This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/IqhV71F7TO-uufaDi-3V7cOA8v4.roa File: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (raw, json) Hash identifier: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU= Subject key identifier: 22:A8:55:EF:51:7B:4C:EF:AE:B9:F6:83:8B:ED:D5:ED:C3:80:F2:FE Certificate issuer: /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5 Certificate serial: 019B7DCA7700E95DE07EEA771023C603C232 Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/IqhV71F7TO-uufaDi-3V7cOA8v4.roa Signing time: Fri 02 Jan 2026 08:19:39 +0000 ROA not before: Fri 02 Jan 2026 08:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201712 IP address blocks: 93.95.214.0/24 maxlen: 24 2a13:e00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:77:00:e9:5d:e0:7e:ea:77:10:23:c6:03:c2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5 Validity Not Before: Jan 2 08:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22a855ef517b4cefaeb9f6838bedd5edc380f2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:26:b3:0a:14:9d:c1:e8:8d:73:23:6a:ff: fc:1c:a1:a6:55:20:a3:9c:0a:f5:4f:a6:ec:57:3a: ac:98:ed:e3:69:73:37:6e:05:63:4b:cf:9f:df:db: 47:f3:35:01:24:e6:cf:2f:04:fd:c3:2f:64:b9:c6: 1e:72:61:95:fe:d9:9a:55:49:76:fe:30:90:2c:fa: e8:87:11:dc:fc:63:a0:60:a7:84:60:e3:19:44:2f: 3c:2d:0f:16:bc:e1:e9:a9:a1:4f:70:09:fb:f0:d1: 8d:b6:01:1c:57:b5:f1:e6:39:8a:4c:9a:b3:61:fb: ef:ee:a8:2f:98:a9:8f:8c:1b:94:80:f2:27:d1:bb: cc:10:07:e5:62:34:22:fa:de:b4:18:3b:62:e4:05: 8a:99:62:ce:3e:05:b7:3a:6c:e8:98:9a:51:55:be: a7:62:72:86:c5:75:e5:7c:7e:73:7b:e2:43:5f:45: 4b:6b:89:f9:d6:3c:c1:98:d2:31:01:56:28:ff:07: 4b:7f:0e:10:94:20:1c:49:72:da:79:ad:ce:7e:f4: ef:70:a5:71:5b:72:c5:a1:9e:a6:6c:4b:58:74:80: 75:04:9d:56:1c:51:8f:61:af:31:fd:4e:97:b8:84: f5:35:b3:55:ee:ef:85:a9:39:c6:03:ec:0e:31:ed: 57:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A8:55:EF:51:7B:4C:EF:AE:B9:F6:83:8B:ED:D5:ED:C3:80:F2:FE X509v3 Authority Key Identifier: keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/IqhV71F7TO-uufaDi-3V7cOA8v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.214.0/24 IPv6: 2a13:e00::/29 Signature Algorithm: sha256WithRSAEncryption 9b:a3:49:e4:a1:3b:70:2e:37:4f:94:14:7c:c9:d9:6e:dc:f1: 24:90:c6:b6:98:c4:3c:13:00:fd:df:db:dc:20:ee:5b:f2:3b: 67:04:14:18:a7:8a:d9:ad:1e:a0:d3:4b:85:7a:a4:4e:9e:6d: ec:7e:8d:9b:b6:53:6f:c3:26:d0:9a:5b:cc:13:c0:27:2a:fa: 36:8b:8b:a4:0b:bf:76:ec:d9:3c:6b:0f:63:a8:ce:65:d6:d1: 07:64:9e:ac:dc:ec:1a:ac:97:f9:6f:4f:17:58:89:c4:82:d6: a6:62:a5:63:44:f0:2f:35:50:73:e9:5f:62:d9:7b:04:3c:08: c3:a3:6c:58:e8:c2:52:d6:d3:9c:47:f2:ef:ea:0c:e0:4e:3b: 04:ab:7c:0c:85:96:a8:ab:d0:70:dc:7b:d8:f5:a9:24:64:28: 14:dd:de:cb:e4:1c:11:61:8b:bc:e8:a7:73:e2:70:ca:8c:b1: 31:68:8d:48:40:08:b9:3d:fe:d7:98:7e:10:1d:ee:43:df:a0: bd:88:ec:c8:a2:84:1b:22:c4:1d:08:34:9e:d0:0e:a4:c4:ad: 13:4f:2e:a6:6e:1a:85:27:c0:b7:10:f9:39:66:b0:43:8b:96: b3:4e:a3:5e:79:fa:4e:d3:f8:d7:ac:38:7e:5b:45:61:b8:aa: 24:65:9b:d3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yncA6V3gfup3ECPGA8IyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkZTJhMTIyZGNmZmMyMjJmYTk5ODRiZjE2YjZmOWYxM2Y3 OGE1YTUwHhcNMjYwMTAyMDgxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmE4NTVlZjUxN2I0Y2VmYWViOWY2ODM4YmVkZDVlZGMzODBmMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6omswoUncHojXMjav/8HKGmVSCj nAr1T6bsVzqsmO3jaXM3bgVjS8+f39tH8zUBJObPLwT9wy9kucYecmGV/tmaVUl2 /jCQLProhxHc/GOgYKeEYOMZRC88LQ8WvOHpqaFPcAn78NGNtgEcV7Xx5jmKTJqz Yfvv7qgvmKmPjBuUgPIn0bvMEAflYjQi+t60GDti5AWKmWLOPgW3OmzomJpRVb6n YnKGxXXlfH5ze+JDX0VLa4n51jzBmNIxAVYo/wdLfw4QlCAcSXLaea3OfvTvcKVx W3LFoZ6mbEtYdIB1BJ1WHFGPYa8x/U6XuIT1NbNV7u+FqTnGA+wOMe1X5wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCKoVe9Re0zvrrn2g4vt1e3DgPL+MB8GA1UdIwQY MBaAFO3ioSLc/8Ii+pmEvxa2+fE/eKWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgt MjM1OWNiNjBhNTc0LzEvSXFoVjcxRjdUTy11dWZhRGktM1Y3Y09BOHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82YWYzY2QtNTI1Yi00OWJhLWIzODgtMjM1OWNiNjBhNTc0 LzEvN2VLaEl0el93aUw2bVlTX0ZyYjU4VDk0cGFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXV/WMA0E AgACMAcDBQMqEw4AMA0GCSqGSIb3DQEBCwUAA4IBAQCbo0nkoTtwLjdPlBR8ydlu 3PEkkMa2mMQ8EwD939vcIO5b8jtnBBQYp4rZrR6g00uFeqROnm3sfo2btlNvwybQ mlvME8AnKvo2i4ukC7927Nk8aw9jqM5l1tEHZJ6s3OwarJf5b08XWInEgtamYqVj RPAvNVBz6V9i2XsEPAjDo2xY6MJS1tOcR/Lv6gzgTjsEq3wMhZaoq9Bw3HvY9akk ZCgU3d7L5BwRYYu86Kdz4nDKjLExaI1IQAi5Pf7XmH4QHe5D36C9iOzIooQbIsQd CDSe0A6kxK0TTy6mbhqFJ8C3EPk5ZrBDi5azTqNeefpO0/jXrDh+W0VhuKokZZvT -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:15 2026 by rpki-client