This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IvEsK34mIiLC73V2_OzIp8o6l4E.roa File: IvEsK34mIiLC73V2_OzIp8o6l4E.roa (raw, json) Hash identifier: dVQldLBJ92r00jRWdQUPJbr/3K7R3XbpwkN7kl7r37Q= Subject key identifier: 22:F1:2C:2B:7E:26:22:22:C2:EF:75:76:FC:EC:C8:A7:CA:3A:97:81 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106A0441A2A9EE1F09E772ED0A2172 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IvEsK34mIiLC73V2_OzIp8o6l4E.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211686 IP address blocks: 188.132.166.0/24 maxlen: 24 188.132.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6a:04:41:a2:a9:ee:1f:09:e7:72:ed:0a:21:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22f12c2b7e262222c2ef7576fcecc8a7ca3a9781 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:55:11:01:18:f7:f7:5f:84:50:2f:44:c2: 18:2e:1b:45:8e:ca:ce:80:89:55:71:62:13:55:5a: e8:7d:67:55:55:f0:05:c3:26:1e:dc:84:aa:07:cf: d2:40:aa:af:e6:f4:50:df:cf:34:0f:7c:d3:e6:b0: f6:8f:10:b6:56:35:c1:76:5d:91:fa:4d:2b:1e:ec: ac:ec:7e:04:71:eb:d6:a2:cf:25:36:a0:92:c6:b0: 28:df:df:e8:93:55:84:f1:c8:60:ec:06:59:74:b3: ab:ea:7f:7e:80:6b:04:5b:ab:67:6d:96:34:f4:d8: c8:96:29:0f:31:a7:91:0b:c4:0b:d9:81:09:36:e5: 84:2a:25:8d:93:fb:4f:0e:63:bb:ac:bc:96:85:f9: a5:6a:b6:86:ea:5e:87:7e:8e:14:0e:81:a9:21:59: 32:08:4e:50:5e:2d:68:b7:b1:81:9e:a2:dc:cd:fe: d0:1d:2f:c1:6c:47:13:c6:57:e1:93:0f:64:d1:56: 87:91:3d:88:15:94:a4:70:97:54:f9:65:c5:15:70: e1:f8:76:37:02:a7:e9:76:d1:50:fe:7d:3e:20:aa: 89:a0:8d:b6:22:61:3c:53:1c:62:a9:54:77:79:43: 72:a9:1b:91:3f:50:84:91:8d:87:b5:ab:7b:2a:de: b6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:2C:2B:7E:26:22:22:C2:EF:75:76:FC:EC:C8:A7:CA:3A:97:81 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/IvEsK34mIiLC73V2_OzIp8o6l4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.166.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:1c:b7:f7:3c:69:8e:21:eb:c8:58:5e:4e:40:a0:7a:32:09: 1a:f0:5d:8f:10:5e:2b:09:1a:8a:0e:e9:c7:0d:e1:8f:c3:9f: d3:0f:42:1a:72:69:54:19:26:b3:40:4d:f5:28:89:31:af:a0: 3e:1d:01:4b:ec:bf:05:6d:a1:46:c3:36:ba:cc:62:c5:32:cc: ec:f3:45:d1:57:eb:0d:f1:c8:e3:4b:e5:5b:9a:02:04:a0:3f: 15:fe:a4:39:0a:a7:4c:87:5f:2c:ba:4a:fc:b7:26:cf:8b:14: 6c:54:9f:08:a2:ea:aa:88:e3:59:ce:92:dc:c0:2e:1f:6c:4e: ad:46:a7:ca:60:fe:e0:cd:5f:4c:af:5c:6e:83:0e:60:9e:9f: 24:37:99:5e:e4:6a:1d:c2:81:a0:0e:2a:65:b1:41:cb:fb:9c: f8:bb:dc:c7:0d:a9:d6:55:82:f9:ff:25:93:b8:af:07:e3:87: 40:29:3a:9c:43:6b:7a:0b:51:95:7a:bf:00:d1:d0:c1:c8:26: 1e:2e:d2:25:71:e6:28:35:be:8d:51:39:1e:01:c8:93:da:9f: 97:05:62:f9:46:77:0d:83:4d:b9:96:f3:bf:9a:76:45:31:f3: c6:b8:28:a0:48:5a:45:a7:84:53:d9:33:d0:19:99:98:85:fb: 63:30:3f:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGoEQaKp7h8J53LtCiFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmYxMmMyYjdlMjYyMjIyYzJlZjc1NzZmY2VjYzhhN2NhM2E5NzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoadVEQEY9/dfhFAvRMIYLhtFjsrO gIlVcWITVVrofWdVVfAFwyYe3ISqB8/SQKqv5vRQ3880D3zT5rD2jxC2VjXBdl2R +k0rHuys7H4EcevWos8lNqCSxrAo39/ok1WE8chg7AZZdLOr6n9+gGsEW6tnbZY0 9NjIlikPMaeRC8QL2YEJNuWEKiWNk/tPDmO7rLyWhfmlaraG6l6Hfo4UDoGpIVky CE5QXi1ot7GBnqLczf7QHS/BbEcTxlfhkw9k0VaHkT2IFZSkcJdU+WXFFXDh+HY3 AqfpdtFQ/n0+IKqJoI22ImE8UxxiqVR3eUNyqRuRP1CEkY2Htat7Kt620QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLxLCt+JiIiwu91dvzsyKfKOpeBMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvSXZFc0szNG1JaUxDNzNWMl9PeklwOG82bDRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvISmMA0G CSqGSIb3DQEBCwUAA4IBAQAsHLf3PGmOIevIWF5OQKB6Mgka8F2PEF4rCRqKDunH DeGPw5/TD0IacmlUGSazQE31KIkxr6A+HQFL7L8FbaFGwza6zGLFMszs80XRV+sN 8cjjS+VbmgIEoD8V/qQ5CqdMh18sukr8tybPixRsVJ8IouqqiONZzpLcwC4fbE6t RqfKYP7gzV9Mr1xugw5gnp8kN5le5GodwoGgDiplsUHL+5z4u9zHDanWVYL5/yWT uK8H44dAKTqcQ2t6C1GVer8A0dDByCYeLtIlceYoNb6NUTkeAciT2p+XBWL5RncN g025lvO/mnZFMfPGuCigSFpFp4RT2TPQGZmYhftjMD+I -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:07 2026 by rpki-client