This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa File: IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa (raw, json) Hash identifier: /GSM9iyQcMrc7fSWc8netDxH1YSxmTdh4UOLgqibrf0= Subject key identifier: 20:33:D8:E9:E4:C3:74:B0:50:B8:BF:55:18:07:04:0B:E7:C3:36:4E Certificate issuer: /CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35 Certificate serial: 019B7834C0D5526B64DD0E51CA0C5A23082C Authority key identifier: 86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60680 IP address blocks: 185.27.88.0/24 maxlen: 24 185.27.89.0/24 maxlen: 24 2a00:9120:1::/48 maxlen: 48 2a00:9120:1:3::/64 maxlen: 64 2a00:9120:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.mft rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c0:d5:52:6b:64:dd:0e:51:ca:0c:5a:23:08:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86da356c2a8610d11d34cdb8a47d2b90519fbd35 Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2033d8e9e4c374b050b8bf551807040be7c3364e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9d:ff:bb:51:1a:af:07:2e:0e:e6:2d:60:b5: ca:4a:6a:21:0a:74:9b:47:44:6e:08:ca:55:8e:39: 64:82:71:59:45:51:f3:30:c5:33:ca:45:d3:96:c1: c6:e6:cb:43:a8:23:e2:bf:9b:9a:44:61:22:a6:34: c2:7e:a6:c7:06:1f:57:01:02:7a:be:d5:2e:45:59: ee:45:bf:52:3e:53:8c:bd:c9:a4:9e:db:07:91:4a: 19:ac:1f:f9:90:04:c0:8c:b9:84:f8:7a:f5:c1:00: 73:63:3c:97:d1:d7:14:96:e5:a7:79:a2:0a:ed:6c: b0:b4:f6:7c:bd:1e:d5:03:0d:b2:d5:30:22:2a:c3: 3f:15:4b:fc:14:87:e5:07:e1:25:b3:ea:2e:65:00: 4b:a7:5b:86:03:bc:1a:84:72:5f:99:3e:2c:b4:74: d8:da:f3:7c:58:a5:bd:57:84:2b:99:4c:63:db:e7: bc:10:f5:95:3a:85:c3:74:aa:48:c3:f0:eb:ac:03: 12:a5:3e:4a:bc:04:51:d3:2c:59:20:da:85:8b:de: fa:46:39:52:9b:ae:1f:a0:58:18:6e:6a:44:b5:75: 30:7d:4c:3d:0d:6c:5f:64:7f:c3:96:48:a6:12:6b: 69:ba:3d:fc:b8:fe:5d:ff:21:bc:45:a2:fd:ab:f9: 99:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:D8:E9:E4:C3:74:B0:50:B8:BF:55:18:07:04:0B:E7:C3:36:4E X509v3 Authority Key Identifier: keyid:86:DA:35:6C:2A:86:10:D1:1D:34:CD:B8:A4:7D:2B:90:51:9F:BD:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hto1bCqGENEdNM24pH0rkFGfvTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/IDPY6eTDdLBQuL9VGAcEC-fDNk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cffdb2-de8c-4c78-8132-8a96604c826d/1/hto1bCqGENEdNM24pH0rkFGfvTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.88.0/23 IPv6: 2a00:9120:1::-2a00:9120:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption a2:5a:67:3a:62:c5:8b:fa:bd:22:f1:8e:a6:42:ba:0b:7f:25: 57:c1:55:bc:4a:67:d2:67:cf:a1:68:77:ab:18:cf:07:9f:e2: d8:07:e2:9c:80:82:4c:1c:a7:bf:bc:bb:1f:77:fe:c6:8f:80: 9e:ac:90:70:af:7a:28:0b:75:87:c1:07:c3:c0:cf:4c:e6:91: 88:f4:75:55:2b:9c:b7:27:22:ec:f2:b6:a6:af:75:0c:76:10: 96:0c:09:af:2e:9e:64:60:e7:e4:dc:a5:4c:83:3b:dc:b9:7b: 28:a9:79:79:3e:a4:ab:6f:55:76:9c:bf:17:be:f1:b1:d6:5d: ea:4e:27:c4:62:24:75:cf:e0:0b:cd:75:21:be:b2:5f:4d:5c: 50:5c:14:4a:44:ca:77:5d:4e:50:a2:2b:4d:f1:5c:68:b0:d9: 16:22:b1:b8:37:a9:ab:6a:4c:40:ec:9d:2d:11:f0:f8:f8:29: be:d6:3f:51:4c:d1:c2:15:b2:aa:4b:81:f5:c1:b8:be:c3:fc: fe:2d:a1:28:c3:e9:36:45:a0:c9:95:dc:cb:39:21:a4:bf:88: 41:1c:d6:44:a5:aa:0e:cd:ab:b4:46:1e:87:e4:7d:c3:85:81: b3:90:40:e5:8c:4d:c0:f5:21:53:0c:04:42:15:1d:59:6a:20: de:35:f4:8b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt4NMDVUmtk3Q5RygxaIwgsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZGEzNTZjMmE4NjEwZDExZDM0Y2RiOGE0N2QyYjkwNTE5 ZmJkMzUwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDMzZDhlOWU0YzM3NGIwNTBiOGJmNTUxODA3MDQwYmU3YzMzNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z3/u1EarwcuDuYtYLXKSmohCnSb R0RuCMpVjjlkgnFZRVHzMMUzykXTlsHG5stDqCPiv5uaRGEipjTCfqbHBh9XAQJ6 vtUuRVnuRb9SPlOMvcmkntsHkUoZrB/5kATAjLmE+Hr1wQBzYzyX0dcUluWneaIK 7WywtPZ8vR7VAw2y1TAiKsM/FUv8FIflB+Els+ouZQBLp1uGA7wahHJfmT4stHTY 2vN8WKW9V4QrmUxj2+e8EPWVOoXDdKpIw/DrrAMSpT5KvARR0yxZINqFi976RjlS m64foFgYbmpEtXUwfUw9DWxfZH/DlkimEmtpuj38uP5d/yG8RaL9q/mZnwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCAz2Onkw3SwULi/VRgHBAvnwzZOMB8GA1UdIwQY MBaAFIbaNWwqhhDRHTTNuKR9K5BRn701MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzIt OGE5NjYwNGM4MjZkLzEvSURQWTZlVERkTEJRdUw5VkdBY0VDLWZETms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jZmZkYjItZGU4Yy00Yzc4LTgxMzItOGE5NjYwNGM4MjZk LzEvaHRvMWJDcUdFTkVkTk0yNHBIMHJrRkdmdlRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQBuRtYMBoE AgACMBQwEgMHACoAkSAAAQMHACoAkSAAAjANBgkqhkiG9w0BAQsFAAOCAQEAolpn OmLFi/q9IvGOpkK6C38lV8FVvEpn0mfPoWh3qxjPB5/i2AfinICCTBynv7y7H3f+ xo+AnqyQcK96KAt1h8EHw8DPTOaRiPR1VSuctyci7PK2pq91DHYQlgwJry6eZGDn 5NylTIM73Ll7KKl5eT6kq29Vdpy/F77xsdZd6k4nxGIkdc/gC811Ib6yX01cUFwU SkTKd11OUKIrTfFcaLDZFiKxuDepq2pMQOydLRHw+PgpvtY/UUzRwhWyqkuB9cG4 vsP8/i2hKMPpNkWgyZXcyzkhpL+IQRzWRKWqDs2rtEYeh+R9w4WBs5BA5YxNwPUh UwwEQhUdWWog3jX0iw== -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:13 2026 by rpki-client