This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa File: i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa (raw, json) Hash identifier: zMudQcER0t4uUPhQ5L2fTWT4s9Z4p0bv0wrDyCzzObY= Subject key identifier: 8B:A9:01:B4:2B:00:22:B8:C2:C1:4A:47:8C:6C:23:E7:2B:36:26:B9 Certificate issuer: /CN=d34274c8fc397bdbc6c7585a15c83212b050221f Certificate serial: 019B7E3924BECA5C41766CBD2616816CFB14 Authority key identifier: D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa Signing time: Fri 02 Jan 2026 10:20:32 +0000 ROA not before: Fri 02 Jan 2026 10:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8823 IP address blocks: 195.189.168.0/23 maxlen: 23 195.189.174.0/23 maxlen: 24 2a0f:53c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.mft rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:24:be:ca:5c:41:76:6c:bd:26:16:81:6c:fb:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d34274c8fc397bdbc6c7585a15c83212b050221f Validity Not Before: Jan 2 10:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ba901b42b0022b8c2c14a478c6c23e72b3626b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:72:ba:25:f2:f5:27:82:d9:5f:4f:78:b8: 09:d5:aa:58:9b:b2:e2:95:17:a3:c5:5b:5e:a0:fc: 79:09:42:5b:86:2e:84:85:d0:c2:56:d9:bc:46:d7: ea:5e:be:58:be:7f:47:19:fc:c5:c0:fc:e1:18:61: bd:1a:16:dc:a4:5c:88:37:d2:f1:25:fe:33:50:7a: df:02:fa:5c:b2:b7:12:52:34:a9:24:50:84:39:8d: a9:97:76:59:d2:3e:05:30:79:3e:e8:55:61:64:78: 10:fb:8c:f2:d2:69:74:8c:cb:cf:d1:72:91:cf:8d: e1:b4:66:d7:3e:91:fb:e7:c7:e2:d9:18:f2:1a:cd: ab:e8:d8:46:a2:03:39:77:2d:3c:d9:15:bf:a0:ba: 48:7d:90:a1:95:46:5a:63:e0:b3:e1:e5:31:b4:c8: 94:19:db:43:a8:07:d9:88:f9:94:65:d7:45:40:ad: 26:e2:b1:58:98:26:10:de:41:9b:9b:62:d9:ea:18: 66:b2:33:34:1b:a3:eb:ef:dc:6c:4c:b2:f6:c7:67: 9e:23:1d:b9:52:00:8f:47:30:62:97:dd:f3:d1:fc: df:98:7a:03:15:f7:04:65:95:53:72:a4:d7:81:86: cd:e2:08:44:37:51:86:da:ef:d4:49:28:ce:ad:4e: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:01:B4:2B:00:22:B8:C2:C1:4A:47:8C:6C:23:E7:2B:36:26:B9 X509v3 Authority Key Identifier: keyid:D3:42:74:C8:FC:39:7B:DB:C6:C7:58:5A:15:C8:32:12:B0:50:22:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00J0yPw5e9vGx1haFcgyErBQIh8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/i6kBtCsAIrjCwUpHjGwj5ys2Jrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1fffbb-ff24-4fab-a763-50adbeac8cb4/1/00J0yPw5e9vGx1haFcgyErBQIh8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.189.168.0/23 195.189.174.0/23 