This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/iDrTmSYQpvy7vo3KT85M4NqZ4jY.roa File: iDrTmSYQpvy7vo3KT85M4NqZ4jY.roa (raw, json) Hash identifier: +0AgLX/1nLHcInEl5vkO9SuWGWou8jccVXQFvcHqqjk= Subject key identifier: 88:3A:D3:99:26:10:A6:FC:BB:BE:8D:CA:4F:CE:4C:E0:DA:99:E2:36 Certificate issuer: /CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Certificate serial: 019B7910F9C8E966CEFBD2EE45815F549281 Authority key identifier: 5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/iDrTmSYQpvy7vo3KT85M4NqZ4jY.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38984 IP address blocks: 185.23.228.0/22 maxlen: 22 185.23.228.0/23 maxlen: 23 185.23.230.0/24 maxlen: 24 185.23.231.0/24 maxlen: 24 188.65.232.0/21 maxlen: 21 188.65.232.0/22 maxlen: 22 188.65.236.0/23 maxlen: 23 188.65.238.0/23 maxlen: 23 195.135.236.0/22 maxlen: 22 195.135.236.0/24 maxlen: 24 195.135.237.0/24 maxlen: 24 195.135.238.0/24 maxlen: 24 195.135.239.0/24 maxlen: 24 2a03:7f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.mft rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f9:c8:e9:66:ce:fb:d2:ee:45:81:5f:54:92:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dc6245ca820899d7eb4140302c21041b5dbca06 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=883ad3992610a6fcbbbe8dca4fce4ce0da99e236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e2:83:c8:bf:6a:89:39:d8:63:b9:b0:31:52: ec:04:d1:3a:60:63:37:19:f0:35:15:1a:7d:58:91: 97:71:a3:c7:50:31:1c:d1:e9:38:01:fd:68:61:5c: c9:f2:40:a5:40:67:e1:1c:b7:f3:7c:65:85:8e:bf: 5b:57:91:b4:47:d6:fb:4c:27:63:cd:70:db:2b:8d: 33:c3:96:25:aa:7d:f4:e0:70:4f:16:1c:ba:a5:06: e6:78:ac:fc:a5:3f:7f:f8:26:7d:d9:4b:4f:53:9c: 4b:07:37:ab:e1:07:27:8b:c9:53:e5:42:75:8b:b2: 4d:85:de:8e:21:35:f7:a1:c7:1e:d6:e5:e8:e2:9d: c4:2f:71:5f:c9:20:90:0c:58:75:fb:cd:3d:50:33: b2:03:0f:46:e6:42:6f:a3:3b:3b:13:a1:df:c6:ff: 51:99:25:0c:0a:cd:da:71:09:b9:3f:c4:2d:36:5e: 42:1b:01:4e:99:9b:59:c3:21:0e:27:bc:9f:19:b0: 96:c7:e7:5f:d2:78:19:db:6f:7c:76:12:18:ea:88: 97:d2:e3:37:34:c0:51:1c:9a:ea:6f:76:d3:c6:84: be:1b:b2:70:d8:40:09:88:24:f7:10:72:a7:c3:a0: 41:21:57:38:00:40:6d:48:a2:7f:64:e7:9e:fc:bf: 87:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3A:D3:99:26:10:A6:FC:BB:BE:8D:CA:4F:CE:4C:E0:DA:99:E2:36 X509v3 Authority Key Identifier: keyid:5D:C6:24:5C:A8:20:89:9D:7E:B4:14:03:02:C2:10:41:B5:DB:CA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcYkXKggiZ1-tBQDAsIQQbXbygY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/iDrTmSYQpvy7vo3KT85M4NqZ4jY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8a430f-40c5-474b-8fd9-074ed70b4673/1/XcYkXKggiZ1-tBQDAsIQQbXbygY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.228.0/22 