This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/IYPTClwnj8irg0OhdDxZyjL9G1c.roa File: IYPTClwnj8irg0OhdDxZyjL9G1c.roa (raw, json) Hash identifier: owmpRr+GHoLqPC1kOeM81ucxMcmWectBgHD0VSY4gLg= Subject key identifier: 21:83:D3:0A:5C:27:8F:C8:AB:83:43:A1:74:3C:59:CA:32:FD:1B:57 Certificate issuer: /CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3 Certificate serial: 019B78350BF284948E4F9D5384A5A66FDA63 Authority key identifier: D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/IYPTClwnj8irg0OhdDxZyjL9G1c.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210028 IP address blocks: 185.89.99.0/24 maxlen: 24 194.12.56.0/24 maxlen: 24 194.12.57.0/24 maxlen: 24 194.12.58.0/24 maxlen: 24 194.12.59.0/24 maxlen: 24 194.12.60.0/24 maxlen: 24 194.12.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.mft rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:0b:f2:84:94:8e:4f:9d:53:84:a5:a6:6f:da:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63d5529bda17713ebe6b4c22f7fce4cb8f1e8b3 Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2183d30a5c278fc8ab8343a1743c59ca32fd1b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d6:7a:f8:49:89:17:a0:16:0b:ed:82:cf:7a: 57:30:77:0d:04:25:5f:ae:32:09:2d:0f:ed:f6:d6: 18:98:15:a3:62:91:22:bc:66:f5:31:fe:08:65:ca: 6e:69:12:9b:26:b7:98:8a:40:5c:90:9a:49:1f:10: c5:83:b9:a1:c6:dc:90:b7:e2:e2:c3:d7:59:a9:06: e2:e8:c0:e6:3d:c0:2e:db:d4:fa:52:20:52:ba:1e: 5b:a5:69:02:4a:c6:a0:31:c9:c4:4a:f6:99:cc:e0: fd:3d:b3:0f:63:50:84:72:7d:24:2d:d7:c5:e6:00: 5a:31:3c:b5:44:ac:44:30:2d:91:77:de:4c:22:22: 27:87:1f:48:56:29:62:bc:0a:c2:49:41:8e:25:9a: 03:05:d6:40:30:31:7f:f5:a6:f0:4f:ed:c8:6a:43: 43:1c:35:c6:da:f5:52:02:b0:5c:86:fa:91:34:54: 5f:30:72:48:d5:08:de:13:6e:6c:71:62:ef:0e:b4: 9e:aa:60:6c:4c:84:75:da:2c:56:e7:3e:02:a1:8b: 3a:05:2e:df:6b:ab:3b:4b:24:35:1b:d9:e7:6c:dc: 6e:26:e5:2c:f2:bc:eb:5e:41:4e:1a:36:35:b1:15: c5:eb:36:35:d8:42:ed:03:e8:f0:99:02:8b:96:8c: 8f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:83:D3:0A:5C:27:8F:C8:AB:83:43:A1:74:3C:59:CA:32:FD:1B:57 X509v3 Authority Key Identifier: keyid:D6:3D:55:29:BD:A1:77:13:EB:E6:B4:C2:2F:7F:CE:4C:B8:F1:E8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j1VKb2hdxPr5rTCL3_OTLjx6LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/IYPTClwnj8irg0OhdDxZyjL9G1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/62b342-7c20-41e3-8f1b-cdcf5f6a4c27/1/1j1VKb2hdxPr5rTCL3_OTLjx6LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.99.0/24 