This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/RIJBybR9-DouPrCuYxNRwQmWZFY.roa File: RIJBybR9-DouPrCuYxNRwQmWZFY.roa (raw, json) Hash identifier: X4nTT9KU+VderSwZiYIcF0Lj/ZrE4lgDMlLbMCbQITQ= Subject key identifier: 44:82:41:C9:B4:7D:F8:3A:2E:3E:B0:AE:63:13:51:C1:09:96:64:56 Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78 Certificate serial: 019B7B36731E90327C709B3D34A48514A97F Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/RIJBybR9-DouPrCuYxNRwQmWZFY.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200706 IP address blocks: 185.88.16.0/22 maxlen: 22 185.88.16.0/23 maxlen: 23 185.88.16.0/24 maxlen: 24 185.88.17.0/24 maxlen: 24 185.88.18.0/23 maxlen: 23 185.88.18.0/24 maxlen: 24 185.88.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:73:1e:90:32:7c:70:9b:3d:34:a4:85:14:a9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=448241c9b47df83a2e3eb0ae631351c109966456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:99:8b:b8:f3:25:7b:19:3e:5d:03:09:5c: 75:46:8c:09:60:3f:f5:88:ce:dc:46:96:55:24:d2: 2b:52:18:29:d8:fd:0f:93:6b:6f:a7:6d:87:f6:1b: 91:7e:f2:6f:8f:da:cd:b9:cf:b1:6b:aa:4b:d2:27: b2:fd:ec:92:f8:be:29:db:01:88:16:2a:e0:21:b0: d4:2d:22:1e:fc:3d:49:f2:2b:6e:80:aa:d2:63:1b: cd:c8:57:dc:aa:ba:e6:a4:29:19:31:99:b4:fb:44: 06:76:c3:60:d0:ad:45:c9:a4:91:2d:80:89:c5:e2: 17:6a:06:62:d7:d0:99:a7:5f:74:b3:23:c2:d8:88: 0e:54:56:6b:67:5a:a5:88:05:e4:fa:27:f6:77:09: 36:97:32:f4:ad:1d:4c:07:ee:19:cd:f3:54:c3:67: 31:0a:05:8a:de:73:3a:c5:71:24:78:7c:18:90:59: fb:1c:e3:87:94:b0:09:88:8d:4b:22:c9:9d:58:cc: 66:11:91:2e:55:dc:cc:af:82:54:4a:fd:dc:e6:aa: 0b:33:1d:66:51:0a:0a:70:61:fd:46:d6:6d:ff:c3: 56:ca:24:b4:f1:3e:f9:52:eb:5d:ab:31:7c:16:72: cf:5a:dc:f9:36:95:44:67:21:ac:54:d5:09:32:e7: ab:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:41:C9:B4:7D:F8:3A:2E:3E:B0:AE:63:13:51:C1:09:96:64:56 X509v3 Authority Key Identifier: keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/RIJBybR9-DouPrCuYxNRwQmWZFY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.16.0/22 Signature Algorithm: sha256WithRSAEncryption a7:04:93:ba:d8:ee:08:bb:eb:86:40:18:23:05:81:3d:7a:7d: a1:77:c2:9f:5c:61:c9:24:e4:9d:a6:bb:02:6a:ae:86:e6:2e: b3:8e:91:dd:ce:ac:4e:0b:e3:07:5a:0e:0a:d1:e5:8b:d0:95: 48:3c:40:29:d7:f9:2e:35:b0:46:11:9a:53:7a:6f:ca:26:03: d6:9a:49:66:9b:aa:9e:b5:e1:84:1b:fe:65:29:18:e5:77:5d: 64:1d:45:f0:00:c4:1b:3f:60:f8:28:57:ec:3e:71:42:06:64: 6e:62:f8:5b:a0:8b:1d:4d:da:4a:4a:b3:dc:5c:59:13:ff:37: 33:09:53:dc:b0:70:84:31:97:b9:68:a9:f0:11:2d:bc:bd:4b: b4:a5:36:e9:46:59:58:2f:e5:7e:aa:88:c2:29:bb:91:8f:90: 64:ab:ab:e2:93:6c:12:a6:27:7e:ea:b1:8a:8c:67:4b:8a:7e: a4:33:97:b5:06:6b:e9:73:58:e3:bf:c5:cc:65:e4:d2:8b:43: 5c:1c:9d:5c:ac:62:b2:6f:6c:b3:65:16:51:7d:43:1f:6e:e7: 6c:7a:10:4f:30:a8:4a:8d:bf:e4:30:8c:71:cf:1e:3d:87:0a: e9:29:92:46:e2:1c:d7:c0:ee:a2:58:f2:fc:0f:3a:dc:c7:01: 06:f7:70:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnMekDJ8cJs9NKSFFKl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmI2YjZhNTA2MWE0MTE1ZDUzMDQwY2ZmZGM2NGIzYjBk NzFhNzgwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDgyNDFjOWI0N2RmODNhMmUzZWIwYWU2MzEzNTFjMTA5OTY2NDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNyZi7jzJXsZPl0DCVx1RowJYD/1 iM7cRpZVJNIrUhgp2P0Pk2tvp22H9huRfvJvj9rNuc+xa6pL0iey/eyS+L4p2wGI FirgIbDULSIe/D1J8itugKrSYxvNyFfcqrrmpCkZMZm0+0QGdsNg0K1FyaSRLYCJ xeIXagZi19CZp190syPC2IgOVFZrZ1qliAXk+if2dwk2lzL0rR1MB+4ZzfNUw2cx CgWK3nM6xXEkeHwYkFn7HOOHlLAJiI1LIsmdWMxmEZEuVdzMr4JUSv3c5qoLMx1m UQoKcGH9RtZt/8NWyiS08T75UutdqzF8FnLPWtz5NpVEZyGsVNUJMuerRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFESCQcm0ffg6Lj6wrmMTUcEJlmRWMB8GA1UdIwQY MBaAFB1ra2pQYaQRXVMEDP/cZLOw1xp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTkt YmZhZmQ2MjJlODlmLzEvUklKQnliUjktRG91UHJDdVl4TlJ3UW1XWkZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTktYmZhZmQ2MjJlODlm LzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVgQMA0G CSqGSIb3DQEBCwUAA4IBAQCnBJO62O4Iu+uGQBgjBYE9en2hd8KfXGHJJOSdprsC aq6G5i6zjpHdzqxOC+MHWg4K0eWL0JVIPEAp1/kuNbBGEZpTem/KJgPWmklmm6qe teGEG/5lKRjld11kHUXwAMQbP2D4KFfsPnFCBmRuYvhboIsdTdpKSrPcXFkT/zcz CVPcsHCEMZe5aKnwES28vUu0pTbpRllYL+V+qojCKbuRj5Bkq6vik2wSpid+6rGK jGdLin6kM5e1Bmvpc1jjv8XMZeTSi0NcHJ1crGKyb2yzZRZRfUMfbudsehBPMKhK jb/kMIxxzx49hwrpKZJG4hzXwO6iWPL8DzrcxwEG93D6 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:22 2026 by rpki-client