This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/IYD48FobX2QtW7l4Nlux0f3C9cQ.roa File: IYD48FobX2QtW7l4Nlux0f3C9cQ.roa (raw, json) Hash identifier: HnyhMFK+hrRQqY1dmM0kJ8BUc9CaYhp0OvPZ/NcZJXc= Subject key identifier: 21:80:F8:F0:5A:1B:5F:64:2D:5B:B9:78:36:5B:B1:D1:FD:C2:F5:C4 Certificate issuer: /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7 Certificate serial: 019B7DCA74AD5AE6FA09CA04356186BFA5FC Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/IYD48FobX2QtW7l4Nlux0f3C9cQ.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212576 IP address blocks: 185.196.62.0/24 maxlen: 24 2a10:74c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:74:ad:5a:e6:fa:09:ca:04:35:61:86:bf:a5:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7 Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2180f8f05a1b5f642d5bb978365bb1d1fdc2f5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b1:b8:1d:75:4d:c2:21:7c:a0:20:d5:e1:91: a7:47:2f:db:55:e9:b2:28:be:b3:10:aa:90:eb:04: ff:a5:25:a6:3a:ee:47:d2:fa:9a:62:9e:a6:36:e7: eb:29:df:1d:d6:d5:6a:5c:66:ee:4d:4b:d1:78:c1: 99:04:24:ba:87:55:aa:6a:8f:d9:18:94:80:bc:bc: 49:cf:7b:29:d1:76:c5:8d:63:a7:8e:53:32:81:a4: 0a:8b:83:e2:db:cf:ce:57:49:29:09:2d:71:cb:bc: 81:0f:b8:29:ab:b2:e2:fa:77:d6:b5:89:bd:9f:8f: 24:11:32:4a:f2:cb:e4:5c:fa:a7:0b:a4:58:ea:29: 08:c6:98:21:47:d7:41:21:5b:a8:47:8f:0e:64:14: 2d:e6:da:76:96:90:bd:04:b3:60:8a:7e:93:eb:80: 16:44:3d:cd:cb:3b:79:82:e7:d4:ad:8e:f6:ff:44: cf:79:d4:63:cd:5a:ce:50:9f:98:66:21:6c:cc:97: 42:63:dd:38:c8:ce:54:1d:bb:0c:15:83:3a:4b:72: e1:4f:d1:54:d5:c3:c4:ef:08:3e:6f:42:48:e9:60: 20:21:1b:0c:7c:e0:a4:a6:bb:89:12:28:34:2b:5e: a1:45:97:2b:b8:ee:cc:c0:30:0e:85:4b:47:3d:f4: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:80:F8:F0:5A:1B:5F:64:2D:5B:B9:78:36:5B:B1:D1:FD:C2:F5:C4 X509v3 Authority Key Identifier: keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/IYD48FobX2QtW7l4Nlux0f3C9cQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.62.0/24 IPv6: 2a10:74c0::/32 Signature Algorithm: sha256WithRSAEncryption 58:91:40:02:97:3e:fa:ff:7a:1c:37:1e:39:9b:67:4d:78:81: 11:66:ad:ae:ec:2c:8b:d7:20:08:39:d3:c4:29:91:07:98:87: 1c:be:63:df:99:92:0a:62:43:d3:b8:bc:83:c8:8c:61:91:b6: fa:7f:05:f0:06:49:74:84:6d:10:b9:b8:ef:fd:45:cd:27:4a: f7:51:8c:a4:68:04:aa:aa:96:e5:05:f1:1f:e0:8b:73:d8:4e: 87:b7:e7:81:7e:21:c9:dc:cb:fc:f8:17:32:fc:d2:b3:f2:8a: 36:5a:0a:a0:fc:03:44:e7:d6:be:35:11:db:6a:19:a3:79:bd: 87:28:74:13:d1:89:74:6d:4e:a6:66:e9:df:37:93:cb:c4:0b: 20:a0:77:c3:e1:7c:bb:34:ab:a0:94:6e:b3:57:30:31:ff:86: 9b:c3:fc:b3:98:b8:0b:f6:df:6b:33:b8:b2:db:57:18:1d:4c: 91:bb:f4:43:73:29:0a:be:14:75:bc:eb:27:b6:c2:56:b0:18: b1:f2:3b:89:6a:b6:e7:10:72:c5:c9:08:ab:52:77:28:34:c5: 5b:fc:c2:c6:3e:c7:0a:4e:13:e7:53:4d:be:95:f4:ec:8d:c7: 32:10:ae:1c:ac:58:97:62:9c:4f:93:1e:92:41:59:47:55:fe: 85:7b:a1:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9ynStWub6CcoENWGGv6X8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1 YmY2YzcwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTgwZjhmMDVhMWI1ZjY0MmQ1YmI5NzgzNjViYjFkMWZkYzJmNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrG4HXVNwiF8oCDV4ZGnRy/bVemy KL6zEKqQ6wT/pSWmOu5H0vqaYp6mNufrKd8d1tVqXGbuTUvReMGZBCS6h1Wqao/Z GJSAvLxJz3sp0XbFjWOnjlMygaQKi4Pi28/OV0kpCS1xy7yBD7gpq7Li+nfWtYm9 n48kETJK8svkXPqnC6RY6ikIxpghR9dBIVuoR48OZBQt5tp2lpC9BLNgin6T64AW RD3Nyzt5gufUrY72/0TPedRjzVrOUJ+YZiFszJdCY904yM5UHbsMFYM6S3LhT9FU 1cPE7wg+b0JI6WAgIRsMfOCkpruJEig0K16hRZcruO7MwDAOhUtHPfS1qQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCGA+PBaG19kLVu5eDZbsdH9wvXEMB8GA1UdIwQY MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt MDJjZjZiMGRiNjNiLzEvSVlENDhGb2JYMlF0VzdsNE5sdXgwZjNDOWNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAucQ+MA0E AgACMAcDBQAqEHTAMA0GCSqGSIb3DQEBCwUAA4IBAQBYkUAClz76/3ocNx45m2dN eIERZq2u7CyL1yAIOdPEKZEHmIccvmPfmZIKYkPTuLyDyIxhkbb6fwXwBkl0hG0Q ubjv/UXNJ0r3UYykaASqqpblBfEf4Itz2E6Ht+eBfiHJ3Mv8+Bcy/NKz8oo2Wgqg /ANE59a+NRHbahmjeb2HKHQT0Yl0bU6mZunfN5PLxAsgoHfD4Xy7NKuglG6zVzAx /4abw/yzmLgL9t9rM7iy21cYHUyRu/RDcykKvhR1vOsntsJWsBix8juJarbnEHLF yQirUncoNMVb/MLGPscKThPnU02+lfTsjccyEK4crFiXYpxPkx6SQVlHVf6Fe6E4 -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:13 2026 by rpki-client