This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/ihgnIXHoUMYh-WaWeIPaPydWbUk.roa File: ihgnIXHoUMYh-WaWeIPaPydWbUk.roa (raw, json) Hash identifier: iBsCj7b0mjUZuRLfwoBEpzWhtX6/cZQAGCmkWVKeq/Y= Subject key identifier: 8A:18:27:21:71:E8:50:C6:21:F9:66:96:78:83:DA:3F:27:56:6D:49 Certificate issuer: /CN=3be9593d290e0250278a73b313550329327bd589 Certificate serial: 019B78A36EF9013FCF4D90958B2603D0D397 Authority key identifier: 3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/ihgnIXHoUMYh-WaWeIPaPydWbUk.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201466 IP address blocks: 2.57.108.0/22 maxlen: 22 45.134.152.0/22 maxlen: 22 185.73.168.0/22 maxlen: 22 185.160.168.0/22 maxlen: 22 185.222.164.0/22 maxlen: 22 193.36.144.0/22 maxlen: 22 195.191.48.0/24 maxlen: 24 195.242.72.0/22 maxlen: 22 2a03:4460::/32 maxlen: 32 2a07:bec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6e:f9:01:3f:cf:4d:90:95:8b:26:03:d0:d3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be9593d290e0250278a73b313550329327bd589 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a18272171e850c621f966967883da3f27566d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:33:89:6d:3b:99:54:83:99:3a:0e:49:f4:69: 37:1b:01:30:ee:8c:ec:d1:c5:60:35:a1:f1:38:1f: f8:1b:3c:41:73:e4:bd:ea:7d:90:a1:40:aa:0a:65: b7:44:cf:7d:39:d1:5a:96:1f:10:4b:49:3f:a9:91: 32:c1:a5:a7:ea:71:91:4c:12:0e:30:c8:69:50:dc: 64:a2:2a:4f:8a:d6:c1:a7:e6:21:d0:eb:9f:da:ec: 83:23:9c:7e:1f:69:3f:b7:c1:17:23:46:84:6f:01: 55:98:d4:4d:3f:d5:37:c5:5f:32:26:c4:4a:a3:0a: 2f:22:07:fe:eb:f1:9a:58:b4:38:67:5d:f0:8e:d8: fd:03:85:56:a6:3c:48:82:32:35:1a:5f:a0:2c:70: fa:b5:8a:16:91:50:3d:c8:c9:88:64:ad:89:68:61: bc:84:78:14:db:76:60:c3:91:fa:f7:61:7c:47:cd: 96:e2:85:c5:21:85:f1:86:96:b8:eb:77:57:7f:ef: 70:45:c0:3f:a7:72:fc:4f:e4:4c:9b:b8:bc:7e:d1: eb:87:d1:4c:b2:ab:ae:8f:d1:f1:bc:0f:0b:c8:dd: 00:5c:c4:54:e0:18:9b:97:fa:75:8a:8b:77:8a:e7: 76:15:fa:d9:f8:2b:15:fb:d6:c4:de:30:84:ca:a5: 72:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:18:27:21:71:E8:50:C6:21:F9:66:96:78:83:DA:3F:27:56:6D:49 X509v3 Authority Key Identifier: keyid:3B:E9:59:3D:29:0E:02:50:27:8A:73:B3:13:55:03:29:32:7B:D5:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-lZPSkOAlAninOzE1UDKTJ71Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/ihgnIXHoUMYh-WaWeIPaPydWbUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/744a6e-f3a2-40dd-a02e-4eab060f15fa/1/O-lZPSkOAlAninOzE1UDKTJ71Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.108.0/22 45.134.152.0/22 185.73.168.0/22 185.160.168.0/22 185.222.164.0/22 