This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/IFfM41C2iw4zVbKliZbWU1sGtlo.roa File: IFfM41C2iw4zVbKliZbWU1sGtlo.roa (raw, json) Hash identifier: 2tPJsJbwIDoCDzDnvS5bHZwht6rGtT6H5rAQ7kX958E= Subject key identifier: 20:57:CC:E3:50:B6:8B:0E:33:55:B2:A5:89:96:D6:53:5B:06:B6:5A Certificate issuer: /CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae Certificate serial: 019B79EC269C82F4FA397E432561CE901CD3 Authority key identifier: AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/IFfM41C2iw4zVbKliZbWU1sGtlo.roa Signing time: Thu 01 Jan 2026 14:17:58 +0000 ROA not before: Thu 01 Jan 2026 14:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39650 IP address blocks: 185.164.254.0/24 maxlen: 24 185.164.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.mft rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:26:9c:82:f4:fa:39:7e:43:25:61:ce:90:1c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4ef4a8ed3711b6acd68c0f48f621831fd5aaae Validity Not Before: Jan 1 14:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2057cce350b68b0e3355b2a58996d6535b06b65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:24:ca:be:f8:32:ff:99:20:6a:b4:f8:e5:c3: 7a:cc:20:8a:f4:30:62:98:78:ec:86:1d:0c:35:e0: a1:93:22:ff:fd:a2:25:09:35:93:5b:66:1f:35:a1: 72:ed:a0:a4:65:17:25:f3:1f:6e:c0:6b:25:97:f2: 10:80:df:02:63:da:a0:bc:54:1d:d5:8f:e4:4b:c6: 2b:6f:db:bd:4c:88:b3:57:0c:f3:35:31:29:51:b4: 27:49:33:95:d7:b4:07:ab:b2:40:87:6a:ee:56:1d: 22:55:d4:20:a0:ab:4b:a3:64:db:64:db:96:e0:5b: 9a:f4:bb:da:ac:3e:19:9f:35:59:4d:84:cf:6d:af: 9f:5a:17:88:c6:fe:27:62:01:27:00:53:65:c0:ae: cb:ea:84:af:dc:43:69:9a:e5:63:cf:aa:df:66:b2: c1:9a:7b:53:13:dc:ce:9b:00:80:9f:80:f0:cc:83: bf:34:42:de:e4:19:67:f8:ff:fd:e9:41:f2:45:ca: 1e:4b:4f:a2:32:18:59:15:5a:a7:4d:01:32:b1:c8: 18:b1:b3:8d:b8:32:86:fa:99:9f:b9:8f:ad:5c:32: 50:24:21:b0:ab:55:d0:06:fe:6c:d9:fa:f3:20:ac: eb:18:96:0e:94:ab:e1:7e:29:da:ec:fb:b1:ef:58: 16:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:57:CC:E3:50:B6:8B:0E:33:55:B2:A5:89:96:D6:53:5B:06:B6:5A X509v3 Authority Key Identifier: keyid:AF:4E:F4:A8:ED:37:11:B6:AC:D6:8C:0F:48:F6:21:83:1F:D5:AA:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r070qO03Ebas1owPSPYhgx_Vqq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/IFfM41C2iw4zVbKliZbWU1sGtlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/e8f4b3-2120-4ecb-9609-cb9c58f510cb/1/r070qO03Ebas1owPSPYhgx_Vqq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.254.