This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1EgCfIUZHYf24SrWg9kAOto8Duc.roa File: 1EgCfIUZHYf24SrWg9kAOto8Duc.roa (raw, json) Hash identifier: AUpadmn7SxPiN/E2rAaCXCpLwYoRDkhN/Jxbn7p885k= Subject key identifier: D4:48:02:7C:85:19:1D:87:F6:E1:2A:D6:83:D9:00:3A:DA:3C:0E:E7 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105E60EBDAC470E286A226105D584F Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1EgCfIUZHYf24SrWg9kAOto8Duc.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 188.191.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5e:60:eb:da:c4:70:e2:86:a2:26:10:5d:58:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d448027c85191d87f6e12ad683d9003ada3c0ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:39:8a:ff:d7:ee:94:ab:9c:30:85:f7:40:8a: 00:ae:75:59:5f:8d:a8:17:7b:3b:af:09:13:76:6c: 47:61:51:96:5f:97:24:4a:43:13:fe:54:14:0e:d8: 8d:4a:8b:7e:65:55:0b:8d:bd:15:4f:20:97:91:fe: 37:80:a5:66:a9:89:0b:48:17:29:3e:62:67:28:c4: 33:cd:6c:b2:1b:06:e0:31:ac:17:a0:ee:ac:53:68: 64:ea:26:56:43:6a:93:db:8b:bc:74:24:87:bd:08: f1:91:00:b4:e0:6d:cb:75:1b:02:f8:37:ba:dc:a5: ff:39:8b:42:7a:9f:9e:1e:f6:66:25:ef:ae:68:47: 71:2c:a1:50:c2:06:4b:32:99:86:64:39:37:4a:cd: 4c:f4:96:3b:32:94:ea:6d:7a:d6:65:b7:f8:15:ee: 74:b3:1e:b8:4f:d3:60:1a:37:3e:8c:c4:0d:1f:5f: 59:c8:3b:15:92:b1:8f:0e:09:0f:af:00:07:94:18: 70:29:a3:f9:af:1e:ad:3b:66:a5:cb:32:67:df:1a: 84:12:76:51:64:02:4e:d3:c3:15:24:f5:d8:03:0b: 72:08:83:9f:57:5e:e0:89:be:f4:03:71:a9:f6:ab: 86:f5:58:2d:53:cf:22:5c:b2:eb:95:e4:ff:d5:3f: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:02:7C:85:19:1D:87:F6:E1:2A:D6:83:D9:00:3A:DA:3C:0E:E7 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1EgCfIUZHYf24SrWg9kAOto8Duc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.102.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:3e:66:f0:3c:a5:f0:e9:58:89:e6:28:cd:08:7f:e2:d2:7b: 3b:96:52:05:a8:5f:83:cc:a8:fa:6a:a8:6b:b8:06:c6:b0:35: bc:9e:d3:de:90:39:21:62:2f:78:0c:35:b7:36:be:ff:09:6c: 33:ba:db:bf:20:a4:2b:0d:cd:4b:2d:02:60:f9:f3:a3:c6:a9: 3f:cd:cf:44:86:9a:7f:67:eb:3e:81:72:92:ec:17:93:94:8c: 02:04:31:70:a8:8b:9a:43:01:dc:63:ee:02:1a:bf:88:ea:9c: 4d:ce:89:c7:01:37:18:3d:94:59:c4:29:66:fc:a9:9e:aa:9c: e8:9a:fd:12:aa:b1:3d:29:84:d8:20:e3:cd:d5:f1:c4:e2:46: 01:34:8a:ac:ea:14:c3:c2:57:88:dd:85:14:a5:b3:49:17:aa: c3:70:b6:74:c8:9d:6f:37:24:f1:cc:98:27:24:a2:42:2d:45: 57:a7:aa:e8:7d:0b:65:3f:03:c5:de:4b:a9:36:af:0c:e6:e8: ab:fb:64:4e:34:56:b0:ad:37:e5:61:21:b8:1b:8f:e1:52:ef: 82:37:f1:b2:8c:5a:9b:7b:5b:12:0a:c4:14:a6:ea:b1:74:03: e6:da:19:da:bc:4d:6a:9f:00:05:96:62:98:b8:7e:19:3a:87: ad:6c:8b:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF5g69rEcOKGoiYQXVhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDQ4MDI3Yzg1MTkxZDg3ZjZlMTJhZDY4M2Q5MDAzYWRhM2MwZWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTmK/9fulKucMIX3QIoArnVZX42o F3s7rwkTdmxHYVGWX5ckSkMT/lQUDtiNSot+ZVULjb0VTyCXkf43gKVmqYkLSBcp PmJnKMQzzWyyGwbgMawXoO6sU2hk6iZWQ2qT24u8dCSHvQjxkQC04G3LdRsC+De6 3KX/OYtCep+eHvZmJe+uaEdxLKFQwgZLMpmGZDk3Ss1M9JY7MpTqbXrWZbf4Fe50 sx64T9NgGjc+jMQNH19ZyDsVkrGPDgkPrwAHlBhwKaP5rx6tO2alyzJn3xqEEnZR ZAJO08MVJPXYAwtyCIOfV17gib70A3Gp9quG9VgtU88iXLLrleT/1T8t+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRIAnyFGR2H9uEq1oPZADraPA7nMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvMUVnQ2ZJVVpIWWYyNFNyV2c5a0FPdG84RHVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9mMA0G CSqGSIb3DQEBCwUAA4IBAQCNPmbwPKXw6ViJ5ijNCH/i0ns7llIFqF+DzKj6aqhr uAbGsDW8ntPekDkhYi94DDW3Nr7/CWwzutu/IKQrDc1LLQJg+fOjxqk/zc9Ehpp/ Z+s+gXKS7BeTlIwCBDFwqIuaQwHcY+4CGr+I6pxNzonHATcYPZRZxClm/Kmeqpzo mv0SqrE9KYTYIOPN1fHE4kYBNIqs6hTDwleI3YUUpbNJF6rDcLZ0yJ1vNyTxzJgn JKJCLUVXp6rofQtlPwPF3kupNq8M5uir+2RONFawrTflYSG4G4/hUu+CN/GyjFqb e1sSCsQUpuqxdAPm2hnavE1qnwAFlmKYuH4ZOoetbItR -----END CERTIFICATE-----Generated at Mon Jan 19 18:40:21 2026 by rpki-client