4c: c4:c4:bd:22:ac:85:6a:12:c8:34:c2:db:64:64:eb: 2c:f0:96:ce:a8:59:d3:1d:f9:7d:e5:2d:31:b7:a2: a6:59:4e:6c:09:0d:e2:9f:99:86:2f:d4:60:9f:55: 02:38:c4:5d:e1:2d:0e:68:c5:40:8b:11:58:85:f8: 3c:a7:a0:64:92:31:34:2e:6a:f5:8c:1c:bf:2d:ed: 13:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:57:1E:FC:A0:99:CB:3C:C9:9D:60:8B:1C:99:6D:AE:A7:79:A2:C5 X509v3 Authority Key Identifier: keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/i1ce_KCZyzzJnWCLHJltrqd5osU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.134.208.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:44:5f:d6:5a:e8:16:16:4a:12:c0:fd:f3:cb:ac:1d:e9:2b: bb:c5:90:bc:90:cf:41:87:5c:29:b8:49:82:fb:16:a3:20:0f: af:2f:66:c5:c4:e8:16:1d:f4:9b:39:f1:cc:cc:1a:1e:18:0d: 4a:63:30:58:77:2e:f6:f7:6c:c9:65:2c:20:df:49:18:fc:eb: 87:23:fc:11:b2:a0:09:59:b7:a0:94:00:9e:53:28:a1:9b:91: 11:b0:7a:25:d8:17:c4:80:68:e8:6d:f9:1c:a0:b3:6f:79:d5: 53:44:c5:8a:85:d9:b6:a8:d8:de:5f:4a:16:aa:90:71:9b:98: 4d:fd:05:18:1b:fc:7b:67:cb:4a:85:3c:f8:3c:65:52:62:cf: 32:f9:78:a3:6f:44:88:fe:ed:41:d2:fd:dd:a9:b6:a2:4d:26: 09:e2:24:6f:17:3c:91:3f:9f:33:e4:a0:47:cf:6a:11:21:35: de:d7:60:04:27:92:64:5d:20:96:e4:f5:e3:2f:1f:0b:71:86: a7:29:f1:6e:f7:2f:71:85:ef:7e:30:35:eb:a3:d5:77:c4:6e: 67:91:48:b7:82:30:91:78:40:45:ae:14:8c:dc:47:06:0b:e7: 86:c7:1e:26:15:c2:9f:01:18:97:dc:51:90:c1:bb:36:b0:d9: d8:8c:ce:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCqJKyHo8gYD9NgrSnpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5NzI0NWQwNDkyZWVkZTU5YjA0NWI1YmUxZmQ0ZWI5MTYx YmM0MTcwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjU3MWVmY2EwOTljYjNjYzk5ZDYwOGIxYzk5NmRhZWE3NzlhMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUq0/UobVMBp1hl0nIL81RMg0Pp1 USj9LhXoEw7t1ilcOLEZ6hVj0MsqJjQdtRGFrZH+nCz8tN9xbFTUHt13sIx2KA5G /mOkGc4uOYV+XnKmM8Froi5LiVd5uAIDAHOI83QatimbogSZBSvvHyHw9k9FJUtL pK3y47VCMbhKKzHuS//MGjADRLvYFbwcvngPe7cdAACCNUuhQyhNtCoYVrTrC0wU /6TBJz9QaN+M0eYOzUzExL0irIVqEsg0wttkZOss8JbOqFnTHfl95S0xt6KmWU5s CQ3in5mGL9Rgn1UCOMRd4S0OaMVAixFYhfg8p6BkkjE0Lmr1jBy/Le0T4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItXHvygmcs8yZ1gixyZba6neaLFMB8GA1UdIwQY MBaAFDlyRdBJLu3lmwRbW+H9TrkWG8QXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEt YzQ0MmExOGYxZWZjLzEvaTFjZV9LQ1p5enpKbldDTEhKbHRycWQ1b3NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lZWQ5Y2UtYWVmOS00ZmM5LThhNGEtYzQ0MmExOGYxZWZj LzEvT1hKRjBFa3U3ZVdiQkZ0YjRmMU91UllieEJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwYbQMA0G CSqGSIb3DQEBCwUAA4IBAQALRF/WWugWFkoSwP3zy6wd6Su7xZC8kM9Bh1wpuEmC +xajIA+vL2bFxOgWHfSbOfHMzBoeGA1KYzBYdy7292zJZSwg30kY/OuHI/wRsqAJ WbeglACeUyihm5ERsHol2BfEgGjobfkcoLNvedVTRMWKhdm2qNjeX0oWqpBxm5hN /QUYG/x7Z8tKhTz4PGVSYs8y+Xijb0SI/u1B0v3dqbaiTSYJ4iRvFzyRP58z5KBH z2oRITXe12AEJ5JkXSCW5PXjLx8LcYanKfFu9y9xhe9+MDXro9V3xG5nkUi3gjCR eEBFrhSM3EcGC+eGxx4mFcKfARiX3FGQwbs2sNnYjM49 -----END CERTIFICATE-----Generated at Tue Jan 20 06:02:48 2026 by rpki-client