This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/iKgelSgdHhyAKexXbXYmueOaeUg.roa File: iKgelSgdHhyAKexXbXYmueOaeUg.roa (raw, json) Hash identifier: +J08ylKBec0E8mLjnpla5kSjNS7Y7MzYev03SpaSkmY= Subject key identifier: 88:A8:1E:95:28:1D:1E:1C:80:29:EC:57:6D:76:26:B9:E3:9A:79:48 Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105F2808D76A669D964D01D4D72F42 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/iKgelSgdHhyAKexXbXYmueOaeUg.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215238 IP address blocks: 188.191.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5f:28:08:d7:6a:66:9d:96:4d:01:d4:d7:2f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88a81e95281d1e1c8029ec576d7626b9e39a7948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:9d:88:0b:c1:48:94:8b:5d:b9:e7:38:a7: ed:36:16:1c:56:c6:d8:09:88:bd:d6:26:91:2d:dc: af:03:ff:dc:eb:34:a5:63:4f:be:3c:6a:dd:0b:98: f2:96:22:f4:a2:d2:2f:56:28:76:5f:b4:a9:64:fe: 11:c4:0c:27:69:f4:90:33:de:54:7d:8b:d2:cf:07: cd:e6:92:48:c8:73:89:00:1f:93:0e:f7:48:fa:7f: c5:5a:c3:ec:2f:15:35:04:57:d1:cf:ca:dd:c2:07: 73:89:46:c7:71:c9:39:7e:e1:98:a1:76:07:7a:54: d1:cf:3b:c3:45:1f:be:ab:36:92:12:2f:82:16:e0: 4b:43:9c:a5:ca:63:b2:06:01:cf:15:6d:8b:58:c2: ef:ec:27:a2:bf:53:b7:75:9d:13:97:78:a8:1e:d7: 06:01:f9:6a:8e:e0:32:6a:43:f2:09:f5:71:a7:cd: 9d:80:7a:a4:6c:0d:7a:70:50:15:59:91:95:01:2f: 33:fe:41:a0:44:e4:10:dd:a9:ad:1f:49:c4:08:b4: 4c:df:8e:26:37:b1:4f:28:3e:de:95:cf:04:60:6f: c5:6a:52:a9:a4:6e:12:af:8f:d8:2d:f7:10:78:a1: f1:e2:ca:7a:cb:89:01:cd:eb:2a:4f:64:85:45:8e: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A8:1E:95:28:1D:1E:1C:80:29:EC:57:6D:76:26:B9:E3:9A:79:48 X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/iKgelSgdHhyAKexXbXYmueOaeUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.107.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:2f:77:5c:2f:b7:29:15:11:cc:96:3e:fb:b7:6a:e5:c4:c8: 16:5a:41:ee:34:65:13:31:4d:7e:3a:f3:94:29:24:bb:b4:38: 3e:49:9a:d7:91:e6:15:d2:c4:d0:74:d5:df:7a:72:ad:8c:06: dd:b0:97:a9:0e:41:42:f4:c1:49:ee:6e:7f:62:f4:ff:95:f4: 88:81:1e:4b:a6:20:69:e8:fa:b3:1d:3d:4d:b2:7b:60:57:e4: c6:4b:2e:de:94:21:c7:d7:b2:7a:67:70:85:12:31:c9:8f:06: 6f:f4:9c:bd:6b:44:01:9f:4c:06:6c:a0:2e:46:da:9f:ef:6b: ab:9b:dd:d5:e8:4e:5d:23:14:89:33:33:e3:b0:b0:0d:19:21: 31:de:6e:67:a5:75:2a:e3:4c:fe:6c:e8:57:f0:61:ec:f9:fe: f9:d3:34:c0:b6:0a:b9:9a:ce:55:6b:b0:6b:98:99:23:e8:b4: c2:75:8b:8d:7b:f4:30:13:e2:a7:6b:83:4d:89:e5:7c:99:d4: 24:c3:b1:1e:db:e4:42:10:15:8f:d1:60:5b:76:d5:dd:4f:b4: 63:e1:3d:28:2f:83:02:b4:b9:f7:3c:4d:e6:55:fc:63:15:89: 80:ad:f9:b1:e5:97:93:54:24:49:40:ec:e7:9a:46:83:47:8c: 5b:75:32:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF8oCNdqZp2WTQHU1y9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGE4MWU5NTI4MWQxZTFjODAyOWVjNTc2ZDc2MjZiOWUzOWE3OTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMGdiAvBSJSLXbnnOKftNhYcVsbY CYi91iaRLdyvA//c6zSlY0++PGrdC5jyliL0otIvVih2X7SpZP4RxAwnafSQM95U fYvSzwfN5pJIyHOJAB+TDvdI+n/FWsPsLxU1BFfRz8rdwgdziUbHcck5fuGYoXYH elTRzzvDRR++qzaSEi+CFuBLQ5ylymOyBgHPFW2LWMLv7Ceiv1O3dZ0Tl3ioHtcG AflqjuAyakPyCfVxp82dgHqkbA16cFAVWZGVAS8z/kGgROQQ3amtH0nECLRM344m N7FPKD7elc8EYG/FalKppG4Sr4/YLfcQeKHx4sp6y4kBzesqT2SFRY712QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIioHpUoHR4cgCnsV212JrnjmnlIMB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvaUtnZWxTZ2RIaHlBS2V4WGJYWW11ZU9hZVVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9rMA0G CSqGSIb3DQEBCwUAA4IBAQA+L3dcL7cpFRHMlj77t2rlxMgWWkHuNGUTMU1+OvOU KSS7tDg+SZrXkeYV0sTQdNXfenKtjAbdsJepDkFC9MFJ7m5/YvT/lfSIgR5LpiBp 6PqzHT1NsntgV+TGSy7elCHH17J6Z3CFEjHJjwZv9Jy9a0QBn0wGbKAuRtqf72ur m93V6E5dIxSJMzPjsLANGSEx3m5npXUq40z+bOhX8GHs+f750zTAtgq5ms5Va7Br mJkj6LTCdYuNe/QwE+Kna4NNieV8mdQkw7Ee2+RCEBWP0WBbdtXdT7Rj4T0oL4MC tLn3PE3mVfxjFYmArfmx5ZeTVCRJQOznmkaDR4xbdTIL -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:54 2026 by rpki-client