This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa File: iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa (raw, json) Hash identifier: BJAnQ5jNp3+56VdM7I1DNZ4kS+Cwof8rsea2EH0Jkf0= Subject key identifier: 88:2E:D6:69:74:1A:4F:78:42:04:FE:6D:2F:9F:13:BE:D8:0B:E0:FC Certificate issuer: /CN=4098174db451d9fefdeec15f9b9c7929daae9980 Certificate serial: 019BC2C4D84C91B5ED2773E7EB30EC448E1F Authority key identifier: 40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa Signing time: Thu 15 Jan 2026 17:47:18 +0000 ROA not before: Thu 15 Jan 2026 17:47:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49605 IP address blocks: 185.62.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.mft rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c2:c4:d8:4c:91:b5:ed:27:73:e7:eb:30:ec:44:8e:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4098174db451d9fefdeec15f9b9c7929daae9980 Validity Not Before: Jan 15 17:47:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=882ed669741a4f784204fe6d2f9f13bed80be0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:41:6e:cc:73:7c:c6:87:8e:4a:77:c9:e8:e0: 75:fb:1e:fb:b8:0c:2b:51:e4:b9:74:51:25:e9:e2: 69:83:9f:bf:90:29:f6:2f:e1:48:23:29:b7:03:33: fd:dc:d8:23:af:07:ad:a1:51:79:f2:a3:13:6b:5a: f1:ca:20:b7:2a:2e:ec:b1:b6:4e:2b:76:ac:22:43: 56:b7:f2:88:0e:5e:88:18:6d:f9:c5:5e:b2:49:38: 62:d7:ce:6b:23:21:1d:43:27:f2:12:e5:32:df:1b: cb:6a:a6:02:72:ca:77:5d:7f:ae:88:de:bd:32:ab: 48:dc:62:e7:de:32:98:da:b6:55:9d:2b:01:3f:e3: f9:86:0d:e6:30:5f:f0:e9:5e:da:31:d3:30:8f:23: 43:71:fb:f8:e5:b9:32:69:82:25:64:04:ea:5f:16: 60:0c:8c:9f:1b:f2:c1:66:37:ac:e0:83:91:32:8a: c3:6a:f9:45:96:8e:65:63:05:d4:47:27:1e:cf:81: 44:49:98:f8:0e:ee:ca:dc:83:9a:0e:55:d0:31:20: 61:55:64:85:ab:9b:60:1e:de:b0:3f:5b:d0:cf:fc: 0a:b0:2e:74:14:cd:4c:f5:71:bf:45:eb:10:ff:8d: 07:9a:93:70:52:45:9b:ca:8a:3c:52:00:ad:66:e1: cb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:2E:D6:69:74:1A:4F:78:42:04:FE:6D:2F:9F:13:BE:D8:0B:E0:FC X509v3 Authority Key Identifier: keyid:40:98:17:4D:B4:51:D9:FE:FD:EE:C1:5F:9B:9C:79:29:DA:AE:99:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJgXTbRR2f797sFfm5x5KdqumYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/iC7WaXQaT3hCBP5tL58TvtgL4Pw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/7e1057-3d1a-4f6a-bf87-cfa8f9d9f81c/1/QJgXTbRR2f797sFfm5x5KdqumYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.28.0/22 Signature Algorithm: sha256WithRSAEncryption 78:48:e7:64:73:2a:20:4a:a1:34:3f:44:d4:30:27:42:91:d2: 69:32:63:6b:6c:12:55:95:1d:48:e1:42:91:6e:ee:18:da:eb: 43:c4:a3:a7:06:52:dc:f3:64:6e:b4:30:c6:9d:f0:fa:43:37: 6e:6c:ac:ae:36:0a:66:d4:f0:38:b1:9d:05:48:90:87:44:f0: 4a:79:40:ef:11:c1:b5:2d:77:81:aa:07:71:b0:36:56:b4:16: a5:3b:f3:7a:00:ff:39:a3:f5:89:1c:10:75:3a:40:8c:a9:16: 2a:9a:d1:d2:4d:61:9f:29:7c:31:76:ad:05:75:7c:bb:88:02: ac:99:47:77:80:a3:1d:45:0c:07:9f:1e:15:10:72:d0:fd:4a: 55:7e:f9:1a:8a:d3:53:64:26:7f:40:b4:0f:b9:4c:12:65:e4: 39:25:89:b8:49:4d:a7:d1:7d:d5:f1:31:24:e8:b9:94:c1:4a: d9:9a:84:e0:44:cb:09:89:df:cc:cb:30:9c:e4:96:17:32:aa: f9:42:0f:03:b1:f6:5d:38:f9:7b:b4:ea:b2:fc:5d:a3:5f:71: c6:94:37:17:f7:d2:6b:87:ae:1d:28:da:07:8c:fb:27:3f:b8: b1:04:5c:ae:6f:85:c0:77:1d:e5:ed:30:2a:b3:b6:2a:97:21: 38:d6:e8:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvCxNhMkbXtJ3Pn6zDsRI4fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOTgxNzRkYjQ1MWQ5ZmVmZGVlYzE1ZjliOWM3OTI5ZGFh ZTk5ODAwHhcNMjYwMTE1MTc0NzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODJlZDY2OTc0MWE0Zjc4NDIwNGZlNmQyZjlmMTNiZWQ4MGJlMGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUFuzHN8xoeOSnfJ6OB1+x77uAwr UeS5dFEl6eJpg5+/kCn2L+FIIym3AzP93NgjrwetoVF58qMTa1rxyiC3Ki7ssbZO K3asIkNWt/KIDl6IGG35xV6ySThi185rIyEdQyfyEuUy3xvLaqYCcsp3XX+uiN69 MqtI3GLn3jKY2rZVnSsBP+P5hg3mMF/w6V7aMdMwjyNDcfv45bkyaYIlZATqXxZg DIyfG/LBZjes4IORMorDavlFlo5lYwXURycez4FESZj4Du7K3IOaDlXQMSBhVWSF q5tgHt6wP1vQz/wKsC50FM1M9XG/ResQ/40HmpNwUkWbyoo8UgCtZuHLgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgu1ml0Gk94QgT+bS+fE77YC+D8MB8GA1UdIwQY MBaAFECYF020Udn+/e7BX5uceSnarpmAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODct Y2ZhOGY5ZDlmODFjLzEvaUM3V2FYUWFUM2hDQlA1dEw1OFR2dGdMNFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83ZTEwNTctM2QxYS00ZjZhLWJmODctY2ZhOGY5ZDlmODFj LzEvUUpnWFRiUlIyZjc5N3NGZm01eDVLZHF1bVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT4cMA0G CSqGSIb3DQEBCwUAA4IBAQB4SOdkcyogSqE0P0TUMCdCkdJpMmNrbBJVlR1I4UKR bu4Y2utDxKOnBlLc82RutDDGnfD6QzdubKyuNgpm1PA4sZ0FSJCHRPBKeUDvEcG1 LXeBqgdxsDZWtBalO/N6AP85o/WJHBB1OkCMqRYqmtHSTWGfKXwxdq0FdXy7iAKs mUd3gKMdRQwHnx4VEHLQ/UpVfvkaitNTZCZ/QLQPuUwSZeQ5JYm4SU2n0X3V8TEk 6LmUwUrZmoTgRMsJid/MyzCc5JYXMqr5Qg8DsfZdOPl7tOqy/F2jX3HGlDcX99Jr h64dKNoHjPsnP7ixBFyub4XAdx3l7TAqs7YqlyE41ui9 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:18 2026 by rpki-client