This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/ifxPxB__qsr7Z74v6CjvExVaYHI.roa File: ifxPxB__qsr7Z74v6CjvExVaYHI.roa (raw, json) Hash identifier: Oukw02Zlt/dci0sosDH1Qx4aE8mcu5EHS0d39Bqi37M= Subject key identifier: 89:FC:4F:C4:1F:FF:AA:CA:FB:67:BE:2F:E8:28:EF:13:15:5A:60:72 Certificate issuer: /CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8 Certificate serial: 019B7BA3FDC6108298A0BBD47CDC79EF00F2 Authority key identifier: 9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/ifxPxB__qsr7Z74v6CjvExVaYHI.roa Signing time: Thu 01 Jan 2026 22:18:23 +0000 ROA not before: Thu 01 Jan 2026 22:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207503 IP address blocks: 82.193.248.0/24 maxlen: 24 82.193.254.0/24 maxlen: 24 85.199.112.0/22 maxlen: 22 156.67.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.mft rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:fd:c6:10:82:98:a0:bb:d4:7c:dc:79:ef:00:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1ac369c9456914a12e02dffc8dd79974eb1ef8 Validity Not Before: Jan 1 22:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89fc4fc41fffaacafb67be2fe828ef13155a6072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:52:f7:c5:07:c8:d6:f0:60:35:7c:1d:3e:97: e1:f7:44:ce:9e:ef:ea:0e:4a:21:31:cd:75:8a:df: 75:a1:32:16:03:cc:8d:b7:40:b8:54:06:38:75:c7: 52:ac:2e:8f:30:3f:d4:52:99:7e:e7:ee:f9:3c:33: 67:85:40:9a:28:41:98:51:0f:dd:3a:38:68:5c:b7: e8:7e:4b:ec:ea:0b:b9:2a:12:b4:06:a3:5b:a5:13: 3b:2d:0c:bb:e8:42:5e:56:7f:f8:1b:8a:6d:f0:fa: 9e:87:07:65:17:2b:bf:37:67:f9:f2:cd:0d:58:14: 98:7d:7d:bd:fc:49:b5:8a:5a:7e:a8:08:5c:e7:42: 0d:51:3e:84:66:45:83:83:a8:af:a2:1f:3c:76:c7: 53:e5:02:f0:1f:09:60:0c:70:7f:ab:80:88:6a:8d: 65:27:13:46:03:e5:fa:1f:bc:03:b4:91:c7:e0:6c: f5:88:f9:1d:be:0f:6c:5c:89:97:b7:f3:5e:52:94: 10:fb:5d:71:02:a8:34:c3:f1:30:92:ba:5d:6b:e9: 16:b5:ea:22:b5:e3:f0:cb:93:1d:ee:46:72:e6:a8: a8:0b:a7:55:80:1b:ee:b2:b8:af:b6:e3:49:3c:db: f3:5a:14:5a:ab:7e:82:34:28:cb:91:f0:e2:aa:fe: 43:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FC:4F:C4:1F:FF:AA:CA:FB:67:BE:2F:E8:28:EF:13:15:5A:60:72 X509v3 Authority Key Identifier: keyid:9E:1A:C3:69:C9:45:69:14:A1:2E:02:DF:FC:8D:D7:99:74:EB:1E:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhrDaclFaRShLgLf_I3XmXTrHvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/ifxPxB__qsr7Z74v6CjvExVaYHI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/091bd0-2f67-47ce-ae17-d68c57db4cae/1/nhrDaclFaRShLgLf_I3XmXTrHvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.193.248.0/24 