This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/icFHDnkNwFTjsYY-SzduNjO_EqE.roa File: icFHDnkNwFTjsYY-SzduNjO_EqE.roa (raw, json) Hash identifier: bzWm99q/qtEZJ/W2n/KzAK8PGJMkB7eWMwvqfDNeRPI= Subject key identifier: 89:C1:47:0E:79:0D:C0:54:E3:B1:86:3E:4B:37:6E:36:33:BF:12:A1 Certificate issuer: /CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c Certificate serial: 019B78A31771F8EF4A34C74BE8F80D117516 Authority key identifier: ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/icFHDnkNwFTjsYY-SzduNjO_EqE.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 84.38.247.0/24 maxlen: 24 85.193.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.mft rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:17:71:f8:ef:4a:34:c7:4b:e8:f8:0d:11:75:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed5a6ba2d2248bc4782ac0fdb3c64b946640b09c Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89c1470e790dc054e3b1863e4b376e3633bf12a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:99:a7:bb:b6:80:a1:07:09:d5:67:8a:9e:f6: 0f:ee:ab:5d:ba:30:f4:c3:57:fe:ba:5b:6d:4b:c9: f4:4e:c5:6a:85:c0:b2:9f:e8:8e:67:64:f5:46:6b: 33:a8:5a:b9:d5:dc:6f:25:40:d5:82:eb:9b:97:92: 4c:88:5a:3c:95:57:f5:4a:6f:42:d2:c5:97:a4:85: 76:6a:01:76:7b:49:64:03:d9:a5:6c:6b:e2:9d:63: 51:ee:4d:bc:90:a1:00:23:93:8c:d0:ee:33:42:4b: ea:3b:01:8f:5f:e6:7f:f2:11:2e:83:44:f2:6d:fe: 82:a0:d0:81:c5:9f:68:e7:9a:ad:8b:ea:d6:46:ca: 9b:5f:5e:01:58:ce:5d:83:30:5a:bd:9e:3f:02:00: a8:3c:cc:88:fc:10:d8:84:32:31:e0:6f:aa:64:fa: 91:54:42:f5:a0:b2:65:c0:81:1e:27:f9:54:24:50: 9e:4f:98:8e:c1:b8:bc:7e:a3:ca:96:f0:9f:7d:c0: 90:bb:6b:e0:fe:2c:e4:c8:9e:cd:69:9f:20:d1:ab: e7:f5:2e:69:f4:0d:a0:dd:e1:94:6d:83:24:63:be: 25:24:95:99:2c:c1:23:8b:c1:ab:7b:86:4d:90:9a: 7a:e4:e5:c2:47:16:bc:5b:14:3c:4a:c7:ee:dc:9f: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C1:47:0E:79:0D:C0:54:E3:B1:86:3E:4B:37:6E:36:33:BF:12:A1 X509v3 Authority Key Identifier: keyid:ED:5A:6B:A2:D2:24:8B:C4:78:2A:C0:FD:B3:C6:4B:94:66:40:B0:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7VprotIki8R4KsD9s8ZLlGZAsJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/icFHDnkNwFTjsYY-SzduNjO_EqE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/b278df-ed37-4de7-a675-107a8d85bd30/1/7VprotIki8R4KsD9s8ZLlGZAsJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.247.0/24 85.193.78.0/24 Signature Algorithm: sha256WithRSAEncryption 71:b8:30:07:b2:a2:35:5e:46:bd:d7:5c:b0:ce:db:09:4a:33: 4a:fb:14:d4:5d:de:97:18:ee:e3:df:97:19:48:eb:6c:d9:e2: d4:b3:5f:7b:80:1e:dd:de:90:ad:91:92:1c:57:00:4e:df:7e: c7:ed:8d:69:89:e2:a4:90:50:1e:d4:92:bb:9c:39:a3:c4:0c: a1:5f:19:f9:6e:9b:79:86:fc:46:f2:13:46:72:4d:c1:94:0e: cb:cb:bd:4a:e6:e3:a9:28:6a:2a:30:8d:61:ce:42:f2:03:09: e6:52:d1:d6:a5:e6:1f:d8:ce:d0:f6:88:b8:2d:4e:58:a3:e1: 81:5a:e2:a9:64:10:4c:7b:55:f7:cd:3e:df:0a:a2:af:ee:cf: 1a:b6:bb:56:4f:99:0f:c6:84:b9:ca:c2:00:c9:08:b4:b1:5d: 19:32:e6:1d:3b:89:0d:7e:25:fd:98:b8:48:e5:7c:20:19:a1: 2f:09:eb:64:34:4c:df:fa:75:f9:10:7c:eb:a4:34:fd:e8:75: d6:29:75:d5:21:6f:c0:4d:14:06:cd:05:86:d7:62:cb:c7:68: d2:83:0c:83:e4:f2:26:d3:f2:da:c4:38:97:3c:e3:64:a3:dd: 61:1b:d3:fa:d9:9e:cf:f3:35:5d:dc:cb:48:27:80:c3:75:d2: b7:d5:3a:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxdx+O9KNMdL6PgNEXUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNWE2YmEyZDIyNDhiYzQ3ODJhYzBmZGIzYzY0Yjk0NjY0 MGIwOWMwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWMxNDcwZTc5MGRjMDU0ZTNiMTg2M2U0YjM3NmUzNjMzYmYxMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5mnu7aAoQcJ1WeKnvYP7qtdujD0 w1f+ulttS8n0TsVqhcCyn+iOZ2T1RmszqFq51dxvJUDVguubl5JMiFo8lVf1Sm9C 0sWXpIV2agF2e0lkA9mlbGvinWNR7k28kKEAI5OM0O4zQkvqOwGPX+Z/8hEug0Ty bf6CoNCBxZ9o55qti+rWRsqbX14BWM5dgzBavZ4/AgCoPMyI/BDYhDIx4G+qZPqR VEL1oLJlwIEeJ/lUJFCeT5iOwbi8fqPKlvCffcCQu2vg/izkyJ7NaZ8g0avn9S5p 9A2g3eGUbYMkY74lJJWZLMEji8Gre4ZNkJp65OXCRxa8WxQ8Ssfu3J9T/QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFInBRw55DcBU47GGPks3bjYzvxKhMB8GA1UdIwQY MBaAFO1aa6LSJIvEeCrA/bPGS5RmQLCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUt MTA3YThkODViZDMwLzEvaWNGSERua053RlRqc1lZLVN6ZHVOak9fRXFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iMjc4ZGYtZWQzNy00ZGU3LWE2NzUtMTA3YThkODViZDMw LzEvN1Zwcm90SWtpOFI0S3NEOXM4WkxsR1pBc0p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVCb3AwQA VcFOMA0GCSqGSIb3DQEBCwUAA4IBAQBxuDAHsqI1Xka911ywztsJSjNK+xTUXd6X GO7j35cZSOts2eLUs197gB7d3pCtkZIcVwBO337H7Y1pieKkkFAe1JK7nDmjxAyh Xxn5bpt5hvxG8hNGck3BlA7Ly71K5uOpKGoqMI1hzkLyAwnmUtHWpeYf2M7Q9oi4 LU5Yo+GBWuKpZBBMe1X3zT7fCqKv7s8atrtWT5kPxoS5ysIAyQi0sV0ZMuYdO4kN fiX9mLhI5XwgGaEvCetkNEzf+nX5EHzrpDT96HXWKXXVIW/ATRQGzQWG12LLx2jS gwyD5PIm0/LaxDiXPONko91hG9P62Z7P8zVd3MtIJ4DDddK31TrB -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client