This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/iK4oje7PnSRo9xAmtm698XYmzcU.roa File: iK4oje7PnSRo9xAmtm698XYmzcU.roa (raw, json) Hash identifier: N+soR0rvwyPizipAou2vD3c8sm67wSVa/ObW3Qfle0Y= Subject key identifier: 88:AE:28:8D:EE:CF:9D:24:68:F7:10:26:B6:6E:BD:F1:76:26:CD:C5 Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Certificate serial: 019B7C111A042942D18083AD1EA011FFBFEA Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/iK4oje7PnSRo9xAmtm698XYmzcU.roa Signing time: Fri 02 Jan 2026 00:17:34 +0000 ROA not before: Fri 02 Jan 2026 00:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41705 IP address blocks: 193.32.240.0/22 maxlen: 24 193.32.240.0/24 maxlen: 24 193.32.241.0/24 maxlen: 24 193.32.242.0/24 maxlen: 24 193.32.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:1a:04:29:42:d1:80:83:ad:1e:a0:11:ff:bf:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489 Validity Not Before: Jan 2 00:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ae288deecf9d2468f71026b66ebdf17626cdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:39:a9:50:1e:e3:5d:93:80:cf:18:c8:bc: ba:5b:0f:d9:e7:08:94:2d:21:ec:1d:f9:55:69:7e: 82:f2:76:43:3e:73:f4:a6:0d:d7:35:8b:0d:94:91: d0:c3:7f:c6:ba:5f:50:15:47:e6:3c:1b:25:53:0a: 48:9a:0b:b1:9a:15:67:cd:f7:51:88:68:5f:d0:72: 15:d0:04:59:7e:f9:6c:c7:25:52:fb:d6:17:28:21: 6b:88:ad:3e:f6:87:53:30:fa:2b:22:ee:cb:cb:f3: 00:74:2d:c3:2f:43:77:ea:0c:b5:2b:ec:25:96:40: 6f:2b:20:14:b2:2d:53:9d:70:1c:7e:12:25:5b:b2: 66:5c:66:76:f2:13:c5:f7:e4:6f:47:72:22:24:7a: 39:b9:7a:75:e8:06:74:83:75:fe:a6:9b:46:47:6d: 28:e7:b3:c3:3f:60:de:0f:19:b5:75:68:57:4a:c7: 8b:c9:bf:fb:53:2e:40:99:1a:c3:88:d6:34:02:0a: 2c:84:fe:0c:e4:43:ea:5b:a2:6d:17:11:04:b2:bc: 36:e8:fb:9f:f0:90:21:37:8a:0d:51:b7:77:d0:bd: 88:d3:4b:d7:5b:9b:64:92:b1:80:14:7a:0e:ee:46: f0:89:f6:2b:ad:2f:f3:fd:63:c8:9e:b3:ff:1a:c8: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AE:28:8D:EE:CF:9D:24:68:F7:10:26:B6:6E:BD:F1:76:26:CD:C5 X509v3 Authority Key Identifier: keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/iK4oje7PnSRo9xAmtm698XYmzcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.240.0/22 Signature Algorithm: sha256WithRSAEncryption 85:1a:1f:fe:a6:c1:53:21:f4:24:b1:b0:3f:17:59:46:09:24: 86:75:10:ae:bd:b8:a1:a6:be:02:55:48:71:32:3d:7a:00:f9: dd:58:c9:49:fa:26:bf:b0:77:d1:73:0b:a5:e2:97:96:d0:77: f4:4c:c1:83:29:67:af:85:7d:be:a9:fd:48:65:a1:28:8c:76: 4e:20:96:40:de:95:10:ef:96:56:e8:06:14:4b:39:8c:3c:0a: c7:e9:50:34:1d:7e:88:fb:09:be:8a:44:4d:34:9f:1a:e3:15: 45:03:74:29:4c:21:7c:79:2d:c2:3f:cd:25:65:27:00:c0:7b: 24:95:d3:8f:dd:cb:3f:f2:22:4a:e0:6d:11:b1:bb:4d:3b:06: 12:63:8d:63:ef:c1:3c:3f:80:ae:6b:ee:71:43:de:5f:d8:38: 5d:d5:36:63:9a:1d:81:c4:f3:68:1e:c2:46:72:84:86:fd:d1: 28:8b:6a:b4:f2:e4:3c:0e:14:c1:c8:8f:0d:70:aa:2f:fd:c6: 40:d4:18:c2:77:eb:79:ff:29:65:91:8a:a2:26:50:8d:b4:f2: 0b:13:69:3e:3b:65:29:2b:46:52:59:3f:1b:d2:5e:47:e5:b7: 4d:45:82:0f:f4:6e:94:ca:5a:c0:33:9c:bd:86:c6:88:86:e0: 41:a0:f1:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERoEKULRgIOtHqAR/7/qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljY2UzYjExOTdkMGNmOTUxMTU0MDU3MmE1OGZkMzcyZGNj MDc0ODkwHhcNMjYwMTAyMDAxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGFlMjg4ZGVlY2Y5ZDI0NjhmNzEwMjZiNjZlYmRmMTc2MjZjZGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5g5qVAe412TgM8YyLy6Ww/Z5wiU LSHsHflVaX6C8nZDPnP0pg3XNYsNlJHQw3/Gul9QFUfmPBslUwpImguxmhVnzfdR iGhf0HIV0ARZfvlsxyVS+9YXKCFriK0+9odTMPorIu7Ly/MAdC3DL0N36gy1K+wl lkBvKyAUsi1TnXAcfhIlW7JmXGZ28hPF9+RvR3IiJHo5uXp16AZ0g3X+pptGR20o 57PDP2DeDxm1dWhXSseLyb/7Uy5AmRrDiNY0AgoshP4M5EPqW6JtFxEEsrw26Puf 8JAhN4oNUbd30L2I00vXW5tkkrGAFHoO7kbwifYrrS/z/WPInrP/GsghJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIiuKI3uz50kaPcQJrZuvfF2Js3FMB8GA1UdIwQY MBaAFJzOOxGX0M+VEVQFcqWP03LcwHSJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgt YTA0NWZmOGUyYWMwLzEvaUs0b2plN1BuU1JvOXhBbXRtNjk4WFltemNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC80ZjIzNjctNzNmMy00ODE2LWJlYTgtYTA0NWZmOGUyYWMw LzEvbk00N0VaZlF6NVVSVkFWeXBZX1RjdHpBZElrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwSDwMA0G CSqGSIb3DQEBCwUAA4IBAQCFGh/+psFTIfQksbA/F1lGCSSGdRCuvbihpr4CVUhx Mj16APndWMlJ+ia/sHfRcwul4peW0Hf0TMGDKWevhX2+qf1IZaEojHZOIJZA3pUQ 75ZW6AYUSzmMPArH6VA0HX6I+wm+ikRNNJ8a4xVFA3QpTCF8eS3CP80lZScAwHsk ldOP3cs/8iJK4G0RsbtNOwYSY41j78E8P4Cua+5xQ95f2Dhd1TZjmh2BxPNoHsJG coSG/dEoi2q08uQ8DhTByI8NcKov/cZA1BjCd+t5/yllkYqiJlCNtPILE2k+O2Up K0ZSWT8b0l5H5bdNRYIP9G6UylrAM5y9hsaIhuBBoPHx -----END CERTIFICATE-----Generated at Tue Jan 27 06:39:00 2026 by rpki-client