This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IcfWbXaqEDpFhHHCabkAzokCSak.roa File: IcfWbXaqEDpFhHHCabkAzokCSak.roa (raw, json) Hash identifier: If7JlTSu9Pd4+TlOv8FCqUV5cPfYvFL9uJuKHWtyDNY= Subject key identifier: 21:C7:D6:6D:76:AA:10:3A:45:84:71:C2:69:B9:00:CE:89:02:49:A9 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D42E365DF7AD42C386CF444CB2D83 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IcfWbXaqEDpFhHHCabkAzokCSak.roa Signing time: Fri 02 Jan 2026 06:20:22 +0000 ROA not before: Fri 02 Jan 2026 06:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 185.217.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:42:e3:65:df:7a:d4:2c:38:6c:f4:44:cb:2d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21c7d66d76aa103a458471c269b900ce890249a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:f7:dc:00:b9:44:59:78:d5:a8:37:a1:12: 50:b6:62:dd:da:23:d9:e7:84:fb:57:71:d2:37:0d: 7c:29:74:23:78:cb:8d:2a:5e:be:d1:20:21:c9:f4: 10:31:8a:1e:45:a9:c8:be:a8:15:48:15:2f:8c:0e: 24:29:4f:d4:42:75:26:9d:68:44:8f:23:ef:22:74: bf:fc:c8:16:ad:0c:70:d1:71:7e:2c:53:45:9c:99: 47:37:b7:19:09:fe:5b:c9:83:f4:45:d2:dd:2c:f4: 28:89:3f:d3:7b:62:3c:12:11:c8:46:7f:d6:00:16: ee:e0:56:01:29:bf:6f:2f:50:05:aa:d0:03:34:c7: e8:e2:16:b3:50:c8:d0:71:25:59:fa:27:3e:1d:5f: a7:df:01:8d:93:98:d5:8f:15:b4:84:02:ce:cf:d8: 0f:e1:1e:36:42:1a:ab:dd:51:f2:da:26:46:dd:7e: c0:82:e3:29:82:bb:e6:78:ea:c7:4c:21:76:35:69: d1:ba:70:46:77:b6:b5:c5:e1:1c:47:48:ad:db:66: 3e:3f:13:dc:9b:27:32:37:8a:d6:0c:83:8e:57:c4: 62:ca:b4:3a:54:8a:c9:fc:3b:72:13:38:5d:94:96: e5:db:79:a8:0e:79:f9:cf:81:23:a4:6e:1c:ba:be: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C7:D6:6D:76:AA:10:3A:45:84:71:C2:69:B9:00:CE:89:02:49:A9 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IcfWbXaqEDpFhHHCabkAzokCSak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.118.0/24 Signature Algorithm: sha256WithRSAEncryption 47:2e:e5:66:50:74:16:01:7e:b3:0e:42:1c:b5:00:4c:b6:9d: c2:7b:12:d8:35:66:22:d9:39:4f:18:9a:18:22:62:a5:4a:38: fc:ae:96:5a:a4:a7:65:17:46:92:7e:a7:b4:7d:a7:55:7b:a8: 12:8c:62:db:fd:ba:8e:02:23:c8:fb:37:a8:48:48:4c:70:a4: b1:1b:32:4f:d9:62:3b:45:8d:05:2e:3f:d8:68:51:04:ab:e9: 23:f4:d1:ee:e2:c4:ef:ea:4e:43:de:6e:96:49:4c:11:62:b2: 2e:b8:f0:b9:ab:02:0d:be:cc:7a:d6:49:17:c4:d6:30:18:5f: 2a:11:34:79:31:71:c0:76:93:89:c1:97:78:d8:81:3a:7e:96: 6b:e2:ae:fc:17:51:9f:01:39:8f:34:93:b8:f5:fb:46:49:ed: cc:62:ed:9a:7b:49:b3:fa:45:31:76:ff:11:9b:db:bf:af:d9: 78:07:8e:4d:aa:9f:fa:39:a6:61:7c:fc:a6:dc:65:c9:68:39: e4:71:ad:d4:a1:24:cf:fc:4d:6c:d2:3b:12:4d:d7:96:49:da: 4e:c0:82:b9:49:4a:bb:85:c1:11:05:de:74:20:be:8e:21:16: 64:8b:52:8c:c8:9d:01:59:b2:45:db:07:5d:2e:4f:fe:17:17: 02:46:0c:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XULjZd961Cw4bPREyy2DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWM3ZDY2ZDc2YWExMDNhNDU4NDcxYzI2OWI5MDBjZTg5MDI0OWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8/33AC5RFl41ag3oRJQtmLd2iPZ 54T7V3HSNw18KXQjeMuNKl6+0SAhyfQQMYoeRanIvqgVSBUvjA4kKU/UQnUmnWhE jyPvInS//MgWrQxw0XF+LFNFnJlHN7cZCf5byYP0RdLdLPQoiT/Te2I8EhHIRn/W ABbu4FYBKb9vL1AFqtADNMfo4hazUMjQcSVZ+ic+HV+n3wGNk5jVjxW0hALOz9gP 4R42Qhqr3VHy2iZG3X7AguMpgrvmeOrHTCF2NWnRunBGd7a1xeEcR0it22Y+PxPc mycyN4rWDIOOV8RiyrQ6VIrJ/DtyEzhdlJbl23moDnn5z4EjpG4cur7hKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCHH1m12qhA6RYRxwmm5AM6JAkmpMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvSWNmV2JYYXFFRHBGaEhIQ2Fia0F6b2tDU2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudl2MA0G CSqGSIb3DQEBCwUAA4IBAQBHLuVmUHQWAX6zDkIctQBMtp3CexLYNWYi2TlPGJoY ImKlSjj8rpZapKdlF0aSfqe0fadVe6gSjGLb/bqOAiPI+zeoSEhMcKSxGzJP2WI7 RY0FLj/YaFEEq+kj9NHu4sTv6k5D3m6WSUwRYrIuuPC5qwINvsx61kkXxNYwGF8q ETR5MXHAdpOJwZd42IE6fpZr4q78F1GfATmPNJO49ftGSe3MYu2ae0mz+kUxdv8R m9u/r9l4B45Nqp/6OaZhfPym3GXJaDnkca3UoSTP/E1s0jsSTdeWSdpOwIK5SUq7 hcERBd50IL6OIRZki1KMyJ0BWbJF2wddLk/+FxcCRgxA -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:31 2026 by rpki-client