This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/i5kyr5N66ZDTA3mtxGOlJ8kVut4.roa File: i5kyr5N66ZDTA3mtxGOlJ8kVut4.roa (raw, json) Hash identifier: gEKkmfmle5KluLRAtXEyZBHa6B0VwRl775bqLnntmPA= Subject key identifier: 8B:99:32:AF:93:7A:E9:90:D3:03:79:AD:C4:63:A5:27:C9:15:BA:DE Certificate issuer: /CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888 Certificate serial: 019B79EC16FB93679C95ED1A68EC63E698A0 Authority key identifier: D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/i5kyr5N66ZDTA3mtxGOlJ8kVut4.roa Signing time: Thu 01 Jan 2026 14:17:54 +0000 ROA not before: Thu 01 Jan 2026 14:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208334 IP address blocks: 185.72.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.mft rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:16:fb:93:67:9c:95:ed:1a:68:ec:63:e6:98:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9ad18f4c36067220f4d833cbc78a10f94eb0888 Validity Not Before: Jan 1 14:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b9932af937ae990d30379adc463a527c915bade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:37:aa:e6:80:cf:47:a0:71:61:c4:1b:ca: 65:ec:54:cb:83:10:56:e1:f2:86:bb:28:31:1e:6b: 9a:d1:4d:a9:f5:35:0e:2f:a1:3e:75:f7:50:9c:45: 5a:30:b2:23:31:f9:55:25:0d:95:9b:dc:52:5f:fc: 41:d7:07:ee:96:12:c3:1d:99:5f:36:25:cd:8c:38: 0c:77:a6:7b:9a:bd:3e:f8:60:2b:4e:cd:5b:be:6b: 56:e0:71:9c:65:ff:dd:f1:3d:cb:69:db:ce:86:95: 15:6a:3d:82:b0:f7:ec:39:ca:0e:a2:09:79:ed:46: 70:f5:ec:0d:4d:c1:e1:e9:80:0f:fb:f4:62:a2:de: b3:51:2b:36:ce:6d:84:68:a5:09:7e:43:e0:19:9c: 7a:66:ed:8b:ad:6a:89:10:87:6b:4a:4a:f5:14:e2: fc:c3:21:e4:95:b0:1a:7d:42:f4:d0:39:e2:f6:90: 31:14:fd:6f:5e:99:ae:8c:a0:83:4a:e3:12:e7:64: e3:fd:bb:30:1a:c7:0e:d9:71:1a:71:2f:63:35:1b: f1:8d:8f:19:c7:f1:4c:a2:45:a7:ff:7d:b3:cf:11: fe:83:19:b4:df:d9:bf:27:b0:a1:f7:ac:3d:bf:be: ab:98:dd:5d:16:f5:00:34:32:4b:4a:66:8b:61:bf: d8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:99:32:AF:93:7A:E9:90:D3:03:79:AD:C4:63:A5:27:C9:15:BA:DE X509v3 Authority Key Identifier: keyid:D9:AD:18:F4:C3:60:67:22:0F:4D:83:3C:BC:78:A1:0F:94:EB:08:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a0Y9MNgZyIPTYM8vHihD5TrCIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/i5kyr5N66ZDTA3mtxGOlJ8kVut4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d351bf-71ce-4857-9e50-c2647385e727/1/2a0Y9MNgZyIPTYM8vHihD5TrCIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.72.49.0/24 