This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/iG_jpL5evYKdvaSXMweO07u-LZE.roa File: iG_jpL5evYKdvaSXMweO07u-LZE.roa (raw, json) Hash identifier: bAZcm3e4oR8RQlmgma0fN3YtSn8DFyr4KMu8blXi4D0= Subject key identifier: 88:6F:E3:A4:BE:5E:BD:82:9D:BD:A4:97:33:07:8E:D3:BB:BE:2D:91 Certificate issuer: /CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0 Certificate serial: 019B7A5A9DCF52ACDC26B3F00635BBF74A2B Authority key identifier: 45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/iG_jpL5evYKdvaSXMweO07u-LZE.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25081 IP address blocks: 195.248.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.mft rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9d:cf:52:ac:dc:26:b3:f0:06:35:bb:f7:4a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458b6759c1a0cf5ad82da5c393bcd0fff7c7e2f0 Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=886fe3a4be5ebd829dbda49733078ed3bbbe2d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:66:7f:1b:af:19:2c:a0:75:d3:99:1a:f3:61: e7:e5:2a:c9:25:0b:cf:fc:58:a0:08:43:bf:12:40: ef:49:94:6b:ee:99:f8:ca:1f:0b:1d:d3:46:32:53: e6:b5:5a:b1:26:fd:55:0e:24:ae:27:ef:ba:ab:2b: f4:90:36:d6:9a:3b:0b:6b:20:a7:50:43:3d:f2:6b: f6:90:3f:30:8a:a6:ac:b2:7a:5b:a1:41:c6:43:f2: 9c:e1:13:1a:e1:f1:53:66:51:af:72:a3:7d:f1:41: 02:ff:e1:7d:e2:b9:90:09:39:81:03:d7:9f:8a:1e: d3:6e:dc:6b:c7:da:eb:75:34:07:e5:29:d4:2b:ee: b4:4b:8c:7b:7f:74:2f:e1:a0:88:11:84:54:53:4b: b7:67:9d:2a:40:25:74:e6:31:20:aa:ee:e0:b6:cb: ac:71:bb:f9:c9:ae:41:c2:93:36:46:b8:9f:77:ff: 45:d3:75:75:bb:94:31:25:ee:95:a3:b7:9a:f1:1d: 92:50:19:96:cd:8e:6c:8a:bc:e6:4e:ed:06:54:fa: 4e:9c:59:e0:ee:54:a4:61:a2:5a:bc:52:a8:a8:b7: 7b:5a:51:e1:43:27:92:d8:b0:1d:ab:d8:cb:e8:9e: 6a:d7:4a:94:1b:8c:af:9c:22:44:61:5c:8a:00:7c: 8b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6F:E3:A4:BE:5E:BD:82:9D:BD:A4:97:33:07:8E:D3:BB:BE:2D:91 X509v3 Authority Key Identifier: keyid:45:8B:67:59:C1:A0:CF:5A:D8:2D:A5:C3:93:BC:D0:FF:F7:C7:E2:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYtnWcGgz1rYLaXDk7zQ__fH4vA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/iG_jpL5evYKdvaSXMweO07u-LZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/01a285-fc81-4b06-80b2-00c913cb0557/1/RYtnWcGgz1rYLaXDk7zQ__fH4vA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.248.252.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:aa:28:46:81:4e:b4:72:59:8f:53:58:ef:37:6d:7e:13:79: e7:88:de:b4:1b:90:18:7e:d0:d3:e0:05:b4:4b:72:c5:ef:4f: 45:69:3c:e5:fd:96:e4:64:f3:19:a9:90:8e:82:92:8a:23:63: 10:8a:99:77:58:4d:99:2b:f6:1b:02:07:2d:ca:99:05:23:c9: 43:09:dc:32:76:96:b7:2e:80:74:af:33:cc:d1:f0:a5:6e:0f: 14:69:3b:d0:b2:ff:81:85:5c:8f:92:cd:38:83:a7:34:c6:0d: c3:7f:d1:be:3f:00:56:a0:b1:e0:ee:a8:87:38:68:a9:f0:c2: 13:ae:c1:20:4b:a3:15:23:b7:5f:34:b2:a0:5c:e4:31:40:f5: 66:91:67:34:8f:5c:31:d8:98:99:b7:06:56:29:0f:e3:92:82: 04:52:ea:38:f6:23:bf:ac:30:06:05:50:49:72:32:54:85:f7: 8c:fc:c9:a4:75:d8:57:93:39:7c:9c:fc:a4:8d:4e:8a:7c:d6: 87:88:fd:c1:0d:2c:b9:a4:06:6b:ed:5b:c1:c7:c1:07:c6:95: 18:07:64:77:1a:fe:9c:5c:92:bb:df:b5:aa:91:c2:dd:e8:89: fe:2e:de:03:8a:36:b6:5d:08:50:7a:c3:c8:dd:75:23:86:2d: c2:18:20:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp3PUqzcJrPwBjW790orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGI2NzU5YzFhMGNmNWFkODJkYTVjMzkzYmNkMGZmZjdj N2UyZjAwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODZmZTNhNGJlNWViZDgyOWRiZGE0OTczMzA3OGVkM2JiYmUyZDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGZ/G68ZLKB105ka82Hn5SrJJQvP /FigCEO/EkDvSZRr7pn4yh8LHdNGMlPmtVqxJv1VDiSuJ++6qyv0kDbWmjsLayCn UEM98mv2kD8wiqassnpboUHGQ/Kc4RMa4fFTZlGvcqN98UEC/+F94rmQCTmBA9ef ih7Tbtxrx9rrdTQH5SnUK+60S4x7f3Qv4aCIEYRUU0u3Z50qQCV05jEgqu7gtsus cbv5ya5BwpM2Rrifd/9F03V1u5QxJe6Vo7ea8R2SUBmWzY5sirzmTu0GVPpOnFng 7lSkYaJavFKoqLd7WlHhQyeS2LAdq9jL6J5q10qUG4yvnCJEYVyKAHyLCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhv46S+Xr2Cnb2klzMHjtO7vi2RMB8GA1UdIwQY MBaAFEWLZ1nBoM9a2C2lw5O80P/3x+LwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8wMWEyODUtZmM4MS00YjA2LTgwYjIt MDBjOTEzY2IwNTU3LzEvaUdfanBMNWV2WUtkdmFTWE13ZU8wN3UtTFpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8wMWEyODUtZmM4MS00YjA2LTgwYjItMDBjOTEzY2IwNTU3 LzEvUll0bldjR2d6MXJZTGFYRGs3elFfX2ZINHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/j8MA0G CSqGSIb3DQEBCwUAA4IBAQBNqihGgU60clmPU1jvN21+E3nniN60G5AYftDT4AW0 S3LF709FaTzl/ZbkZPMZqZCOgpKKI2MQipl3WE2ZK/YbAgctypkFI8lDCdwydpa3 LoB0rzPM0fClbg8UaTvQsv+BhVyPks04g6c0xg3Df9G+PwBWoLHg7qiHOGip8MIT rsEgS6MVI7dfNLKgXOQxQPVmkWc0j1wx2JiZtwZWKQ/jkoIEUuo49iO/rDAGBVBJ cjJUhfeM/MmkddhXkzl8nPykjU6KfNaHiP3BDSy5pAZr7VvBx8EHxpUYB2R3Gv6c XJK737WqkcLd6In+Lt4Dija2XQhQesPI3XUjhi3CGCCz -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client