This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/imKnlCbG82nv79I7GIs-Cf3bI6Y.roa File: imKnlCbG82nv79I7GIs-Cf3bI6Y.roa (raw, json) Hash identifier: eCcCj1ficBtOTcxFVWC/9P3nMu8rE+7UYMnKQ2Ga9Os= Subject key identifier: 8A:62:A7:94:26:C6:F3:69:EF:EF:D2:3B:18:8B:3E:09:FD:DB:23:A6 Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac Certificate serial: 019B7BA44334E2B81C15AD4BA577FBBB08E7 Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/imKnlCbG82nv79I7GIs-Cf3bI6Y.roa Signing time: Thu 01 Jan 2026 22:18:41 +0000 ROA not before: Thu 01 Jan 2026 22:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 212.68.164.0/22 maxlen: 22 212.68.164.0/24 maxlen: 24 212.68.165.0/24 maxlen: 24 212.68.166.0/24 maxlen: 24 212.68.167.0/24 maxlen: 24 212.68.168.0/22 maxlen: 22 212.68.168.0/24 maxlen: 24 212.68.169.0/24 maxlen: 24 212.68.170.0/24 maxlen: 24 212.68.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:43:34:e2:b8:1c:15:ad:4b:a5:77:fb:bb:08:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac Validity Not Before: Jan 1 22:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a62a79426c6f369efefd23b188b3e09fddb23a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:56:94:20:5a:e2:dc:a9:ff:fe:69:fe:16: 95:90:a0:8c:9c:25:ab:2f:cd:f0:64:02:66:30:d7: 8d:71:4f:5e:f9:db:56:4d:91:48:0c:a9:96:60:79: dc:49:5a:27:9f:3d:03:c3:75:27:ad:87:01:e2:f0: b8:83:78:f7:98:82:cf:d7:48:32:b6:ec:2e:f4:8e: 5b:23:b1:80:2c:67:65:7c:f0:73:60:ab:f8:c9:ce: 2b:28:8c:8f:a0:12:67:51:13:57:e4:3d:36:fb:99: 76:98:a6:4b:f7:03:f5:ea:3b:81:37:c2:b6:be:9f: 08:7d:8e:3a:7f:a1:8b:cc:22:46:97:19:70:eb:9c: de:b0:0e:0b:7c:43:7b:82:9f:3c:58:b3:8c:00:a0: 92:af:e7:6c:f7:eb:37:d0:de:59:be:3e:9e:f7:1e: d0:3f:38:41:b2:83:b5:cf:9f:32:d5:09:ed:3c:36: 3a:06:0c:2e:91:d5:12:ad:a1:d3:d3:ce:06:47:07: 88:bc:c3:4f:ab:b5:36:32:16:5c:e3:e0:cc:0a:0d: 5e:c3:a4:58:01:02:b0:5a:cc:96:c5:b9:5f:7e:f5: 31:c2:50:73:2a:c5:05:45:59:ce:8a:5c:81:b0:d8: 09:d7:89:dd:0c:44:74:1f:7f:54:6a:d5:01:d0:79: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:A7:94:26:C6:F3:69:EF:EF:D2:3B:18:8B:3E:09:FD:DB:23:A6 X509v3 Authority Key Identifier: keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/imKnlCbG82nv79I7GIs-Cf3bI6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.68.164.0-212.68.171.255 Signature Algorithm: sha256WithRSAEncryption a6:56:11:1f:7e:32:a8:06:ae:46:e2:45:55:51:9f:99:f8:79: 35:fc:28:a1:a6:cf:52:57:6f:bb:6c:c8:24:e7:95:13:f4:f4: d8:7f:e9:6b:ea:f7:87:b8:bc:65:bc:c5:30:a4:1a:de:7c:fb: 26:5c:fa:19:ed:eb:1b:f9:c5:f9:74:63:50:c7:1b:ff:ea:8c: 24:71:49:59:10:96:ad:8e:11:17:6b:dc:bc:98:22:ed:0d:2e: 57:e4:35:33:55:0b:d7:43:69:7f:6f:37:58:9e:34:3b:b2:11: a7:d6:ea:74:e4:36:00:79:19:83:76:0f:dd:b5:e1:e1:f9:cd: 3f:e8:e0:72:57:48:57:92:2c:c8:df:ec:f2:ec:c7:08:65:7e: e1:f0:0f:45:9f:4e:cc:fd:a3:e3:18:55:54:7a:3a:05:bd:1e: 80:1b:7d:0f:02:9a:3e:5c:e3:df:54:4b:a2:93:eb:68:1a:86: 51:b7:02:83:b6:80:32:ec:58:ef:18:a0:c1:93:c0:70:32:84: 98:d2:32:14:62:f9:a2:3c:0a:89:b9:b6:f3:1f:75:50:96:7f: 78:29:fc:5d:52:e3:64:4f:27:26:dd:f8:53:a6:98:4e:2d:3e: 29:cf:e4:55:e2:13:10:b5:9c:66:47:a2:25:52:22:5d:26:6b: f0:db:63:2c -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pEM04rgcFa1LpXf7uwjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYmFkM2RlODMxZGE5NDIyMmMxYWRkMTA0Y2FmNGMzMjQ3 Njg5YWMwHhcNMjYwMTAxMjIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTYyYTc5NDI2YzZmMzY5ZWZlZmQyM2IxODhiM2UwOWZkZGIyM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAxWlCBa4typ//5p/haVkKCMnCWr L83wZAJmMNeNcU9e+dtWTZFIDKmWYHncSVonnz0Dw3UnrYcB4vC4g3j3mILP10gy tuwu9I5bI7GALGdlfPBzYKv4yc4rKIyPoBJnURNX5D02+5l2mKZL9wP16juBN8K2 vp8IfY46f6GLzCJGlxlw65zesA4LfEN7gp88WLOMAKCSr+ds9+s30N5Zvj6e9x7Q PzhBsoO1z58y1QntPDY6BgwukdUSraHT084GRweIvMNPq7U2MhZc4+DMCg1ew6RY AQKwWsyWxblffvUxwlBzKsUFRVnOilyBsNgJ14ndDER0H39UatUB0Hn7PQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIpip5QmxvNp7+/SOxiLPgn92yOmMB8GA1UdIwQY MBaAFKu6096DHalCIsGt0QTK9MMkdomsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDct NTVjNDM0ZWVjOTZjLzEvaW1LbmxDYkc4Mm52NzlJN0dJcy1DZjNiSTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZTgxNDktZDUzYy00OTkyLWJkMDctNTVjNDM0ZWVjOTZj LzEvcTdyVDNvTWRxVUlpd2EzUkJNcjB3eVIyaWF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALURKQD BALURKgwDQYJKoZIhvcNAQELBQADggEBAKZWER9+MqgGrkbiRVVRn5n4eTX8KKGm z1JXb7tsyCTnlRP09Nh/6Wvq94e4vGW8xTCkGt58+yZc+hnt6xv5xfl0Y1DHG//q jCRxSVkQlq2OERdr3LyYIu0NLlfkNTNVC9dDaX9vN1ieNDuyEafW6nTkNgB5GYN2 D9214eH5zT/o4HJXSFeSLMjf7PLsxwhlfuHwD0WfTsz9o+MYVVR6OgW9HoAbfQ8C mj5c499US6KT62gahlG3AoO2gDLsWO8YoMGTwHAyhJjSMhRi+aI8Com5tvMfdVCW f3gp/F1S42RPJybd+FOmmE4tPinP5FXiExC1nGZHoiVSIl0ma/DbYyw= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:34 2026 by rpki-client