This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/ik5ZvGWeNM6bhOyiRDynhq8l4TI.roa File: ik5ZvGWeNM6bhOyiRDynhq8l4TI.roa (raw, json) Hash identifier: tOVqEyo3Gve6XRDB5vVS0DDKud+PozZOZJAFFElXR+w= Subject key identifier: 8A:4E:59:BC:65:9E:34:CE:9B:84:EC:A2:44:3C:A7:86:AF:25:E1:32 Certificate issuer: /CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294 Certificate serial: 019B7F13C98026710EE90C06AA922662D637 Authority key identifier: 10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/ik5ZvGWeNM6bhOyiRDynhq8l4TI.roa Signing time: Fri 02 Jan 2026 14:19:21 +0000 ROA not before: Fri 02 Jan 2026 14:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203116 IP address blocks: 185.143.24.0/22 maxlen: 22 2a07:4540::/29 maxlen: 29 2a07:4540:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:c9:80:26:71:0e:e9:0c:06:aa:92:26:62:d6:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10dd3a72f790b25ee3d229ac99f69a71bf1d8294 Validity Not Before: Jan 2 14:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a4e59bc659e34ce9b84eca2443ca786af25e132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:98:38:bf:67:81:3d:1d:5f:11:f3:6c:ca: 53:4b:30:7d:29:eb:b5:cf:24:e5:bc:d9:89:d4:cc: 07:f1:3c:28:d8:53:c0:d3:00:58:3b:8b:42:e5:da: 6b:fe:6f:7d:0d:13:ee:a4:d8:af:33:8d:69:3d:01: db:ea:b8:d4:dc:de:1f:da:6c:26:30:c3:43:ea:be: 0e:a8:03:bb:21:04:b0:dd:88:a9:df:05:71:79:fd: 2a:37:38:40:de:e2:5c:d7:b8:08:10:41:93:79:53: 99:0d:ca:4e:05:58:89:24:23:a0:07:6a:dc:0b:2f: ad:b8:a7:67:ee:e0:67:82:07:94:1f:a8:71:eb:62: 7b:f4:89:af:1a:c5:46:23:5d:82:17:94:41:3f:ce: cd:5e:e3:7d:b6:db:36:a9:be:b7:06:49:9c:02:69: e4:9d:1d:4e:ad:48:70:d4:e5:09:2f:fa:14:64:9f: 29:e1:44:10:62:21:a4:f9:97:8f:f1:b1:43:55:72: e1:ab:ba:c8:5e:5c:fe:9e:83:ad:b9:f2:c4:66:32: b9:44:f4:28:35:fc:f7:e0:70:94:fe:48:f1:a4:5d: 70:cf:d7:6b:89:33:cf:30:da:8a:5b:27:3c:d7:72: 3a:1b:40:97:5c:f3:83:6c:11:d0:78:75:a3:e0:8c: db:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:4E:59:BC:65:9E:34:CE:9B:84:EC:A2:44:3C:A7:86:AF:25:E1:32 X509v3 Authority Key Identifier: keyid:10:DD:3A:72:F7:90:B2:5E:E3:D2:29:AC:99:F6:9A:71:BF:1D:82:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EN06cveQsl7j0imsmfaacb8dgpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/ik5ZvGWeNM6bhOyiRDynhq8l4TI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b54f2a-d898-4d03-b789-9cb261e66762/1/EN06cveQsl7j0imsmfaacb8dgpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.24.0/22 