This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/iOwf3_xhFiQ264_qVugvbDBbaHw.roa File: iOwf3_xhFiQ264_qVugvbDBbaHw.roa (raw, json) Hash identifier: KLLhmwDSHS6KTeclMtE5nrIkvd8kAi0QW5AVgNKPwnc= Subject key identifier: 88:EC:1F:DF:FC:61:16:24:36:EB:8F:EA:56:E8:2F:6C:30:5B:68:7C Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8C08C91860FED8E62F9F194AC5ADA Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/iOwf3_xhFiQ264_qVugvbDBbaHw.roa Signing time: Thu 01 Jan 2026 18:18:55 +0000 ROA not before: Thu 01 Jan 2026 18:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24921 IP address blocks: 81.198.189.0/24 maxlen: 24 87.246.168.0/24 maxlen: 24 87.246.169.0/24 maxlen: 24 87.246.170.0/24 maxlen: 24 87.246.171.0/24 maxlen: 24 194.8.22.0/24 maxlen: 24 213.175.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:c0:8c:91:86:0f:ed:8e:62:f9:f1:94:ac:5a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ec1fdffc61162436eb8fea56e82f6c305b687c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2b:55:e0:47:17:57:a1:20:ff:49:e2:2c:dc: c4:c5:3d:b7:7b:4c:37:7b:a8:2f:a9:46:96:09:98: 1a:04:fe:ee:8c:f1:e6:fc:3f:41:d9:99:69:46:91: c2:4f:f3:8f:fe:65:03:5e:dc:d2:8a:c4:c0:1e:f1: 18:7e:50:3e:38:6f:68:8d:6a:fa:08:62:7a:b6:5e: 6e:e0:18:cf:20:69:65:8c:58:32:f6:69:70:08:81: c2:78:7b:92:1f:fe:24:79:94:eb:0d:84:fa:e2:58: 7f:52:a1:71:b8:2b:a2:a1:0b:60:93:80:7c:e0:ae: 58:60:7c:05:51:68:64:4d:5a:47:8d:7b:ed:f2:0b: 27:3e:77:31:bd:77:78:b7:58:b0:15:70:6b:8a:cf: 65:be:56:b4:94:d4:7f:ec:19:17:66:cd:2c:2b:80: 5d:f2:21:bc:48:d4:e7:20:d9:0d:63:4a:e4:23:93: 79:43:e7:15:5b:1e:25:0a:8b:ac:2b:46:64:0e:60: b5:be:26:7b:5f:f1:85:3f:98:db:a5:b4:b3:f5:e9: a8:99:62:88:b9:11:75:d9:a0:12:5a:c0:1a:cb:c6: fa:da:85:ed:ae:bf:6b:25:2c:d7:ea:54:a1:15:9c: 83:a6:a5:4e:09:0f:fa:3e:d2:93:51:28:bf:27:61: 11:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EC:1F:DF:FC:61:16:24:36:EB:8F:EA:56:E8:2F:6C:30:5B:68:7C X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/iOwf3_xhFiQ264_qVugvbDBbaHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.198.189.0/24 87.246.168.0/22 194.8.22.0/24 213.175.79.0/24 Signature Algorithm: sha256WithRSAEncryption 67:68:a3:0a:4b:f6:6d:5f:1a:05:1f:70:1c:94:bd:53:2a:08: 82:eb:a9:57:2e:a2:2e:bb:37:a7:26:63:4f:c5:34:e4:dd:dc: ae:99:22:18:5e:f1:55:dd:90:7f:c5:2d:e8:d0:ad:7f:dc:14: 2c:ec:85:63:24:84:17:00:aa:28:44:c0:05:dc:69:39:00:76: fb:76:54:26:3b:fc:d5:3a:12:c2:48:3c:e9:81:1b:6a:68:8d: db:8f:b5:6b:7b:8a:a0:be:74:ec:45:43:57:da:2e:e1:7b:d1: 2d:55:1b:fb:c0:77:59:39:4a:8f:7a:fd:93:fd:b3:31:61:ad: 7b:a9:4e:15:f2:82:2b:98:16:0d:f9:e2:55:b1:62:c2:ef:1b: a3:c9:ed:e1:83:ef:d1:29:2e:65:f4:a4:57:3d:f1:e1:fd:e9: b0:18:14:5c:63:f9:ac:d7:8d:6a:a7:2d:a9:3b:46:d3:27:80: 0a:1c:53:12:cc:70:99:20:9b:8c:16:00:69:1e:2a:03:e7:e1: f1:55:16:d4:9f:34:e8:3b:61:3b:e3:0b:e5:31:8c:b8:5e:b3: 30:21:a6:c5:4a:44:c9:95:ab:d9:6d:7d:e1:8c:f2:65:57:d4: ff:26:13:96:c2:84:e3:30:00:5f:24:4b:11:c3:e4:50:2f:12: de:b3:3e:af -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6yMCMkYYP7Y5i+fGUrFraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGVjMWZkZmZjNjExNjI0MzZlYjhmZWE1NmU4MmY2YzMwNWI2ODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCtV4EcXV6Eg/0niLNzExT23e0w3 e6gvqUaWCZgaBP7ujPHm/D9B2ZlpRpHCT/OP/mUDXtzSisTAHvEYflA+OG9ojWr6 CGJ6tl5u4BjPIGlljFgy9mlwCIHCeHuSH/4keZTrDYT64lh/UqFxuCuioQtgk4B8 4K5YYHwFUWhkTVpHjXvt8gsnPncxvXd4t1iwFXBris9lvla0lNR/7BkXZs0sK4Bd 8iG8SNTnINkNY0rkI5N5Q+cVWx4lCousK0ZkDmC1viZ7X/GFP5jbpbSz9emomWKI uRF12aASWsAay8b62oXtrr9rJSzX6lShFZyDpqVOCQ/6PtKTUSi/J2ERAwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIjsH9/8YRYkNuuP6lboL2wwW2h8MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvaU93ZjNfeGhGaVEyNjRfcVZ1Z3ZiREJiYUh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUca9AwQC V/aoAwQAwggWAwQA1a9PMA0GCSqGSIb3DQEBCwUAA4IBAQBnaKMKS/ZtXxoFH3Ac lL1TKgiC66lXLqIuuzenJmNPxTTk3dyumSIYXvFV3ZB/xS3o0K1/3BQs7IVjJIQX AKooRMAF3Gk5AHb7dlQmO/zVOhLCSDzpgRtqaI3bj7Vre4qgvnTsRUNX2i7he9Et VRv7wHdZOUqPev2T/bMxYa17qU4V8oIrmBYN+eJVsWLC7xujye3hg+/RKS5l9KRX PfHh/emwGBRcY/ms141qpy2pO0bTJ4AKHFMSzHCZIJuMFgBpHioD5+HxVRbUnzTo O2E74wvlMYy4XrMwIabFSkTJlavZbX3hjPJlV9T/JhOWwoTjMABfJEsRw+RQLxLe sz6v -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:52 2026 by rpki-client