This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/IEJxICWMZXT0iF4WtXKTIs7MZio.roa File: IEJxICWMZXT0iF4WtXKTIs7MZio.roa (raw, json) Hash identifier: ip9HYdk6HPe49IVH83GI8NhLykI/dVMOBqFTRq30hkU= Subject key identifier: 20:42:71:20:25:8C:65:74:F4:88:5E:16:B5:72:93:22:CE:CC:66:2A Certificate issuer: /CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb Certificate serial: 019B7C7FA6C710D7285733AE2AD464F0F4AC Authority key identifier: C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/IEJxICWMZXT0iF4WtXKTIs7MZio.roa Signing time: Fri 02 Jan 2026 02:18:19 +0000 ROA not before: Fri 02 Jan 2026 02:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206380 IP address blocks: 185.188.24.0/24 maxlen: 24 185.188.25.0/24 maxlen: 24 185.188.26.0/24 maxlen: 24 185.188.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:a6:c7:10:d7:28:57:33:ae:2a:d4:64:f0:f4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c276a8ba874c3fbddad344d03258b3e2c04d7bcb Validity Not Before: Jan 2 02:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20427120258c6574f4885e16b5729322cecc662a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ec:e4:12:97:24:d8:91:fc:04:dd:85:ae:ba: 6b:b8:38:dd:89:67:e0:4d:01:64:8c:37:dc:60:e6: 70:c2:7e:af:99:57:00:6e:b3:21:86:cb:fe:f3:9e: 1d:81:23:9b:c6:a0:29:ec:f3:01:41:58:6c:7f:2d: b7:6f:05:96:48:d2:f9:74:98:23:3a:5c:70:1e:85: de:bb:63:66:fa:d2:db:f3:2a:bc:7d:6d:42:fe:05: 8f:5e:dd:84:ee:1f:07:ad:30:74:10:51:c4:fb:54: e6:d3:f4:67:9d:7e:37:1d:ec:f7:de:b0:50:88:43: 87:06:93:40:51:c7:1d:33:29:3f:bb:90:60:d7:82: d0:53:5f:73:42:a9:78:43:ae:b2:a5:53:a8:0f:ed: 73:3a:3e:2b:66:5e:5d:6c:00:28:cb:08:9d:0b:40: 9c:a9:49:6f:a0:43:f7:74:7d:9d:15:12:96:26:10: ce:31:24:cd:80:79:36:bc:bf:a0:84:21:96:16:b1: ed:75:75:24:8d:31:65:29:94:5d:19:4c:f8:7b:79: 9f:5b:26:c4:fc:b3:96:21:8f:ac:d4:6f:e7:8d:52: 18:6c:73:2f:30:01:91:9b:2a:ad:90:14:de:44:a2: 7c:d4:18:46:0b:86:6e:9d:3e:5d:db:af:66:9b:4c: ae:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:42:71:20:25:8C:65:74:F4:88:5E:16:B5:72:93:22:CE:CC:66:2A X509v3 Authority Key Identifier: keyid:C2:76:A8:BA:87:4C:3F:BD:DA:D3:44:D0:32:58:B3:E2:C0:4D:7B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnaouodMP73a00TQMliz4sBNe8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/IEJxICWMZXT0iF4WtXKTIs7MZio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/772cbc-7e69-4c91-86a3-3661b1ebbcfb/1/wnaouodMP73a00TQMliz4sBNe8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.24.0/22 Signature Algorithm: