This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/iMImZ1JXlWfmPfxyuu455VKKHUc.roa File: iMImZ1JXlWfmPfxyuu455VKKHUc.roa (raw, json) Hash identifier: 038Ca8EqNUCh1s0mKXCCjtHKnbOn58ESpskQQmfAtRQ= Subject key identifier: 88:C2:26:67:52:57:95:67:E6:3D:FC:72:BA:EE:39:E5:52:8A:1D:47 Certificate issuer: /CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9 Certificate serial: 019B79EC21DFC3CE2AE7D119E69618D7717C Authority key identifier: B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/iMImZ1JXlWfmPfxyuu455VKKHUc.roa Signing time: Thu 01 Jan 2026 14:17:56 +0000 ROA not before: Thu 01 Jan 2026 14:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206828 IP address blocks: 185.175.60.0/24 maxlen: 24 185.175.61.0/24 maxlen: 24 185.175.62.0/24 maxlen: 24 185.175.63.0/24 maxlen: 24 2a0b:d100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.mft rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:21:df:c3:ce:2a:e7:d1:19:e6:96:18:d7:71:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6fbc63ef5614a7ef95a106188e3d78755c687b9 Validity Not Before: Jan 1 14:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88c2266752579567e63dfc72baee39e5528a1d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:55:da:bb:ed:f1:3e:38:63:40:3a:d4:96:c5: 9d:37:2e:44:06:7f:23:d3:8e:a5:dd:9f:2a:74:52: 47:88:e3:01:94:38:8e:ae:cc:17:99:c8:95:db:59: f0:b5:be:8b:78:0c:da:3f:51:13:60:48:af:08:6a: 11:af:16:f0:9f:e1:23:82:d4:80:2f:9c:05:23:37: 30:5f:c4:24:72:2b:ff:46:8c:1b:40:e6:31:0a:69: f8:86:01:f0:ff:9f:0f:0a:bf:25:c4:4e:75:86:1e: 66:f3:f2:63:4a:08:45:6e:b7:cd:93:d6:5b:7c:41: 59:ad:61:80:90:aa:dd:18:7e:43:2b:7c:9c:f2:b0: e3:27:21:02:5b:af:26:70:eb:d2:92:25:29:5b:7b: 09:b5:08:f9:25:91:24:87:ff:9a:f1:c3:47:a7:4a: ac:63:f1:7a:dc:da:32:15:eb:f6:c1:54:d1:ef:43: 3b:68:48:ff:e1:64:99:39:cc:24:62:bb:1a:2a:20: 28:dc:0a:6c:84:b6:71:f5:90:5a:5a:e1:19:0d:31: fb:8f:96:20:66:0a:3a:51:b4:b9:39:c6:05:e0:7f: b6:22:1c:a0:30:00:f9:1a:14:5b:1e:6e:22:7e:19: 59:ac:8f:5e:e7:6d:2f:f5:75:c0:2d:f8:58:72:86: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C2:26:67:52:57:95:67:E6:3D:FC:72:BA:EE:39:E5:52:8A:1D:47 X509v3 Authority Key Identifier: keyid:B6:FB:C6:3E:F5:61:4A:7E:F9:5A:10:61:88:E3:D7:87:55:C6:87:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvvGPvVhSn75WhBhiOPXh1XGh7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/iMImZ1JXlWfmPfxyuu455VKKHUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/8631f5-54a2-486f-b9a5-081a1ae6ebd6/1/tvvGPvVhSn75WhBhiOPXh1XGh7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.175.60.0/22 