193.36.144.0/22 195.191.48.0/24 195.242.72.0/22 IPv6: 2a03:4460::/32 2a07:bec0::/29 Signature Algorithm: sha256WithRSAEncryption 33:73:6e:f4:b7:e3:d7:88:f6:d7:0e:85:08:e2:24:88:85:4e: 81:ed:6c:06:df:7f:78:6f:b6:46:97:ee:06:77:73:92:4d:cd: f4:b8:a7:75:74:29:33:23:f0:92:9f:6a:1b:16:14:17:9b:ca: a7:f2:82:00:97:8e:c4:32:1d:1c:32:29:bf:f9:dc:35:93:9b: 1a:e8:34:c4:9d:0f:98:67:ab:d4:09:71:08:3b:c7:4e:29:74: 3a:2e:62:e8:aa:ae:63:ba:ca:20:bf:75:18:21:ab:e7:a8:f4: 7a:c8:aa:00:ad:5c:bd:b1:b9:c8:e4:2e:66:c2:e1:ec:cc:4c: 17:1b:2c:80:00:e4:ad:55:d9:35:f1:0e:8c:6b:c3:e0:bf:d9: 69:5d:eb:e3:c9:a0:29:ff:f7:a2:9e:e2:cf:69:30:3b:b0:ae: 93:0b:27:df:2d:28:fc:68:9a:7a:be:21:74:28:02:9c:4f:7b: 54:f0:6d:27:31:92:f2:f1:b4:ed:87:9f:72:87:ca:e1:7d:6c: a5:b4:b9:a6:6f:55:96:ef:84:da:da:c8:2b:66:a4:09:ca:68: 16:17:77:c4:a5:72:3e:f9:c9:f3:62:31:f6:f9:26:bf:b1:de: 28:92:80:72:dd:72:63:0a:43:a4:a4:61:78:ed:70:ec:d9:18: 38:48:2e:ff -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt4o275AT/PTZCViyYD0NOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZTk1OTNkMjkwZTAyNTAyNzhhNzNiMzEzNTUwMzI5MzI3 YmQ1ODkwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTE4MjcyMTcxZTg1MGM2MjFmOTY2OTY3ODgzZGEzZjI3NTY2ZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTOJbTuZVIOZOg5J9Gk3GwEw7ozs 0cVgNaHxOB/4GzxBc+S96n2QoUCqCmW3RM99OdFalh8QS0k/qZEywaWn6nGRTBIO MMhpUNxkoipPitbBp+Yh0Ouf2uyDI5x+H2k/t8EXI0aEbwFVmNRNP9U3xV8yJsRK owovIgf+6/GaWLQ4Z13wjtj9A4VWpjxIgjI1Gl+gLHD6tYoWkVA9yMmIZK2JaGG8 hHgU23Zgw5H692F8R82W4oXFIYXxhpa463dXf+9wRcA/p3L8T+RMm7i8ftHrh9FM squuj9HxvA8LyN0AXMRU4Bibl/p1iot3iud2FfrZ+CsV+9bE3jCEyqVywwIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFIoYJyFx6FDGIflmlniD2j8nVm1JMB8GA1UdIwQY MBaAFDvpWT0pDgJQJ4pzsxNVAykye9WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUt NGVhYjA2MGYxNWZhLzEvaWhnbklYSG9VTVloLVdhV2VJUGFQeWRXYlVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS83NDRhNmUtZjNhMi00MGRkLWEwMmUtNGVhYjA2MGYxNWZh LzEvTy1sWlBTa09BbEFuaW5PekUxVURLVEo3MVlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQCAjlsAwQC LYaYAwQCuUmoAwQCuaCoAwQCud6kAwQCwSSQAwQAw78wAwQCw/JIMBQEAgACMA4D BQAqA0RgAwUDKge+wDANBgkqhkiG9w0BAQsFAAOCAQEAM3Nu9Lfj14j21w6FCOIk iIVOge1sBt9/eG+2RpfuBndzkk3N9LindXQpMyPwkp9qGxYUF5vKp/KCAJeOxDId HDIpv/ncNZObGug0xJ0PmGer1AlxCDvHTil0Oi5i6KquY7rKIL91GCGr56j0esiq AK1cvbG5yOQuZsLh7MxMFxssgADkrVXZNfEOjGvD4L/ZaV3r48mgKf/3op7iz2kw O7Cukwsn3y0o/Giaer4hdCgCnE97VPBtJzGS8vG07YefcofK4X1spbS5pm9Vlu+E 2trIK2akCcpoFhd3xKVyPvnJ82Ix9vkmv7HeKJKAct1yYwpDpKRheO1w7NkYOEgu /w== -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:18 2026 by rpki-client