This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/IeSw-4bcio5RXnwbEa4KykMgwOY.roa File: IeSw-4bcio5RXnwbEa4KykMgwOY.roa (raw, json) Hash identifier: OoWXczxt8RFsumILUeDSej8qKitlw3VHsPcYq7wi388= Subject key identifier: 21:E4:B0:FB:86:DC:8A:8E:51:5E:7C:1B:11:AE:0A:CA:43:20:C0:E6 Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032 Certificate serial: 019B78343D046BDD0E69A64D8277A433FE2A Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/IeSw-4bcio5RXnwbEa4KykMgwOY.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214423 IP address blocks: 195.95.248.0/24 maxlen: 24 2001:678:c60::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3d:04:6b:dd:0e:69:a6:4d:82:77:a4:33:fe:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21e4b0fb86dc8a8e515e7c1b11ae0aca4320c0e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:f5:a3:7b:66:7c:08:80:ab:01:f9:f9:33: 20:a5:fd:1b:33:e2:61:d6:94:95:68:05:2c:58:1b: 6e:a3:fc:05:79:f5:36:1e:d2:df:c8:c5:1a:dc:ff: 06:fd:4c:ab:f7:b4:2c:6c:eb:49:6a:d3:e1:78:46: 72:b8:bd:2e:16:6a:3c:25:77:39:7f:da:a8:fb:01: 12:1e:37:96:8e:17:06:56:a3:bd:b2:3b:0c:36:bd: 57:23:e3:af:44:cc:e5:f0:c7:4d:4c:5c:ba:b0:76: 5e:1e:71:e5:97:a5:09:8f:43:63:5d:d9:0b:9e:d3: cf:49:c0:65:4e:b8:4a:fc:f6:66:fe:43:75:16:84: a8:5e:e0:f2:e7:81:e7:aa:ce:7d:ab:31:e1:11:78: 9a:d3:ee:a1:04:c5:eb:62:84:f3:04:fd:0a:09:c9: 37:0e:1d:9f:fc:ce:56:bc:eb:94:98:26:ac:d3:57: 58:25:6f:39:7d:b5:a2:2b:fb:89:69:df:ac:6d:80: e3:a6:68:1a:88:3e:69:15:d6:e9:bc:36:83:6b:6a: c0:50:e2:c1:2f:90:54:32:b2:76:b2:45:a8:13:1b: 08:c1:bb:37:6e:9c:42:85:42:e4:03:52:4b:7f:cf: de:3e:04:dd:65:78:75:49:99:ae:b8:94:9e:71:ca: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E4:B0:FB:86:DC:8A:8E:51:5E:7C:1B:11:AE:0A:CA:43:20:C0:E6 X509v3 Authority Key Identifier: keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/IeSw-4bcio5RXnwbEa4KykMgwOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.95.248.0/24 IPv6: 2001:678:c60::/48 Signature Algorithm: sha256WithRSAEncryption 35:2e:4c:6a:4c:ea:dd:ef:8d:ae:1e:14:a6:7f:87:52:53:7d: 60:8c:ba:98:08:3b:0f:6f:18:02:71:b9:ed:a4:23:cc:1d:83: 4c:1d:40:ca:35:9f:9b:31:ac:be:26:50:c9:bd:04:2b:18:63: 25:16:25:ab:bf:3d:43:09:1a:ff:9b:57:a2:1c:3e:e6:46:54: 88:f6:45:75:cf:8b:90:88:51:e7:69:ad:2f:b9:43:56:f0:43: 1e:f4:6b:03:5b:0d:bf:f5:3f:24:6d:f2:fb:43:74:ff:5d:b0: 0a:a2:82:86:d8:40:28:97:82:6a:0e:aa:9c:28:4b:bc:93:29: 35:39:fb:f8:f0:7f:ea:bb:12:66:77:e2:55:88:d3:e0:0c:b2: aa:f5:60:63:d5:db:8c:74:43:56:60:d9:1b:e6:53:8a:15:73: 5a:19:e8:01:cd:37:fc:b2:10:74:4e:e4:26:1d:56:1d:21:53: 4f:5c:6e:96:d8:6e:06:94:a4:8b:fb:df:99:d8:8c:56:28:28: f4:85:c2:0a:5f:84:05:8d:47:fb:f7:59:72:d8:b3:8b:57:df: 49:6b:89:af:55:8d:99:c9:a2:85:74:8f:88:bb:39:f6:f1:47: 34:74:f6:67:9c:42:f5:23:aa:0e:94:d5:94:11:34:4a:19:4a: 48:16:12:bf -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4ND0Ea90OaaZNgnekM/4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NzY4OTFjZjJiMWQ4ZWM1NmMwM2JjN2E5NmRlOTU4YTBl MDAwMzIwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWU0YjBmYjg2ZGM4YThlNTE1ZTdjMWIxMWFlMGFjYTQzMjBjMGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu031o3tmfAiAqwH5+TMgpf0bM+Jh 1pSVaAUsWBtuo/wFefU2HtLfyMUa3P8G/Uyr97QsbOtJatPheEZyuL0uFmo8JXc5 f9qo+wESHjeWjhcGVqO9sjsMNr1XI+OvRMzl8MdNTFy6sHZeHnHll6UJj0NjXdkL ntPPScBlTrhK/PZm/kN1FoSoXuDy54Hnqs59qzHhEXia0+6hBMXrYoTzBP0KCck3 Dh2f/M5WvOuUmCas01dYJW85fbWiK/uJad+sbYDjpmgaiD5pFdbpvDaDa2rAUOLB L5BUMrJ2skWoExsIwbs3bpxChULkA1JLf8/ePgTdZXh1SZmuuJSeccpocQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCHksPuG3IqOUV58GxGuCspDIMDmMB8GA1UdIwQY MBaAFBV2iRzysdjsVsA7x6lt6Vig4AAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmY1ZmEtZjY5Yi00MTdjLWJjMGIt NWQ1YmI3ZmU1NzFhLzEvSWVTdy00YmNpbzVSWG53YkVhNEt5a01nd09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8xYmY1ZmEtZjY5Yi00MTdjLWJjMGItNWQ1YmI3ZmU1NzFh LzEvRlhhSkhQS3gyT3hXd0R2SHFXM3BXS0RnQURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw1/4MA8E AgACMAkDBwAgAQZ4DGAwDQYJKoZIhvcNAQELBQADggEBADUuTGpM6t3vja4eFKZ/ h1JTfWCMupgIOw9vGAJxue2kI8wdg0wdQMo1n5sxrL4mUMm9BCsYYyUWJau/PUMJ Gv+bV6IcPuZGVIj2RXXPi5CIUedprS+5Q1bwQx70awNbDb/1PyRt8vtDdP9dsAqi gobYQCiXgmoOqpwoS7yTKTU5+/jwf+q7EmZ34lWI0+AMsqr1YGPV24x0Q1Zg2Rvm U4oVc1oZ6AHNN/yyEHRO5CYdVh0hU09cbpbYbgaUpIv735nYjFYoKPSFwgpfhAWN R/v3WXLYs4tX30lria9VjZnJooV0j4i7OfbxRzR09mecQvUjqg6U1ZQRNEoZSkgW Er8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:21 2026 by rpki-client