This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa File: iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa (raw, json) Hash identifier: JNPz+DPVRJ+TisUyQ98oWlbI8xfnbWF+8FcFXp7EsvY= Subject key identifier: 88:F7:23:09:66:F4:FB:86:5B:22:AB:2A:E2:C8:AD:79:46:87:DD:8A Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Certificate serial: 019B7B35C76756F681ABDEC0BECB681484CB Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa Signing time: Thu 01 Jan 2026 20:18:00 +0000 ROA not before: Thu 01 Jan 2026 20:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206476 IP address blocks: 185.137.224.0/22 maxlen: 24 185.255.184.0/22 maxlen: 24 194.113.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c7:67:56:f6:81:ab:de:c0:be:cb:68:14:84:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Validity Not Before: Jan 1 20:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88f7230966f4fb865b22ab2ae2c8ad794687dd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:fb:1b:70:f5:e0:72:cd:a5:1e:59:01:99: fb:84:8a:56:d8:dd:d1:e0:9f:b1:1f:f2:4a:be:ce: cc:09:23:84:3d:0b:a8:e4:53:d6:e9:e8:24:58:23: 5f:6a:0c:96:20:cc:89:8e:a8:d4:cf:06:b7:73:0e: e0:8f:9f:24:45:1d:51:59:ab:15:9d:07:f9:bb:53: 80:31:53:2d:70:a7:54:59:e3:29:4c:65:6c:cb:89: 55:a9:48:80:c8:88:81:83:23:6a:1d:46:3c:a6:50: ce:77:8c:1f:00:6f:c3:d0:3d:63:ed:65:56:b4:6c: 89:d5:18:7a:09:c2:f4:d4:a7:77:e4:c1:55:e7:7c: 43:c3:30:f9:53:06:9a:99:3e:68:90:00:5b:22:02: 6e:18:3d:13:c4:c3:0c:bd:37:08:f3:3c:c9:67:be: b8:43:c3:0e:c9:c5:09:c8:74:5b:5e:de:82:5c:74: 97:7f:32:d7:23:e6:b1:e9:b3:48:f8:d0:9d:43:34: 4e:a3:bf:f8:29:a7:5c:df:7f:5f:d0:d5:bf:cc:6c: 02:6a:12:e7:4a:35:ee:10:9f:1e:96:da:76:7c:35: a9:71:f8:9a:a0:da:50:92:b0:06:d3:9e:20:86:4e: b2:8d:85:8d:e0:73:67:2c:02:49:76:55:73:6c:1b: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F7:23:09:66:F4:FB:86:5B:22:AB:2A:E2:C8:AD:79:46:87:DD:8A X509v3 Authority Key Identifier: keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.137.224.0/22 185.255.184.0/22 194.113.88.0/22 Signature Algorithm: sha256WithRSAEncryption 99:be:70:bd:2d:34:9a:46:34:9e:b1:ad:1d:02:87:21:d2:da: 5c:10:75:6d:3f:59:c1:dc:39:16:7c:dc:ab:0f:15:b9:67:e0: ee:45:dd:93:00:62:41:4d:4f:4e:b4:73:62:e3:fa:da:be:cd: 24:b3:09:32:6c:10:71:08:25:79:ae:36:ba:c1:7d:d0:d2:64: 1a:86:b0:82:08:23:2a:dd:54:b0:78:7b:ab:39:bc:5b:9a:28: 92:74:3f:52:a9:fd:f5:f5:3a:fc:9a:69:b2:26:13:0f:dd:97: 8c:cd:2e:95:63:6c:96:29:a8:e7:eb:c4:ba:4c:d0:cb:16:bb: 1d:fb:98:bc:dc:d8:84:dc:8b:ce:61:b3:8b:b9:49:8e:dd:da: e1:9b:7e:97:f9:85:3d:31:88:b3:33:38:59:d2:ca:89:1b:aa: c5:78:65:37:20:52:38:f6:3d:f9:9f:e9:8b:3f:d2:5d:6e:f1: 02:7c:9f:20:10:43:f3:74:cf:59:d1:f9:b2:8c:a7:a3:51:49: c5:db:6a:c3:a3:da:87:4a:d8:bf:b1:44:7a:6f:b6:10:af:5c: 1c:dc:aa:e6:f6:ed:e0:4e:b5:7a:e6:49:50:eb:c2:66:81:24: 41:24:f7:5e:0f:6c:5f:25:a0:b1:6a:e8:2f:47:14:37:14:de: a3:c0:e6:25 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NcdnVvaBq97AvstoFITLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg4ZTliN2FiNWUzMjFiMWIzZjk1N2E5YmExOTc2ZGQ0 MjViYzMwHhcNMjYwMTAxMjAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGY3MjMwOTY2ZjRmYjg2NWIyMmFiMmFlMmM4YWQ3OTQ2ODdkZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxav7G3D14HLNpR5ZAZn7hIpW2N3R 4J+xH/JKvs7MCSOEPQuo5FPW6egkWCNfagyWIMyJjqjUzwa3cw7gj58kRR1RWasV nQf5u1OAMVMtcKdUWeMpTGVsy4lVqUiAyIiBgyNqHUY8plDOd4wfAG/D0D1j7WVW tGyJ1Rh6CcL01Kd35MFV53xDwzD5UwaamT5okABbIgJuGD0TxMMMvTcI8zzJZ764 Q8MOycUJyHRbXt6CXHSXfzLXI+ax6bNI+NCdQzROo7/4Kadc339f0NW/zGwCahLn SjXuEJ8eltp2fDWpcfiaoNpQkrAG054ghk6yjYWN4HNnLAJJdlVzbBtYDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIj3Iwlm9PuGWyKrKuLIrXlGh92KMB8GA1UdIwQY MBaAFM2ojpt6teMhsbP5V6m6GXbdQlvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQt MWM4NmU3ZDBmNzg0LzEvaVBjakNXYjAtNFpiSXFzcTRzaXRlVWFIM1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQtMWM4NmU3ZDBmNzg0 LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuYngAwQC uf+4AwQCwnFYMA0GCSqGSIb3DQEBCwUAA4IBAQCZvnC9LTSaRjSesa0dAoch0tpc EHVtP1nB3DkWfNyrDxW5Z+DuRd2TAGJBTU9OtHNi4/ravs0kswkybBBxCCV5rja6 wX3Q0mQahrCCCCMq3VSweHurObxbmiiSdD9Sqf319Tr8mmmyJhMP3ZeMzS6VY2yW Kajn68S6TNDLFrsd+5i83NiE3IvOYbOLuUmO3drhm36X+YU9MYizMzhZ0sqJG6rF eGU3IFI49j35n+mLP9JdbvECfJ8gEEPzdM9Z0fmyjKejUUnF22rDo9qHSti/sUR6 b7YQr1wc3Krm9u3gTrV65klQ68JmgSRBJPdeD2xfJaCxaugvRxQ3FN6jwOYl -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:05 2026 by rpki-client