194.12.56.0-194.12.61.255 Signature Algorithm: sha256WithRSAEncryption ac:c0:a5:84:75:c3:b7:33:52:41:59:a5:13:d8:6f:19:c1:75: 67:e9:31:9c:b2:36:1e:cd:39:34:77:1f:27:71:ba:7c:16:6c: 11:ba:a5:80:9f:7a:e7:48:2d:2f:29:0f:cd:0e:48:32:da:31: ff:49:30:dc:71:80:df:1c:cf:de:e0:59:46:5f:bf:35:ba:e5: 1f:7c:45:92:00:10:34:af:f1:0f:6c:43:43:31:7d:6a:28:85: b7:35:89:94:d1:a8:27:a0:d4:68:61:a2:c1:e3:2b:5f:02:f8: d1:00:ae:4a:fe:3a:3e:bb:ee:14:bb:13:39:97:92:80:88:31: 31:38:6e:8d:65:4e:9b:66:79:41:60:f6:fe:4d:a9:32:85:0b: 02:db:7d:ff:63:69:17:1d:b4:1c:c3:44:e1:6e:12:bf:15:85: d6:5c:9b:a1:6e:5f:a1:82:a4:57:b5:4d:4b:f2:e7:f4:5e:3e: 1a:dc:c9:f8:22:29:b9:0e:e1:71:e3:f7:0b:74:df:5c:99:99: 89:c0:73:5a:0d:da:de:56:20:2f:a8:25:a2:ff:39:0f:a1:42: 89:63:88:e1:ca:fc:f1:5d:a2:c8:eb:ec:73:fa:7c:81:be:14: f0:f9:0e:5c:12:1d:1b:fd:40:02:71:3d:a6:89:e0:9e:f2:42: 62:36:4a:ee -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NQvyhJSOT51ThKWmb9pjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2M2Q1NTI5YmRhMTc3MTNlYmU2YjRjMjJmN2ZjZTRjYjhm MWU4YjMwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTgzZDMwYTVjMjc4ZmM4YWI4MzQzYTE3NDNjNTljYTMyZmQxYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Z6+EmJF6AWC+2Cz3pXMHcNBCVf rjIJLQ/t9tYYmBWjYpEivGb1Mf4IZcpuaRKbJreYikBckJpJHxDFg7mhxtyQt+Li w9dZqQbi6MDmPcAu29T6UiBSuh5bpWkCSsagMcnESvaZzOD9PbMPY1CEcn0kLdfF 5gBaMTy1RKxEMC2Rd95MIiInhx9IVilivArCSUGOJZoDBdZAMDF/9abwT+3IakND HDXG2vVSArBchvqRNFRfMHJI1QjeE25scWLvDrSeqmBsTIR12ixW5z4CoYs6BS7f a6s7SyQ1G9nnbNxuJuUs8rzrXkFOGjY1sRXF6zY12ELtA+jwmQKLloyPUwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCGD0wpcJ4/Iq4NDoXQ8Wcoy/RtXMB8GA1UdIwQY MBaAFNY9VSm9oXcT6+a0wi9/zky48eizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWIt Y2RjZjVmNmE0YzI3LzEvSVlQVENsd25qOGlyZzBPaGREeFp5akw5RzFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82MmIzNDItN2MyMC00MWUzLThmMWItY2RjZjVmNmE0YzI3 LzEvMWoxVktiMmhkeFByNXJUQ0wzX09UTGp4NkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuVljMAwD BAPCDDgDBAHCDDwwDQYJKoZIhvcNAQELBQADggEBAKzApYR1w7czUkFZpRPYbxnB dWfpMZyyNh7NOTR3HydxunwWbBG6pYCfeudILS8pD80OSDLaMf9JMNxxgN8cz97g WUZfvzW65R98RZIAEDSv8Q9sQ0MxfWoohbc1iZTRqCeg1GhhosHjK18C+NEArkr+ Oj677hS7EzmXkoCIMTE4bo1lTptmeUFg9v5NqTKFCwLbff9jaRcdtBzDROFuEr8V hdZcm6FuX6GCpFe1TUvy5/RePhrcyfgiKbkO4XHj9wt031yZmYnAc1oN2t5WIC+o JaL/OQ+hQoljiOHK/PFdosjr7HP6fIG+FPD5DlwSHRv9QAJxPaaJ4J7yQmI2Su4= -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:42 2026 by rpki-client