This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iDiavfdgFC_uYjYAyDRT-K5wWFg.roa File: iDiavfdgFC_uYjYAyDRT-K5wWFg.roa (raw, json) Hash identifier: KsADmVBHDKYM+2olCDTEwBQ2cs68llc3Zn4JVoffdII= Subject key identifier: 88:38:9A:BD:F7:60:14:2F:EE:62:36:00:C8:34:53:F8:AE:70:58:58 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA7592242A55792589E466436EB2132 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iDiavfdgFC_uYjYAyDRT-K5wWFg.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207537 IP address blocks: 185.133.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:59:22:42:a5:57:92:58:9e:46:64:36:eb:21:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88389abdf760142fee623600c83453f8ae705858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:09:6e:e5:d2:cb:c0:88:fe:56:37:fa:78: fc:fe:26:00:4c:1b:44:52:20:a0:a7:3c:fd:c4:00: 3b:e0:f2:e8:28:6d:d0:64:38:30:4a:f9:18:4e:99: ab:9e:2c:9d:55:dd:44:d9:6b:84:35:e9:34:70:bd: a3:9c:88:0b:49:f9:b3:3d:3a:b7:f6:70:42:c9:9a: 04:87:ec:c0:8d:06:0c:c9:42:d3:28:0a:ca:1f:aa: 89:8a:24:bd:54:9b:77:d6:12:4d:11:f7:cd:7d:40: 59:d0:26:f6:2d:1c:e8:ef:68:db:cc:65:72:a1:83: bc:ec:3d:fc:df:39:97:75:9c:a6:00:cf:ae:33:35: 08:b1:fd:85:b7:b8:b6:18:43:8f:25:64:52:65:2f: 55:6e:c4:b1:ad:f3:8b:d8:e5:dd:c6:8b:ea:4a:25: ef:07:53:a0:50:9f:28:c2:17:40:fd:42:3b:b8:e1: 00:da:b1:1a:05:16:56:ac:c3:56:19:60:36:f9:2f: 35:cf:53:18:d8:e3:6c:d0:bf:b4:77:ee:a9:69:cf: 98:a3:b8:fe:12:2c:16:bc:af:d9:43:90:6e:40:1e: ab:9e:00:57:68:30:11:7b:ef:46:68:5b:03:14:57: 06:42:0c:34:14:3c:bd:d1:38:4b:e4:a3:b8:72:b0: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:38:9A:BD:F7:60:14:2F:EE:62:36:00:C8:34:53:F8:AE:70:58:58 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/iDiavfdgFC_uYjYAyDRT-K5wWFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.211.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ea:7f:48:13:0d:79:77:42:e2:de:50:6d:76:ef:97:aa:cd: cf:d5:cd:f0:3b:12:8d:ed:3e:89:23:fc:ac:94:60:d0:b5:fd: f9:e0:e7:d7:33:74:f8:a0:44:1e:15:ad:b0:2b:a9:71:81:5e: d5:5c:98:5e:5e:30:08:23:91:5a:cc:79:66:8b:8d:80:c9:7e: 6f:bb:e7:ce:32:17:11:f6:9b:06:0a:de:d3:24:8f:75:2f:4b: cf:27:98:62:57:18:86:8e:53:0f:70:30:a3:2d:fe:af:e0:40: fc:32:e5:58:05:de:ce:30:ae:8f:2a:eb:de:2f:65:c5:91:59: 54:6f:08:2a:ad:9b:49:7c:95:92:ab:62:5e:aa:82:ee:9b:01: 1c:b2:47:1b:8e:57:ed:68:af:1a:ea:cd:41:29:0c:4c:13:b6: f8:8d:fb:86:fc:52:24:3f:aa:9f:be:25:29:cd:a7:87:27:08: 7e:fa:ea:60:f1:77:24:b8:6e:85:fe:5f:3b:3e:5a:63:da:1c: 54:52:44:e7:e4:29:4d:99:16:e5:2a:92:c1:40:6a:f3:5d:c6: 61:cb:2d:8f:0a:f4:3a:f8:f9:23:cf:c9:3e:38:d0:7f:36:80: 7b:be:9e:6a:0e:bb:ec:14:76:7b:c1:a7:29:80:f8:56:f2:b1: d8:d4:00:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1kiQqVXklieRmQ26yEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODM4OWFiZGY3NjAxNDJmZWU2MjM2MDBjODM0NTNmOGFlNzA1ODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA068JbuXSy8CI/lY3+nj8/iYATBtE UiCgpzz9xAA74PLoKG3QZDgwSvkYTpmrniydVd1E2WuENek0cL2jnIgLSfmzPTq3 9nBCyZoEh+zAjQYMyULTKArKH6qJiiS9VJt31hJNEffNfUBZ0Cb2LRzo72jbzGVy oYO87D383zmXdZymAM+uMzUIsf2Ft7i2GEOPJWRSZS9VbsSxrfOL2OXdxovqSiXv B1OgUJ8owhdA/UI7uOEA2rEaBRZWrMNWGWA2+S81z1MY2ONs0L+0d+6pac+Yo7j+ EiwWvK/ZQ5BuQB6rngBXaDARe+9GaFsDFFcGQgw0FDy90ThL5KO4crAtoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIg4mr33YBQv7mI2AMg0U/iucFhYMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvaURpYXZmZGdGQ191WWpZQXlEUlQtSzV3V0ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXTMA0G CSqGSIb3DQEBCwUAA4IBAQCa6n9IEw15d0Li3lBtdu+Xqs3P1c3wOxKN7T6JI/ys lGDQtf354OfXM3T4oEQeFa2wK6lxgV7VXJheXjAII5FazHlmi42AyX5vu+fOMhcR 9psGCt7TJI91L0vPJ5hiVxiGjlMPcDCjLf6v4ED8MuVYBd7OMK6PKuveL2XFkVlU bwgqrZtJfJWSq2JeqoLumwEcskcbjlftaK8a6s1BKQxME7b4jfuG/FIkP6qfviUp zaeHJwh++upg8XckuG6F/l87Plpj2hxUUkTn5ClNmRblKpLBQGrzXcZhyy2PCvQ6 +Pkjz8k+ONB/NoB7vp5qDrvsFHZ7wacpgPhW8rHY1ACn -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:34 2026 by rpki-client