IPv6: 2a07:4540::/29 Signature Algorithm: sha256WithRSAEncryption f6:b6:23:63:5a:df:95:a6:dc:09:91:5f:6b:ae:b3:ab:7b:d0: df:db:af:c8:9a:e4:8a:4b:1a:55:27:52:d6:1e:40:44:1c:86: 64:ba:ee:68:b8:f6:f3:ab:96:fa:1b:83:3b:36:e7:f9:79:39: 37:22:d3:7d:87:5c:69:4c:61:04:ca:71:20:5e:62:6f:cf:58: a7:28:7e:f8:f0:a9:b0:f1:ec:f8:13:c9:7f:6d:c9:2c:8e:36: 2b:98:ec:3c:38:43:e8:01:12:b7:f3:8a:e0:c8:08:09:50:00: 7e:8c:9f:76:2c:07:0e:91:cb:b9:27:2f:24:19:a8:62:64:9b: e8:f5:7e:28:de:0c:ad:bf:64:f4:c8:c8:5b:64:1a:6a:f1:68: cd:5f:bd:ec:c9:6b:7b:ba:4c:cd:48:40:76:cc:63:7c:0d:69: 19:64:7a:bc:17:de:e5:f7:fa:de:8b:17:02:ea:08:c1:1b:03: 8c:5a:51:33:6c:ee:fe:e1:13:b8:44:de:62:68:71:9f:2e:f7: 08:c5:c3:d7:55:21:a5:87:dd:cc:e9:df:84:5d:b4:b8:57:d8: 80:ce:88:35:10:2a:71:e0:cb:de:8e:5b:72:67:ee:6c:5d:ad: f6:39:bb:df:85:64:80:c2:7f:83:60:88:34:e6:77:1b:5b:09: 23:7d:b7:80 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/E8mAJnEO6QwGqpImYtY3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZGQzYTcyZjc5MGIyNWVlM2QyMjlhYzk5ZjY5YTcxYmYx ZDgyOTQwHhcNMjYwMTAyMTQxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTRlNTliYzY1OWUzNGNlOWI4NGVjYTI0NDNjYTc4NmFmMjVlMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYmYOL9ngT0dXxHzbMpTSzB9Keu1 zyTlvNmJ1MwH8Two2FPA0wBYO4tC5dpr/m99DRPupNivM41pPQHb6rjU3N4f2mwm MMND6r4OqAO7IQSw3Yip3wVxef0qNzhA3uJc17gIEEGTeVOZDcpOBViJJCOgB2rc Cy+tuKdn7uBnggeUH6hx62J79ImvGsVGI12CF5RBP87NXuN9tts2qb63BkmcAmnk nR1OrUhw1OUJL/oUZJ8p4UQQYiGk+ZeP8bFDVXLhq7rIXlz+noOtufLEZjK5RPQo Nfz34HCU/kjxpF1wz9driTPPMNqKWyc813I6G0CXXPODbBHQeHWj4IzbzQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIpOWbxlnjTOm4TsokQ8p4avJeEyMB8GA1UdIwQY MBaAFBDdOnL3kLJe49IprJn2mnG/HYKUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODkt OWNiMjYxZTY2NzYyLzEvaWs1WnZHV2VOTTZiaE95aVJEeW5ocThsNFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iNTRmMmEtZDg5OC00ZDAzLWI3ODktOWNiMjYxZTY2NzYy LzEvRU4wNmN2ZVFzbDdqMGltc21mYWFjYjhkZ3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY8YMA0E AgACMAcDBQMqB0VAMA0GCSqGSIb3DQEBCwUAA4IBAQD2tiNjWt+VptwJkV9rrrOr e9Df26/ImuSKSxpVJ1LWHkBEHIZkuu5ouPbzq5b6G4M7Nuf5eTk3ItN9h1xpTGEE ynEgXmJvz1inKH748Kmw8ez4E8l/bcksjjYrmOw8OEPoARK384rgyAgJUAB+jJ92 LAcOkcu5Jy8kGahiZJvo9X4o3gytv2T0yMhbZBpq8WjNX73syWt7ukzNSEB2zGN8 DWkZZHq8F97l9/reixcC6gjBGwOMWlEzbO7+4RO4RN5iaHGfLvcIxcPXVSGlh93M 6d+EXbS4V9iAzog1ECpx4MvejltyZ+5sXa32ObvfhWSAwn+DYIg05ncbWwkjfbeA -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:09 2026 by rpki-client