This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/Igw79Hirn6BerFTScZqANVebbcw.roa File: Igw79Hirn6BerFTScZqANVebbcw.roa (raw, json) Hash identifier: s/c4WsTRw0gB++CU7Zxa2TA6Q87TbWunDFReO1/vB+w= Subject key identifier: 22:0C:3B:F4:78:AB:9F:A0:5E:AC:54:D2:71:9A:80:35:57:9B:6D:CC Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B79ED1A2C87F110BA209142FA15AFEEF4 Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/Igw79Hirn6BerFTScZqANVebbcw.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34761 IP address blocks: 217.194.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1a:2c:87:f1:10:ba:20:91:42:fa:15:af:ee:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220c3bf478ab9fa05eac54d2719a8035579b6dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:e3:cf:b4:39:38:69:82:72:b4:e1:3f:bc: 22:89:4f:1f:04:ed:77:5a:f0:89:0b:a1:b5:62:6e: 8f:e0:99:29:01:b6:f7:34:3c:9f:75:82:02:bf:1b: 10:3c:6e:31:bc:36:4e:67:fb:75:ef:e3:06:d1:10: 65:32:26:0c:fa:90:f0:89:be:15:28:7f:30:f5:0d: 63:b4:9e:78:9f:e0:5f:af:df:23:81:2d:65:af:1d: af:81:71:39:90:e7:58:fa:82:f7:81:b0:4a:54:e8: 54:16:cf:80:68:be:1b:47:68:01:31:0d:9d:58:ab: 35:1c:89:80:66:3f:85:fb:0e:a6:8d:47:92:ef:54: ef:3c:02:dc:95:1b:89:6f:50:f9:32:50:5c:2a:3f: 1b:f0:db:8f:d6:41:ff:d5:3b:7a:b4:44:57:02:6d: b5:37:72:89:f7:e6:0c:0d:23:66:a2:1c:9d:ba:4b: 9f:89:2e:cb:2d:a3:77:52:27:7b:14:89:b0:64:74: 74:f4:59:1d:14:4a:e7:15:49:55:c3:48:f6:c7:14: 10:e1:db:2c:74:68:a5:ea:2a:b2:7d:1b:cf:e6:31: b4:ef:8e:2b:e9:09:68:06:35:ba:71:67:d5:3f:a5: fc:14:a7:b7:d1:f5:c6:27:b7:21:c6:50:d1:bb:4b: bc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0C:3B:F4:78:AB:9F:A0:5E:AC:54:D2:71:9A:80:35:57:9B:6D:CC X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/Igw79Hirn6BerFTScZqANVebbcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.194.80.0/20 Signature Algorithm: sha256WithRSAEncryption 70:9d:8c:1a:4e:68:32:bf:ca:cf:a7:4f:98:59:ea:a7:b7:bf: a4:6d:be:a5:ff:56:ae:5b:95:dc:35:0a:03:a5:23:74:16:82: 8d:81:62:08:0d:a2:11:ee:5d:bf:14:0a:55:03:d8:0c:69:6c: 05:b1:69:da:ce:0a:58:ff:28:8d:12:6e:d0:6a:4d:54:01:80: 94:6f:1b:c8:61:b3:39:81:1a:95:47:e3:49:5e:2d:d2:57:68: b1:1f:d9:0f:aa:fa:0a:37:8f:77:fc:64:5d:f3:de:82:47:9a: fa:86:16:ef:83:4c:30:6c:53:28:94:ed:63:09:66:9b:e4:3d: bf:46:6a:3f:71:85:0f:54:8a:c6:a4:7d:4b:c7:9c:20:81:fa: f3:d3:27:93:ac:f5:9f:5a:71:ad:ec:20:14:4a:64:a6:36:c2: 6b:22:64:1e:5d:05:df:db:c0:ab:7b:3f:a2:44:29:cc:02:57: 1e:28:40:5d:11:bf:48:b4:93:32:3a:1d:a7:0c:58:ef:04:04: 8e:85:05:50:20:45:1f:3d:3a:a5:3f:aa:77:a3:2e:fd:ce:39: 68:06:d2:64:fc:72:93:b8:1c:d3:e8:0c:ce:a7:6d:48:af:92: 6c:5a:1f:6e:8c:95:3f:a8:08:f7:a2:17:5c:8b:0c:45:c5:c0: 50:38:9e:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Rosh/EQuiCRQvoVr+70MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjBjM2JmNDc4YWI5ZmEwNWVhYzU0ZDI3MTlhODAzNTU3OWI2ZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PXjz7Q5OGmCcrThP7wiiU8fBO13 WvCJC6G1Ym6P4JkpAbb3NDyfdYICvxsQPG4xvDZOZ/t17+MG0RBlMiYM+pDwib4V KH8w9Q1jtJ54n+Bfr98jgS1lrx2vgXE5kOdY+oL3gbBKVOhUFs+AaL4bR2gBMQ2d WKs1HImAZj+F+w6mjUeS71TvPALclRuJb1D5MlBcKj8b8NuP1kH/1Tt6tERXAm21 N3KJ9+YMDSNmohydukufiS7LLaN3Uid7FImwZHR09FkdFErnFUlVw0j2xxQQ4dss dGil6iqyfRvP5jG0744r6QloBjW6cWfVP6X8FKe30fXGJ7chxlDRu0u8DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIMO/R4q5+gXqxU0nGagDVXm23MMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvSWd3NzlIaXJuNkJlckZUU2NacUFOVmViYmN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2cJQMA0G CSqGSIb3DQEBCwUAA4IBAQBwnYwaTmgyv8rPp0+YWeqnt7+kbb6l/1auW5XcNQoD pSN0FoKNgWIIDaIR7l2/FApVA9gMaWwFsWnazgpY/yiNEm7Qak1UAYCUbxvIYbM5 gRqVR+NJXi3SV2ixH9kPqvoKN493/GRd896CR5r6hhbvg0wwbFMolO1jCWab5D2/ Rmo/cYUPVIrGpH1Lx5wggfrz0yeTrPWfWnGt7CAUSmSmNsJrImQeXQXf28Crez+i RCnMAlceKEBdEb9ItJMyOh2nDFjvBASOhQVQIEUfPTqlP6p3oy79zjloBtJk/HKT uBzT6AzOp21Ir5JsWh9ujJU/qAj3ohdciwxFxcBQOJ4c -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:06 2026 by rpki-client