This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/IprTwL4Amh5zz4RcQ4eoiHW37Ks.roa File: IprTwL4Amh5zz4RcQ4eoiHW37Ks.roa (raw, json) Hash identifier: dBtfOnRmy0XmcWX3EB1msTLJV31TMXHtHpcj07KafxY= Subject key identifier: 22:9A:D3:C0:BE:00:9A:1E:73:CF:84:5C:43:87:A8:88:75:B7:EC:AB Certificate issuer: /CN=856caf1f2f0291401105ef68b25957dc555510d2 Certificate serial: 019B78352DF1292A3ACCEC86C942FF3D9FD5 Authority key identifier: 85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/IprTwL4Amh5zz4RcQ4eoiHW37Ks.roa Signing time: Thu 01 Jan 2026 06:18:29 +0000 ROA not before: Thu 01 Jan 2026 06:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50074 IP address blocks: 195.211.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:2d:f1:29:2a:3a:cc:ec:86:c9:42:ff:3d:9f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856caf1f2f0291401105ef68b25957dc555510d2 Validity Not Before: Jan 1 06:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=229ad3c0be009a1e73cf845c4387a88875b7ecab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6a:af:29:9d:bd:de:36:0b:5c:d5:92:02:86: 28:5a:a9:86:06:6f:2d:36:23:e7:ce:1c:1d:9a:02: 99:6e:60:06:47:2f:45:cc:34:02:24:7f:45:c8:ef: 08:e3:52:d3:53:96:01:9b:a4:10:b3:07:e3:1a:50: a8:97:a4:f0:29:31:98:7b:35:6c:5f:c3:6b:93:bb: 3b:04:ac:8e:17:46:33:71:15:27:2b:d7:1d:b8:ed: 3d:bf:b2:2d:92:de:9d:62:a8:0a:a5:41:8f:1a:5e: 01:8d:a7:d0:3a:86:6b:24:f3:9e:52:6e:14:71:5f: 34:06:75:1b:f3:c5:56:24:0f:76:f2:5f:5a:5d:c7: 37:86:79:8e:9b:50:46:4d:04:68:49:63:36:ab:30: 83:eb:e8:32:6b:ab:0d:97:f1:6b:0b:24:43:cf:90: 75:1a:21:33:32:5a:3a:48:36:24:10:57:9c:43:55: 47:f6:3d:45:b7:a4:2b:13:90:04:91:7b:97:30:7d: af:34:75:96:31:f2:bb:3c:dc:b6:b6:af:c4:f8:57: ca:f0:42:47:33:1e:2c:84:06:a5:11:9d:66:b3:4b: ae:96:41:a7:b1:2d:5f:50:e8:ff:82:a2:11:30:b6: fd:f5:5c:6d:5f:0b:1b:4b:37:fe:2c:76:8c:46:68: 6c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9A:D3:C0:BE:00:9A:1E:73:CF:84:5C:43:87:A8:88:75:B7:EC:AB X509v3 Authority Key Identifier: keyid:85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/IprTwL4Amh5zz4RcQ4eoiHW37Ks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.211.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:e7:fa:37:b3:e5:f4:ed:0a:a1:38:19:cd:b1:bd:b5:4a:aa: 1b:35:a6:fe:4e:9c:01:8e:93:af:98:99:1d:e9:2f:44:50:20: 86:0a:14:33:75:6b:f7:2a:3a:dc:5d:2c:24:27:60:c4:22:cd: da:f5:77:3c:27:3d:86:89:f9:5d:cd:d2:5a:6d:47:4f:fe:dd: 3c:d0:70:a6:ba:3b:a0:f2:1a:cd:1c:bc:0f:ba:85:03:33:de: c2:c0:22:62:85:b0:c3:92:89:c5:9d:1f:f0:19:31:ae:21:a4: e5:90:43:b2:6f:20:2e:2c:5d:b7:2b:6a:2c:c5:d6:1f:21:0b: c4:4a:26:c3:5f:64:a7:6a:7a:9f:4a:65:35:d1:b2:83:6d:4b: 0d:59:dc:e3:9e:99:5a:d8:07:e1:94:79:13:3d:47:da:c1:fc: e5:34:98:c8:33:6c:ce:43:1b:01:e0:f1:d9:01:bf:54:2a:e0: d0:36:b8:cc:13:9b:30:7f:07:59:d4:93:37:9d:a4:c4:97:80: ae:f9:a1:31:f1:ab:61:76:44:63:dd:2a:c8:c2:f2:66:1d:af: 58:24:53:d0:85:5a:6f:1b:d7:bd:12:6b:21:ca:47:18:0e:ac: 45:a7:03:d8:7e:ce:b6:90:bf:06:86:47:61:47:13:ca:3a:b3: f8:b6:f8:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NS3xKSo6zOyGyUL/PZ/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NmNhZjFmMmYwMjkxNDAxMTA1ZWY2OGIyNTk1N2RjNTU1 NTEwZDIwHhcNMjYwMTAxMDYxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjlhZDNjMGJlMDA5YTFlNzNjZjg0NWM0Mzg3YTg4ODc1YjdlY2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGqvKZ293jYLXNWSAoYoWqmGBm8t NiPnzhwdmgKZbmAGRy9FzDQCJH9FyO8I41LTU5YBm6QQswfjGlCol6TwKTGYezVs X8Nrk7s7BKyOF0YzcRUnK9cduO09v7Itkt6dYqgKpUGPGl4BjafQOoZrJPOeUm4U cV80BnUb88VWJA928l9aXcc3hnmOm1BGTQRoSWM2qzCD6+gya6sNl/FrCyRDz5B1 GiEzMlo6SDYkEFecQ1VH9j1Ft6QrE5AEkXuXMH2vNHWWMfK7PNy2tq/E+FfK8EJH Mx4shAalEZ1ms0uulkGnsS1fUOj/gqIRMLb99VxtXwsbSzf+LHaMRmhszQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCKa08C+AJoec8+EXEOHqIh1t+yrMB8GA1UdIwQY MBaAFIVsrx8vApFAEQXvaLJZV9xVVRDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFd5dkh5OENrVUFSQmU5b3NsbFgzRlZWRU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kMmM3YzctMmJjYy00OTFlLTk2YTct YjBkMGJjZDkwZmFlLzEvSXByVHdMNEFtaDV6ejRSY1E0ZW9pSFczN0tzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kMmM3YzctMmJjYy00OTFlLTk2YTctYjBkMGJjZDkwZmFl LzEvaFd5dkh5OENrVUFSQmU5b3NsbFgzRlZWRU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw9PQMA0G CSqGSIb3DQEBCwUAA4IBAQAa5/o3s+X07QqhOBnNsb21SqobNab+TpwBjpOvmJkd 6S9EUCCGChQzdWv3KjrcXSwkJ2DEIs3a9Xc8Jz2GifldzdJabUdP/t080HCmujug 8hrNHLwPuoUDM97CwCJihbDDkonFnR/wGTGuIaTlkEOybyAuLF23K2osxdYfIQvE SibDX2SnanqfSmU10bKDbUsNWdzjnpla2AfhlHkTPUfawfzlNJjIM2zOQxsB4PHZ Ab9UKuDQNrjME5swfwdZ1JM3naTEl4Cu+aEx8athdkRj3SrIwvJmHa9YJFPQhVpv G9e9EmshykcYDqxFpwPYfs62kL8GhkdhRxPKOrP4tvgx -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:40 2026 by rpki-client