This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/iTaV7elHXW3QykhmVM8s9S75IWo.roa File: iTaV7elHXW3QykhmVM8s9S75IWo.roa (raw, json) Hash identifier: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc= Subject key identifier: 89:36:95:ED:E9:47:5D:6D:D0:CA:48:66:54:CF:2C:F5:2E:F9:21:6A Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615 Certificate serial: 019B7A5A8CFBB8F9158E0BB9009B517CDC8E Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/iTaV7elHXW3QykhmVM8s9S75IWo.roa Signing time: Thu 01 Jan 2026 16:18:33 +0000 ROA not before: Thu 01 Jan 2026 16:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6843 IP address blocks: 185.120.36.0/24 maxlen: 24 185.120.37.0/24 maxlen: 24 185.120.38.0/24 maxlen: 24 2a06:8f00::/30 maxlen: 30 2a06:8f04::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:8c:fb:b8:f9:15:8e:0b:b9:00:9b:51:7c:dc:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615 Validity Not Before: Jan 1 16:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=893695ede9475d6dd0ca486654cf2cf52ef9216a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8a:df:81:39:e9:68:81:96:e7:e9:4c:af:25: b1:0f:eb:90:89:a4:fc:9a:1c:ac:5e:43:65:b7:e3: 84:f1:ef:f9:42:fd:65:97:79:72:a1:ce:0d:82:5d: 80:ed:e7:78:5c:cc:4f:b9:89:24:e5:a2:a9:2c:81: 5f:93:3d:0d:7e:06:78:f8:3b:47:b7:1c:a4:76:42: fb:5d:94:16:bc:43:f7:29:64:b5:ce:12:1b:10:f0: 3a:2f:b1:b0:b8:3a:4f:27:e0:ec:06:1f:63:6f:1f: 59:3f:28:0e:0a:87:00:32:45:62:de:38:16:fe:be: 0d:2e:55:1d:f4:c4:6b:3a:59:3c:ac:a0:d5:28:22: 31:aa:30:54:22:f6:19:d1:97:57:7c:2b:02:f5:69: 76:2a:4e:9c:fe:a4:bf:75:6a:3c:e2:32:38:56:fe: 2b:8b:87:2e:0e:17:a0:d8:5b:cc:27:98:9a:66:54: 65:a3:39:e8:34:1b:56:52:9e:0f:36:90:43:4f:41: 63:fd:8f:09:ee:d7:a0:3c:d5:12:7e:b7:6c:33:6a: 57:86:2a:d5:96:84:31:62:e0:ec:8e:ca:16:ec:3d: 52:b9:a2:e9:0a:e2:de:de:d6:90:37:db:52:9e:63: bf:2f:0a:01:ee:72:3b:a6:bb:44:51:b8:5e:bd:de: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:36:95:ED:E9:47:5D:6D:D0:CA:48:66:54:CF:2C:F5:2E:F9:21:6A X509v3 Authority Key Identifier: keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/iTaV7elHXW3QykhmVM8s9S75IWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.120.36.0-185.120.38.255 IPv6: 2a06:8f00::/29 Signature Algorithm: sha256WithRSAEncryption 8d:93:0e:2b:96:8d:19:a7:53:c2:d8:7f:a0:29:05:2e:a0:45: 60:2d:a6:94:8b:a4:67:91:a7:f7:cb:b8:66:f0:ba:64:d1:3e: 44:de:c9:b8:01:65:8b:57:9a:56:5c:67:ed:dc:6f:8f:ed:34: 7a:ad:3f:3e:48:bb:65:7f:97:e6:99:1b:7d:93:ea:02:9b:60: 5c:8a:c2:8d:26:1a:91:98:4a:85:24:b3:36:26:db:fc:07:d8: 0d:60:a5:3e:9e:16:d3:a4:dc:40:4a:b0:1d:f5:6b:3d:b3:e2: d4:89:3c:f3:cf:1b:03:6a:66:fd:0e:85:87:f2:3c:21:55:44: 29:21:29:84:35:b2:75:7f:2a:08:c2:4b:42:ce:48:ce:32:ff: 38:ec:d9:40:80:58:32:b6:a7:d7:44:d6:69:ad:58:84:23:e2: 61:32:ed:15:7d:57:97:ef:21:d6:d8:be:5e:fa:42:d7:75:8d: 22:ba:f0:b8:a4:20:c6:57:ec:c6:48:29:94:24:50:58:d5:60: 93:1b:8c:77:53:37:9d:69:47:a5:4a:4d:a0:b7:f6:6b:52:77: 6f:ce:bc:a5:e7:b9:aa:39:71:c1:89:01:a5:b3:a0:83:bc:70: 85:4c:2a:90:b0:53:29:59:8f:4f:90:96:a2:aa:1b:c1:09:2b: e2:c5:39:13 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6Woz7uPkVjgu5AJtRfNyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk NDE2MTUwHhcNMjYwMTAxMTYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTM2OTVlZGU5NDc1ZDZkZDBjYTQ4NjY1NGNmMmNmNTJlZjkyMTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IrfgTnpaIGW5+lMryWxD+uQiaT8 mhysXkNlt+OE8e/5Qv1ll3lyoc4Ngl2A7ed4XMxPuYkk5aKpLIFfkz0NfgZ4+DtH txykdkL7XZQWvEP3KWS1zhIbEPA6L7GwuDpPJ+DsBh9jbx9ZPygOCocAMkVi3jgW /r4NLlUd9MRrOlk8rKDVKCIxqjBUIvYZ0ZdXfCsC9Wl2Kk6c/qS/dWo84jI4Vv4r i4cuDheg2FvMJ5iaZlRloznoNBtWUp4PNpBDT0Fj/Y8J7tegPNUSfrdsM2pXhirV loQxYuDsjsoW7D1SuaLpCuLe3taQN9tSnmO/LwoB7nI7prtEUbhevd5q6QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIk2le3pR11t0MpIZlTPLPUu+SFqMB8GA1UdIwQY MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt MTgxZTY0MDU5ZDMxLzEvaVRhVjdlbEhYVzNReWtobVZNOHM5Uzc1SVdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5eCQD BAC5eCYwDQQCAAIwBwMFAyoGjwAwDQYJKoZIhvcNAQELBQADggEBAI2TDiuWjRmn U8LYf6ApBS6gRWAtppSLpGeRp/fLuGbwumTRPkTeybgBZYtXmlZcZ+3cb4/tNHqt Pz5Iu2V/l+aZG32T6gKbYFyKwo0mGpGYSoUkszYm2/wH2A1gpT6eFtOk3EBKsB31 az2z4tSJPPPPGwNqZv0OhYfyPCFVRCkhKYQ1snV/KgjCS0LOSM4y/zjs2UCAWDK2 p9dE1mmtWIQj4mEy7RV9V5fvIdbYvl76Qtd1jSK68LikIMZX7MZIKZQkUFjVYJMb jHdTN51pR6VKTaC39mtSd2/OvKXnuao5ccGJAaWzoIO8cIVMKpCwUylZj0+QlqKq G8EJK+LFORM= -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:16 2026 by rpki-client