This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/IXzvb0oMAUQE_F6M51MZp-vD2zA.roa File: IXzvb0oMAUQE_F6M51MZp-vD2zA.roa (raw, json) Hash identifier: yPGLWb8LE+8WjEXthn7v5ZfntWLr2abqa8ktyJTdaHI= Subject key identifier: 21:7C:EF:6F:4A:0C:01:44:04:FC:5E:8C:E7:53:19:A7:EB:C3:DB:30 Certificate issuer: /CN=12c603666719e979bef0921451a2ec264ed01209 Certificate serial: 019B76EB54B9704D3A3D435C61284A31A07D Authority key identifier: 12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/IXzvb0oMAUQE_F6M51MZp-vD2zA.roa Signing time: Thu 01 Jan 2026 00:18:12 +0000 ROA not before: Thu 01 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35398 IP address blocks: 185.211.28.0/24 maxlen: 24 185.211.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.mft rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:54:b9:70:4d:3a:3d:43:5c:61:28:4a:31:a0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12c603666719e979bef0921451a2ec264ed01209 Validity Not Before: Jan 1 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=217cef6f4a0c014404fc5e8ce75319a7ebc3db30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:cf:18:64:85:32:be:64:e9:29:c1:8c:f9: 2a:8c:d6:53:55:55:2a:24:c3:c8:a4:b7:0e:e4:71: 76:c6:de:c2:98:79:f1:68:05:68:bd:44:ca:23:0c: c6:dd:1f:e3:d8:00:30:86:b0:52:e7:ca:db:f5:01: 23:6c:70:1f:68:fd:32:da:fd:f7:b7:60:87:ac:84: 7b:f6:b7:7b:2f:e2:d1:fd:06:c4:f6:63:66:a3:c3: 14:af:7c:57:86:a6:7d:cd:dd:f0:24:c7:d0:26:86: 3e:ef:5e:30:b0:de:8e:1a:b6:02:0c:1c:6e:cb:e8: 16:b6:d9:0d:09:e2:d1:ea:5f:ea:46:35:eb:9a:eb: 91:1c:00:a1:2d:49:0f:95:e4:22:2a:67:b0:a4:b2: 0b:22:35:94:cb:23:91:19:88:39:f2:d0:c5:2c:4b: bf:d1:af:1a:85:cb:78:1d:20:da:91:a1:83:cc:3c: db:dd:f6:09:7d:02:f6:61:1f:2e:f3:b7:e4:4d:d6: a2:38:47:76:97:83:6c:d6:a1:6b:69:e3:fd:cc:a7: 29:b4:cf:0d:4f:0e:ee:ea:fb:e1:59:67:fa:b1:84: 86:73:a8:67:0a:98:bf:d2:84:d1:77:0f:45:02:84: 6b:74:42:5f:bc:dc:0d:b2:93:bf:8b:90:ab:11:e7: aa:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:EF:6F:4A:0C:01:44:04:FC:5E:8C:E7:53:19:A7:EB:C3:DB:30 X509v3 Authority Key Identifier: keyid:12:C6:03:66:67:19:E9:79:BE:F0:92:14:51:A2:EC:26:4E:D0:12:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/IXzvb0oMAUQE_F6M51MZp-vD2zA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c2d399-4ae9-4431-9161-58efa0bee084/1/EsYDZmcZ6Xm-8JIUUaLsJk7QEgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.211.28.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:c6:22:b3:08:53:5b:b7:c6:ac:0d:c7:4f:b7:43:61:93:63: af:95:fa:41:e8:55:7a:54:75:3c:32:67:37:e0:a1:cc:58:a8: 53:cf:73:c8:59:84:b4:da:2a:bd:b6:7a:fc:26:73:a2:11:d8: 0c:cb:23:ea:02:e8:68:07:98:7f:bb:7a:25:77:ee:ac:fc:03: 5a:dc:97:a7:7d:8e:5e:20:2c:ce:71:f7:6f:43:6f:a9:00:f4: c2:64:51:07:3f:f1:40:ed:29:a4:d9:4e:0e:09:28:bf:78:aa: cb:b0:5f:10:fc:2a:b9:5b:ec:d5:3b:94:30:16:42:cb:7a:95: 0a:0a:43:75:8a:17:a1:b1:9d:b1:f3:a2:06:d2:97:e8:a1:cc: 00:5e:d8:6d:d0:49:9b:61:40:e2:1d:c5:d7:5c:59:4d:78:db: b1:74:08:0d:f9:8c:18:43:50:e7:05:1c:73:b9:8e:25:b6:92: a4:4c:7d:2a:8e:25:45:06:22:87:2c:6c:96:b0:27:e9:0d:a0: bc:a5:a1:8b:b4:62:56:f2:1c:a0:bc:bf:bc:44:05:14:ec:8a: ce:83:cc:62:37:7b:44:f3:e2:f3:9b:e7:f8:8e:d6:73:c5:9a: 70:3f:14:bb:eb:49:9f:f2:d5:f2:6f:80:81:b1:9a:e9:3a:31: 1c:00:31:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261S5cE06PUNcYShKMaB9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYzYwMzY2NjcxOWU5NzliZWYwOTIxNDUxYTJlYzI2NGVk MDEyMDkwHhcNMjYwMTAxMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTdjZWY2ZjRhMGMwMTQ0MDRmYzVlOGNlNzUzMTlhN2ViYzNkYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyLPGGSFMr5k6SnBjPkqjNZTVVUq JMPIpLcO5HF2xt7CmHnxaAVovUTKIwzG3R/j2AAwhrBS58rb9QEjbHAfaP0y2v33 t2CHrIR79rd7L+LR/QbE9mNmo8MUr3xXhqZ9zd3wJMfQJoY+714wsN6OGrYCDBxu y+gWttkNCeLR6l/qRjXrmuuRHAChLUkPleQiKmewpLILIjWUyyORGYg58tDFLEu/ 0a8ahct4HSDakaGDzDzb3fYJfQL2YR8u87fkTdaiOEd2l4Ns1qFraeP9zKcptM8N Tw7u6vvhWWf6sYSGc6hnCpi/0oTRdw9FAoRrdEJfvNwNspO/i5CrEeeqiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCF8729KDAFEBPxejOdTGafrw9swMB8GA1UdIwQY MBaAFBLGA2ZnGel5vvCSFFGi7CZO0BIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEt NThlZmEwYmVlMDg0LzEvSVh6dmIwb01BVVFFX0Y2TTUxTVpwLXZEMnpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jMmQzOTktNGFlOS00NDMxLTkxNjEtNThlZmEwYmVlMDg0 LzEvRXNZRFptY1o2WG0tOEpJVVVhTHNKazdRRWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBudMcMA0G CSqGSIb3DQEBCwUAA4IBAQAKxiKzCFNbt8asDcdPt0Nhk2OvlfpB6FV6VHU8Mmc3 4KHMWKhTz3PIWYS02iq9tnr8JnOiEdgMyyPqAuhoB5h/u3old+6s/ANa3JenfY5e ICzOcfdvQ2+pAPTCZFEHP/FA7Smk2U4OCSi/eKrLsF8Q/Cq5W+zVO5QwFkLLepUK CkN1ihehsZ2x86IG0pfoocwAXtht0EmbYUDiHcXXXFlNeNuxdAgN+YwYQ1DnBRxz uY4ltpKkTH0qjiVFBiKHLGyWsCfpDaC8paGLtGJW8hygvL+8RAUU7IrOg8xiN3tE 8+Lzm+f4jtZzxZpwPxS760mf8tXyb4CBsZrpOjEcADGp -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:37 2026 by rpki-client