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:61:38:43:97:84:b6:01:08:da:e1:f4:73:c3:8c:75:19:4e: ad:a5:1b:06:b9:7b:51:eb:e0:ed:29:7d:a3:37:00:28:b9:dc: 43:15:81:af:26:75:93:71:51:5f:cf:fb:d5:34:13:c4:12:7b: e6:a0:ed:fa:f1:15:a7:90:a8:63:cb:61:a1:f0:87:05:bc:15: be:10:10:c0:b8:e6:65:da:6d:10:2f:c7:f4:40:3c:bf:48:6d: 51:ea:22:e7:22:ea:16:4e:6d:74:c9:88:b0:be:ef:ca:b0:06: b8:7c:ca:9f:09:1a:41:65:2c:dc:56:b7:9d:6e:7a:98:c1:59: fd:df:5d:f2:54:99:87:43:0c:ed:1b:02:0b:4a:89:fa:ae:cc: 7a:83:90:5f:11:aa:59:2e:fb:1e:0e:8f:4a:25:f7:92:2f:8e: 64:d7:4f:40:a3:0e:9d:9b:cb:e7:6b:70:2c:45:c0:67:1f:f1: 4e:61:50:66:0b:94:46:9e:94:9a:44:20:46:5f:93:fa:7e:e9: a2:5d:b9:bb:7f:5a:75:05:f8:a1:90:46:5e:42:2b:2c:d4:ec: 9d:6c:aa:fe:25:83:a4:f3:27:f4:27:d4:03:1c:27:94:42:ff: e7:9b:f7:12:d0:62:25:f9:4d:8b:4e:fd:25:cd:53:2f:f7:e2: 00:60:7d:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57CacgvT6OX5DJWHOkBzTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGVmNGE4ZWQzNzExYjZhY2Q2OGMwZjQ4ZjYyMTgzMWZk NWFhYWUwHhcNMjYwMTAxMTQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDU3Y2NlMzUwYjY4YjBlMzM1NWIyYTU4OTk2ZDY1MzViMDZiNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCTKvvgy/5kgarT45cN6zCCK9DBi mHjshh0MNeChkyL//aIlCTWTW2YfNaFy7aCkZRcl8x9uwGsll/IQgN8CY9qgvFQd 1Y/kS8Yrb9u9TIizVwzzNTEpUbQnSTOV17QHq7JAh2ruVh0iVdQgoKtLo2TbZNuW 4Fua9LvarD4ZnzVZTYTPba+fWheIxv4nYgEnAFNlwK7L6oSv3ENpmuVjz6rfZrLB mntTE9zOmwCAn4DwzIO/NELe5Bln+P/96UHyRcoeS0+iMhhZFVqnTQEyscgYsbON uDKG+pmfuY+tXDJQJCGwq1XQBv5s2frzIKzrGJYOlKvhfina7Pux71gWsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBXzONQtosOM1WypYmW1lNbBrZaMB8GA1UdIwQY MBaAFK9O9KjtNxG2rNaMD0j2IYMf1aquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDkt Y2I5YzU4ZjUxMGNiLzEvSUZmTTQxQzJpdzR6VmJLbGlaYldVMXNHdGxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lOGY0YjMtMjEyMC00ZWNiLTk2MDktY2I5YzU4ZjUxMGNi LzEvcjA3MHFPMDNFYmFzMW93UFNQWWhneF9WcXE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaT+MA0G CSqGSIb3DQEBCwUAA4IBAQAbYThDl4S2AQja4fRzw4x1GU6tpRsGuXtR6+DtKX2j NwAoudxDFYGvJnWTcVFfz/vVNBPEEnvmoO368RWnkKhjy2Gh8IcFvBW+EBDAuOZl 2m0QL8f0QDy/SG1R6iLnIuoWTm10yYiwvu/KsAa4fMqfCRpBZSzcVredbnqYwVn9 313yVJmHQwztGwILSon6rsx6g5BfEapZLvseDo9KJfeSL45k109Aow6dm8vna3As RcBnH/FOYVBmC5RGnpSaRCBGX5P6fumiXbm7f1p1BfihkEZeQiss1OydbKr+JYOk 8yf0J9QDHCeUQv/nm/cS0GIl+U2LTv0lzVMv9+IAYH0u -----END CERTIFICATE-----Generated at Tue Jan 27 01:04:05 2026 by rpki-client