IPv6: 2a0f:53c0::/29 Signature Algorithm: sha256WithRSAEncryption 4c:76:f9:b0:af:4b:9d:f4:47:17:0d:34:55:0a:d7:9d:24:6f: 83:f7:03:e4:7b:57:ed:42:86:1c:1e:1c:cf:5b:2b:30:a7:97: 45:4f:b8:7b:92:8d:31:dc:be:3e:91:42:e0:f7:25:2b:0a:bc: 87:0e:26:fc:77:b2:d9:48:94:23:cc:6f:eb:4b:49:51:07:46: 5a:13:e2:76:0b:54:9f:11:bb:e1:93:42:af:30:5b:0e:48:27: 80:75:2a:c3:14:61:e7:27:3c:d0:d8:7a:e6:dd:32:c9:c8:df: 6f:bd:4f:ea:63:1a:ad:55:cd:e3:37:e5:c7:05:96:28:f2:d5: e4:58:12:83:73:c6:c8:be:5c:81:fc:3d:64:3b:b6:6f:41:c8: 81:04:f9:60:ba:58:89:e0:f3:94:7f:00:5e:20:90:54:a5:ce: b4:16:7e:06:95:e0:6c:c7:c2:a5:50:3e:34:91:18:f0:7f:dc: 52:ec:48:70:88:6d:e5:e6:72:a3:38:28:da:42:91:91:86:e2: 6a:82:eb:60:0f:2f:a2:ba:36:36:5d:9d:4f:31:a4:81:fe:a2: 98:e1:ee:15:e9:bc:ea:7d:bc:e8:eb:32:95:47:50:01:4c:64: 83:ee:b4:3b:b8:57:c4:fd:be:0a:ba:e7:f8:d8:cd:27:46:fb: 93:8a:88:b5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+OSS+ylxBdmy9JhaBbPsUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDI3NGM4ZmMzOTdiZGJjNmM3NTg1YTE1YzgzMjEyYjA1 MDIyMWYwHhcNMjYwMTAyMTAyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmE5MDFiNDJiMDAyMmI4YzJjMTRhNDc4YzZjMjNlNzJiMzYyNmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydFyuiXy9SeC2V9PeLgJ1apYm7Li lRejxVteoPx5CUJbhi6EhdDCVtm8RtfqXr5Yvn9HGfzFwPzhGGG9GhbcpFyIN9Lx Jf4zUHrfAvpcsrcSUjSpJFCEOY2pl3ZZ0j4FMHk+6FVhZHgQ+4zy0ml0jMvP0XKR z43htGbXPpH758fi2RjyGs2r6NhGogM5dy082RW/oLpIfZChlUZaY+Cz4eUxtMiU GdtDqAfZiPmUZddFQK0m4rFYmCYQ3kGbm2LZ6hhmsjM0G6Pr79xsTLL2x2eeIx25 UgCPRzBil93z0fzfmHoDFfcEZZVTcqTXgYbN4ghEN1GG2u/USSjOrU4b3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIupAbQrACK4wsFKR4xsI+crNia5MB8GA1UdIwQY MBaAFNNCdMj8OXvbxsdYWhXIMhKwUCIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMt NTBhZGJlYWM4Y2I0LzEvaTZrQnRDc0FJcmpDd1VwSGpHd2o1eXMySnJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xZmZmYmItZmYyNC00ZmFiLWE3NjMtNTBhZGJlYWM4Y2I0 LzEvMDBKMHlQdzVlOXZHeDFoYUZjZ3lFckJRSWg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBw72oAwQB w72uMA0EAgACMAcDBQMqD1PAMA0GCSqGSIb3DQEBCwUAA4IBAQBMdvmwr0ud9EcX DTRVCtedJG+D9wPke1ftQoYcHhzPWyswp5dFT7h7ko0x3L4+kULg9yUrCryHDib8 d7LZSJQjzG/rS0lRB0ZaE+J2C1SfEbvhk0KvMFsOSCeAdSrDFGHnJzzQ2Hrm3TLJ yN9vvU/qYxqtVc3jN+XHBZYo8tXkWBKDc8bIvlyB/D1kO7ZvQciBBPlguliJ4POU fwBeIJBUpc60Fn4GleBsx8KlUD40kRjwf9xS7EhwiG3l5nKjOCjaQpGRhuJqgutg Dy+iujY2XZ1PMaSB/qKY4e4V6bzqfbzo6zKVR1ABTGSD7rQ7uFfE/b4Kuuf42M0n RvuTioi1 -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:24 2026 by rpki-client