This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa File: IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa (raw, json) Hash identifier: gTefC/kLKJlQRjCqhwo1qEZQvhe2YWlgNO1XB76+Uz8= Subject key identifier: 21:B2:B2:A7:DF:D4:BA:46:B1:D5:0F:19:23:E2:B7:BD:8D:28:A1:94 Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Certificate serial: 019B7F84FE815E3C8B6281EBA62D41987683 Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206255 IP address blocks: 185.174.196.0/24 maxlen: 24 185.174.197.0/24 maxlen: 24 185.174.198.0/24 maxlen: 24 185.174.199.0/24 maxlen: 24 2a11:b880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fe:81:5e:3c:8b:62:81:eb:a6:2d:41:98:76:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21b2b2a7dfd4ba46b1d50f1923e2b7bd8d28a194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:40:21:0b:27:ee:9f:5f:1f:8c:78:a8:0b:16: b7:9d:0e:7d:c0:51:88:6f:4b:02:45:ce:0d:a3:01: d5:67:95:0c:f4:1d:93:d4:e3:e4:22:bf:0b:62:a9: c0:9b:9a:d2:a5:1e:25:78:17:90:48:90:51:8f:17: 7b:b0:5e:9a:47:3f:c9:3b:ef:d4:4e:3e:30:06:a5: bb:4e:09:1a:2c:f9:83:f6:4c:d6:62:c2:05:64:90: 1c:58:a2:23:10:49:1e:52:b5:6e:d1:18:b2:51:48: 1e:45:2e:b9:5e:e8:00:f0:58:bf:7b:20:c0:8a:89: 76:a8:95:01:5e:49:19:c4:f1:79:6c:1c:f8:17:d3: c7:39:13:cd:36:ed:22:0f:7b:d4:b8:85:30:56:2e: fe:36:6b:82:a2:22:86:e2:4d:87:a1:86:9b:8e:4c: d1:30:a8:59:77:d7:47:82:31:ba:18:30:77:a9:c0: 14:11:26:24:ce:f4:9d:39:28:f7:71:49:99:c7:ce: cb:37:b1:a8:b2:a7:20:8a:d5:a0:b7:38:81:3d:f2: 2c:17:9d:a7:e8:cd:75:3f:b8:f1:96:42:61:34:63: 6b:8c:d1:8a:77:d5:cb:27:0d:65:4d:92:c2:2a:59: 4f:21:aa:9e:30:01:25:2a:59:65:ac:35:da:c4:1d: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B2:B2:A7:DF:D4:BA:46:B1:D5:0F:19:23:E2:B7:BD:8D:28:A1:94 X509v3 Authority Key Identifier: keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/IbKyp9_Uukax1Q8ZI-K3vY0ooZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.196.0/22 IPv6: 2a11:b880::/29 Signature Algorithm: sha256WithRSAEncryption 89:80:9f:ae:e6:df:36:d3:3e:6b:41:1b:c4:bf:88:67:54:c5: 70:ee:95:b5:2f:32:12:04:44:3b:85:1e:00:69:5c:34:b4:61: 85:57:d1:4c:63:57:02:2b:81:80:58:14:8e:b7:f1:a7:50:39: 76:04:c3:9d:8d:78:0c:63:ab:41:d0:0d:4a:aa:28:7c:c3:5a: 64:45:77:98:e7:2e:16:d5:68:fa:a2:6b:9d:c6:d8:60:dd:a0: c1:cb:0e:0f:44:33:b4:32:7f:af:b8:e2:3d:3b:03:09:c9:16: 1b:60:bf:cd:a5:76:39:5a:63:f0:1d:27:48:4f:97:43:76:a9: fd:db:43:a2:29:3b:a2:00:77:8e:39:74:6e:df:fc:81:1e:cc: 8b:52:b4:62:36:f3:3d:e2:68:f2:44:75:e0:37:c9:3d:41:ff: 07:46:06:86:d5:50:e7:fb:d7:3f:d5:a2:cd:5a:14:5f:71:ed: 2d:0e:2a:5a:ee:75:23:a1:6c:04:18:4d:c0:30:41:f4:fb:da: d4:59:02:5d:df:31:4e:dc:ae:6e:97:cd:e4:20:05:81:88:f2: 92:6d:d0:e7:70:8a:5a:12:3e:bd:53:84:d5:84:3e:79:41:db: 2f:47:81:b1:16:0d:7c:87:b4:34:ed:fc:9d:aa:c1:db:1f:19: 4c:2b:6b:c4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/hP6BXjyLYoHrpi1BmHaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZjBiMGI0NmEwOGQxZTcwZmNiZGQ4NzdhZDkzOWEwMTMy ZTEyNjkwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWIyYjJhN2RmZDRiYTQ2YjFkNTBmMTkyM2UyYjdiZDhkMjhhMTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUAhCyfun18fjHioCxa3nQ59wFGI b0sCRc4NowHVZ5UM9B2T1OPkIr8LYqnAm5rSpR4leBeQSJBRjxd7sF6aRz/JO+/U Tj4wBqW7TgkaLPmD9kzWYsIFZJAcWKIjEEkeUrVu0RiyUUgeRS65XugA8Fi/eyDA iol2qJUBXkkZxPF5bBz4F9PHORPNNu0iD3vUuIUwVi7+NmuCoiKG4k2HoYabjkzR MKhZd9dHgjG6GDB3qcAUESYkzvSdOSj3cUmZx87LN7GosqcgitWgtziBPfIsF52n 6M11P7jxlkJhNGNrjNGKd9XLJw1lTZLCKllPIaqeMAElKlllrDXaxB0WKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCGysqff1LpGsdUPGSPit72NKKGUMB8GA1UdIwQY MBaAFIzwsLRqCNHnD8vdh3rZOaATLhJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2Yt OGYxODFkM2EzZThmLzEvSWJLeXA5X1V1a2F4MVE4WkktSzN2WTBvb1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80ODhmOTAtMjI0ZS00NjM0LTk2N2YtOGYxODFkM2EzZThm LzEvalBDd3RHb0kwZWNQeTkySGV0azVvQk11RW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua7EMA0E AgACMAcDBQMqEbiAMA0GCSqGSIb3DQEBCwUAA4IBAQCJgJ+u5t820z5rQRvEv4hn VMVw7pW1LzISBEQ7hR4AaVw0tGGFV9FMY1cCK4GAWBSOt/GnUDl2BMOdjXgMY6tB 0A1Kqih8w1pkRXeY5y4W1Wj6omudxthg3aDByw4PRDO0Mn+vuOI9OwMJyRYbYL/N pXY5WmPwHSdIT5dDdqn920OiKTuiAHeOOXRu3/yBHsyLUrRiNvM94mjyRHXgN8k9 Qf8HRgaG1VDn+9c/1aLNWhRfce0tDipa7nUjoWwEGE3AMEH0+9rUWQJd3zFO3K5u l83kIAWBiPKSbdDncIpaEj69U4TVhD55QdsvR4GxFg18h7Q07fydqsHbHxlMK2vE -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:21 2026 by rpki-client