82.193.254.0/24 85.199.112.0/22 156.67.144.0/20 Signature Algorithm: sha256WithRSAEncryption ad:c3:c9:c1:e5:63:ee:50:bc:88:0c:e6:76:80:61:4a:0a:01: df:0a:2a:a7:1c:14:c4:74:74:89:43:93:8f:04:48:c0:9e:59: e8:01:36:16:e0:37:c0:fa:53:22:7e:9b:6e:9e:aa:d3:c1:cc: 88:22:04:bb:24:98:ff:30:a4:34:4f:21:a4:29:2b:24:dd:f0: 3b:5c:69:fc:9e:ee:52:2e:cc:e3:51:e4:b9:7d:fe:c8:ad:27: 57:92:e1:f3:87:e1:a6:50:d3:9e:1b:65:20:a4:f2:2d:12:49: a2:02:12:9d:2a:44:ed:10:d3:f1:0d:ff:ef:db:81:ec:0d:7f: a8:30:68:b5:63:31:d7:71:44:ad:aa:98:83:cb:b9:5c:c6:72: c4:9a:68:f7:12:10:93:1f:44:d0:4f:4a:75:77:be:b9:41:5e: b1:69:3e:f0:21:e9:1f:b7:9c:39:79:2f:39:8b:19:37:7f:dd: 89:76:b2:25:4e:2c:26:93:f2:fd:5d:92:ee:ee:05:49:67:00: 37:2a:c0:92:7f:d3:7b:ee:0c:04:ae:de:b5:3e:3a:f3:4c:51: 3b:3f:32:c3:15:20:ce:e7:8c:ee:7a:8a:d3:d3:14:15:55:f6: 50:d7:31:1f:3b:99:a3:ff:7b:cd:15:71:59:2a:7b:db:fc:4f: 22:07:85:c4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7o/3GEIKYoLvUfNx57wDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMWFjMzY5Yzk0NTY5MTRhMTJlMDJkZmZjOGRkNzk5NzRl YjFlZjgwHhcNMjYwMTAxMjIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWZjNGZjNDFmZmZhYWNhZmI2N2JlMmZlODI4ZWYxMzE1NWE2MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lL3xQfI1vBgNXwdPpfh90TOnu/q DkohMc11it91oTIWA8yNt0C4VAY4dcdSrC6PMD/UUpl+5+75PDNnhUCaKEGYUQ/d OjhoXLfofkvs6gu5KhK0BqNbpRM7LQy76EJeVn/4G4pt8PqehwdlFyu/N2f58s0N WBSYfX29/Em1ilp+qAhc50INUT6EZkWDg6ivoh88dsdT5QLwHwlgDHB/q4CIao1l JxNGA+X6H7wDtJHH4Gz1iPkdvg9sXImXt/NeUpQQ+11xAqg0w/Ewkrpda+kWteoi tePwy5Md7kZy5qioC6dVgBvusrivtuNJPNvzWhRaq36CNCjLkfDiqv5DkQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFIn8T8Qf/6rK+2e+L+go7xMVWmByMB8GA1UdIwQY MBaAFJ4aw2nJRWkUoS4C3/yN15l06x74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTct ZDY4YzU3ZGI0Y2FlLzEvaWZ4UHhCX19xc3I3Wjc0djZDanZFeFZhWUhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wOTFiZDAtMmY2Ny00N2NlLWFlMTctZDY4YzU3ZGI0Y2Fl LzEvbmhyRGFjbEZhUlNoTGdMZl9JM1htWFRySHZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUsH4AwQA UsH+AwQCVcdwAwQEnEOQMA0GCSqGSIb3DQEBCwUAA4IBAQCtw8nB5WPuULyIDOZ2 gGFKCgHfCiqnHBTEdHSJQ5OPBEjAnlnoATYW4DfA+lMifptunqrTwcyIIgS7JJj/ MKQ0TyGkKSsk3fA7XGn8nu5SLszjUeS5ff7IrSdXkuHzh+GmUNOeG2UgpPItEkmi AhKdKkTtENPxDf/v24HsDX+oMGi1YzHXcUStqpiDy7lcxnLEmmj3EhCTH0TQT0p1 d765QV6xaT7wIekft5w5eS85ixk3f92JdrIlTiwmk/L9XZLu7gVJZwA3KsCSf9N7 7gwErt61PjrzTFE7PzLDFSDO54zueorT0xQVVfZQ1zEfO5mj/3vNFXFZKnvb/E8i B4XE -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:20 2026 by rpki-client