This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa File: iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa (raw, json) Hash identifier: +sR86m8s5uPTFwMcLKL+T0A/ZDbNibZcTed4QGQkB+U= Subject key identifier: 88:28:3D:B4:3C:23:D6:F8:2F:EE:5E:33:91:F0:56:61:55:F2:05:8B Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f Certificate serial: 019B7C7FBFDE4080E176278FB49BEEFB1E76 Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47638 IP address blocks: 91.235.56.0/22 maxlen: 24 149.255.168.0/21 maxlen: 24 185.46.200.0/22 maxlen: 24 185.66.204.0/22 maxlen: 24 185.66.205.0/24 maxlen: 24 185.66.206.0/24 maxlen: 24 185.149.208.0/24 maxlen: 24 185.149.209.0/24 maxlen: 24 185.149.210.0/23 maxlen: 24 185.152.8.0/22 maxlen: 24 185.161.132.0/22 maxlen: 24 185.213.92.0/22 maxlen: 24 192.175.40.0/22 maxlen: 24 194.0.116.0/22 maxlen: 24 2a04:1840::/29 maxlen: 48 2a0b:8640::/29 maxlen: 48 2a0f:cd40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.mft rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:bf:de:40:80:e1:76:27:8f:b4:9b:ee:fb:1e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88283db43c23d6f82fee5e3391f0566155f2058b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:a8:28:2f:86:20:f1:52:ca:1e:06:4a:28: 99:ca:05:ff:ed:02:87:eb:78:3c:16:da:aa:bc:af: 10:e0:d5:da:26:56:73:32:c1:90:3a:44:6f:53:45: 53:4f:66:58:ac:1b:d6:26:42:01:45:43:68:70:c6: 1a:7a:83:e3:28:0c:f4:b7:e8:c4:3b:aa:a4:b0:f3: 28:c9:22:0d:c9:e8:a2:2c:3e:65:7e:23:ce:44:0b: f4:e8:bf:c2:12:42:63:81:3d:75:0d:eb:27:c5:29: 21:8a:36:6d:6a:e3:fb:13:5f:7f:96:9a:0b:b3:b6: 69:36:39:82:f8:10:57:a3:87:e8:1f:e7:e5:d0:53: 57:a9:79:6e:31:ea:ae:3d:00:d0:82:b3:65:c7:25: 9f:52:2e:b1:cb:8d:78:07:a1:4b:a4:8b:5c:df:74: a9:d6:72:b8:91:25:11:76:14:d0:37:1a:99:8a:39: 26:fa:c9:77:03:f1:43:dd:36:37:34:66:f9:59:1d: 70:7a:fb:2f:68:cf:6f:d4:7b:13:dc:6f:d9:c2:5c: f5:f5:99:18:2a:1c:c5:ca:d9:a6:0b:f2:bd:c8:7f: 23:9d:49:55:4e:b1:9c:e6:28:c2:f8:e5:85:17:53: c5:48:11:b7:e7:d6:2a:a7:43:99:c9:c1:aa:d1:04: 50:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:28:3D:B4:3C:23:D6:F8:2F:EE:5E:33:91:F0:56:61:55:F2:05:8B X509v3 Authority Key Identifier: keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/iCg9tDwj1vgv7l4zkfBWYVXyBYs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.56.0/22 149.255.168.0/21 185.46.200.0/22 185.66.204.0/22 185.149.208.0/22 185.152.8.0/22 185.161.132.0/22 185.213.92.0/22 192.175.40.0/22 194.0.116.0/22 IPv6: 2a04:1840::/29 2a0b:8640::/29 2a0f:cd40::/29 Signature Algorithm: sha256WithRSAEncryption 18:74:9c:9d:38:b2:fb:3f:a0:e4:03:e3:9a:fa:54:63:26:28: