This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/IIK_PCi18i4nJOHS2yy-kPNRbU8.roa File: IIK_PCi18i4nJOHS2yy-kPNRbU8.roa (raw, json) Hash identifier: aOKFLng/u9P5owW+nSLDrOFMq+zEl4wTq8j05LITn5g= Subject key identifier: 20:82:BF:3C:28:B5:F2:2E:27:24:E1:D2:DB:2C:BE:90:F3:51:6D:4F Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Certificate serial: 019B7911462372DC95FF831CB1D7C9800509 Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/IIK_PCi18i4nJOHS2yy-kPNRbU8.roa Signing time: Thu 01 Jan 2026 10:18:53 +0000 ROA not before: Thu 01 Jan 2026 10:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211914 IP address blocks: 94.158.208.0/21 maxlen: 21 94.158.209.0/24 maxlen: 24 94.158.210.0/24 maxlen: 24 94.158.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:46:23:72:dc:95:ff:83:1c:b1:d7:c9:80:05:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Validity Not Before: Jan 1 10:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2082bf3c28b5f22e2724e1d2db2cbe90f3516d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a7:b9:c7:a6:a3:01:a2:60:3d:e3:9d:66:1d: 1e:c9:b5:bd:b7:27:5e:23:71:c6:d4:77:98:cc:0e: c4:3f:67:7f:37:3a:f1:3e:87:6c:d1:9c:2a:13:7a: 5a:19:8d:23:e8:c3:7f:0b:39:df:bf:fe:98:9c:07: 2a:29:3f:9c:8c:c9:08:48:4d:04:2c:64:31:c6:00: b7:ce:6e:ef:74:1b:9c:4e:1e:44:89:13:d6:07:53: 37:38:de:7c:95:9f:6e:1c:d3:51:c5:02:d7:cb:38: d9:9f:cc:cc:f8:ed:f7:06:48:4d:4a:9b:b1:a1:9f: 46:60:19:33:5d:a0:85:2a:96:ea:f3:16:cd:79:38: a8:21:83:d1:b6:94:8e:36:bf:21:a8:35:fd:f3:bb: 3a:5f:9e:59:18:cf:08:02:08:56:87:73:60:61:06: 73:52:26:fb:e3:52:98:ad:14:1e:bc:a8:fa:c5:c4: 90:ae:d5:81:0b:01:e0:28:91:e3:9e:0b:bd:b4:08: 15:6f:c3:f8:71:48:38:b3:e1:c5:e7:0f:5f:d8:36: 19:bf:e1:2f:63:b2:c3:61:c4:7c:25:ca:d4:94:e1: 80:7c:45:a7:fc:d7:8c:81:5a:5c:e9:87:31:3b:41: 07:aa:5f:60:d9:75:5f:27:25:66:fa:95:a6:3b:9e: 05:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:82:BF:3C:28:B5:F2:2E:27:24:E1:D2:DB:2C:BE:90:F3:51:6D:4F X509v3 Authority Key Identifier: keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/IIK_PCi18i4nJOHS2yy-kPNRbU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.158.208.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:62:54:9c:6f:c4:81:64:9f:45:5e:62:86:bb:8a:58:ce:2f: c7:99:21:21:c2:31:29:0d:f7:61:63:24:a9:09:dd:9e:66:37: a6:42:99:85:42:f8:d2:c9:56:17:e5:d7:2a:48:55:23:65:5b: 90:f8:b7:1d:ea:17:7d:4e:8c:6b:53:8c:84:66:14:aa:a3:0a: d2:d0:63:56:ab:9f:07:28:08:22:e9:a8:2b:96:66:e1:a5:11: 4b:eb:5a:21:5a:f6:bd:02:1e:b9:61:5c:17:ee:91:34:00:94: 18:0b:fe:1f:1b:9a:63:ae:0f:2a:95:ed:3f:2d:63:61:16:ff: 92:fd:ae:d4:b5:bd:89:03:6f:ad:5d:cf:8b:2e:91:ab:9b:75: 6f:ea:aa:2f:82:d4:21:60:1b:7a:e6:b8:7c:04:0c:dd:0d:5a: 42:f5:af:fc:53:66:bc:c9:28:ed:5c:03:17:c1:6c:20:ae:17: 7f:46:95:a0:95:bb:ba:e4:5c:f2:63:39:1b:6d:46:46:96:56: 73:48:62:5d:6d:d4:4a:84:12:64:7d:74:22:88:f8:f6:5f:fa: 4c:43:9d:c0:57:e4:6d:37:85:ed:24:eb:32:06:e1:4f:94:c5: b2:54:bf:dc:2b:76:96:e2:f9:3d:cb:56:00:23:1c:de:81:5e: f9:c8:58:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUYjctyV/4McsdfJgAUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5 NGQxMzQwHhcNMjYwMTAxMTAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDgyYmYzYzI4YjVmMjJlMjcyNGUxZDJkYjJjYmU5MGYzNTE2ZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qe5x6ajAaJgPeOdZh0eybW9tyde I3HG1HeYzA7EP2d/NzrxPods0ZwqE3paGY0j6MN/Cznfv/6YnAcqKT+cjMkISE0E LGQxxgC3zm7vdBucTh5EiRPWB1M3ON58lZ9uHNNRxQLXyzjZn8zM+O33BkhNSpux oZ9GYBkzXaCFKpbq8xbNeTioIYPRtpSONr8hqDX987s6X55ZGM8IAghWh3NgYQZz Uib741KYrRQevKj6xcSQrtWBCwHgKJHjngu9tAgVb8P4cUg4s+HF5w9f2DYZv+Ev Y7LDYcR8JcrUlOGAfEWn/NeMgVpc6YcxO0EHql9g2XVfJyVm+pWmO54FZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCCvzwotfIuJyTh0tssvpDzUW1PMB8GA1UdIwQY MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt ZTNjNTViYjc3MjhlLzEvSUlLX1BDaTE4aTRuSk9IUzJ5eS1rUE5SYlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXp7QMA0G CSqGSIb3DQEBCwUAA4IBAQA6YlScb8SBZJ9FXmKGu4pYzi/HmSEhwjEpDfdhYySp Cd2eZjemQpmFQvjSyVYX5dcqSFUjZVuQ+Lcd6hd9ToxrU4yEZhSqowrS0GNWq58H KAgi6agrlmbhpRFL61ohWva9Ah65YVwX7pE0AJQYC/4fG5pjrg8qle0/LWNhFv+S /a7Utb2JA2+tXc+LLpGrm3Vv6qovgtQhYBt65rh8BAzdDVpC9a/8U2a8ySjtXAMX wWwgrhd/RpWglbu65FzyYzkbbUZGllZzSGJdbdRKhBJkfXQiiPj2X/pMQ53AV+Rt N4XtJOsyBuFPlMWyVL/cK3aW4vk9y1YAIxzegV75yFg+ -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:28 2026 by rpki-client