This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/iIogneQcOU_e3agO8kFzmWJA7XA.roa File: iIogneQcOU_e3agO8kFzmWJA7XA.roa (raw, json) Hash identifier: wuFeGjmLTdgdDReTM4gQ7Hs4Y8EflmImdkq0d8gcIi4= Subject key identifier: 88:8A:20:9D:E4:1C:39:4F:DE:DD:A8:0E:F2:41:73:99:62:40:ED:70 Certificate issuer: /CN=3618be04417a6bcb9f33942a631518be533ffaf4 Certificate serial: 019B7EA6F2EF6F8FFB901D3FDFB1C8152A17 Authority key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/iIogneQcOU_e3agO8kFzmWJA7XA.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 83.137.24.0/21 maxlen: 21 109.106.32.0/21 maxlen: 21 109.106.40.0/22 maxlen: 22 185.93.216.0/22 maxlen: 22 185.127.172.0/22 maxlen: 22 194.63.148.0/22 maxlen: 22 195.60.192.0/22 maxlen: 22 212.120.32.0/19 maxlen: 24 213.213.160.0/19 maxlen: 19 2a00:5480::/29 maxlen: 29 2a02:ab0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:ef:6f:8f:fb:90:1d:3f:df:b1:c8:15:2a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3618be04417a6bcb9f33942a631518be533ffaf4 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=888a209de41c394fdedda80ef24173996240ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c1:28:96:5a:c2:d6:82:96:e1:e4:c4:6e:3b: 21:36:93:29:98:0d:3c:19:10:e1:6e:85:d4:dc:e1: 09:13:2a:86:f2:c6:c7:4d:8f:6b:94:7d:88:29:7e: 82:fe:f2:21:49:0c:bc:45:4b:a5:f4:2d:52:03:fc: 40:f9:4c:3c:01:55:d0:9a:48:05:04:f9:f2:90:f2: c8:3d:08:39:36:d3:b9:9b:e0:5e:ae:05:76:69:86: 1a:0f:0d:ce:ec:db:0f:fb:e3:c8:bf:cd:c3:0b:08: 51:30:c3:55:93:d8:b2:e5:43:f1:83:cf:6a:fa:60: 60:b2:74:7f:54:7a:6c:60:24:4a:f0:ea:81:8d:7c: 5f:e6:42:9b:67:6d:da:eb:fd:23:55:49:81:32:10: 98:84:9a:e9:49:6c:42:c5:44:69:8f:9d:ed:2e:78: 66:98:bb:60:01:8b:22:cb:af:f1:6a:9b:8b:84:1d: 79:14:b6:97:d7:a2:24:06:1b:bf:da:e7:b3:80:07: 9b:45:fd:10:23:98:5c:0c:7c:d4:bf:80:5e:50:7a: 00:1d:6a:94:be:61:e9:5d:d6:00:59:09:63:d1:b2: 9e:f0:8a:67:1f:87:be:bb:f9:49:55:43:46:fe:32: c4:1c:0c:56:cf:d5:e4:a7:b2:7f:9f:c6:cd:da:f2: f1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8A:20:9D:E4:1C:39:4F:DE:DD:A8:0E:F2:41:73:99:62:40:ED:70 X509v3 Authority Key Identifier: keyid:36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/iIogneQcOU_e3agO8kFzmWJA7XA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.24.0/21 109.106.32.0-109.106.43.255 185.93.216.0/22 185.127.172.0/22 194.63.148.0/22 195.60.192.0/22 212.120.32.0/19 213.213.160.0/19 IPv6: 2a00:5480::/29 2a02:ab0::/29 Signature Algorithm: sha256WithRSAEncryption 