This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iiFMOLYA7_wNDoBjU4jeG0Ku8_Y.roa File: iiFMOLYA7_wNDoBjU4jeG0Ku8_Y.roa (raw, json) Hash identifier: lrDtWyiEDVSBfy3WtbCtgK/eVFkxemRW/RXc7TfgG4o= Subject key identifier: 8A:21:4C:38:B6:00:EF:FC:0D:0E:80:63:53:88:DE:1B:42:AE:F3:F6 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D45780842C89898DB8651E2B6A31C Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iiFMOLYA7_wNDoBjU4jeG0Ku8_Y.roa Signing time: Fri 02 Jan 2026 06:20:23 +0000 ROA not before: Fri 02 Jan 2026 06:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57138 IP address blocks: 193.19.108.0/24 maxlen: 24 194.242.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:45:78:08:42:c8:98:98:db:86:51:e2:b6:a3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a214c38b600effc0d0e80635388de1b42aef3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:06:43:9b:90:53:7c:f6:66:19:b6:f9:22: 82:be:37:d1:af:08:97:62:5e:ae:f3:d7:31:bf:0f: 5a:70:23:70:f1:44:49:e3:9e:40:0a:af:6a:1a:88: 9e:a0:24:5e:c3:0b:b0:20:db:78:69:d8:7d:a8:5d: 2f:fe:de:d3:16:9b:5a:ce:37:61:3c:80:f0:f9:8f: 0c:87:1b:f3:bf:c5:44:09:2e:6f:48:88:2f:9b:0e: 71:f5:77:cb:e7:e5:85:9e:03:5c:9b:90:fd:28:32: d7:c7:6d:99:2b:78:14:41:8f:8f:4f:8a:f0:89:dd: d4:6f:0d:39:56:14:da:85:70:70:7a:13:cd:a2:3d: ed:3c:f6:91:83:90:61:76:84:16:77:94:64:4b:a0: 57:6f:9c:53:30:d1:eb:0e:03:ca:4e:f2:72:a6:44: 24:e1:29:2d:07:7d:76:10:b2:4f:58:d2:ba:5f:ac: a3:59:41:13:d8:eb:7a:1a:74:d1:ae:96:00:de:a0: a3:6f:4f:52:43:19:83:a7:39:37:0c:0c:e9:b3:68: d2:7a:e5:19:17:ce:9c:ca:6c:a1:86:c7:7b:dc:5f: 1c:a5:48:92:88:cc:96:9a:db:2b:f0:8c:e8:81:b4: 2b:a8:f0:59:05:68:f8:dd:fe:95:b4:f7:a2:f4:c2: ab:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:21:4C:38:B6:00:EF:FC:0D:0E:80:63:53:88:DE:1B:42:AE:F3:F6 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/iiFMOLYA7_wNDoBjU4jeG0Ku8_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.19.108.0/24 194.242.2.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:07:36:2a:11:34:fc:aa:6e:cd:bc:a6:ed:80:6a:ec:32:7b: 2c:2e:16:ef:6c:a5:51:78:d4:8c:4a:b0:64:4b:9f:3d:ab:e3: 36:84:0f:dd:e5:39:3a:1b:bb:c5:a7:ee:c3:02:29:b8:69:b8: 2d:2e:29:7a:39:77:30:94:a0:c3:f6:f6:b6:5e:ad:23:e5:ca: ba:f4:91:bf:e6:98:8f:a1:ad:89:6b:b1:b1:0c:07:79:a8:c1: 3e:09:6c:34:47:1a:89:fb:60:47:31:24:2d:1d:18:43:ec:6a: a5:18:ff:f2:3e:91:96:34:79:37:6a:b2:63:6f:a3:90:d3:92: ec:64:eb:81:3a:c4:13:e5:58:7e:00:22:db:60:8f:3d:7e:e7: 4a:30:96:13:07:4a:0e:c5:0e:fa:a2:4b:31:64:9c:3e:6f:ef: 90:cd:8b:5e:64:ee:0a:08:e8:6d:15:9c:da:d1:41:fc:a1:51: a9:22:e5:2c:2e:14:10:59:17:ed:f2:63:7b:8c:5b:0d:a1:a2: e3:55:73:b4:48:00:b4:4e:55:75:50:47:cb:00:3d:eb:4b:e8: 8f:0d:09:d5:d5:c7:18:9c:80:31:78:f6:17:bd:e0:50:9c:5c: a3:61:bb:2e:4a:8a:c4:91:08:4f:24:84:3f:ba:ef:63:b4:94: 7c:60:ee:47 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XUV4CELImJjbhlHitqMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTIxNGMzOGI2MDBlZmZjMGQwZTgwNjM1Mzg4ZGUxYjQyYWVmM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl4GQ5uQU3z2Zhm2+SKCvjfRrwiX Yl6u89cxvw9acCNw8URJ455ACq9qGoieoCRewwuwINt4adh9qF0v/t7TFptazjdh PIDw+Y8Mhxvzv8VECS5vSIgvmw5x9XfL5+WFngNcm5D9KDLXx22ZK3gUQY+PT4rw id3Ubw05VhTahXBwehPNoj3tPPaRg5BhdoQWd5RkS6BXb5xTMNHrDgPKTvJypkQk 4SktB312ELJPWNK6X6yjWUET2Ot6GnTRrpYA3qCjb09SQxmDpzk3DAzps2jSeuUZ F86cymyhhsd73F8cpUiSiMyWmtsr8IzogbQrqPBZBWj43f6VtPei9MKr6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIohTDi2AO/8DQ6AY1OI3htCrvP2MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvaWlGTU9MWUE3X3dORG9CalU0amVHMEt1OF9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRNsAwQA wvICMA0GCSqGSIb3DQEBCwUAA4IBAQAvBzYqETT8qm7NvKbtgGrsMnssLhbvbKVR eNSMSrBkS589q+M2hA/d5Tk6G7vFp+7DAim4abgtLil6OXcwlKDD9va2Xq0j5cq6 9JG/5piPoa2Ja7GxDAd5qME+CWw0RxqJ+2BHMSQtHRhD7GqlGP/yPpGWNHk3arJj b6OQ05LsZOuBOsQT5Vh+ACLbYI89fudKMJYTB0oOxQ76oksxZJw+b++QzYteZO4K COhtFZza0UH8oVGpIuUsLhQQWRft8mN7jFsNoaLjVXO0SAC0TlV1UEfLAD3rS+iP DQnV1ccYnIAxePYXveBQnFyjYbsuSorEkQhPJIQ/uu9jtJR8YO5H -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:14 2026 by rpki-client