This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa File: iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa (raw, json) Hash identifier: bwkxeGL5KMOQda9sUnHQc+cPiNjhbKFYbhK5Z8/KX+0= Subject key identifier: 88:40:99:AA:31:10:68:FE:2F:60:F7:46:6E:2F:3F:D9:40:A8:DE:44 Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Certificate serial: 019B7D5BB6AC49A08DB117FF1B71AEB82E17 Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa Signing time: Fri 02 Jan 2026 06:18:41 +0000 ROA not before: Fri 02 Jan 2026 06:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33796 IP address blocks: 84.238.0.0/17 maxlen: 17 185.197.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:b6:ac:49:a0:8d:b1:17:ff:1b:71:ae:b8:2e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3 Validity Not Before: Jan 2 06:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=884099aa311068fe2f60f7466e2f3fd940a8de44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:50:66:b6:1a:85:51:0b:35:2d:3f:18:1f:ae: f0:6a:09:5f:dd:4d:98:9b:fa:c2:73:21:ac:9f:91: 6e:f5:d1:1b:58:06:e1:60:20:c9:c0:24:a5:36:fb: 31:86:36:8d:15:c0:bf:4c:d5:6f:ed:e0:5e:e1:f1: ad:17:09:dd:c8:5b:25:76:23:7a:09:3d:cc:e6:cb: c2:bd:b4:f8:8c:dd:04:b7:80:2d:23:8b:71:8b:85: 98:27:21:1a:39:e4:3b:91:15:2c:bf:ed:86:59:bf: aa:ba:ff:dc:ce:26:3d:3a:85:32:55:5f:24:86:23: 02:73:4f:41:07:4e:9d:3a:69:99:bb:2c:3e:1e:c9: 65:dc:e5:d6:e3:0a:9e:65:bb:36:88:07:72:99:23: c0:ad:5f:32:4b:18:cc:f4:5e:2d:8f:32:6d:36:c7: 6a:99:ed:62:fa:3b:71:0b:18:81:a6:64:3d:87:79: f3:9d:e2:59:be:3b:44:8e:6d:c5:67:d9:ee:75:ca: 7f:20:f3:b9:ac:eb:50:16:43:28:e3:4a:75:b7:bb: 3d:bb:07:60:4b:4e:2d:bf:88:f3:0d:a0:d3:e8:83: 49:09:8e:7f:6c:79:1b:a9:49:75:23:b3:a5:68:be: 95:5f:b1:a8:8e:10:b7:72:39:ba:4a:e6:19:f9:84: 8b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:40:99:AA:31:10:68:FE:2F:60:F7:46:6E:2F:3F:D9:40:A8:DE:44 X509v3 Authority Key Identifier: keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/iECZqjEQaP4vYPdGbi8_2UCo3kQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.238.0.0/17 185.197.168.0/22 Signature Algorithm: sha256WithRSAEncryption 14:25:1a:73:89:9a:46:fb:f7:bd:e3:da:ad:6b:17:03:c7:1f: 70:04:02:23:6c:b4:80:14:76:d9:07:9d:aa:09:df:ec:76:42: 01:74:2e:46:f5:50:0d:c3:ea:66:87:60:de:a3:19:07:d8:3b: 9e:e7:37:a2:1a:46:be:42:96:88:fa:13:8c:74:f0:17:da:a3: 36:be:87:5d:18:df:40:4d:d5:ad:27:e6:94:cb:8f:a1:a2:73: 38:39:e3:05:71:5a:86:51:22:9c:02:ef:2a:10:89:f0:5c:60: b9:e3:97:27:75:0a:fe:50:b8:38:69:be:91:0a:49:89:96:5b: c3:d6:b0:35:02:ab:8a:2a:16:eb:6f:54:bc:04:57:5c:b6:4e: 73:ba:53:bb:11:e4:eb:b9:16:be:22:00:cb:6f:19:5d:79:da: 8a:31:f7:3f:6d:d6:33:c3:b4:e5:13:12:99:19:35:60:d3:fc: ee:6d:81:74:1f:9c:70:69:e8:42:7f:85:ef:f6:05:95:af:82: 3c:4b:22:a9:68:b4:8a:a1:c3:1e:6c:62:77:30:dc:a1:f6:e2: d8:3f:a8:da:6f:1e:0b:31:2c:8e:cd:b2:b5:64:d0:e9:a4:ec: 06:9b:2f:5f:6d:c3:d0:8b:ad:a2:c8:26:7e:79:75:8d:20:40: 2d:66:9b:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9W7asSaCNsRf/G3GuuC4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz NmJiYzMwHhcNMjYwMTAyMDYxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQwOTlhYTMxMTA2OGZlMmY2MGY3NDY2ZTJmM2ZkOTQwYThkZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplBmthqFUQs1LT8YH67waglf3U2Y m/rCcyGsn5Fu9dEbWAbhYCDJwCSlNvsxhjaNFcC/TNVv7eBe4fGtFwndyFsldiN6 CT3M5svCvbT4jN0Et4AtI4txi4WYJyEaOeQ7kRUsv+2GWb+quv/cziY9OoUyVV8k hiMCc09BB06dOmmZuyw+Hsll3OXW4wqeZbs2iAdymSPArV8ySxjM9F4tjzJtNsdq me1i+jtxCxiBpmQ9h3nzneJZvjtEjm3FZ9nudcp/IPO5rOtQFkMo40p1t7s9uwdg S04tv4jzDaDT6INJCY5/bHkbqUl1I7OlaL6VX7GojhC3cjm6SuYZ+YSLXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIhAmaoxEGj+L2D3Rm4vP9lAqN5EMB8GA1UdIwQY MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt NDk3ODVmY2RkOWM0LzEvaUVDWnFqRVFhUDR2WVBkR2JpOF8yVUNvM2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0 LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHVO4AAwQC ucWoMA0GCSqGSIb3DQEBCwUAA4IBAQAUJRpziZpG+/e949qtaxcDxx9wBAIjbLSA FHbZB52qCd/sdkIBdC5G9VANw+pmh2DeoxkH2Due5zeiGka+QpaI+hOMdPAX2qM2 voddGN9ATdWtJ+aUy4+honM4OeMFcVqGUSKcAu8qEInwXGC545cndQr+ULg4ab6R CkmJllvD1rA1AquKKhbrb1S8BFdctk5zulO7EeTruRa+IgDLbxldedqKMfc/bdYz w7TlExKZGTVg0/zubYF0H5xwaehCf4Xv9gWVr4I8SyKpaLSKocMebGJ3MNyh9uLY P6jabx4LMSyOzbK1ZNDppOwGmy9fbcPQi62iyCZ+eXWNIEAtZpvc -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:16 2026 by rpki-client