This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa File: iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa (raw, json) Hash identifier: /XuM1/LN4ogIjwLDnxCjibzUafyv79hq4kOMwib5+d8= Subject key identifier: 88:8F:F0:1F:76:BC:C7:50:83:F1:8B:F8:54:8E:1C:3E:11:1A:36:6D Certificate issuer: /CN=45962ea566054656ef82aace2d71c76d1b0b88bb Certificate serial: 019B77C739D8B3A2B300E216479C6815DC31 Authority key identifier: 45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 130.193.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.mft rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:39:d8:b3:a2:b3:00:e2:16:47:9c:68:15:dc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45962ea566054656ef82aace2d71c76d1b0b88bb Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=888ff01f76bcc75083f18bf8548e1c3e111a366d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:f2:93:f2:22:a9:9f:de:c1:07:b9:30:3f: 1c:d2:9d:03:37:ea:c7:1d:28:07:a4:a4:a7:f4:52: e4:9a:a7:93:88:7a:e3:07:89:e7:de:5d:30:6b:0d: 4e:4c:41:40:f1:c7:71:18:56:12:fb:98:8d:fd:a1: f6:5f:2f:cc:91:db:49:83:c4:ca:f2:65:c0:20:9f: 94:4b:86:1c:e1:7a:5c:91:65:f4:41:0a:d3:6a:18: 1e:e0:7d:91:51:31:ba:87:b6:e4:99:88:63:12:d5: fa:02:a2:52:de:c2:f8:49:fe:22:fb:78:78:e3:b9: 81:66:fb:de:88:17:0b:25:3b:aa:c5:3e:c8:60:71: 01:4e:0c:3f:9c:17:81:7e:2a:08:15:d9:70:bf:f8: 89:9d:5f:4a:1f:34:8c:e6:58:91:8b:8b:d0:cb:fd: c9:b0:03:5b:05:6e:7f:9f:20:48:db:48:ae:76:e5: c0:68:bf:ee:cd:be:18:81:30:45:75:d3:e6:d0:c5: d8:40:87:65:8e:f9:84:a4:e3:b3:0a:7e:71:12:39: 91:8d:ff:69:73:94:4b:83:db:bc:cb:79:88:ba:ad: 05:70:a1:54:41:38:63:9b:1c:5c:c8:74:04:aa:0f: 8b:9a:39:12:ee:69:c6:93:1a:15:76:2d:f9:65:7d: a9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8F:F0:1F:76:BC:C7:50:83:F1:8B:F8:54:8E:1C:3E:11:1A:36:6D X509v3 Authority Key Identifier: keyid:45:96:2E:A5:66:05:46:56:EF:82:AA:CE:2D:71:C7:6D:1B:0B:88:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYupWYFRlbvgqrOLXHHbRsLiLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/iI_wH3a8x1CD8Yv4VI4cPhEaNm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/1ed3e2-a09c-49c2-9928-c5c082a313f7/1/RZYupWYFRlbvgqrOLXHHbRsLiLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.193.2.0/24 Signature Algorithm: sha256WithRSAEncryption 77:13:2d:bb:ae:7e:1a:68:c2:31:de:89:6c:e7:bf:36:43:e1: 72:2a:f0:38:32:4c:b5:e3:bb:21:fb:00:e2:b0:f4:73:3d:28: 20:02:3e:fd:56:ce:b6:f2:da:d3:bd:a8:c3:c8:60:23:a9:6a: fb:7d:53:52:39:71:3e:05:28:1e:1a:5d:62:bd:34:9f:94:3d: 89:59:17:51:0a:45:3d:db:3e:f4:3a:66:2a:cb:83:74:c9:3c: 41:58:86:06:0b:68:9d:81:7e:48:da:44:00:44:f6:b3:86:63: 6b:c3:c2:2d:39:35:2a:68:32:ae:9a:d4:59:4a:58:9a:6f:24: b6:bc:97:36:77:a3:70:73:01:12:a3:a5:ee:be:ac:e9:a3:87: 60:7c:7a:db:d6:3c:c1:c5:de:96:99:2b:05:9c:88:a4:98:99: 77:31:94:93:90:b3:2d:17:46:f4:6b:6e:53:5b:f5:3e:53:ef: b7:33:05:0b:c9:1e:5f:d4:8f:66:35:f5:8c:da:06:d4:c6:b0: 89:9e:d3:58:00:af:b9:ad:26:e5:09:7e:c0:91:0e:18:04:c4: 64:e2:ea:13:fc:fb:c9:2c:57:17:f5:e7:d5:44:29:fb:c1:b3: e7:78:15:25:d6:d6:ea:c3:cc:c4:7a:ca:1d:95:64:df:46:4e: f7:b9:40:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xznYs6KzAOIWR5xoFdwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTYyZWE1NjYwNTQ2NTZlZjgyYWFjZTJkNzFjNzZkMWIw Yjg4YmIwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODhmZjAxZjc2YmNjNzUwODNmMThiZjg1NDhlMWMzZTExMWEzNjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+Pyk/IiqZ/ewQe5MD8c0p0DN+rH HSgHpKSn9FLkmqeTiHrjB4nn3l0waw1OTEFA8cdxGFYS+5iN/aH2Xy/MkdtJg8TK 8mXAIJ+US4Yc4XpckWX0QQrTahge4H2RUTG6h7bkmYhjEtX6AqJS3sL4Sf4i+3h4 47mBZvveiBcLJTuqxT7IYHEBTgw/nBeBfioIFdlwv/iJnV9KHzSM5liRi4vQy/3J sANbBW5/nyBI20iuduXAaL/uzb4YgTBFddPm0MXYQIdljvmEpOOzCn5xEjmRjf9p c5RLg9u8y3mIuq0FcKFUQThjmxxcyHQEqg+LmjkS7mnGkxoVdi35ZX2pAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIiP8B92vMdQg/GL+FSOHD4RGjZtMB8GA1UdIwQY MBaAFEWWLqVmBUZW74Kqzi1xx20bC4i7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5Mjgt YzVjMDgyYTMxM2Y3LzEvaUlfd0gzYTh4MUNEOFl2NFZJNGNQaEVhTm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xZWQzZTItYTA5Yy00OWMyLTk5MjgtYzVjMDgyYTMxM2Y3 LzEvUlpZdXBXWUZSbGJ2Z3FyT0xYSEhiUnNMaUxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsECMA0G CSqGSIb3DQEBCwUAA4IBAQB3Ey27rn4aaMIx3ols5782Q+FyKvA4Mky147sh+wDi sPRzPSggAj79Vs628trTvajDyGAjqWr7fVNSOXE+BSgeGl1ivTSflD2JWRdRCkU9 2z70OmYqy4N0yTxBWIYGC2idgX5I2kQARPazhmNrw8ItOTUqaDKumtRZSliabyS2 vJc2d6NwcwESo6Xuvqzpo4dgfHrb1jzBxd6WmSsFnIikmJl3MZSTkLMtF0b0a25T W/U+U++3MwULyR5f1I9mNfWM2gbUxrCJntNYAK+5rSblCX7AkQ4YBMRk4uoT/PvJ LFcX9efVRCn7wbPneBUl1tbqw8zEesodlWTfRk73uUBL -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:26 2026 by rpki-client