This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/IRMSZQsigbDIutOQzlfxAZWWDXw.roa File: IRMSZQsigbDIutOQzlfxAZWWDXw.roa (raw, json) Hash identifier: RtIyl8mWzqrshICWaykO84DdzD/8XhcZyCvNHfIfJZQ= Subject key identifier: 21:13:12:65:0B:22:81:B0:C8:BA:D3:90:CE:57:F1:01:95:96:0D:7C Certificate issuer: /CN=fadce637efb28194715ac2a72129e20571b983af Certificate serial: 019B7DC8A4B8A8CE950E69BB905993EEE884 Authority key identifier: FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/IRMSZQsigbDIutOQzlfxAZWWDXw.roa Signing time: Fri 02 Jan 2026 08:17:39 +0000 ROA not before: Fri 02 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56722 IP address blocks: 185.134.208.0/22 maxlen: 22 2a06:eec0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.mft rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:a4:b8:a8:ce:95:0e:69:bb:90:59:93:ee:e8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadce637efb28194715ac2a72129e20571b983af Validity Not Before: Jan 2 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=211312650b2281b0c8bad390ce57f10195960d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:28:70:4f:48:4e:da:09:2d:ef:42:26:9f:ea: 86:7b:ba:d3:c1:92:f9:1c:64:04:84:e8:ef:16:da: 0f:de:3d:e4:c6:cf:32:9d:e4:a1:ea:2e:5a:a8:f9: b0:4a:81:f2:12:bc:48:8a:e4:d8:71:2d:61:5f:c7: aa:74:3a:bc:8a:31:25:20:f6:c2:ab:24:0d:bc:c6: 09:6c:37:29:a7:35:96:94:28:fb:8e:43:d3:4a:68: 39:7a:9e:60:dd:3f:45:49:2c:5e:49:75:06:e8:5f: 05:d0:ad:f5:a6:cc:64:57:d0:ce:80:57:4e:9a:24: 8a:f8:84:12:cd:09:a6:b3:b2:04:b2:25:b1:ad:51: c8:42:54:d9:74:d1:cc:19:60:14:db:08:f1:16:0d: 37:f3:25:8b:03:94:9b:08:9d:2c:91:2f:b5:19:0c: 95:1a:10:1d:30:b5:cc:15:ea:ad:6c:55:42:3e:62: e2:c0:76:19:cb:ca:ae:60:3d:09:51:e3:1e:fc:48: e4:4f:37:15:90:03:f2:f6:da:95:e9:87:0e:67:70: 22:77:64:06:1e:7f:2b:e1:44:bf:98:71:ba:86:f7: 99:3a:ff:03:41:fa:5b:f3:8d:48:bb:0b:dc:56:39: 5c:e5:71:6c:e3:95:d7:85:ae:74:8a:18:18:fd:0c: 66:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:13:12:65:0B:22:81:B0:C8:BA:D3:90:CE:57:F1:01:95:96:0D:7C X509v3 Authority Key Identifier: keyid:FA:DC:E6:37:EF:B2:81:94:71:5A:C2:A7:21:29:E2:05:71:B9:83:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tzmN--ygZRxWsKnISniBXG5g68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/IRMSZQsigbDIutOQzlfxAZWWDXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/55fbc5-b2dc-4639-9a3a-64117db2c4e1/1/1-tzmN--ygZRxWsKnISniBXG5g68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.134.208.0/22 IPv6: 2a06:eec0::/29 Signature Algorithm: sha256WithRSAEncryption