Signature Algorithm: sha256WithRSAEncryption b1:25:66:46:6b:82:b3:d1:fb:7c:04:6b:89:a7:6f:fd:ac:7e: e1:8b:49:2b:41:a1:e4:4b:96:9e:e1:e0:2f:14:6a:3a:47:54: 8d:03:95:c9:5f:4d:8c:8e:d4:74:a2:00:d8:6d:ef:97:8c:4a: c3:0d:8c:f9:73:29:c9:7e:6b:36:68:41:a8:d4:31:73:6f:de: f2:e3:13:1f:7c:c8:fe:1e:f6:21:2f:4b:a4:6e:8b:0d:bf:fe: bf:91:a1:58:70:6d:d2:18:f6:fe:18:ab:5e:86:05:0e:0a:b9: d7:ba:1c:4e:8f:ac:05:54:0e:98:73:65:64:36:73:37:18:f3: 32:e8:3b:05:f5:73:2e:ee:28:96:61:7d:d0:ab:ea:06:8b:f4: 10:f6:c0:d1:ca:37:7d:62:87:76:eb:1a:b3:18:b2:3f:95:ef: 68:08:8f:1f:85:fa:4a:a7:34:f3:e5:57:91:69:3a:37:8e:02: d5:81:b4:3d:dc:97:c3:ca:39:af:d2:bd:d1:ec:d5:d9:31:3c: fb:f7:12:c0:ee:1c:b8:49:6d:3a:57:25:6f:5c:e5:2f:84:5f: 21:57:43:a9:bf:5b:7b:7e:bd:8d:1c:e6:ed:89:9c:cc:88:a2: c1:4b:be:8e:0d:30:6e:a5:d3:3e:58:a5:55:39:a6:eb:e6:b9: e0:20:14:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Bb7k2ecle0aaOxj5pigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5YWQxOGY0YzM2MDY3MjIwZjRkODMzY2JjNzhhMTBmOTRl YjA4ODgwHhcNMjYwMTAxMTQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjk5MzJhZjkzN2FlOTkwZDMwMzc5YWRjNDYzYTUyN2M5MTViYWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvk3quaAz0egcWHEG8pl7FTLgxBW 4fKGuygxHmua0U2p9TUOL6E+dfdQnEVaMLIjMflVJQ2Vm9xSX/xB1wfulhLDHZlf NiXNjDgMd6Z7mr0++GArTs1bvmtW4HGcZf/d8T3LadvOhpUVaj2CsPfsOcoOogl5 7UZw9ewNTcHh6YAP+/Riot6zUSs2zm2EaKUJfkPgGZx6Zu2LrWqJEIdrSkr1FOL8 wyHklbAafUL00Dni9pAxFP1vXpmujKCDSuMS52Tj/bswGscO2XEacS9jNRvxjY8Z x/FMokWn/32zzxH+gxm039m/J7Ch96w9v76rmN1dFvUANDJLSmaLYb/YGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIuZMq+TeumQ0wN5rcRjpSfJFbreMB8GA1UdIwQY MBaAFNmtGPTDYGciD02DPLx4oQ+U6wiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAt YzI2NDczODVlNzI3LzEvaTVreXI1TjY2WkRUQTNtdHhHT2xKOGtWdXQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kMzUxYmYtNzFjZS00ODU3LTllNTAtYzI2NDczODVlNzI3 LzEvMmEwWTlNTmdaeUlQVFlNOHZIaWhENVRyQ0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUgxMA0G CSqGSIb3DQEBCwUAA4IBAQCxJWZGa4Kz0ft8BGuJp2/9rH7hi0krQaHkS5ae4eAv FGo6R1SNA5XJX02MjtR0ogDYbe+XjErDDYz5cynJfms2aEGo1DFzb97y4xMffMj+ HvYhL0ukbosNv/6/kaFYcG3SGPb+GKtehgUOCrnXuhxOj6wFVA6Yc2VkNnM3GPMy 6DsF9XMu7iiWYX3Qq+oGi/QQ9sDRyjd9Yod26xqzGLI/le9oCI8fhfpKpzTz5VeR aTo3jgLVgbQ93JfDyjmv0r3R7NXZMTz79xLA7hy4SW06VyVvXOUvhF8hV0Opv1t7 fr2NHObtiZzMiKLBS76ODTBupdM+WKVVOabr5rngIBTj -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:53 2026 by rpki-client