IPv6: 2a0b:d100::/29 Signature Algorithm: sha256WithRSAEncryption 53:0f:02:6b:c0:c3:2d:c5:67:46:74:97:51:2f:5f:65:ef:c5: 1c:51:07:d0:18:b4:82:c3:70:b4:51:ef:f1:ab:07:5a:50:c8: 59:4a:4c:c4:9b:d0:b2:77:28:8a:73:73:c6:20:05:eb:f0:d5: 57:63:16:f4:7c:e2:c9:1d:fc:12:57:bc:e3:cb:c5:e9:71:ae: 07:0b:d6:b4:e0:29:f7:55:40:26:89:ba:4c:cc:dd:91:52:8f: 8b:14:f1:c3:48:a1:5f:17:b1:fe:a5:5d:61:ac:6b:ea:d9:c4: f3:5f:33:fc:7b:9c:74:2c:84:a5:6e:f7:aa:ea:30:5d:82:0c: ed:ae:22:7e:e9:06:6e:0d:a1:58:5f:0e:a2:75:5d:d3:cd:fc: 4b:8a:c7:48:04:70:ea:54:b8:5a:a4:00:ae:75:4f:5e:85:aa: 2c:76:87:77:1e:6a:d5:fb:50:87:d4:d9:fe:46:81:7a:fb:f5: 02:93:1a:31:da:29:29:3a:14:4f:37:43:98:6d:d0:87:55:4e: ee:4d:76:30:68:87:2a:a8:a2:0e:6a:9c:8c:ad:0e:ff:73:3d: a0:53:2a:d5:22:ea:02:23:2c:68:1b:c2:c1:a0:4f:e7:80:88: aa:52:3d:8d:c8:b7:34:2d:41:06:dc:bb:b0:84:b1:62:77:d4: 8e:3c:d6:33 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57CHfw84q59EZ5pYY13F8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZmJjNjNlZjU2MTRhN2VmOTVhMTA2MTg4ZTNkNzg3NTVj Njg3YjkwHhcNMjYwMTAxMTQxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGMyMjY2NzUyNTc5NTY3ZTYzZGZjNzJiYWVlMzllNTUyOGExZDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlXau+3xPjhjQDrUlsWdNy5EBn8j 046l3Z8qdFJHiOMBlDiOrswXmciV21nwtb6LeAzaP1ETYEivCGoRrxbwn+EjgtSA L5wFIzcwX8Qkciv/RowbQOYxCmn4hgHw/58PCr8lxE51hh5m8/JjSghFbrfNk9Zb fEFZrWGAkKrdGH5DK3yc8rDjJyECW68mcOvSkiUpW3sJtQj5JZEkh/+a8cNHp0qs Y/F63NoyFev2wVTR70M7aEj/4WSZOcwkYrsaKiAo3ApshLZx9ZBaWuEZDTH7j5Yg Zgo6UbS5OcYF4H+2IhygMAD5GhRbHm4ifhlZrI9e520v9XXALfhYcoaRPQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIjCJmdSV5Vn5j38crruOeVSih1HMB8GA1UdIwQY MBaAFLb7xj71YUp++VoQYYjj14dVxoe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUt MDgxYTFhZTZlYmQ2LzEvaU1JbVoxSlhsV2ZtUGZ4eXV1NDU1VktLSFVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS84NjMxZjUtNTRhMi00ODZmLWI5YTUtMDgxYTFhZTZlYmQ2 LzEvdHZ2R1B2VmhTbjc1V2hCaGlPUFhoMVhHaDdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua88MA0E AgACMAcDBQMqC9EAMA0GCSqGSIb3DQEBCwUAA4IBAQBTDwJrwMMtxWdGdJdRL19l 78UcUQfQGLSCw3C0Ue/xqwdaUMhZSkzEm9CydyiKc3PGIAXr8NVXYxb0fOLJHfwS V7zjy8Xpca4HC9a04Cn3VUAmibpMzN2RUo+LFPHDSKFfF7H+pV1hrGvq2cTzXzP8 e5x0LISlbveq6jBdggztriJ+6QZuDaFYXw6idV3TzfxLisdIBHDqVLhapACudU9e haosdod3HmrV+1CH1Nn+RoF6+/UCkxox2ikpOhRPN0OYbdCHVU7uTXYwaIcqqKIO apyMrQ7/cz2gUyrVIuoCIyxoG8LBoE/ngIiqUj2NyLc0LUEG3LuwhLFid9SOPNYz -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:12 2026 by rpki-client