72:4f:80:07:60:04:ca:87:43:14:b8:19:bd:ad:1e:1b:d3:7d: f5:6c:b7:51:5a:3f:f3:cc:b7:77:1d:0c:1e:4f:8a:c8:16:5d: 14:07:76:5b:7e:99:35:0f:de:d4:e9:6d:ea:5f:e9:2e:3c:34: c6:a2:28:3c:46:98:51:54:3f:1d:f9:37:a4:f3:07:ed:c9:53: 4d:c3:6c:16:b9:4b:28:c4:14:38:88:ae:76:f8:55:8d:59:b1: f2:36:db:af:57:91:bb:91:cb:58:7f:9a:19:44:be:22:06:2a: b3:9a:4d:0d:cc:63:a5:88:bd:96:c9:fc:4c:ad:7d:da:e0:03: c3:6c:09:d7:75:4d:42:48:7d:ae:c1:c0:c5:8e:83:bc:1d:7d: 95:39:97:db:bb:66:db:13:c1:ca:4b:e1:f3:48:4a:c4:43:37: 92:29:af:90:95:67:4c:47:0c:15:dd:9a:3e:30:02:5c:86:d6: 4b:bd:91:3f:9e:b0:2d:de:f2:3e:e3:31:5c:6a:43:96:e9:1f: 92:43:71:5a:24:8d:a2:01:85:03:07:e0:41:c0:7d:63:a9:73: e6:a2:f3:79:56:47:37:ed:cd:bc:ac:d0:77:42:6e:0d:f8:98: 61:b5:ec:ad:6b:28:6b:15:ae:e2:e8:ed:c2:bc:53:05:9f:56: 56:60:a7:23 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt+pvLvb4/7kB0/37HIFSoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MThiZTA0NDE3YTZiY2I5ZjMzOTQyYTYzMTUxOGJlNTMz ZmZhZjQwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODhhMjA5ZGU0MWMzOTRmZGVkZGE4MGVmMjQxNzM5OTYyNDBlZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cEollrC1oKW4eTEbjshNpMpmA08 GRDhboXU3OEJEyqG8sbHTY9rlH2IKX6C/vIhSQy8RUul9C1SA/xA+Uw8AVXQmkgF BPnykPLIPQg5NtO5m+BergV2aYYaDw3O7NsP++PIv83DCwhRMMNVk9iy5UPxg89q +mBgsnR/VHpsYCRK8OqBjXxf5kKbZ23a6/0jVUmBMhCYhJrpSWxCxURpj53tLnhm mLtgAYsiy6/xapuLhB15FLaX16IkBhu/2uezgAebRf0QI5hcDHzUv4BeUHoAHWqU vmHpXdYAWQlj0bKe8IpnH4e+u/lJVUNG/jLEHAxWz9Xkp7J/n8bN2vLxiQIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFIiKIJ3kHDlP3t2oDvJBc5liQO1wMB8GA1UdIwQY MBaAFDYYvgRBemvLnzOUKmMVGL5TP/r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMt MjI2OGU5N2E4YmMxLzEvaUlvZ25lUWNPVV9lM2FnTzhrRnptV0pBN1hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8yMDYxZDktNjQ5YS00MTM2LThjOTMtMjI2OGU5N2E4YmMx LzEvTmhpLUJFRjZhOHVmTTVRcVl4VVl2bE1fLXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjA+BAIAATA4AwQDU4kYMAwD BAVtaiADBAJtaigDBAK5XdgDBAK5f6wDBALCP5QDBALDPMADBAXUeCADBAXV1aAw FAQCAAIwDgMFAyoAVIADBQMqAgqwMA0GCSqGSIb3DQEBCwUAA4IBAQByT4AHYATK h0MUuBm9rR4b0331bLdRWj/zzLd3HQweT4rIFl0UB3Zbfpk1D97U6W3qX+kuPDTG oig8RphRVD8d+Tek8wftyVNNw2wWuUsoxBQ4iK52+FWNWbHyNtuvV5G7kctYf5oZ RL4iBiqzmk0NzGOliL2WyfxMrX3a4APDbAnXdU1CSH2uwcDFjoO8HX2VOZfbu2bb E8HKS+HzSErEQzeSKa+QlWdMRwwV3Zo+MAJchtZLvZE/nrAt3vI+4zFcakOW6R+S Q3FaJI2iAYUDB+BBwH1jqXPmovN5Vkc37c28rNB3Qm4N+JhhteytayhrFa7i6O3C vFMFn1ZWYKcj -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client