This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/IgM6KG_cFIv3yTxZ54UVvx7Fb7A.roa File: IgM6KG_cFIv3yTxZ54UVvx7Fb7A.roa (raw, json) Hash identifier: jsofh7s+h+bPmd2o2jStpIG5pq9+JMcDa4oJTaI+phA= Subject key identifier: 22:03:3A:28:6F:DC:14:8B:F7:C9:3C:59:E7:85:15:BF:1E:C5:6F:B0 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019B79112975DD4E04F68ADAB79539333A06 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/IgM6KG_cFIv3yTxZ54UVvx7Fb7A.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64457 IP address blocks: 188.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 10:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:29:75:dd:4e:04:f6:8a:da:b7:95:39:33:3a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22033a286fdc148bf7c93c59e78515bf1ec56fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:0f:85:3b:22:87:ee:d5:92:21:59:b2:14: 61:b8:ce:74:9c:e2:2d:b8:8b:76:42:ad:f0:00:86: 88:38:aa:03:2c:31:e3:e8:9c:4c:dc:c0:aa:df:a0: 22:a8:53:51:ea:b2:8d:d3:23:93:05:bf:3e:51:43: 44:f1:62:87:6f:05:8c:82:cb:9e:01:f7:4e:49:ba: 9a:cd:f5:a8:2e:97:01:18:1d:b9:cf:7b:d9:96:70: 7c:9d:19:21:fa:bb:fb:f2:64:d8:8a:e7:de:80:31: fb:8c:8a:1f:6d:4e:8f:75:90:81:cd:33:e4:d8:27: 6f:30:eb:5f:b4:e8:e4:43:93:41:58:78:9b:7c:d7: b6:f5:f6:df:17:6f:9b:71:29:3d:61:7a:97:c7:cf: 6a:23:57:43:11:0f:f1:2c:8b:90:77:3d:2f:a4:bd: af:98:d0:ee:8d:42:27:6b:9f:95:ff:f3:08:e0:b7: 6b:91:4e:5c:b7:41:02:50:13:0c:74:80:57:e6:63: 6d:26:e9:e0:88:e1:09:52:97:da:c3:26:50:48:c7: c9:7b:32:6f:4a:76:27:f3:64:4d:68:69:e3:a5:f4: 82:d3:c4:ec:47:2e:9f:d3:c9:e1:1f:59:ee:25:cb: c9:67:18:e9:95:fc:9c:4c:46:68:0e:96:f3:aa:cd: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:3A:28:6F:DC:14:8B:F7:C9:3C:59:E7:85:15:BF:1E:C5:6F:B0 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/IgM6KG_cFIv3yTxZ54UVvx7Fb7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.137.159.0/24 Signature Algorithm: sha256WithRSAEncryption 69:6f:6a:0c:cd:cc:ac:27:1a:1e:46:4d:f4:67:88:53:54:de: 14:12:5e:26:df:fb:eb:cc:76:d4:d5:d2:b6:59:35:46:af:b6: cd:69:41:0a:ff:52:82:47:96:60:2e:2e:b6:14:49:a1:70:11: d0:31:be:f8:71:1a:10:57:0e:db:6b:d3:73:0a:89:57:8d:86: 09:10:36:9e:8f:cd:2f:c4:c0:e5:1d:6e:a2:4e:96:08:0b:39: c2:43:a3:89:d4:e9:35:5d:70:00:9f:5d:91:fd:96:7e:94:d0: 41:cb:2f:27:10:59:70:e2:11:5c:11:3e:95:b3:ea:f4:17:9c: 0f:81:9b:b6:ef:bd:f1:17:c4:4d:ba:1c:0a:99:af:cf:45:26: bc:c7:9e:6f:00:6d:c8:3b:af:45:d4:94:de:dc:bd:44:88:ef: fc:7c:e3:bb:a9:bd:b1:ba:a9:3a:45:67:a7:45:0d:3d:46:82: a6:22:ac:1e:22:29:1b:2e:22:69:bf:98:6f:7e:eb:cc:21:73: 7d:b8:a8:c3:79:ac:27:7c:e0:0c:db:52:cc:f6:36:62:87:0e: a5:2e:ad:ae:02:ed:d9:82:64:4d:b8:80:9b:71:30:f5:6a:7f: 22:c8:fb:0b:51:d1:fe:f7:17:ed:9b:4b:29:a6:cb:8c:36:13: af:bd:aa:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESl13U4E9orat5U5MzoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjAzM2EyODZmZGMxNDhiZjdjOTNjNTllNzg1MTViZjFlYzU2ZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+0PhTsih+7VkiFZshRhuM50nOIt uIt2Qq3wAIaIOKoDLDHj6JxM3MCq36AiqFNR6rKN0yOTBb8+UUNE8WKHbwWMgsue AfdOSbqazfWoLpcBGB25z3vZlnB8nRkh+rv78mTYiufegDH7jIofbU6PdZCBzTPk 2CdvMOtftOjkQ5NBWHibfNe29fbfF2+bcSk9YXqXx89qI1dDEQ/xLIuQdz0vpL2v mNDujUIna5+V//MI4LdrkU5ct0ECUBMMdIBX5mNtJungiOEJUpfawyZQSMfJezJv SnYn82RNaGnjpfSC08TsRy6f08nhH1nuJcvJZxjplfycTEZoDpbzqs2YwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIDOihv3BSL98k8WeeFFb8exW+wMB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvSWdNNktHX2NGSXYzeVR4WjU0VVZ2eDdGYjdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvImfMA0G CSqGSIb3DQEBCwUAA4IBAQBpb2oMzcysJxoeRk30Z4hTVN4UEl4m3/vrzHbU1dK2 WTVGr7bNaUEK/1KCR5ZgLi62FEmhcBHQMb74cRoQVw7ba9NzColXjYYJEDaej80v xMDlHW6iTpYICznCQ6OJ1Ok1XXAAn12R/ZZ+lNBByy8nEFlw4hFcET6Vs+r0F5wP gZu2773xF8RNuhwKma/PRSa8x55vAG3IO69F1JTe3L1EiO/8fOO7qb2xuqk6RWen RQ09RoKmIqweIikbLiJpv5hvfuvMIXN9uKjDeawnfOAM21LM9jZihw6lLq2uAu3Z gmRNuICbcTD1an8iyPsLUdH+9xftm0sppsuMNhOvvao3 -----END CERTIFICATE-----Generated at Thu Jan 1 20:38:34 2026 by rpki-client