This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa File: IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa (raw, json) Hash identifier: 9/0A8YPeaznPXiLNVP4FFOJdTd1wwZVGFqXuoC2dxWg= Subject key identifier: 22:E3:19:72:CA:50:F0:AD:91:87:51:9A:60:AC:96:D8:54:F5:90:BE Certificate issuer: /CN=06656c5ad9738372d54c037e397f35be9aa924db Certificate serial: 019B7CEDEC22DFCB0145EA3783D17A4FBCFC Authority key identifier: 06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59787 IP address blocks: 185.42.162.0/24 maxlen: 24 2a10:b280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.mft rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ec:22:df:cb:01:45:ea:37:83:d1:7a:4f:bc:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06656c5ad9738372d54c037e397f35be9aa924db Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22e31972ca50f0ad9187519a60ac96d854f590be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:c9:44:51:3d:7e:b1:c0:03:8d:4a:58:1e: 88:a7:50:04:51:11:6e:58:a5:03:ca:07:ac:65:39: b9:0a:2f:a1:16:58:c5:4d:4a:e9:ab:c2:f9:3b:b5: 41:f0:43:36:15:0b:bc:18:6c:90:d5:ce:86:c6:fd: b3:f2:d5:c1:97:b1:94:73:19:41:06:2a:da:44:37: bc:d1:15:14:bf:e4:ef:0f:26:87:17:ac:73:24:f4: 18:a0:2b:1d:e5:2e:9d:2c:0f:bd:3b:74:ec:0c:ac: ee:6a:37:4e:04:ed:5e:9c:d2:e1:14:ef:8c:9e:c8: 06:d8:66:b4:50:00:6c:77:7d:db:65:1b:31:78:96: ae:3a:fd:ba:d4:29:df:e8:22:89:81:8e:f3:26:e9: f8:77:05:c7:c3:a0:05:99:ee:14:a5:21:30:11:86: 57:90:0c:9d:e9:07:a7:b2:0d:70:94:59:d8:43:8d: e6:94:68:4d:98:00:92:8d:d6:7f:27:40:07:60:17: 1e:b1:b3:76:8f:84:4f:ba:1a:2a:bd:a5:8d:ac:fc: a1:1a:bc:7e:ad:6c:46:19:57:11:a1:01:80:9c:58: 01:01:ae:9d:22:25:7b:cf:b6:13:d5:d0:33:a0:07: 38:d1:5c:f8:8e:48:c8:90:51:17:cc:3c:ba:d6:c5: c4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E3:19:72:CA:50:F0:AD:91:87:51:9A:60:AC:96:D8:54:F5:90:BE X509v3 Authority Key Identifier: keyid:06:65:6C:5A:D9:73:83:72:D5:4C:03:7E:39:7F:35:BE:9A:A9:24:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmVsWtlzg3LVTAN-OX81vpqpJNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/IuMZcspQ8K2Rh1GaYKyW2FT1kL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3b9d27-7ba4-409e-888c-8b076256f39d/1/BmVsWtlzg3LVTAN-OX81vpqpJNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.162.0/24 IPv6: 2a10:b280::/29 Signature Algorithm: sha256WithRSAEncryption 94:24:3e:76:b8:46:20:bd:dd:18:29:50:c9:6e:f3:7e:16:77: 20:12:4c:b9:48:78:c2:46:10:61:ee:13:24:d3:c4:35:85:3e: 1a:b3:39:89:97:41:6b:28:36:2e:6c:ab:b6:0b:99:6a:4c:f2: fb:5b:2a:38:b0:65:b2:92:9d:a9:b3:fe:57:b6:8e:85:c7:d2: f2:87:bb:10:d4:88:a3:d6:9a:0c:d7:19:27:cc:c6:44:c1:31: 8a:8d:6f:7f:7b:16:a8:83:c3:88:c4:e1:8e:dc:89:90:0e:ba: b8:33:1b:f6:e1:44:c1:65:de:7c:df:14:c5:53:a7:5b:f5:bb: f4:d7:67:12:cd:c3:9f:b9:57:a1:53:55:3e:ab:c5:25:06:fc: 7a:86:26:a2:91:a7:42:dc:e8:92:4a:be:d4:07:aa:3f:22:3c: 39:fb:39:62:99:41:b4:88:33:85:72:21:34:98:a2:75:e0:af: bd:5d:5f:8d:da:d1:f6:0a:1d:c3:9f:2f:d1:70:63:61:8f:0c: cc:3d:d2:31:38:ff:cd:0e:80:91:9a:df:51:75:a4:ba:3b:c6: 71:84:30:08:19:45:ac:d0:58:ee:50:93:cb:a6:0b:cd:05:8c: 70:4f:66:c4:28:50:17:ae:b8:a5:8e:99:25:c0:95:b7:79:44: 5f:37:5c:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87ewi38sBReo3g9F6T7z8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjU2YzVhZDk3MzgzNzJkNTRjMDM3ZTM5N2YzNWJlOWFh OTI0ZGIwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmUzMTk3MmNhNTBmMGFkOTE4NzUxOWE2MGFjOTZkODU0ZjU5MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqrJRFE9frHAA41KWB6Ip1AEURFu WKUDygesZTm5Ci+hFljFTUrpq8L5O7VB8EM2FQu8GGyQ1c6Gxv2z8tXBl7GUcxlB BiraRDe80RUUv+TvDyaHF6xzJPQYoCsd5S6dLA+9O3TsDKzuajdOBO1enNLhFO+M nsgG2Ga0UABsd33bZRsxeJauOv261Cnf6CKJgY7zJun4dwXHw6AFme4UpSEwEYZX kAyd6Qensg1wlFnYQ43mlGhNmACSjdZ/J0AHYBcesbN2j4RPuhoqvaWNrPyhGrx+ rWxGGVcRoQGAnFgBAa6dIiV7z7YT1dAzoAc40Vz4jkjIkFEXzDy61sXEfQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCLjGXLKUPCtkYdRmmCslthU9ZC+MB8GA1UdIwQY MBaAFAZlbFrZc4Ny1UwDfjl/Nb6aqSTbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1Wc1d0bHpnM0xWVEFOLU9YODF2cHFwSk5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zYjlkMjctN2JhNC00MDllLTg4OGMt OGIwNzYyNTZmMzlkLzEvSXVNWmNzcFE4SzJSaDFHYVlLeVcyRlQxa0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zYjlkMjctN2JhNC00MDllLTg4OGMtOGIwNzYyNTZmMzlk LzEvQm1Wc1d0bHpnM0xWVEFOLU9YODF2cHFwSk5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuSqiMA0E AgACMAcDBQMqELKAMA0GCSqGSIb3DQEBCwUAA4IBAQCUJD52uEYgvd0YKVDJbvN+ FncgEky5SHjCRhBh7hMk08Q1hT4aszmJl0FrKDYubKu2C5lqTPL7Wyo4sGWykp2p s/5Xto6Fx9Lyh7sQ1Iij1poM1xknzMZEwTGKjW9/exaog8OIxOGO3ImQDrq4Mxv2 4UTBZd583xTFU6db9bv012cSzcOfuVehU1U+q8UlBvx6hiaikadC3OiSSr7UB6o/ Ijw5+zlimUG0iDOFciE0mKJ14K+9XV+N2tH2Ch3Dny/RcGNhjwzMPdIxOP/NDoCR mt9RdaS6O8ZxhDAIGUWs0FjuUJPLpgvNBYxwT2bEKFAXrriljpklwJW3eURfN1y8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:40 2026 by rpki-client