This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/IzGe4nosNG0zHmK5OPSn9wIvv8k.roa File: IzGe4nosNG0zHmK5OPSn9wIvv8k.roa (raw, json) Hash identifier: wsQqoFWRb3dC2K9IWt3QbIKDbjr74CKWRJK6ESBk9b4= Subject key identifier: 23:31:9E:E2:7A:2C:34:6D:33:1E:62:B9:38:F4:A7:F7:02:2F:BF:C9 Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Certificate serial: 019B7B36A0A47616476211D31A6C41216617 Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/IzGe4nosNG0zHmK5OPSn9wIvv8k.roa Signing time: Thu 01 Jan 2026 20:18:56 +0000 ROA not before: Thu 01 Jan 2026 20:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43623 IP address blocks: 91.195.78.0/23 maxlen: 23 185.17.244.0/22 maxlen: 22 185.17.246.0/24 maxlen: 24 185.17.247.0/24 maxlen: 24 194.113.143.0/24 maxlen: 24 194.156.7.0/24 maxlen: 24 2a04:880::/29 maxlen: 29 2a04:880:affe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a0:a4:76:16:47:62:11:d3:1a:6c:41:21:66:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764 Validity Not Before: Jan 1 20:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23319ee27a2c346d331e62b938f4a7f7022fbfc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:02:6e:d1:af:97:e1:14:88:d9:06:f2:26:bf: fe:a3:6f:88:fd:cb:7b:0c:c7:d2:76:d5:07:51:42: ad:f9:8e:d2:df:84:3d:48:44:00:14:cf:87:0b:1a: da:4a:98:fb:5e:ce:be:b7:28:6a:0e:b8:76:ad:60: d4:23:a2:b5:fe:4d:48:71:b9:f7:eb:68:5b:94:af: 1d:69:bd:5f:85:dc:f2:79:80:14:59:5f:4e:44:61: ff:59:4a:3b:93:07:a3:eb:2b:25:c7:45:fb:a1:cd: b4:dc:05:97:24:46:19:4f:d4:1c:43:a0:35:d0:d7: 7c:ff:0a:1d:4f:66:2a:44:6d:1c:ca:e8:7a:fb:f8: f0:87:ca:7d:71:a9:47:90:72:08:18:63:c8:b9:87: 23:02:21:33:17:b6:37:c5:30:7d:e4:83:ee:bf:f4: d2:7d:ab:02:33:85:0e:c7:ea:34:36:7b:54:60:52: 63:6b:7e:13:2e:7d:28:0b:89:61:68:23:67:e7:11: 4b:ef:ee:72:0b:66:e7:1b:42:1b:d3:30:4a:4d:02: 48:af:ba:f0:b4:e5:ba:59:92:d9:a9:b6:30:ed:c4: a8:73:7d:a9:0c:6d:c1:cb:04:1d:6b:95:6a:e6:3a: 9e:d2:96:ed:e3:21:1c:9a:c2:9c:8d:0d:41:4a:37: ad:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:31:9E:E2:7A:2C:34:6D:33:1E:62:B9:38:F4:A7:F7:02:2F:BF:C9 X509v3 Authority Key Identifier: keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/IzGe4nosNG0zHmK5OPSn9wIvv8k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.195.78.0/23 185.17.244.0/22 194.113.143.0/24 194.156.7.0/24 IPv6: 2a04:880::/29 Signature Algorithm: sha256WithRSAEncryption 7a:50:9a:ba:a2:04:2b:b1:a9:67:b2:25:1d:dc:0d:6c:84:92: 