This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iEN6FygSZBegfT1eI69N_AGCWfU.roa File: iEN6FygSZBegfT1eI69N_AGCWfU.roa (raw, json) Hash identifier: kNmucRUXYGHdveajduVklfRdMMME6/M6ZhNT2en1t3s= Subject key identifier: 88:43:7A:17:28:12:64:17:A0:7D:3D:5E:23:AF:4D:FC:01:82:59:F5 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E009AF679F11A31BECC3D6958D4E8 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iEN6FygSZBegfT1eI69N_AGCWfU.roa Signing time: Thu 01 Jan 2026 12:17:39 +0000 ROA not before: Thu 01 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213028 IP address blocks: 194.135.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:00:9a:f6:79:f1:1a:31:be:cc:3d:69:58:d4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88437a1728126417a07d3d5e23af4dfc018259f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:79:c6:fe:fe:e3:44:11:d5:e1:fe:e2:71: 49:bb:33:23:45:d3:b0:0d:83:32:ef:ed:3c:f7:29: 05:83:6b:dd:e1:2f:1f:35:d3:dd:38:f1:42:63:4c: ae:ed:0f:43:92:6a:f7:74:12:2e:39:25:35:74:c1: be:8f:10:fa:98:93:c9:9c:a6:5a:1e:f1:8e:f2:a3: 82:b6:cd:da:14:f5:23:c6:8a:54:71:04:cc:3e:05: 82:ef:85:d4:d2:61:5d:a2:83:92:3c:e1:77:92:ab: 75:55:8d:f1:60:1e:6d:eb:07:66:05:aa:7b:e0:9d: 01:96:53:4e:1b:b2:66:db:bf:13:4a:71:f9:4f:7f: 69:95:10:46:1d:65:a0:dd:3a:8a:e3:b5:15:52:77: de:e1:83:43:ef:09:4d:23:9b:1e:e4:30:f4:2b:f7: 77:c5:d8:79:cb:3c:86:cb:b6:47:41:32:f9:e9:dd: 7b:e5:a0:f2:a2:a5:c9:ec:7b:c0:96:d4:4b:4e:a1: 40:7f:40:39:b1:a9:b0:9b:b5:1e:2a:c1:43:22:44: b2:89:20:bf:41:ad:6d:e5:63:e1:92:37:2e:d0:aa: b0:de:1b:f7:a2:a5:e0:58:3e:6d:d6:28:4b:d2:c7: db:55:b3:2b:ff:c3:4e:bc:e1:34:51:b0:60:45:49: 6d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:43:7A:17:28:12:64:17:A0:7D:3D:5E:23:AF:4D:FC:01:82:59:F5 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/iEN6FygSZBegfT1eI69N_AGCWfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.135.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:bf:a6:f0:56:5c:d3:91:c2:80:d9:54:9e:da:20:88:d7:ed: 37:d7:59:89:95:e4:cb:6f:7c:17:5d:f7:25:90:b2:fe:69:1f: ed:03:ae:c8:07:3d:3e:ca:d8:e1:b5:08:1a:fe:ea:69:e7:53: d8:ab:1a:31:79:0b:f9:ac:61:bd:51:08:9c:b2:42:93:7b:df: 3c:15:c8:48:29:a9:81:cb:41:97:cd:2d:28:cf:af:45:a3:e7: de:c8:dc:61:74:3d:17:f7:b3:62:d6:2f:7f:66:f1:d7:36:aa: e7:bc:55:c2:de:0e:cd:30:32:aa:97:b8:9a:70:11:6f:19:86: 0f:21:15:ec:fa:35:d4:70:5c:b5:b5:40:61:d0:9f:70:6b:9f: 81:99:c0:7c:f8:4c:88:ac:53:0b:05:9e:b2:c3:ab:ca:8c:74: 19:60:cc:fc:42:5d:29:e2:33:e1:fd:8c:bb:2e:65:ce:68:b6: 9a:e1:83:bd:d4:b0:8c:8e:52:d5:8f:ba:34:84:9b:6d:26:a8: 66:b3:88:87:6a:74:08:ec:77:1d:a9:53:e1:c3:d2:e9:6e:c9: ac:7a:7d:07:97:99:e3:32:30:47:09:44:a1:d2:a1:6c:ef:e0: 20:51:6b:22:6c:ca:dd:f0:34:a0:c4:3e:a2:26:07:af:8f:d5: 36:7c:f3:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgCa9nnxGjG+zD1pWNToMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQzN2ExNzI4MTI2NDE3YTA3ZDNkNWUyM2FmNGRmYzAxODI1OWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrh5xv7+40QR1eH+4nFJuzMjRdOw DYMy7+089ykFg2vd4S8fNdPdOPFCY0yu7Q9Dkmr3dBIuOSU1dMG+jxD6mJPJnKZa HvGO8qOCts3aFPUjxopUcQTMPgWC74XU0mFdooOSPOF3kqt1VY3xYB5t6wdmBap7 4J0BllNOG7Jm278TSnH5T39plRBGHWWg3TqK47UVUnfe4YND7wlNI5se5DD0K/d3 xdh5yzyGy7ZHQTL56d175aDyoqXJ7HvAltRLTqFAf0A5samwm7UeKsFDIkSyiSC/ Qa1t5WPhkjcu0Kqw3hv3oqXgWD5t1ihL0sfbVbMr/8NOvOE0UbBgRUlt+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhDehcoEmQXoH09XiOvTfwBgln1MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvaUVONkZ5Z1NaQmVnZlQxZUk2OU5fQUdDV2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwod8MA0G CSqGSIb3DQEBCwUAA4IBAQAcv6bwVlzTkcKA2VSe2iCI1+0311mJleTLb3wXXfcl kLL+aR/tA67IBz0+ytjhtQga/upp51PYqxoxeQv5rGG9UQicskKTe988FchIKamB y0GXzS0oz69Fo+feyNxhdD0X97Ni1i9/ZvHXNqrnvFXC3g7NMDKql7iacBFvGYYP IRXs+jXUcFy1tUBh0J9wa5+BmcB8+EyIrFMLBZ6yw6vKjHQZYMz8Ql0p4jPh/Yy7 LmXOaLaa4YO91LCMjlLVj7o0hJttJqhms4iHanQI7HcdqVPhw9Lpbsmsen0Hl5nj MjBHCUSh0qFs7+AgUWsibMrd8DSgxD6iJgevj9U2fPPR -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:26 2026 by rpki-client