This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/eIFidb8ot4LCuP1rPmQTGkxlEiw.roa File: eIFidb8ot4LCuP1rPmQTGkxlEiw.roa (raw, json) Hash identifier: cPhh2J7L8B8FFH/G2jlaBooBwt+Okkk7WDUxl5JRDVo= Subject key identifier: 78:81:62:75:BF:28:B7:82:C2:B8:FD:6B:3E:64:13:1A:4C:65:12:2C Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019C1D49EFFFA9A481872A4AF95C234AF84B Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/eIFidb8ot4LCuP1rPmQTGkxlEiw.roa Signing time: Mon 02 Feb 2026 07:38:30 +0000 ROA not before: Mon 02 Feb 2026 07:38:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.220.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:49:ef:ff:a9:a4:81:87:2a:4a:f9:5c:23:4a:f8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Feb 2 07:38:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78816275bf28b782c2b8fd6b3e64131a4c65122c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:56:cb:04:2f:9a:09:c7:61:ac:92:a4:f0: 9a:be:d0:3d:b2:6e:1b:f5:18:5a:5d:a2:65:29:af: 81:e0:62:95:b6:37:ab:0a:06:82:3d:fa:cd:f0:b3: 6c:c1:ca:6c:63:e6:bb:b2:47:bb:92:c0:31:d3:a4: fd:b6:c2:8d:b2:a6:d1:8c:6b:be:6d:ca:e4:6f:8e: 6a:ac:f5:0f:52:b8:6a:b9:38:37:d7:55:ce:27:d7: c5:46:aa:f5:7e:99:c8:5c:47:d8:20:90:81:65:62: 68:39:7e:b3:56:dc:05:87:50:98:88:62:d8:cb:fd: 6f:d7:a5:a6:60:54:43:e4:7b:a8:7b:8e:4b:fe:a8: 85:fe:23:28:f7:ab:7c:a5:9f:be:e3:4d:95:93:42: 0e:b0:e2:d5:b4:80:0b:3b:ae:ac:3d:b3:4f:b3:66: b6:5b:b2:27:38:69:c4:8d:01:15:8d:54:89:ef:e3: 39:5a:9c:35:de:e2:21:81:c0:cd:55:69:70:18:11: ee:36:30:2e:61:e6:d0:67:38:e3:08:95:70:4b:92: 89:62:a9:f8:c0:66:14:37:33:a4:90:b3:56:80:c8: ab:d4:6a:bb:49:3d:20:ac:ce:e3:b8:1f:83:5f:6b: cf:57:5c:d4:c7:83:ab:e2:0c:47:cd:67:f0:68:9d: be:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:81:62:75:BF:28:B7:82:C2:B8:FD:6B:3E:64:13:1A:4C:65:12:2C X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/eIFidb8ot4LCuP1rPmQTGkxlEiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.197.0/24 Signature Algorithm: sha256WithRSAEncryption 96:28:cd:16:11:0d:59:9d:0b:4e:97:39:f5:c6:4b:ca:ff:a9: b5:e0:ff:c9:a5:4c:4f:56:29:11:a7:9a:67:13:09:22:40:fc: 1c:13:07:37:f3:10:58:fb:10:1a:3b:b9:e8:85:7d:e5:e8:a1: 04:07:d2:9f:80:92:d0:01:93:00:bc:6f:01:e2:05:c8:7d:26: da:09:d3:a3:30:13:50:e4:e5:f6:07:14:a1:17:ed:3f:69:ab: 42:d1:f9:39:35:e2:9c:50:b8:69:50:da:df:1b:da:e6:41:ed: ef:8a:c0:0c:da:df:25:2d:27:7c:36:66:3a:7b:77:48:4e:4a: 42:e7:e2:da:57:90:01:e5:89:4a:3a:46:2e:69:92:0a:81:58: e8:e1:c2:f6:aa:17:b9:07:a4:da:69:fb:f3:5f:4d:e8:bf:be: c5:8a:89:91:a3:a5:72:54:65:a6:c1:b7:08:88:9e:a5:b5:53: 2c:41:9d:2e:21:61:49:98:ce:10:0f:9c:e7:c8:75:1b:af:51: da:d9:10:1c:d4:6d:2d:f7:ff:44:46:e4:8c:22:ed:89:d5:44: 30:10:3c:a0:41:c7:2b:e0:0b:1a:eb:97:81:fa:ab:fb:5f:8d: 0b:d0:7b:40:03:66:6c:ee:8a:a3:48:65:fe:28:00:36:1b:7b: f3:7b:27:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwdSe//qaSBhypK+VwjSvhLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMjAyMDczODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODgxNjI3NWJmMjhiNzgyYzJiOGZkNmIzZTY0MTMxYTRjNjUxMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU9WywQvmgnHYaySpPCavtA9sm4b 9RhaXaJlKa+B4GKVtjerCgaCPfrN8LNswcpsY+a7ske7ksAx06T9tsKNsqbRjGu+ bcrkb45qrPUPUrhquTg311XOJ9fFRqr1fpnIXEfYIJCBZWJoOX6zVtwFh1CYiGLY y/1v16WmYFRD5Huoe45L/qiF/iMo96t8pZ++402Vk0IOsOLVtIALO66sPbNPs2a2 W7InOGnEjQEVjVSJ7+M5Wpw13uIhgcDNVWlwGBHuNjAuYebQZzjjCJVwS5KJYqn4 wGYUNzOkkLNWgMir1Gq7ST0grM7juB+DX2vPV1zUx4Or4gxHzWfwaJ2+WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHiBYnW/KLeCwrj9az5kExpMZRIsMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvZUlGaWRiOG90NExDdVAxclBtUVRHa3hsRWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzFMA0G CSqGSIb3DQEBCwUAA4IBAQCWKM0WEQ1ZnQtOlzn1xkvK/6m14P/JpUxPVikRp5pn EwkiQPwcEwc38xBY+xAaO7nohX3l6KEEB9KfgJLQAZMAvG8B4gXIfSbaCdOjMBNQ 5OX2BxShF+0/aatC0fk5NeKcULhpUNrfG9rmQe3visAM2t8lLSd8NmY6e3dITkpC 5+LaV5AB5YlKOkYuaZIKgVjo4cL2qhe5B6TaafvzX03ov77FiomRo6VyVGWmwbcI iJ6ltVMsQZ0uIWFJmM4QD5znyHUbr1Ha2RAc1G0t9/9ERuSMIu2J1UQwEDygQccr 4Asa65eB+qv7X40L0HtAA2Zs7oqjSGX+KAA2G3vzeyfv -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:12 2026 by rpki-client