This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/ImbkEEuw8ciW4XZvQnskEOeml3A.roa File: ImbkEEuw8ciW4XZvQnskEOeml3A.roa (raw, json) Hash identifier: s2ZZTRU19ZLlzKll7MUSBOLRlZD19z6bClWZADEJ0vA= Subject key identifier: 22:66:E4:10:4B:B0:F1:C8:96:E1:76:6F:42:7B:24:10:E7:A6:97:70 Certificate issuer: /CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Certificate serial: 019B7F837295F481D5F9E43E122B06ACFE27 Authority key identifier: 1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/ImbkEEuw8ciW4XZvQnskEOeml3A.roa Signing time: Fri 02 Jan 2026 16:21:19 +0000 ROA not before: Fri 02 Jan 2026 16:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12360 IP address blocks: 194.126.195.0/24 maxlen: 24 2001:67c:1950::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.mft rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:72:95:f4:81:d5:f9:e4:3e:12:2b:06:ac:fe:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aeac0f63257b224ec17106e1bcdefd32c24778b Validity Not Before: Jan 2 16:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2266e4104bb0f1c896e1766f427b2410e7a69770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:cd:da:4a:5f:a7:9f:ff:0a:4a:27:63:74: fa:31:ab:63:db:54:55:e8:92:b4:c5:19:e6:de:34: 13:31:bd:1d:36:03:53:a5:9f:61:f4:11:bc:e0:4f: a5:58:b4:4d:aa:cb:10:c0:ae:6b:86:1a:ce:9d:e2: 19:f3:9d:fb:08:31:24:04:17:27:ca:c0:09:21:da: 8c:38:23:fe:c2:aa:93:01:53:10:5c:17:e8:ac:e7: f1:c1:29:17:b4:8a:95:65:d6:1a:e8:d1:e4:01:ab: c0:c5:1b:97:03:76:b9:fa:d4:42:33:95:ca:93:50: eb:60:5f:ab:62:38:8f:f9:8f:66:7b:9b:70:23:f1: 2f:0f:cb:f5:20:97:16:58:af:1a:e3:4f:2b:d8:f3: 43:b4:a5:35:b7:69:88:8f:6c:06:ad:8c:f9:d4:8e: c6:24:39:c3:c1:2c:e2:ba:34:5a:82:5a:5d:c3:61: f6:c1:6f:8f:46:9f:16:bb:e3:cc:07:e9:05:8a:76: ec:9b:d6:15:58:72:f9:a2:3d:c3:31:ee:93:56:8e: 14:d7:70:8c:c7:45:6c:83:94:c2:cf:87:9e:e2:d9: 97:90:79:0b:43:10:32:64:af:75:31:61:93:e2:5b: 07:df:7e:31:db:ca:90:5d:81:63:50:3c:24:d0:85: 2d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:66:E4:10:4B:B0:F1:C8:96:E1:76:6F:42:7B:24:10:E7:A6:97:70 X509v3 Authority Key Identifier: keyid:1A:EA:C0:F6:32:57:B2:24:EC:17:10:6E:1B:CD:EF:D3:2C:24:77:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GurA9jJXsiTsFxBuG83v0ywkd4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/ImbkEEuw8ciW4XZvQnskEOeml3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/6c0680-7c8d-4dec-b2a8-298b5596976a/1/GurA9jJXsiTsFxBuG83v0ywkd4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.195.0/24 