This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/jI0W3FXepCGwUQYooUrSqFApgnI.roa File: jI0W3FXepCGwUQYooUrSqFApgnI.roa (raw, json) Hash identifier: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA= Subject key identifier: 8C:8D:16:DC:55:DE:A4:21:B0:51:06:28:A1:4A:D2:A8:50:29:82:72 Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Certificate serial: 019B7F15450BCEA0868973E09C64127942A9 Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/jI0W3FXepCGwUQYooUrSqFApgnI.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56851 IP address blocks: 45.83.192.0/22 maxlen: 24 62.192.154.0/24 maxlen: 24 176.105.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 17:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:45:0b:ce:a0:86:89:73:e0:9c:64:12:79:42:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220 Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c8d16dc55dea421b0510628a14ad2a850298272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:19:8e:3e:3f:86:2e:fe:d6:1f:0b:e4:6b: 1f:e4:3f:27:a1:bd:ae:a0:6d:a5:09:83:80:ac:0e: 9e:26:84:c7:c0:77:ed:67:ea:f8:bd:5c:81:2c:29: 4a:2c:21:be:ba:8b:8c:2e:40:5c:9a:d0:7e:2d:4f: a3:c2:04:c2:65:43:1b:d0:07:25:51:85:81:0f:8d: 6e:61:4a:22:a9:76:b0:6a:46:0a:9d:8e:75:bc:89: 08:0f:76:d9:d0:d9:65:0c:4a:d5:62:20:25:15:fa: 66:04:78:a7:f6:d1:eb:61:dd:5b:d5:5a:d0:10:14: f2:5f:12:73:01:11:c3:e7:cd:ec:0d:d8:5d:09:f3: b1:93:ab:d3:90:37:a8:90:03:b5:f2:f0:0d:46:3f: 5a:0f:3c:bb:27:b9:c7:f8:71:bf:25:7c:00:e4:22: 33:38:28:e6:3f:75:19:bc:e5:c5:53:cd:13:9a:07: f5:d5:1b:b3:4f:88:f4:d3:3e:c7:d8:95:26:a5:36: 06:46:a4:69:4e:06:bb:ef:85:d9:5e:22:03:27:a9: f9:e6:6d:91:00:07:34:99:c4:aa:fa:fe:d7:02:8b: b0:58:df:c5:ef:ea:79:17:c2:d5:5b:35:84:f8:74: 47:b6:d2:60:69:0c:68:19:f0:70:c8:ec:80:88:99: 19:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8D:16:DC:55:DE:A4:21:B0:51:06:28:A1:4A:D2:A8:50:29:82:72 X509v3 Authority Key Identifier: keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/jI0W3FXepCGwUQYooUrSqFApgnI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.192.0/22 62.192.154.0/24 176.105.233.0/24 Signature Algorithm: sha256WithRSAEncryption 51:14:55:9d:60:0a:85:a4:28:ec:13:22:48:52:75:b8:63:07: 2e:98:18:d8:94:d6:d0:22:97:f6:fe:11:f0:23:bd:3b:70:87: 8b:6b:fa:eb:66:f8:fb:dc:91:b9:fe:e5:25:e3:a8:d4:d6:70: 17:f1:5b:7c:e8:e9:0b:39:f6:23:cc:9f:f4:4a:0d:de:b7:b6: 9c:09:86:9c:07:21:dc:2b:67:e6:0e:e2:f6:e7:14:04:9d:2e: 7d:6b:7d:68:b4:0a:c2:de:3d:6c:00:ab:0e:ea:6a:99:b2:20: 83:f4:9f:34:d7:5b:6d:bc:b8:4e:79:41:8f:57:82:9d:3a:42: 85:0b:dc:d0:fc:64:94:55:50:d4:83:22:64:e5:37:c5:39:16: b8:8c:d6:47:e3:81:f2:4e:0d:63:21:7c:c7:fb:ad:c0:be:a5: 75:33:d1:93:cd:61:a0:00:d0:50:fc:ac:01:df:cc:55:35:f4: f3:02:d6:58:b7:a1:a0:fe:06:1d:e4:f1:5f:37:54:95:79:f2: 46:b4:27:0e:36:6f:1f:ff:d0:9a:f6:a1:2f:02:5e:b3:fa:49: 6d:be:9f:32:89:90:3f:22:83:09:c0:19:37:88:9f:83:94:3a: 52:30:6b:48:0e:74:11:d5:51:e1:3f:9b:42:f2:92:e7:b6:e0: fd:8f:e8:b6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FUULzqCGiXPgnGQSeUKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk NjEyMjAwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzhkMTZkYzU1ZGVhNDIxYjA1MTA2MjhhMTRhZDJhODUwMjk4MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJUZjj4/hi7+1h8L5Gsf5D8nob2u oG2lCYOArA6eJoTHwHftZ+r4vVyBLClKLCG+uouMLkBcmtB+LU+jwgTCZUMb0Acl UYWBD41uYUoiqXawakYKnY51vIkID3bZ0NllDErVYiAlFfpmBHin9tHrYd1b1VrQ EBTyXxJzARHD583sDdhdCfOxk6vTkDeokAO18vANRj9aDzy7J7nH+HG/JXwA5CIz OCjmP3UZvOXFU80Tmgf11RuzT4j00z7H2JUmpTYGRqRpTga774XZXiIDJ6n55m2R AAc0mcSq+v7XAouwWN/F7+p5F8LVWzWE+HRHttJgaQxoGfBwyOyAiJkZ+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIyNFtxV3qQhsFEGKKFK0qhQKYJyMB8GA1UdIwQY MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt NDNlOTFlNWVmMTQ1LzEvakkwVzNGWGVwQ0d3VVFZb29VclNxRkFwZ25JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1 LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVPAAwQA PsCaAwQAsGnpMA0GCSqGSIb3DQEBCwUAA4IBAQBRFFWdYAqFpCjsEyJIUnW4Ywcu mBjYlNbQIpf2/hHwI707cIeLa/rrZvj73JG5/uUl46jU1nAX8Vt86OkLOfYjzJ/0 Sg3et7acCYacByHcK2fmDuL25xQEnS59a31otArC3j1sAKsO6mqZsiCD9J8011tt vLhOeUGPV4KdOkKFC9zQ/GSUVVDUgyJk5TfFORa4jNZH44HyTg1jIXzH+63AvqV1 M9GTzWGgANBQ/KwB38xVNfTzAtZYt6Gg/gYd5PFfN1SVefJGtCcONm8f/9Ca9qEv Al6z+kltvp8yiZA/IoMJwBk3iJ+DlDpSMGtIDnQR1VHhP5tC8pLntuD9j+i2 -----END CERTIFICATE-----Generated at Tue Feb 3 03:31:20 2026 by rpki-client