This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/IWErWVtspulYBc2P0UkO-q5egfs.roa File: IWErWVtspulYBc2P0UkO-q5egfs.roa (raw, json) Hash identifier: lBRwxz9Xohtldef78/SXShaF/JL3thmNLA+SU9F6qTI= Subject key identifier: 21:61:2B:59:5B:6C:A6:E9:58:05:CD:8F:D1:49:0E:FA:AE:5E:81:FB Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Certificate serial: 019B78A37125AFD3D05FED0B6045D65587D6 Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/IWErWVtspulYBc2P0UkO-q5egfs.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211246 IP address blocks: 185.232.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:71:25:af:d3:d0:5f:ed:0b:60:45:d6:55:87:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21612b595b6ca6e95805cd8fd1490efaae5e81fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:26:e2:ce:3d:a3:c9:7a:31:12:9b:4e:fd:98: 58:33:3a:da:06:02:17:b4:2c:a6:01:89:fb:8e:5e: 72:e4:46:56:c3:1a:d8:b3:2d:1c:6b:b8:4b:21:d8: ac:94:7c:b1:6d:6f:42:7d:39:ce:36:fc:cf:5d:cf: 35:b3:ce:be:d2:f7:bb:57:3e:8c:1e:40:68:ac:2c: 50:74:29:45:ff:3f:bf:0b:30:cc:06:d0:7e:c6:b4: 58:59:d2:2e:88:02:e0:2b:83:13:2a:62:d9:fe:9f: 8c:26:7b:4e:26:e5:60:bf:01:7f:87:0a:59:9d:34: cd:83:a2:bb:65:31:ac:c1:f8:f1:10:be:46:1c:7d: 35:7a:42:40:09:3f:2c:ba:f8:4e:2e:6e:d2:7d:14: 76:9c:6a:10:ae:f5:9f:d8:8a:d8:35:05:e0:3f:39: 80:2a:84:4b:ec:d8:2d:00:95:b5:c9:37:dc:cd:59: 8e:49:fe:d3:be:16:b0:c3:d5:f7:3e:df:16:59:db: 6c:6b:55:22:e2:3c:a0:0f:25:80:ae:b6:c8:03:76: 55:62:0e:90:55:e0:58:82:cb:da:4c:e7:94:c9:c2: 89:bd:a6:63:60:ea:d2:3d:b3:a7:8b:e1:03:e4:dc: 02:20:cc:c3:b8:00:ab:cc:04:19:ce:b3:25:90:2b: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:2B:59:5B:6C:A6:E9:58:05:CD:8F:D1:49:0E:FA:AE:5E:81:FB X509v3 Authority Key Identifier: keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/IWErWVtspulYBc2P0UkO-q5egfs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.232.235.0/24 Signature Algorithm: sha256WithRSAEncryption 80:23:bd:16:48:af:11:38:79:50:5b:22:50:75:f3:8b:63:b9: 57:ef:d2:a6:db:2f:2f:f5:5f:f8:74:b9:72:0a:57:f6:9b:94: e3:41:3a:97:f3:85:5b:0b:eb:d7:71:bb:b4:ec:aa:ef:cc:bf: 83:27:f8:8f:3e:2d:8a:19:de:e5:52:05:b1:fa:f0:a6:0c:c5: 58:e6:3e:be:14:a2:3a:ef:c3:7f:ab:da:48:2c:e4:c6:c7:a1: 26:49:52:eb:ba:68:59:96:71:6a:ca:ed:35:1d:41:d0:bc:c1: 0f:29:c1:23:fa:a0:4f:50:8d:5f:6b:ee:db:be:08:1b:d2:bb: 33:f0:95:d8:a0:eb:74:aa:e5:e6:5a:09:57:86:f3:dc:1b:98: a3:32:8a:1a:80:dc:a4:4a:2f:cb:03:24:7d:95:94:40:c5:60: fe:fd:db:b5:0f:17:cc:b1:1e:e3:2e:a4:d9:64:99:d9:11:16: 4c:7b:14:18:e9:32:36:88:fb:0e:6c:10:b4:9f:bc:f4:7e:52: 65:75:af:4d:bc:fc:e8:f5:01:3c:6d:b2:35:99:92:a4:8b:12: a5:7d:1f:a3:a7:11:92:68:9e:01:18:05:b5:b7:79:4f:31:5d: 3b:75:a2:dd:19:b7:27:fd:2f:be:2a:22:86:a9:6f:98:d7:8e: 83:1b:c1:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3Elr9PQX+0LYEXWVYfWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZDUyY2M4NzA2MDZhM2YzZjMyYzBmZmY5N2NmNjkzMWZh NjVjYTMwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTYxMmI1OTViNmNhNmU5NTgwNWNkOGZkMTQ5MGVmYWFlNWU4MWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwibizj2jyXoxEptO/ZhYMzraBgIX tCymAYn7jl5y5EZWwxrYsy0ca7hLIdislHyxbW9CfTnONvzPXc81s86+0ve7Vz6M HkBorCxQdClF/z+/CzDMBtB+xrRYWdIuiALgK4MTKmLZ/p+MJntOJuVgvwF/hwpZ nTTNg6K7ZTGswfjxEL5GHH01ekJACT8suvhOLm7SfRR2nGoQrvWf2IrYNQXgPzmA KoRL7NgtAJW1yTfczVmOSf7Tvhaww9X3Pt8WWdtsa1Ui4jygDyWArrbIA3ZVYg6Q VeBYgsvaTOeUycKJvaZjYOrSPbOni+ED5NwCIMzDuACrzAQZzrMlkCskpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFhK1lbbKbpWAXNj9FJDvquXoH7MB8GA1UdIwQY MBaAFKjVLMhwYGo/PzLA//l89pMfplyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgt ZjU1YmM4YWYxNTA2LzEvSVdFcldWdHNwdWxZQmMyUDBVa08tcTVlZ2ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mZTEzMWQtYWExMC00YzZiLTgxMjgtZjU1YmM4YWYxNTA2 LzEvcU5Vc3lIQmdhajhfTXNEXy1YejJreC1tWEtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuejrMA0G CSqGSIb3DQEBCwUAA4IBAQCAI70WSK8ROHlQWyJQdfOLY7lX79Km2y8v9V/4dLly Clf2m5TjQTqX84VbC+vXcbu07KrvzL+DJ/iPPi2KGd7lUgWx+vCmDMVY5j6+FKI6 78N/q9pILOTGx6EmSVLrumhZlnFqyu01HUHQvMEPKcEj+qBPUI1fa+7bvggb0rsz 8JXYoOt0quXmWglXhvPcG5ijMooagNykSi/LAyR9lZRAxWD+/du1DxfMsR7jLqTZ ZJnZERZMexQY6TI2iPsObBC0n7z0flJlda9NvPzo9QE8bbI1mZKkixKlfR+jpxGS aJ4BGAW1t3lPMV07daLdGbcn/S++KiKGqW+Y146DG8Gu -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:43 2026 by rpki-client