This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ikDfAfW-xsNgatn_b62wDmF7okY.roa File: ikDfAfW-xsNgatn_b62wDmF7okY.roa (raw, json) Hash identifier: bq2Bb+Lv2eW3TT7vk5HpQA8N5AAEROY0+VpdWIj88l0= Subject key identifier: 8A:40:DF:01:F5:BE:C6:C3:60:6A:D9:FF:6F:AD:B0:0E:61:7B:A2:46 Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Certificate serial: 019B7DCA2CE6C49956A389766B7B57B065B0 Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ikDfAfW-xsNgatn_b62wDmF7okY.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207795 IP address blocks: 194.28.156.0/24 maxlen: 24 194.28.158.0/24 maxlen: 24 194.104.4.0/24 maxlen: 24 194.104.5.0/24 maxlen: 24 194.104.6.0/24 maxlen: 24 212.69.132.0/24 maxlen: 24 212.69.133.0/24 maxlen: 24 212.69.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2c:e6:c4:99:56:a3:89:76:6b:7b:57:b0:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a40df01f5bec6c3606ad9ff6fadb00e617ba246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:98:56:87:d3:98:7b:00:7c:4e:f7:ca:3e:26: 51:9c:c1:24:5e:20:62:fd:cf:51:96:04:98:3b:b2: e4:51:e1:7f:47:57:b9:36:7d:b9:44:33:c1:26:a2: fe:c7:3d:bf:44:e3:ff:9d:6b:0c:2a:03:cb:db:5e: 0d:42:d7:75:8f:14:b5:ed:3a:d5:ec:c3:60:5a:48: 1d:54:2a:09:40:48:15:d6:2f:93:b0:61:77:fc:0f: 62:09:1d:68:f2:b5:bd:a2:f4:bf:73:cd:c4:12:a0: 55:79:0d:3a:eb:5e:a7:7c:03:5e:e3:3c:cd:f8:91: b5:7e:e6:6e:cc:e3:25:79:5a:10:14:5d:fe:73:75: 5d:53:6e:96:ce:d6:1e:f6:d4:a9:0e:4e:b8:e8:fe: 51:fe:87:62:d0:7c:71:1d:d4:fd:d0:f7:9d:db:31: 48:f4:ab:2d:05:3d:8b:07:03:be:c6:f6:44:38:e2: 61:2c:3f:16:5b:d2:88:72:7d:f8:56:37:d6:4e:9f: e2:df:06:7b:72:14:08:c5:f6:95:e7:be:d3:ca:83: 11:04:9f:41:be:b8:bf:42:d7:d5:cd:8c:db:73:eb: a3:6e:bd:db:36:08:87:2b:d7:10:45:d5:ce:6a:e1: b3:ae:38:4b:00:22:f4:26:00:42:d2:1f:d3:7c:93: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:40:DF:01:F5:BE:C6:C3:60:6A:D9:FF:6F:AD:B0:0E:61:7B:A2:46 X509v3 Authority Key Identifier: keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ikDfAfW-xsNgatn_b62wDmF7okY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.28.156.0/24 194.28.158.0/24 194.104.4.0-194.104.6.255 212.69.132.0-212.69.134.255 Signature Algorithm: sha256WithRSAEncryption 2f:4d:01:41:1f:d0:ff:d2:af:be:f1:ef:c6:e1:0b:61:4f:e3: 07:59:e5:07:30:06:26:1b:7c:1a:99:fc:03:8d:84:6f:5f:eb: 04:07:a2:a0:84:2b:a7:46:f7:96:49:3f:1f:e1:02:fb:96:6e: e9:84:e3:94:1e:92:9d:53:ed:05:9f:57:00:12:7a:b0:70:10: 80:ab:af:17:fd:2a:60:7c:48:04:5b:66:91:6b:1c:cf:86:eb: 97:2e:a6:d5:4a:dd:47:0b:03:07:3f:bb:5a:64:ae:20:a8:b8: c4:45:57:a2:c0:b5:8b:50:b0:1d:9c:06:95:99:31:e6:6c:1b: b4:75:27:08:fb:27:f8:56:c6:41:ec:5b:79:34:89:d5:f9:f2: 60:1f:5b:36:41:91:d3:36:fc:00:b2:f9:84:4a:eb:50:7a:84: e7:1f:dc:8a:8c:e8:74:dc:8f:95:45:55:cf:e8:06:3a:ed:71: ba:06:c6:22:16:5d:39:8e:67:be:4b:dc:5f:94:26:bd:0e:f7: 10:63:ef:ba:e8:c1:1e:4e:e3:f6:01:6e:1b:72:08:e2:17:f0: c0:74:23:4b:12:ac:e0:9c:b6:2f:6f:ef:32:3d:a8:bb:e8:f5: 5d:81:61:a6:b7:d2:f1:f2:0f:c7:cd:f0:08:54:10:3c:e7:69: e8:ac:a1:f3 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9yizmxJlWo4l2a3tXsGWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2 OWExZmQwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTQwZGYwMWY1YmVjNmMzNjA2YWQ5ZmY2ZmFkYjAwZTYxN2JhMjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuphWh9OYewB8TvfKPiZRnMEkXiBi /c9RlgSYO7LkUeF/R1e5Nn25RDPBJqL+xz2/ROP/nWsMKgPL214NQtd1jxS17TrV 7MNgWkgdVCoJQEgV1i+TsGF3/A9iCR1o8rW9ovS/c83EEqBVeQ06616nfANe4zzN +JG1fuZuzOMleVoQFF3+c3VdU26WztYe9tSpDk646P5R/odi0HxxHdT90Ped2zFI 9KstBT2LBwO+xvZEOOJhLD8WW9KIcn34VjfWTp/i3wZ7chQIxfaV577TyoMRBJ9B vri/QtfVzYzbc+ujbr3bNgiHK9cQRdXOauGzrjhLACL0JgBC0h/TfJOaVQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFIpA3wH1vsbDYGrZ/2+tsA5he6JGMB8GA1UdIwQY MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et OTk0ODA2ZjA4MWYwLzEvaWtEZkFmVy14c05nYXRuX2I2MndEbUY3b2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAwhycAwQA whyeMAwDBALCaAQDBADCaAYwDAMEAtRFhAMEANRFhjANBgkqhkiG9w0BAQsFAAOC AQEAL00BQR/Q/9KvvvHvxuELYU/jB1nlBzAGJht8Gpn8A42Eb1/rBAeioIQrp0b3 lkk/H+EC+5Zu6YTjlB6SnVPtBZ9XABJ6sHAQgKuvF/0qYHxIBFtmkWscz4brly6m 1UrdRwsDBz+7WmSuIKi4xEVXosC1i1CwHZwGlZkx5mwbtHUnCPsn+FbGQexbeTSJ 1fnyYB9bNkGR0zb8ALL5hErrUHqE5x/ciozodNyPlUVVz+gGOu1xugbGIhZdOY5n vkvcX5QmvQ73EGPvuujBHk7j9gFuG3II4hfwwHQjSxKs4Jy2L2/vMj2ou+j1XYFh prfS8fIPx83wCFQQPOdp6Kyh8w== -----END CERTIFICATE-----Generated at Mon Jan 19 21:27:47 2026 by rpki-client