This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Ih9S_kZcCOhq2N4y574bLA_RZG4.roa File: Ih9S_kZcCOhq2N4y574bLA_RZG4.roa (raw, json) Hash identifier: BK3QLHH47u/5bpJq4bbQNM29Xb79UfdHFqSx0wPQ9rw= Subject key identifier: 22:1F:52:FE:46:5C:08:E8:6A:D8:DE:32:E7:BE:1B:2C:0F:D1:64:6E Certificate issuer: /CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590 Certificate serial: 019B7E391347FECE94172257666A595C361C Authority key identifier: 3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Ih9S_kZcCOhq2N4y574bLA_RZG4.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208678 IP address blocks: 185.141.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.mft rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:13:47:fe:ce:94:17:22:57:66:6a:59:5c:36:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad77fe68fa9dab644fd0a3dfb3a02566a809590 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=221f52fe465c08e86ad8de32e7be1b2c0fd1646e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2d:3c:16:f7:f2:40:45:38:b8:0a:b2:4c:09: a6:1e:a4:fa:59:e1:22:50:13:35:7f:94:af:e8:93: 26:40:e6:1e:74:67:08:b6:83:23:5b:c6:18:d8:b8: 84:af:63:c8:a2:33:aa:69:18:32:69:15:04:44:0a: 5e:f7:3c:eb:07:66:c3:fc:81:f7:45:83:c6:45:b6: 3d:45:e3:77:48:d3:fb:7b:a2:c9:75:9d:0d:05:8a: 9e:9d:e3:73:0f:75:f7:56:97:f1:af:e2:42:2f:a6: 1c:73:c2:69:68:ec:85:e7:3e:b2:ce:29:f2:27:a5: 1a:bc:01:37:01:08:0c:73:22:ff:7d:6c:c1:87:61: 61:6e:57:9f:40:78:b0:5e:96:98:83:25:0b:1c:d2: d5:ed:14:68:fe:36:5c:e7:31:45:88:46:9e:0a:48: 55:9b:ef:a4:e1:ee:ae:35:66:67:7c:31:6f:0a:40: 6c:83:b5:19:0a:4b:22:49:26:07:4b:12:cf:4a:d3: ce:f5:4f:5f:9c:cc:c9:97:c6:3b:fc:2f:ca:dd:76: 14:2d:7f:18:82:d6:0d:b1:61:5b:4f:a1:36:98:81: 6a:d3:48:2a:97:fe:f6:86:c3:41:7b:e2:f1:2b:5b: 73:97:73:9e:44:3b:a1:a0:1c:2d:8d:3b:aa:d5:1a: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1F:52:FE:46:5C:08:E8:6A:D8:DE:32:E7:BE:1B:2C:0F:D1:64:6E X509v3 Authority Key Identifier: keyid:3A:D7:7F:E6:8F:A9:DA:B6:44:FD:0A:3D:FB:3A:02:56:6A:80:95:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Ih9S_kZcCOhq2N4y574bLA_RZG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1374c0-4bd4-4156-a77f-653a70bf0925/1/Otd_5o-p2rZE_Qo9-zoCVmqAlZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.4.0/22 Signature Algorithm: sha256WithRSAEncryption a1:01:55:f3:fa:dc:eb:fb:7c:d5:06:d2:ce:0f:16:07:92:74: 50:09:56:5f:88:a0:52:42:0f:24:fc:61:70:7c:24:35:ba:f3: 0f:08:40:13:49:a9:ea:be:29:b1:bb:91:d1:d6:81:c0:d4:da: ce:c5:51:3c:6f:21:5a:9d:df:c9:c2:69:7a:4e:4e:49:48:eb: d1:d1:41:3f:0a:25:1e:e5:9b:1e:2f:87:97:6c:41:d8:8a:5a: 32:a3:75:51:6c:a3:43:cf:fd:88:ba:12:58:6d:38:dd:3f:31: 24:41:95:f8:ce:0d:ce:07:c3:37:1d:d3:69:22:a1:42:97:bd: cb:19:58:5f:04:45:0e:67:0a:aa:4d:e0:10:1f:4c:2b:56:68: f7:f7:86:4f:0a:4d:0a:59:6a:b0:f7:d6:e1:a3:58:8b:dd:ab: 32:3f:e5:70:10:e6:e2:ff:00:51:1e:a4:07:9a:83:77:23:47: ef:e9:9c:dd:30:77:84:92:1e:56:1f:ec:62:e7:d9:0c:ca:d3: 19:e5:6d:f3:6a:bd:9b:7c:51:29:f1:cf:1e:c0:49:49:67:c8: 1f:dd:f1:92:38:f9:3b:37:55:0d:14:78:2e:81:af:28:87:c9: 38:d0:bf:4a:9b:17:54:40:4a:95:8d:78:97:62:47:a1:a3:66: ca:2c:04:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORNH/s6UFyJXZmpZXDYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDc3ZmU2OGZhOWRhYjY0NGZkMGEzZGZiM2EwMjU2NmE4 MDk1OTAwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjFmNTJmZTQ2NWMwOGU4NmFkOGRlMzJlN2JlMWIyYzBmZDE2NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1y08FvfyQEU4uAqyTAmmHqT6WeEi UBM1f5Sv6JMmQOYedGcItoMjW8YY2LiEr2PIojOqaRgyaRUERApe9zzrB2bD/IH3 RYPGRbY9ReN3SNP7e6LJdZ0NBYqeneNzD3X3Vpfxr+JCL6Ycc8JpaOyF5z6yziny J6UavAE3AQgMcyL/fWzBh2FhblefQHiwXpaYgyULHNLV7RRo/jZc5zFFiEaeCkhV m++k4e6uNWZnfDFvCkBsg7UZCksiSSYHSxLPStPO9U9fnMzJl8Y7/C/K3XYULX8Y gtYNsWFbT6E2mIFq00gql/72hsNBe+LxK1tzl3OeRDuhoBwtjTuq1Rr/6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIfUv5GXAjoatjeMue+GywP0WRuMB8GA1UdIwQY MBaAFDrXf+aPqdq2RP0KPfs6AlZqgJWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2Yt NjUzYTcwYmYwOTI1LzEvSWg5U19rWmNDT2hxMk40eTU3NGJMQV9SWkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xMzc0YzAtNGJkNC00MTU2LWE3N2YtNjUzYTcwYmYwOTI1 LzEvT3RkXzVvLXAyclpFX1FvOS16b0NWbXFBbFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY0EMA0G CSqGSIb3DQEBCwUAA4IBAQChAVXz+tzr+3zVBtLODxYHknRQCVZfiKBSQg8k/GFw fCQ1uvMPCEATSanqvimxu5HR1oHA1NrOxVE8byFand/Jwml6Tk5JSOvR0UE/CiUe 5ZseL4eXbEHYiloyo3VRbKNDz/2IuhJYbTjdPzEkQZX4zg3OB8M3HdNpIqFCl73L GVhfBEUOZwqqTeAQH0wrVmj394ZPCk0KWWqw99bho1iL3asyP+VwEObi/wBRHqQH moN3I0fv6ZzdMHeEkh5WH+xi59kMytMZ5W3zar2bfFEp8c8ewElJZ8gf3fGSOPk7 N1UNFHguga8oh8k40L9KmxdUQEqVjXiXYkeho2bKLASn -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:24 2026 by rpki-client