This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/Ii19Uj_IkgjNpkNJEia6OMHV6O4.roa File: Ii19Uj_IkgjNpkNJEia6OMHV6O4.roa (raw, json) Hash identifier: 3N7F7rrMvKKImwp2J8BKcXgouGpqkdtXuGDrH4Kdm7c= Subject key identifier: 22:2D:7D:52:3F:C8:92:08:CD:A6:43:49:12:26:BA:38:C1:D5:E8:EE Certificate issuer: /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5 Certificate serial: 019B7A5AA32EC2AE74056E5160B2399160C1 Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/Ii19Uj_IkgjNpkNJEia6OMHV6O4.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 80.75.212.0/24 maxlen: 24 176.97.210.0/24 maxlen: 24 2a12:b200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.mft rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a3:2e:c2:ae:74:05:6e:51:60:b2:39:91:60:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5 Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=222d7d523fc89208cda643491226ba38c1d5e8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:76:10:48:5b:94:76:f3:d7:48:70:64:4a:69: d2:6f:02:39:0d:3b:87:99:3d:b5:7d:6d:d1:10:b4: b6:6e:7d:72:b1:31:82:bd:67:94:21:65:c9:f8:db: ab:7f:c3:c0:92:10:96:f3:b4:d6:ea:98:fc:03:ac: 2b:a6:33:99:51:3a:a5:b7:7c:ed:55:23:e8:0e:4e: e6:20:b9:7a:13:f1:a0:e6:2e:a4:f3:f0:4c:d8:58: e6:42:34:d2:d3:02:9a:ef:db:0d:e8:28:58:f6:4b: ae:38:4d:79:3d:2a:e2:71:31:80:c6:9f:88:53:47: 70:81:34:73:a8:f6:0f:67:99:18:fa:9e:8e:93:6a: 8c:e7:d9:e3:9b:29:57:f4:6e:57:40:0c:a4:74:54: 33:7b:26:10:fd:73:5e:59:cf:a7:46:b4:85:e0:27: 07:7c:23:11:56:1c:a7:83:e3:14:2d:34:e5:e9:b7: 7e:b5:8a:be:21:e5:95:83:bf:3c:ed:8b:2e:f7:d0: 4c:ea:db:0d:d8:ba:cd:e7:6b:7a:b8:cc:9c:be:4a: 6d:41:85:d1:9a:82:65:d5:ae:0e:43:19:8e:27:4d: 11:6e:bf:b4:ff:6a:46:d2:26:08:15:e3:36:82:73: 87:b5:8c:6b:a9:2c:21:ea:b8:3e:d0:0d:04:e7:ec: 19:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2D:7D:52:3F:C8:92:08:CD:A6:43:49:12:26:BA:38:C1:D5:E8:EE X509v3 Authority Key Identifier: keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/Ii19Uj_IkgjNpkNJEia6OMHV6O4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.212.0/24 176.97.210.0/24 IPv6: 2a12:b200::/29 Signature Algorithm: sha256WithRSAEncryption 33:ec:2f:62:b3:92:22:e4:a5:1c:e3:44:9f:a1:3e:40:7d:53: f3:29:f3:84:7b:54:41:e8:68:e5:75:f1:d1:b7:9e:7f:0a:1f: cc:61:c1:8c:c4:04:29:6d:39:03:f5:74:e0:61:cf:01:f3:45: fb:cf:3e:8c:ca:77:18:ad:67:54:97:f1:6d:f3:b2:e8:6a:66: 5b:23:73:37:4c:75:e6:24:d1:9f:af:3f:ea:8e:0c:89:ce:76: 28:af:d3:87:75:89:83:42:02:48:8d:57:86:d6:23:d3:5b:2e: 21:5f:8c:74:ec:33:ef:34:c4:5b:ef:1d:b5:72:4c:eb:b9:ae: 9d:d5:02:c0:6b:89:ab:01:ba:0c:23:6f:95:e2:cb:79:95:7e: 07:9b:c5:b4:f5:14:0f:0b:ed:94:8e:09:ef:aa:3a:f1:54:9a: d9:7d:4e:89:64:9b:8e:e6:66:cf:ed:ef:36:0b:4b:10:fb:ce: 8c:aa:c4:c1:37:2c:3e:99:a2:6a:32:37:ff:7d:27:91:36:ca: bc:29:c2:b3:57:fd:63:63:17:4b:31:4a:d9:ca:97:57:09:25: 92:ec:74:8b:6e:bc:73:07:dc:b9:d9:c2:ac:4f:d7:c3:f0:c7: ba:a2:b9:74:fb:0d:03:fa:94:71:36:96:0e:d9:3f:5a:7f:5e: f7:b4:c1:bb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WqMuwq50BW5RYLI5kWDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZmY4OTAyM2I4N2MwYmY4NDc5YjlmZjQ3MjUyNTg2MTNl NGYwYjUwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjJkN2Q1MjNmYzg5MjA4Y2RhNjQzNDkxMjI2YmEzOGMxZDVlOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHYQSFuUdvPXSHBkSmnSbwI5DTuH mT21fW3RELS2bn1ysTGCvWeUIWXJ+Nurf8PAkhCW87TW6pj8A6wrpjOZUTqlt3zt VSPoDk7mILl6E/Gg5i6k8/BM2FjmQjTS0wKa79sN6ChY9kuuOE15PSricTGAxp+I U0dwgTRzqPYPZ5kY+p6Ok2qM59njmylX9G5XQAykdFQzeyYQ/XNeWc+nRrSF4CcH fCMRVhyng+MULTTl6bd+tYq+IeWVg7887Ysu99BM6tsN2LrN52t6uMycvkptQYXR moJl1a4OQxmOJ00Rbr+0/2pG0iYIFeM2gnOHtYxrqSwh6rg+0A0E5+wZCQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCItfVI/yJIIzaZDSRImujjB1ejuMB8GA1UdIwQY MBaAFFj/iQI7h8C/hHm5/0clJYYT5PC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEt MzYzMTNjNTMyZDA0LzEvSWkxOVVqX0lrZ2pOcGtOSkVpYTZPTUhWNk80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEtMzYzMTNjNTMyZDA0 LzEvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAUEvUAwQA sGHSMA0EAgACMAcDBQMqErIAMA0GCSqGSIb3DQEBCwUAA4IBAQAz7C9is5Ii5KUc 40SfoT5AfVPzKfOEe1RB6GjldfHRt55/Ch/MYcGMxAQpbTkD9XTgYc8B80X7zz6M yncYrWdUl/Ft87LoamZbI3M3THXmJNGfrz/qjgyJznYor9OHdYmDQgJIjVeG1iPT Wy4hX4x07DPvNMRb7x21ckzrua6d1QLAa4mrAboMI2+V4st5lX4Hm8W09RQPC+2U jgnvqjrxVJrZfU6JZJuO5mbP7e82C0sQ+86MqsTBNyw+maJqMjf/fSeRNsq8KcKz V/1jYxdLMUrZypdXCSWS7HSLbrxzB9y52cKsT9fD8Me6orl0+w0D+pRxNpYO2T9a f173tMG7 -----END CERTIFICATE-----Generated at Wed Jan 21 09:13:09 2026 by rpki-client