bf:c8:7e:ae:6e:a4:b4:1e:a2:cd:cc:61:83:b3:80:63:6d:0b: 0c:91:ef:21:6f:cd:3c:56:ce:98:17:dc:27:70:db:20:8b:fb: 18:d5:7b:c9:0a:ab:a3:b7:da:02:fe:f8:87:cf:a8:56:99:34: d0:f5:98:ed:24:db:3e:60:62:d3:0f:d5:6b:dc:a8:54:c4:9d: aa:61:1d:ea:4b:d8:ba:36:49:f8:7e:54:de:14:b5:63:d7:26: 26:11:90:4d:87:bf:47:08:63:04:46:a7:b7:c3:29:64:fb:f0: 2f:c7:b2:c9:9e:85:e8:83:fc:18:a1:7c:89:db:b0:37:1b:f2: ba:09:19:38:fb:0f:1b:c5:52:65:55:b9:be:84:c6:95:43:20: 82:c6:32:fd:d5:0c:db:1f:d1:90:04:72:1f:2c:de:01:6a:9d: 6c:69:66:e7:f5:39:ed:66:37:c9:37:4a:c4:a3:24:fd:c4:45: 43:34:78:e5:df:86:b3:73:e7:21:89:6b:e4:77:23:bf:5a:3a: 79:82:df:f1:17:13:d9:50:18:13:96:83:b4:0d:68:9b:52:1d: fe:5d:86:f2:9f:8b:f8:e5:38:13:57:b6:6c:97:b6:b9:c5:08: 8b:c1:8b:49:96:f4:d2:65:af:1b:f1:e0:f5:38:41:a5:7f:2d: 9c:ab:1a:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yKS4qM6VDmm7kFmT7uiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhZGNlNjM3ZWZiMjgxOTQ3MTVhYzJhNzIxMjllMjA1NzFi OTgzYWYwHhcNMjYwMTAyMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTEzMTI2NTBiMjI4MWIwYzhiYWQzOTBjZTU3ZjEwMTk1OTYwZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ChwT0hO2gkt70Imn+qGe7rTwZL5 HGQEhOjvFtoP3j3kxs8yneSh6i5aqPmwSoHyErxIiuTYcS1hX8eqdDq8ijElIPbC qyQNvMYJbDcppzWWlCj7jkPTSmg5ep5g3T9FSSxeSXUG6F8F0K31psxkV9DOgFdO miSK+IQSzQmms7IEsiWxrVHIQlTZdNHMGWAU2wjxFg038yWLA5SbCJ0skS+1GQyV GhAdMLXMFeqtbFVCPmLiwHYZy8quYD0JUeMe/EjkTzcVkAPy9tqV6YcOZ3Aid2QG Hn8r4US/mHG6hveZOv8DQfpb841IuwvcVjlc5XFs45XXha50ihgY/QxmcwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCETEmULIoGwyLrTkM5X8QGVlg18MB8GA1UdIwQY MBaAFPrc5jfvsoGUcVrCpyEp4gVxuYOvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS10em1OLS15Z1pSeFdzS25JU25pQlhHNWc2OC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzQvNTVmYmM1LWIyZGMtNDYzOS05YTNh LTY0MTE3ZGIyYzRlMS8xL0lSTVNaUXNpZ2JESXV0T1F6bGZ4QVpXV0RYdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzQvNTVmYmM1LWIyZGMtNDYzOS05YTNhLTY0MTE3ZGIyYzRl MS8xLzEtdHptTi0teWdaUnhXc0tuSVNuaUJYRzVnNjguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5htAw DQQCAAIwBwMFAyoG7sAwDQYJKoZIhvcNAQELBQADggEBAL/Ifq5upLQeos3MYYOz gGNtCwyR7yFvzTxWzpgX3Cdw2yCL+xjVe8kKq6O32gL++IfPqFaZNND1mO0k2z5g YtMP1WvcqFTEnaphHepL2Lo2Sfh+VN4UtWPXJiYRkE2Hv0cIYwRGp7fDKWT78C/H ssmeheiD/BihfInbsDcb8roJGTj7DxvFUmVVub6ExpVDIILGMv3VDNsf0ZAEch8s 3gFqnWxpZuf1Oe1mN8k3SsSjJP3ERUM0eOXfhrNz5yGJa+R3I79aOnmC3/EXE9lQ GBOWg7QNaJtSHf5dhvKfi/jlOBNXtmyXtrnFCIvBi0mW9NJlrxvx4PU4QaV/LZyr GmY= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:36 2026 by rpki-client