This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa File: I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa (raw, json) Hash identifier: v4p0Y6w9BB4bsfMbtUIZ8Y6YLTCCJcFeqfZJdPcFyGU= Subject key identifier: 23:64:FB:51:E0:C6:2C:0F:07:E8:FF:8A:2F:57:85:1A:7C:B3:D6:CC Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Certificate serial: 019B7C12CF594CAEFE446DB9782E22817EF3 Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208100 IP address blocks: 185.104.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cf:59:4c:ae:fe:44:6d:b9:78:2e:22:81:7e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2364fb51e0c62c0f07e8ff8a2f57851a7cb3d6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:63:cf:5e:54:6d:60:1d:52:1f:27:06:80: 59:0d:85:66:7f:da:b8:7e:69:7d:0d:f7:91:55:f4: 7d:a8:7e:bf:21:ec:40:93:a9:29:79:91:d9:bc:e7: 88:aa:80:1c:02:c1:0b:c5:27:d2:82:2c:92:05:87: 92:3d:ab:dc:40:7f:e7:0a:06:ee:05:c5:90:1c:76: f5:cf:a0:71:32:7f:9b:3d:a2:f9:32:0d:63:54:69: ed:56:69:ff:04:6a:4e:90:a6:8a:99:eb:9c:a6:b6: 42:da:37:4a:0c:20:1d:f8:41:3a:07:0a:8c:70:87: 3f:5d:35:8c:e5:11:ea:7c:3b:40:ba:bd:64:f9:65: 4a:b4:aa:5e:c5:26:f7:27:54:d7:31:3c:66:ac:9c: 59:dd:2f:44:3a:76:32:a7:a7:8e:86:18:be:43:f3: fc:83:f7:95:35:50:9f:cc:aa:fe:2a:44:31:d9:3c: 73:dc:17:69:23:81:62:2d:b3:80:76:74:d9:61:c0: f3:48:08:d9:e1:18:cd:a4:f6:e8:81:2a:d0:af:8a: dd:8b:c5:40:a4:16:88:4f:85:fe:47:29:0d:f3:89: b8:60:bf:dd:ee:8e:71:f5:b3:8b:b4:fd:00:b7:e3: 6f:06:d9:63:22:72:44:ef:8d:aa:f9:ff:c9:b3:ef: c7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:64:FB:51:E0:C6:2C:0F:07:E8:FF:8A:2F:57:85:1A:7C:B3:D6:CC X509v3 Authority Key Identifier: keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/I2T7UeDGLA8H6P-KL1eFGnyz1sw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.154.0/24 Signature Algorithm: sha256WithRSAEncryption 87:9f:01:b0:24:1f:a4:57:12:d7:6f:cf:f9:3b:e5:83:a1:97: 6b:36:13:7c:2b:52:c8:64:7d:55:17:c4:5e:8d:ce:62:a4:67: d0:2f:77:b8:1a:13:75:92:7e:da:87:af:bf:6a:10:2e:ad:14: 44:42:11:27:97:56:b6:cc:b3:4a:6e:58:23:5a:fc:05:36:10: 2d:96:bb:89:4c:ab:6c:36:f3:60:0d:83:6e:2f:20:8f:39:0a: 18:b7:0d:c7:93:60:92:ea:4b:a8:e0:4a:dc:e8:8f:1a:e4:eb: ee:b0:68:e6:f1:c3:18:f6:c5:a6:50:4c:c1:ba:89:9f:25:d7: 80:e2:0f:f7:4b:93:0e:ea:28:ad:4f:59:84:af:e1:65:10:fb: ef:83:1f:c7:c9:43:b9:4b:45:1a:4b:f5:25:a2:f2:8b:3f:ba: f3:a2:26:93:ef:07:69:69:90:15:78:47:24:16:e8:a9:3b:b5: 12:4b:54:9a:f1:a3:94:76:38:ef:cd:4d:5d:00:c8:cd:7c:63: c6:ba:f9:38:1e:7d:37:7d:61:4b:16:dd:64:73:a0:ad:eb:e7: 03:f8:c1:1e:dd:2e:e0:a5:8c:44:88:6e:68:fd:a9:a9:7e:fd: 6c:70:a7:50:f6:f9:2f:7b:a5:d1:95:84:86:75:54:b8:cc:89: dc:2b:f5:d9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Es9ZTK7+RG25eC4igX7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj M2Y5YWYwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzY0ZmI1MWUwYzYyYzBmMDdlOGZmOGEyZjU3ODUxYTdjYjNkNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBFjz15UbWAdUh8nBoBZDYVmf9q4 fml9DfeRVfR9qH6/IexAk6kpeZHZvOeIqoAcAsELxSfSgiySBYeSPavcQH/nCgbu BcWQHHb1z6BxMn+bPaL5Mg1jVGntVmn/BGpOkKaKmeucprZC2jdKDCAd+EE6BwqM cIc/XTWM5RHqfDtAur1k+WVKtKpexSb3J1TXMTxmrJxZ3S9EOnYyp6eOhhi+Q/P8 g/eVNVCfzKr+KkQx2Txz3BdpI4FiLbOAdnTZYcDzSAjZ4RjNpPbogSrQr4rdi8VA pBaIT4X+RykN84m4YL/d7o5x9bOLtP0At+NvBtljInJE742q+f/Js+/HvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNk+1HgxiwPB+j/ii9XhRp8s9bMMB8GA1UdIwQY MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt ZmE3MThhYzlkNzU4LzEvSTJUN1VlREdMQThINlAtS0wxZUZHbnl6MXN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4 LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWiaMA0G CSqGSIb3DQEBCwUAA4IBAQCHnwGwJB+kVxLXb8/5O+WDoZdrNhN8K1LIZH1VF8Re jc5ipGfQL3e4GhN1kn7ah6+/ahAurRREQhEnl1a2zLNKblgjWvwFNhAtlruJTKts NvNgDYNuLyCPOQoYtw3Hk2CS6kuo4Erc6I8a5OvusGjm8cMY9sWmUEzBuomfJdeA 4g/3S5MO6iitT1mEr+FlEPvvgx/HyUO5S0UaS/UlovKLP7rzoiaT7wdpaZAVeEck FuipO7USS1Sa8aOUdjjvzU1dAMjNfGPGuvk4Hn03fWFLFt1kc6Ct6+cD+MEe3S7g pYxEiG5o/ampfv1scKdQ9vkve6XRlYSGdVS4zIncK/XZ -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:26 2026 by rpki-client