This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ir6bfpb8JM7UYnDHtEpw_dUprsQ.roa File: Ir6bfpb8JM7UYnDHtEpw_dUprsQ.roa (raw, json) Hash identifier: tNmuTt+kFPmlOWbzNLuHZain7nPFL5E1oo4ulqIrfzY= Subject key identifier: 22:BE:9B:7E:96:FC:24:CE:D4:62:70:C7:B4:4A:70:FD:D5:29:AE:C4 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE1B23F368FB654F36397DE9095A0 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ir6bfpb8JM7UYnDHtEpw_dUprsQ.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12676 IP address blocks: 194.85.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e1:b2:3f:36:8f:b6:54:f3:63:97:de:90:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22be9b7e96fc24ced46270c7b44a70fdd529aec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5d:45:06:60:64:47:4b:65:39:30:3d:68:0d: 47:70:f6:6f:fc:f4:8b:e2:96:9f:73:7e:3f:1d:0f: 1c:92:b0:da:23:f9:f8:4a:8a:be:4e:a9:55:45:c7: 68:0c:89:b0:38:0c:5f:a0:16:62:32:c6:2e:8e:e3: 59:c1:25:94:fb:df:91:bc:42:6f:ff:09:d4:6a:aa: be:c0:45:6c:dd:78:83:84:f1:5e:3e:5c:98:00:96: a1:f8:ef:b3:58:5a:0f:3c:9c:5b:32:fe:f7:2f:fc: 89:85:fa:cc:36:60:7f:30:d4:87:60:cb:10:5d:51: 4b:a4:27:11:e1:11:2b:33:3a:57:61:cd:14:98:94: 18:33:e4:f3:54:5c:35:32:18:37:e8:33:49:28:02: 71:bf:c3:ab:50:a6:db:c5:25:43:19:77:f4:a3:2c: a1:55:b8:11:ab:5e:05:c5:28:0c:fb:f5:68:a1:29: 59:01:f9:a8:19:f8:e3:7b:fd:64:cf:84:bc:d8:30: 1c:ae:7a:69:13:a8:dd:fc:2a:8a:e7:eb:14:86:87: b0:b2:76:d7:cb:4f:65:0d:c8:1a:1d:ea:d7:c9:c5: 7e:b6:eb:28:76:64:53:2f:73:78:14:2e:d1:98:d9: 12:f4:b7:d5:dd:f7:c6:75:31:05:16:fd:e5:98:9f: 61:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:9B:7E:96:FC:24:CE:D4:62:70:C7:B4:4A:70:FD:D5:29:AE:C4 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Ir6bfpb8JM7UYnDHtEpw_dUprsQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.85.248.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:99:85:8c:1a:98:03:f8:97:4e:72:37:20:b9:48:5b:f7:03: 5b:78:2a:10:56:fe:79:e5:5c:0a:5a:e1:2a:fc:1e:92:88:38: 3e:8e:7b:ad:11:ff:2a:d0:35:04:d4:74:1e:cf:31:b8:65:80: b7:65:2e:70:bb:47:b9:4b:68:56:18:ab:6f:42:c9:64:26:83: 2d:04:b2:41:64:1e:64:00:cf:c5:97:bb:13:e3:9d:13:b0:43: ef:ff:1b:bb:a5:56:41:ed:15:d3:4c:f5:ae:69:73:d5:da:a4: 49:72:3e:60:43:bd:9a:17:87:8d:89:e3:e6:fd:ee:02:18:f6: 1f:9b:76:84:ea:64:dc:72:35:a7:45:48:c2:ce:ae:a8:22:f9: 5c:10:c9:4a:1c:de:73:42:4d:e1:ed:59:8d:dc:c1:36:06:eb: 29:4f:c5:28:d6:0e:95:cc:e5:24:78:e5:dd:71:db:d8:38:5c: 54:b3:69:94:15:0d:30:a3:67:23:cb:5d:5b:bb:51:fb:0a:34: c1:58:2d:5d:09:9a:2d:79:76:53:8a:02:28:36:4b:06:3c:c4: 5a:8d:6d:cc:99:ff:fd:0e:4d:f2:b9:98:dc:72:e3:72:d1:83: 03:ea:f0:00:63:23:7b:ca:d4:2c:b8:8e:5b:4d:92:80:d7:5b: bf:59:46:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feGyPzaPtlTzY5fekJWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJlOWI3ZTk2ZmMyNGNlZDQ2MjcwYzdiNDRhNzBmZGQ1MjlhZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol1FBmBkR0tlOTA9aA1HcPZv/PSL 4pafc34/HQ8ckrDaI/n4Soq+TqlVRcdoDImwOAxfoBZiMsYujuNZwSWU+9+RvEJv /wnUaqq+wEVs3XiDhPFePlyYAJah+O+zWFoPPJxbMv73L/yJhfrMNmB/MNSHYMsQ XVFLpCcR4RErMzpXYc0UmJQYM+TzVFw1Mhg36DNJKAJxv8OrUKbbxSVDGXf0oyyh VbgRq14FxSgM+/VooSlZAfmoGfjje/1kz4S82DAcrnppE6jd/CqK5+sUhoewsnbX y09lDcgaHerXycV+tusodmRTL3N4FC7RmNkS9LfV3ffGdTEFFv3lmJ9hxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCK+m36W/CTO1GJwx7RKcP3VKa7EMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvSXI2YmZwYjhKTTdVWW5ESHRFcHdfZFVwcnNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlX4MA0G CSqGSIb3DQEBCwUAA4IBAQBamYWMGpgD+JdOcjcguUhb9wNbeCoQVv555VwKWuEq /B6SiDg+jnutEf8q0DUE1HQezzG4ZYC3ZS5wu0e5S2hWGKtvQslkJoMtBLJBZB5k AM/Fl7sT450TsEPv/xu7pVZB7RXTTPWuaXPV2qRJcj5gQ72aF4eNiePm/e4CGPYf m3aE6mTccjWnRUjCzq6oIvlcEMlKHN5zQk3h7VmN3ME2BuspT8Uo1g6VzOUkeOXd cdvYOFxUs2mUFQ0wo2cjy11bu1H7CjTBWC1dCZoteXZTigIoNksGPMRajW3Mmf/9 Dk3yuZjccuNy0YMD6vAAYyN7ytQsuI5bTZKA11u/WUb9 -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:25 2026 by rpki-client