188.65.232.0/21 195.135.236.0/22 IPv6: 2a03:7f00::/32 Signature Algorithm: sha256WithRSAEncryption 62:22:76:37:80:09:94:4c:a6:81:44:b8:5f:14:33:d6:5f:af: a4:66:24:83:aa:72:9f:c7:94:f4:bd:9f:c4:ba:a6:e1:f6:f0: 7f:4c:80:bd:0c:b9:fe:6a:58:99:c1:57:10:7b:8c:90:50:03: ed:0e:b7:f1:fe:23:b7:0c:56:1f:f5:d9:12:3f:1a:4c:cb:3a: d0:e3:d7:a2:cf:dc:f4:9d:12:2c:68:c0:79:65:cd:a6:96:58: 30:26:a1:88:ba:99:f9:42:7e:60:74:1e:7f:be:db:9e:b6:89: 02:e1:ec:7a:89:d3:1c:ac:fb:16:9b:f0:79:b7:54:93:45:2d: 24:17:0a:35:4a:a5:16:2c:8d:93:fa:67:8d:22:e4:91:c0:c2: ce:0c:f5:a4:36:3d:f8:ea:03:02:e2:45:b5:0d:ee:2c:e3:dc: 17:ff:89:01:2a:8a:ba:84:ce:70:ff:28:34:c4:cf:94:9a:7d: 6b:44:59:91:80:f6:0a:fd:d3:5e:8f:28:94:81:5d:fe:ba:73: 39:19:8f:8f:3d:0f:92:4c:00:1f:e3:0d:b3:d8:71:11:86:50: dc:25:9a:3c:7a:1a:d2:ce:fe:f9:dc:5d:82:03:70:ab:80:6b: 82:9b:67:a8:e0:57:3c:20:63:cc:b3:a6:6e:67:43:e2:11:2b: c0:f7:d0:6e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EPnI6WbO+9LuRYFfVJKBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkYzYyNDVjYTgyMDg5OWQ3ZWI0MTQwMzAyYzIxMDQxYjVk YmNhMDYwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODNhZDM5OTI2MTBhNmZjYmJiZThkY2E0ZmNlNGNlMGRhOTllMjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+KDyL9qiTnYY7mwMVLsBNE6YGM3 GfA1FRp9WJGXcaPHUDEc0ek4Af1oYVzJ8kClQGfhHLfzfGWFjr9bV5G0R9b7TCdj zXDbK40zw5Ylqn304HBPFhy6pQbmeKz8pT9/+CZ92UtPU5xLBzer4Qcni8lT5UJ1 i7JNhd6OITX3occe1uXo4p3EL3FfySCQDFh1+809UDOyAw9G5kJvozs7E6Hfxv9R mSUMCs3acQm5P8QtNl5CGwFOmZtZwyEOJ7yfGbCWx+df0ngZ2298dhIY6oiX0uM3 NMBRHJrqb3bTxoS+G7Jw2EAJiCT3EHKnw6BBIVc4AEBtSKJ/ZOee/L+HsQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIg605kmEKb8u76Nyk/OTODameI2MB8GA1UdIwQY MBaAFF3GJFyoIImdfrQUAwLCEEG128oGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDkt MDc0ZWQ3MGI0NjczLzEvaURyVG1TWVFwdnk3dm8zS1Q4NU00TnFaNGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YTQzMGYtNDBjNS00NzRiLThmZDktMDc0ZWQ3MGI0Njcz LzEvWGNZa1hLZ2dpWjEtdEJRREFzSVFRYlhieWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuRfkAwQD vEHoAwQCw4fsMA0EAgACMAcDBQAqA38AMA0GCSqGSIb3DQEBCwUAA4IBAQBiInY3 gAmUTKaBRLhfFDPWX6+kZiSDqnKfx5T0vZ/Euqbh9vB/TIC9DLn+aliZwVcQe4yQ UAPtDrfx/iO3DFYf9dkSPxpMyzrQ49eiz9z0nRIsaMB5Zc2mllgwJqGIupn5Qn5g dB5/vtuetokC4ex6idMcrPsWm/B5t1STRS0kFwo1SqUWLI2T+meNIuSRwMLODPWk Nj346gMC4kW1De4s49wX/4kBKoq6hM5w/yg0xM+Umn1rRFmRgPYK/dNejyiUgV3+ unM5GY+PPQ+STAAf4w2z2HERhlDcJZo8ehrSzv753F2CA3CrgGuCm2eo4Fc8IGPM s6ZuZ0PiESvA99Bu -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:14 2026 by rpki-client