sha256WithRSAEncryption 21:43:af:49:bb:e4:cb:6d:43:7a:32:0c:5a:19:7b:83:a7:9e: e2:72:a2:f5:c2:38:ed:01:7d:ef:b7:3a:60:12:79:e4:36:73: 7f:6b:32:5e:10:3a:7c:31:63:dc:c0:ef:1b:43:17:f2:49:a6: 42:9d:48:7f:68:90:d9:92:38:e9:0d:2a:13:d7:72:20:29:7e: b1:4a:53:3a:51:ec:0f:69:ad:42:cc:4b:e9:6e:e8:4e:bf:3c: 17:1f:94:25:43:85:30:c3:bd:e6:b1:b7:8c:19:16:8a:d2:cc: 87:3c:26:2a:c5:bf:31:c5:dd:ce:09:7e:ad:a8:b9:fc:36:69: a9:f4:e1:4a:36:cf:25:91:81:1b:c4:aa:08:38:49:d0:a4:ea: 4d:0d:d6:1b:01:28:47:bf:f3:7d:36:b1:f2:3d:28:74:24:af: eb:f0:ba:e8:e9:bc:e1:3b:4c:03:53:4a:81:92:4c:3f:93:58: db:db:be:80:8e:4d:c5:cf:92:67:5d:0d:b7:6e:2d:f9:2f:62: 9f:e0:b5:42:c9:ba:04:0b:62:df:81:11:32:96:dd:6d:fb:1a: 0a:2a:27:2a:93:fb:bd:a2:02:18:a6:8d:ec:b5:09:6f:3d:c1: f3:8d:37:88:7f:f9:94:2e:04:ef:4d:bb:2e:8a:68:67:3f:54: 54:f6:30:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f6bHENcoVzOuKtRk8PSsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzZhOGJhODc0YzNmYmRkYWQzNDRkMDMyNThiM2UyYzA0 ZDdiY2IwHhcNMjYwMTAyMDIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDQyNzEyMDI1OGM2NTc0ZjQ4ODVlMTZiNTcyOTMyMmNlY2M2NjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOzkEpck2JH8BN2FrrpruDjdiWfg TQFkjDfcYOZwwn6vmVcAbrMhhsv+854dgSObxqAp7PMBQVhsfy23bwWWSNL5dJgj OlxwHoXeu2Nm+tLb8yq8fW1C/gWPXt2E7h8HrTB0EFHE+1Tm0/RnnX43Hez33rBQ iEOHBpNAUccdMyk/u5Bg14LQU19zQql4Q66ypVOoD+1zOj4rZl5dbAAoywidC0Cc qUlvoEP3dH2dFRKWJhDOMSTNgHk2vL+ghCGWFrHtdXUkjTFlKZRdGUz4e3mfWybE /LOWIY+s1G/njVIYbHMvMAGRmyqtkBTeRKJ81BhGC4ZunT5d269mm0yuHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBCcSAljGV09IheFrVykyLOzGYqMB8GA1UdIwQY MBaAFMJ2qLqHTD+92tNE0DJYs+LATXvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25hb3VvZE1QNzNhMDBUUU1saXo0c0JOZThzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83NzJjYmMtN2U2OS00YzkxLTg2YTMt MzY2MWIxZWJiY2ZiLzEvSUVKeElDV01aWFQwaUY0V3RYS1RJczdNWmlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83NzJjYmMtN2U2OS00YzkxLTg2YTMtMzY2MWIxZWJiY2Zi LzEvd25hb3VvZE1QNzNhMDBUUU1saXo0c0JOZThzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubwYMA0G CSqGSIb3DQEBCwUAA4IBAQAhQ69Ju+TLbUN6MgxaGXuDp57icqL1wjjtAX3vtzpg EnnkNnN/azJeEDp8MWPcwO8bQxfySaZCnUh/aJDZkjjpDSoT13IgKX6xSlM6UewP aa1CzEvpbuhOvzwXH5QlQ4Uww73msbeMGRaK0syHPCYqxb8xxd3OCX6tqLn8Nmmp 9OFKNs8lkYEbxKoIOEnQpOpNDdYbAShHv/N9NrHyPSh0JK/r8Lro6bzhO0wDU0qB kkw/k1jb276Ajk3Fz5JnXQ23bi35L2Kf4LVCyboEC2LfgREylt1t+xoKKicqk/u9 ogIYpo3stQlvPcHzjTeIf/mULgTvTbsuimhnP1RU9jB8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:00 2026 by rpki-client