This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/INTBCoLNdz7dS74vmemjPaj4YZM.roa File: INTBCoLNdz7dS74vmemjPaj4YZM.roa (raw, json) Hash identifier: T73/8m3M1Tbn+oTqJQV/X3k5SIAZKJ+xpZ9QZlSwB80= Subject key identifier: 20:D4:C1:0A:82:CD:77:3E:DD:4B:BE:2F:99:E9:A3:3D:A8:F8:61:93 Certificate issuer: /CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Certificate serial: 019B7834BF978F2D69994801A402FD3E7FD2 Authority key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/INTBCoLNdz7dS74vmemjPaj4YZM.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57630 IP address blocks: 185.88.112.0/22 maxlen: 22 2a03:7f20::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:bf:97:8f:2d:69:99:48:01:a4:02:fd:3e:7f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d4c10a82cd773edd4bbe2f99e9a33da8f86193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5c:d3:6c:79:a3:58:ce:d3:b0:0a:d7:16:e8: 34:e1:4d:12:f8:98:07:e2:cc:dd:16:1f:bd:f5:0d: 86:38:22:05:52:b9:6d:99:64:de:c1:ad:3d:75:60: 9f:d4:4b:81:39:09:70:27:ca:44:c1:69:70:5a:5d: 04:fe:3e:a5:fe:35:cd:ef:ae:36:65:62:45:5c:32: 18:38:fc:a8:aa:47:6c:c9:cd:4e:2e:0f:a8:b6:c5: 36:cd:0c:13:a2:5e:aa:f0:5d:bd:2b:a9:a6:65:31: dd:56:e6:a2:fb:1a:81:d8:6e:39:82:68:ff:26:df: 6a:7b:25:d9:58:5e:db:b8:a1:fb:d4:d7:bb:21:1e: a2:7a:6e:71:7b:2c:e9:db:b2:21:65:f5:8d:0f:a2: 34:18:06:59:87:9f:05:77:59:1b:69:3f:e9:37:79: ad:7b:a5:e7:68:47:60:27:c5:af:65:ca:65:39:79: 6e:0f:07:97:5f:37:22:a9:2d:57:be:e0:80:48:f6: a9:a3:a4:1c:43:4f:72:ca:ec:ea:dc:44:45:54:78: 43:2c:11:5a:dd:fb:30:50:26:59:87:80:01:e6:16: 7c:34:36:a0:c9:17:d7:4b:e3:41:15:2e:e3:8d:e9: 26:9b:d1:8f:d9:14:e1:f3:2e:0a:68:a0:05:05:5b: 89:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D4:C1:0A:82:CD:77:3E:DD:4B:BE:2F:99:E9:A3:3D:A8:F8:61:93 X509v3 Authority Key Identifier: keyid:0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/INTBCoLNdz7dS74vmemjPaj4YZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.112.0/22 IPv6: 2a03:7f20::/29 Signature Algorithm: sha256WithRSAEncryption c2:4b:b9:5a:c6:41:a7:18:e3:f2:d1:b3:14:f2:be:97:98:1a: 39:cf:50:fc:a1:6c:7a:53:fd:56:2b:b7:a2:07:c1:7a:ea:6d: a4:cd:03:8a:42:8c:0e:d8:70:7a:07:44:af:43:3f:21:26:b8: b2:78:a9:d5:9e:35:4d:12:a4:19:2b:80:fe:69:09:0f:d6:d3: 65:8d:40:03:af:af:af:23:19:3e:15:ac:2c:49:3e:61:f5:f4: f0:a1:bb:4f:2c:61:42:8c:b6:b7:fb:5a:a6:fb:6c:e9:af:ed: 06:bc:78:fe:e5:34:23:94:9d:74:ab:cc:60:ff:53:fa:41:c7: d5:2b:62:b8:d9:ea:69:6a:4d:65:1c:28:d4:2e:c0:f9:6f:8b: 2d:b6:92:4a:87:08:de:1c:30:8b:48:89:e4:06:f8:39:33:9a: a0:41:4e:19:c8:19:70:8c:fb:2d:7e:ce:d0:3c:1e:d7:e1:fa: 52:99:33:0a:5f:e1:35:7f:75:1f:79:cc:7a:d0:ca:7c:7b:f4: 0b:4b:5b:42:55:8e:f7:84:4e:46:8c:18:5d:9d:6a:e6:eb:bd: 7a:06:37:ae:c6:a5:d2:99:23:72:c0:31:cd:06:64:27:25:a4: fb:5d:60:a4:85:dc:8e:14:26:ea:00:89:c6:81:7d:e8:d0:3e: 98:b5:ee:ee -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NL+Xjy1pmUgBpAL9Pn/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjc5YjQwMzhlMDAyZTdiZDY0ZTUwNzZkMWEzOWViZTk2 ZjIzYzQwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ0YzEwYTgyY2Q3NzNlZGQ0YmJlMmY5OWU5YTMzZGE4Zjg2MTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VzTbHmjWM7TsArXFug04U0S+JgH 4szdFh+99Q2GOCIFUrltmWTewa09dWCf1EuBOQlwJ8pEwWlwWl0E/j6l/jXN7642 ZWJFXDIYOPyoqkdsyc1OLg+otsU2zQwTol6q8F29K6mmZTHdVuai+xqB2G45gmj/ Jt9qeyXZWF7buKH71Ne7IR6iem5xeyzp27IhZfWND6I0GAZZh58Fd1kbaT/pN3mt e6XnaEdgJ8WvZcplOXluDweXXzciqS1XvuCASPapo6QcQ09yyuzq3ERFVHhDLBFa 3fswUCZZh4AB5hZ8NDagyRfXS+NBFS7jjekmm9GP2RTh8y4KaKAFBVuJwwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCDUwQqCzXc+3Uu+L5npoz2o+GGTMB8GA1UdIwQY MBaAFAonm0A44ALnvWTlB20aOevpbyPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYt Nzk5M2I5ZTAzYjBmLzEvSU5UQkNvTE5kejdkUzc0dm1lbWpQYWo0WVpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84NTFkNDUtMTQyMi00YjMxLWJkOGYtNzk5M2I5ZTAzYjBm LzEvQ2llYlFEamdBdWU5Wk9VSGJSbzU2LWx2SThRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVhwMA0E AgACMAcDBQMqA38gMA0GCSqGSIb3DQEBCwUAA4IBAQDCS7laxkGnGOPy0bMU8r6X mBo5z1D8oWx6U/1WK7eiB8F66m2kzQOKQowO2HB6B0SvQz8hJriyeKnVnjVNEqQZ K4D+aQkP1tNljUADr6+vIxk+FawsST5h9fTwobtPLGFCjLa3+1qm+2zpr+0GvHj+ 5TQjlJ10q8xg/1P6QcfVK2K42eppak1lHCjULsD5b4sttpJKhwjeHDCLSInkBvg5 M5qgQU4ZyBlwjPstfs7QPB7X4fpSmTMKX+E1f3Ufecx60Mp8e/QLS1tCVY73hE5G jBhdnWrm6716BjeuxqXSmSNywDHNBmQnJaT7XWCkhdyOFCbqAInGgX3o0D6Yte7u -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:42 2026 by rpki-client