This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IngegUk8x9kh-0Tj8CUT3epjdA0.roa
File: IngegUk8x9kh-0Tj8CUT3epjdA0.roa (raw, json)
Hash identifier: nWNy+VOInYZT8edsdw2xgSPdD3TBw8xyWV6Urs1f+0c=
Subject key identifier: 22:78:1E:81:49:3C:C7:D9:21:FB:44:E3:F0:25:13:DD:EA:63:74:0D
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019B7F83B9BF39D606D22B48119BC4CED9D5
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IngegUk8x9kh-0Tj8CUT3epjdA0.roa
Signing time: Fri 02 Jan 2026 16:21:37 +0000
ROA not before: Fri 02 Jan 2026 16:21:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208388
IP address blocks: 37.230.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:83:b9:bf:39:d6:06:d2:2b:48:11:9b:c4:ce:d9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 2 16:21:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22781e81493cc7d921fb44e3f02513ddea63740d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7f:c9:69:17:de:1b:71:18:09:28:11:d4:de:
ec:57:d9:84:b4:5a:f1:b0:22:21:c0:29:7a:00:34:
9f:dc:f8:91:da:33:a9:e4:fd:b5:76:a1:d8:95:16:
2a:fa:63:68:35:18:57:66:76:4e:20:e6:c3:86:d2:
3e:fc:e5:e4:16:2d:3d:bb:9c:ee:7f:3c:19:ee:22:
27:90:3d:f2:95:8d:03:d6:d9:02:97:3d:64:86:2a:
7d:dc:ee:43:1f:60:61:21:41:70:1b:4d:cf:fc:ac:
2e:30:f5:99:9e:c3:c0:ee:7e:fa:74:61:c9:f4:87:
c7:a1:9a:a6:29:62:0b:a9:3d:86:af:ab:2d:cf:18:
c2:a1:7e:13:f4:4a:6e:80:e5:7f:0e:cb:a9:b7:33:
07:76:02:b8:c6:7d:19:0e:6c:19:46:7e:f5:d0:ba:
67:17:74:ad:d3:42:ea:15:30:3f:60:6c:cc:73:f5:
22:31:85:b7:c5:a9:53:9d:3c:e3:85:5c:64:c8:b5:
3c:55:87:48:75:03:fd:8d:36:ca:82:4b:19:17:e4:
4b:fc:b9:71:42:bd:c8:f4:6a:b1:d9:17:b3:3f:a4:
24:e0:40:7d:93:a2:dc:79:d3:55:dd:6e:34:64:a6:
f8:5d:ca:1a:11:0d:4c:52:0d:0d:18:39:48:2b:69:
86:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:78:1E:81:49:3C:C7:D9:21:FB:44:E3:F0:25:13:DD:EA:63:74:0D
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IngegUk8x9kh-0Tj8CUT3epjdA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:58:86:bf:88:44:9d:38:ed:49:56:c8:d5:c3:7c:66:24:3a:
b0:50:a3:9c:b5:63:6a:04:10:f3:59:e1:08:d3:f7:23:48:7e:
2f:10:e8:b9:6a:0a:db:8d:55:74:c0:54:74:d0:9f:93:e1:2f:
f6:82:a4:5a:ea:fb:0c:4d:5e:05:a1:b9:ae:91:a5:94:b9:e1:
81:ee:06:8a:95:38:38:b8:68:e3:a2:17:49:42:32:c4:6c:34:
df:96:59:05:93:14:3b:e0:26:d5:bf:04:5a:c6:47:0f:97:7d:
30:b4:d8:b9:7d:c6:3f:de:6d:96:6c:47:5c:77:a1:bf:31:af:
e8:e4:58:5a:fd:34:59:e1:9f:b5:c9:2a:e7:50:a6:ee:c9:81:
95:ea:cb:e5:97:f3:7d:3c:f6:96:48:8a:dd:eb:f8:91:d9:35:
81:e5:ad:3b:9d:f7:37:66:a6:d5:b3:7e:49:73:c2:5f:7a:cf:
d0:fb:c2:71:31:6e:89:f5:5a:29:26:61:29:b6:dc:f4:92:b1:
16:ad:01:9f:23:86:64:b0:9c:ec:bb:f5:73:56:89:4b:c2:d8:
2c:dd:7a:b4:89:0a:ed:c0:d6:e9:6c:44:40:57:5d:b3:e2:f3:
4f:26:16:fd:8f:eb:22:32:b3:e1:a9:64:ed:e4:f1:ca:1d:b9:
21:96:6b:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/g7m/OdYG0itIEZvEztnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0
NzA2N2UwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjc4MWU4MTQ5M2NjN2Q5MjFmYjQ0ZTNmMDI1MTNkZGVhNjM3NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3/JaRfeG3EYCSgR1N7sV9mEtFrx
sCIhwCl6ADSf3PiR2jOp5P21dqHYlRYq+mNoNRhXZnZOIObDhtI+/OXkFi09u5zu
fzwZ7iInkD3ylY0D1tkClz1khip93O5DH2BhIUFwG03P/KwuMPWZnsPA7n76dGHJ
9IfHoZqmKWILqT2Gr6stzxjCoX4T9EpugOV/DsuptzMHdgK4xn0ZDmwZRn710Lpn
F3St00LqFTA/YGzMc/UiMYW3xalTnTzjhVxkyLU8VYdIdQP9jTbKgksZF+RL/Llx
Qr3I9Gqx2RezP6Qk4EB9k6LcedNV3W40ZKb4XcoaEQ1MUg0NGDlIK2mG+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCJ4HoFJPMfZIftE4/AlE93qY3QNMB8GA1UdIwQY
MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt
OGM5NTgxZDk2ZDhmLzEvSW5nZWdVazh4OWtoLTBUajhDVVQzZXBqZEEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm
LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJebMMA0G
CSqGSIb3DQEBCwUAA4IBAQBrWIa/iESdOO1JVsjVw3xmJDqwUKOctWNqBBDzWeEI
0/cjSH4vEOi5agrbjVV0wFR00J+T4S/2gqRa6vsMTV4FobmukaWUueGB7gaKlTg4
uGjjohdJQjLEbDTfllkFkxQ74CbVvwRaxkcPl30wtNi5fcY/3m2WbEdcd6G/Ma/o
5Fha/TRZ4Z+1ySrnUKbuyYGV6svll/N9PPaWSIrd6/iR2TWB5a07nfc3ZqbVs35J
c8Jfes/Q+8JxMW6J9VopJmEpttz0krEWrQGfI4ZksJzsu/VzVolLwtgs3Xq0iQrt
wNbpbERAV12z4vNPJhb9j+siMrPhqWTt5PHKHbkhlmvs
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:50:26 2026 by rpki-client