db:a0:ef:ad:3a:56:eb:43:31:2a:7d:76:6d:f6:ca:2b:b9:fc: 58:61:ba:a3:3d:3d:56:f4:cf:c5:35:66:c6:f9:48:7c:a8:75: 7d:4c:2c:19:9e:90:cc:00:cc:41:e5:cb:36:ac:41:89:89:22: c3:c4:41:86:27:7b:2c:02:71:48:4b:56:41:45:1c:03:85:a1: 08:65:99:1a:02:87:6c:7f:3b:60:09:e5:d8:bc:3a:31:f2:0b: dc:d8:0b:96:35:9f:ec:70:a6:eb:ce:ad:0c:e8:b6:e5:49:cc: 7b:41:09:a8:3b:f1:f3:b3:33:30:8b:4b:12:a1:8c:3f:a4:71: f5:f3:32:3c:7a:ff:06:4f:09:ca:3a:22:5c:25:a3:18:4e:15: 24:25:2d:76:b5:f0:e0:8d:a0:c6:c1:93:d2:5d:92:96:ea:3d: c7:67:52:b4:74:1b:b2:19:d1:1e:e8:e2:b2:30:51:b4:6f:c4: 86:bd:b4:51:53:bf:fb:e6:34:23:16:fb:87:3f:78:54:2a:81: ba:cb:7a:73:ab:a7:95:f0:91:57:79:0c:28:0a:33:44:de:aa: 65:7f:4b:59:a1:04:2b:cc:0a:11:be:3b:37:2b:8c:d7:3a:7e: 67:32:1a:dd -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt8f7/eQIDhdiePtJvu+x52MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDA3OWJiNzA3MGVkMGVlZWEzYTFhNDY3Yzc5NDYyYmNj NTQ1NWYwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODI4M2RiNDNjMjNkNmY4MmZlZTVlMzM5MWYwNTY2MTU1ZjIwNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8eoKC+GIPFSyh4GSiiZygX/7QKH 63g8FtqqvK8Q4NXaJlZzMsGQOkRvU0VTT2ZYrBvWJkIBRUNocMYaeoPjKAz0t+jE O6qksPMoySINyeiiLD5lfiPORAv06L/CEkJjgT11DesnxSkhijZtauP7E19/lpoL s7ZpNjmC+BBXo4foH+fl0FNXqXluMequPQDQgrNlxyWfUi6xy414B6FLpItc33Sp 1nK4kSURdhTQNxqZijkm+sl3A/FD3TY3NGb5WR1wevsvaM9v1HsT3G/Zwlz19ZkY KhzFytmmC/K9yH8jnUlVTrGc5ijC+OWFF1PFSBG359Yqp0OZycGq0QRQEQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFIgoPbQ8I9b4L+5eM5HwVmFV8gWLMB8GA1UdIwQY MBaAFNBAebtwcO0O7qOhpGfHlGK8xUVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVCNXUzQnc3UTd1bzZHa1o4ZVVZcnpGUlY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hOTNkYTAtZTE1NS00MzI0LTliYTkt NjIwOThkMWVjMWU2LzEvaUNnOXREd2oxdmd2N2w0emtmQldZVlh5QllzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hOTNkYTAtZTE1NS00MzI0LTliYTktNjIwOThkMWVjMWU2 LzEvMEVCNXUzQnc3UTd1bzZHa1o4ZVVZcnpGUlY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBCBAIAATA8AwQCW+s4AwQD lf+oAwQCuS7IAwQCuULMAwQCuZXQAwQCuZgIAwQCuaGEAwQCudVcAwQCwK8oAwQC wgB0MBsEAgACMBUDBQMqBBhAAwUDKguGQAMFAyoPzUAwDQYJKoZIhvcNAQELBQAD ggEBABh0nJ04svs/oOQD45r6VGMmKNug7606VutDMSp9dm32yiu5/FhhuqM9PVb0 z8U1Zsb5SHyodX1MLBmekMwAzEHlyzasQYmJIsPEQYYneywCcUhLVkFFHAOFoQhl mRoCh2x/O2AJ5di8OjHyC9zYC5Y1n+xwpuvOrQzotuVJzHtBCag78fOzMzCLSxKh jD+kcfXzMjx6/wZPCco6IlwloxhOFSQlLXa18OCNoMbBk9JdkpbqPcdnUrR0G7IZ 0R7o4rIwUbRvxIa9tFFTv/vmNCMW+4c/eFQqgbrLenOrp5XwkVd5DCgKM0TeqmV/ S1mhBCvMChG+OzcrjNc6fmcyGt0= -----END CERTIFICATE-----Generated at Tue Feb 10 05:48:08 2026 by rpki-client