86:18:74:0f:22:d1:b6:e6:65:31:35:df:87:ec:b8:13:e1:83: bd:1d:f9:fb:ed:7e:25:79:8c:fd:69:13:a6:d7:e0:b2:a6:24: 65:73:e9:4b:f3:13:fd:f6:fa:30:cf:75:87:61:3f:85:19:4e: d2:dd:5b:ec:21:33:f2:b5:5a:68:9d:ef:01:a4:ac:e7:0d:e8: 28:0c:02:7b:a7:3d:33:d9:aa:32:39:af:71:f8:c5:14:58:9e: 62:9c:d8:c5:be:fd:cd:0f:3b:9c:34:12:92:e3:9b:6f:5b:89: 17:bf:eb:50:3c:c0:bc:93:33:d5:66:1e:b2:dd:9d:05:af:d5: 40:ba:4b:77:db:62:bd:61:23:57:2f:1f:d0:ce:f7:d5:fa:1f: 21:6f:dc:4e:72:8b:b4:de:02:9b:bc:1a:3e:c2:17:9a:05:85: e9:e2:2c:1a:55:e7:c4:5b:52:1e:78:83:e7:63:32:5f:07:f5: 76:cb:20:e5:88:67:28:ea:16:91:8e:a9:1b:63:40:0f:a4:7a: 12:c5:e8:87:30:bd:12:56:0d:f4:d2:7d:9d:26:7a:03:d2:5c: f9:d7:1e:e3:e2:34:d3:86:88:33:6f:3c:2c:20:7b:e3:84:6a: ba:8d:04:bc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt7NqCkdhZHYhHTGmxBIWYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViOWE0MGZjM2YzNTBhYmRhNTlkYmZjMDFjYTM3YTQ2ZDhk NzQ3NjQwHhcNMjYwMTAxMjAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzMxOWVlMjdhMmMzNDZkMzMxZTYyYjkzOGY0YTdmNzAyMmZiZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwJu0a+X4RSI2QbyJr/+o2+I/ct7 DMfSdtUHUUKt+Y7S34Q9SEQAFM+HCxraSpj7Xs6+tyhqDrh2rWDUI6K1/k1Icbn3 62hblK8dab1fhdzyeYAUWV9ORGH/WUo7kwej6yslx0X7oc203AWXJEYZT9QcQ6A1 0Nd8/wodT2YqRG0cyuh6+/jwh8p9calHkHIIGGPIuYcjAiEzF7Y3xTB95IPuv/TS fasCM4UOx+o0NntUYFJja34TLn0oC4lhaCNn5xFL7+5yC2bnG0Ib0zBKTQJIr7rw tOW6WZLZqbYw7cSoc32pDG3BywQda5Vq5jqe0pbt4yEcmsKcjQ1BSjetSQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCMxnuJ6LDRtMx5iuTj0p/cCL7/JMB8GA1UdIwQY MBaAFFuaQPw/NQq9pZ2/wByjekbY10dkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjkt NzI1Mzc1MjZhZWUyLzEvSXpHZTRub3NORzB6SG1LNU9QU245d0l2djhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8yZWVkZTYtZmMyMC00ZjhhLWFlMjktNzI1Mzc1MjZhZWUy LzEvVzVwQV9EODFDcjJsbmJfQUhLTjZSdGpYUjJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW8NOAwQC uRH0AwQAwnGPAwQAwpwHMA0EAgACMAcDBQMqBAiAMA0GCSqGSIb3DQEBCwUAA4IB AQB6UJq6ogQrsalnsiUd3A1shJKGGHQPItG25mUxNd+H7LgT4YO9Hfn77X4leYz9 aROm1+CypiRlc+lL8xP99vowz3WHYT+FGU7S3VvsITPytVpone8BpKznDegoDAJ7 pz0z2aoyOa9x+MUUWJ5inNjFvv3NDzucNBKS45tvW4kXv+tQPMC8kzPVZh6y3Z0F r9VAukt322K9YSNXLx/QzvfV+h8hb9xOcou03gKbvBo+wheaBYXp4iwaVefEW1Ie eIPnYzJfB/V2yyDliGco6haRjqkbY0APpHoSxeiHML0SVg300n2dJnoD0lz51x7j 4jTThogzbzwsIHvjhGq6jQS8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:36 2026 by rpki-client