IPv6: 2001:67c:1950::/48 Signature Algorithm: sha256WithRSAEncryption 0e:8f:ba:0e:c7:ff:35:17:1e:7b:6e:2c:b5:e9:29:21:6a:5c: c3:89:03:4b:4a:53:24:cc:5a:39:f9:80:9d:6f:17:ef:5a:53: a7:44:3b:b3:d4:0b:e7:8c:97:77:2d:f8:0a:e9:16:20:65:a5: 7b:f9:b3:66:b7:3a:0f:bb:be:32:8a:a8:22:88:d7:e1:73:fc: 73:bd:2c:37:4e:b7:59:51:1d:e4:7d:02:5d:be:be:54:46:ac: d2:2f:3d:1e:91:f2:ef:13:e5:66:bd:f3:75:b1:bc:74:79:f5: 1d:bb:ba:e7:19:6b:90:36:13:74:96:ff:3a:3e:26:56:42:4c: 55:f9:6e:bd:25:1e:b7:73:c3:88:38:56:1a:a3:73:f7:68:bc: a4:f3:c3:54:c7:92:a0:75:89:ce:ac:e8:37:98:f7:1b:2c:58: 2c:09:86:c6:79:5b:ae:5b:5c:af:c4:61:4a:e9:c6:9a:d7:8a: 9e:a2:6e:83:0a:26:36:ab:7d:4f:e2:28:83:9c:3f:1c:f0:32: cd:32:96:b9:cd:88:6b:83:c0:05:7e:a1:80:4d:ad:95:2d:01: 07:28:84:49:3a:80:c4:67:72:00:bf:47:54:1f:d4:95:c8:4d: 8b:9d:ab:cf:87:4a:f5:34:af:cb:85:1e:ca:b5:b6:b5:68:e0: 0c:c1:2a:82 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/g3KV9IHV+eQ+EisGrP4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhZWFjMGY2MzI1N2IyMjRlYzE3MTA2ZTFiY2RlZmQzMmMy NDc3OGIwHhcNMjYwMTAyMTYyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjY2ZTQxMDRiYjBmMWM4OTZlMTc2NmY0MjdiMjQxMGU3YTY5NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY7N2kpfp5//CkonY3T6Matj21RV 6JK0xRnm3jQTMb0dNgNTpZ9h9BG84E+lWLRNqssQwK5rhhrOneIZ8537CDEkBBcn ysAJIdqMOCP+wqqTAVMQXBforOfxwSkXtIqVZdYa6NHkAavAxRuXA3a5+tRCM5XK k1DrYF+rYjiP+Y9me5twI/EvD8v1IJcWWK8a408r2PNDtKU1t2mIj2wGrYz51I7G JDnDwSziujRaglpdw2H2wW+PRp8Wu+PMB+kFinbsm9YVWHL5oj3DMe6TVo4U13CM x0Vsg5TCz4ee4tmXkHkLQxAyZK91MWGT4lsH334x28qQXYFjUDwk0IUtXwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCJm5BBLsPHIluF2b0J7JBDnppdwMB8GA1UdIwQY MBaAFBrqwPYyV7Ik7BcQbhvN79MsJHeLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgt Mjk4YjU1OTY5NzZhLzEvSW1ia0VFdXc4Y2lXNFhadlFuc2tFT2VtbDNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni82YzA2ODAtN2M4ZC00ZGVjLWIyYTgtMjk4YjU1OTY5NzZh LzEvR3VyQTlqSlhzaVRzRnhCdUc4M3YweXdrZDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwn7DMA8E AgACMAkDBwAgAQZ8GVAwDQYJKoZIhvcNAQELBQADggEBAA6Pug7H/zUXHntuLLXp KSFqXMOJA0tKUyTMWjn5gJ1vF+9aU6dEO7PUC+eMl3ct+ArpFiBlpXv5s2a3Og+7 vjKKqCKI1+Fz/HO9LDdOt1lRHeR9Al2+vlRGrNIvPR6R8u8T5Wa983WxvHR59R27 uucZa5A2E3SW/zo+JlZCTFX5br0lHrdzw4g4Vhqjc/dovKTzw1THkqB1ic6s6DeY 9xssWCwJhsZ5W65bXK/EYUrpxprXip6iboMKJjarfU/iKIOcPxzwMs0ylrnNiGuD wAV+oYBNrZUtAQcohEk6gMRncgC/R1Qf1JXITYudq8+HSvU0r8uFHsq1trVo4AzB KoI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:36 2026 by rpki-client