This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/iuwBL7EOrQa4HbLS-ENYqi2dlmg.roa File: iuwBL7EOrQa4HbLS-ENYqi2dlmg.roa (raw, json) Hash identifier: l+IA0E4FLdunXgerhqHKPGiXveZnWwjczc5i6icbMxI= Subject key identifier: 8A:EC:01:2F:B1:0E:AD:06:B8:1D:B2:D2:F8:43:58:AA:2D:9D:96:68 Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79 Certificate serial: 019B79112DC9971E05401153024FE56EF004 Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/iuwBL7EOrQa4HbLS-ENYqi2dlmg.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58281 IP address blocks: 185.30.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2d:c9:97:1e:05:40:11:53:02:4f:e5:6e:f0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79 Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8aec012fb10ead06b81db2d2f84358aa2d9d9668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:40:e2:fc:02:46:6a:76:2e:0e:c3:8a:13: 99:2c:8c:30:f5:6c:a9:0e:09:08:34:61:8c:b7:3c: a5:4b:83:d0:89:dc:a8:9a:95:5e:4f:96:bb:b3:57: 4e:2d:7f:54:20:ac:34:e6:2c:b7:b6:cb:91:09:5d: ab:16:78:86:d2:c2:fd:e5:0c:7c:99:d4:ae:7c:e9: 04:de:5a:9f:71:9e:ee:41:c8:01:b3:16:69:8d:b6: 14:1f:26:43:b9:26:e2:71:b9:f2:3e:39:f6:fb:13: 1c:36:0e:e7:28:09:8d:48:8e:8b:58:2e:bd:8c:e0: 98:61:a6:da:a5:77:64:c8:f2:5e:8b:64:b1:32:98: f3:1d:61:8e:96:af:4b:4b:f7:59:51:2e:19:57:9d: d3:c7:18:86:77:36:b9:0b:61:44:15:0e:3c:9c:34: 97:80:8d:92:ef:6d:84:2e:ce:a2:21:17:28:cc:72: 1a:57:8e:e1:d2:c0:17:75:a9:7c:71:1a:21:3f:5e: a6:1f:22:a2:5c:47:c6:ab:db:eb:b5:3f:66:fa:ca: b9:dd:7f:87:e5:69:0f:95:2b:ef:25:98:13:f7:5c: b8:09:6c:3a:f8:f4:3f:d9:c3:5b:ab:98:a0:78:13: 13:eb:12:ea:eb:bc:90:a2:75:b1:16:29:b0:a2:7d: c9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EC:01:2F:B1:0E:AD:06:B8:1D:B2:D2:F8:43:58:AA:2D:9D:96:68 X509v3 Authority Key Identifier: keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/iuwBL7EOrQa4HbLS-ENYqi2dlmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.30.36.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:ca:1a:ee:51:fa:8e:c5:d0:6e:f8:3f:63:96:f4:07:dc:fa: dd:d6:a4:16:bc:bb:61:ec:ca:ac:79:76:a5:32:e3:75:f7:3e: 24:d0:26:ba:d4:2d:e4:e3:65:e4:26:ba:51:19:ad:93:06:8b: e9:87:e9:7c:61:e3:f6:bf:3e:f9:c8:7d:30:05:f3:e8:b8:89: a9:95:e9:09:a4:3b:a2:32:6f:0f:aa:18:8b:1c:e8:fb:d9:bb: af:2b:5b:5d:60:07:9d:5d:7d:dc:06:1c:bc:a8:ce:96:34:ea: a0:a6:30:a6:f7:f7:ea:ee:78:ec:4f:23:d4:0e:26:ad:da:9d: f5:b7:78:24:f8:3a:0b:7a:13:13:02:aa:d5:08:73:90:e4:0e: f3:58:ca:1a:25:c6:43:5e:d9:d3:b4:a4:89:1a:3b:a1:2c:8a: 74:16:cd:d2:70:9e:7c:03:56:f6:f9:5e:b1:e3:7c:d2:f3:d1: 88:8f:67:2d:76:a6:b4:1c:4a:eb:0f:74:b1:2f:78:ab:97:59: b3:1f:c8:fd:ef:0b:6b:b9:4f:86:92:16:69:c7:81:32:90:37: 2a:fe:4e:43:93:07:d0:e3:9e:7e:62:d6:b3:49:85:78:68:64: 47:72:f2:a5:15:38:5f:cc:83:22:f4:52:09:01:5b:fe:40:41: 0d:ac:da:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ES3Jlx4FQBFTAk/lbvAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZDRjNGFkNzMxZTQ1ZWQzMjBhMmYzOGFiNzBiN2E3YmZm N2VhNzkwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWVjMDEyZmIxMGVhZDA2YjgxZGIyZDJmODQzNThhYTJkOWQ5NjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49pA4vwCRmp2Lg7DihOZLIww9Wyp DgkINGGMtzylS4PQidyompVeT5a7s1dOLX9UIKw05iy3tsuRCV2rFniG0sL95Qx8 mdSufOkE3lqfcZ7uQcgBsxZpjbYUHyZDuSbicbnyPjn2+xMcNg7nKAmNSI6LWC69 jOCYYabapXdkyPJei2SxMpjzHWGOlq9LS/dZUS4ZV53TxxiGdza5C2FEFQ48nDSX gI2S722ELs6iIRcozHIaV47h0sAXdal8cRohP16mHyKiXEfGq9vrtT9m+sq53X+H 5WkPlSvvJZgT91y4CWw6+PQ/2cNbq5igeBMT6xLq67yQonWxFimwon3JWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIrsAS+xDq0GuB2y0vhDWKotnZZoMB8GA1UdIwQY MBaAFJPUxK1zHkXtMgovOKtwt6e/9+p5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDct YWJhNTVlMjQyNGQyLzEvaXV3Qkw3RU9yUWE0SGJMUy1FTllxaTJkbG1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9lZTA1MzgtMzljOS00NDUwLTk2NDctYWJhNTVlMjQyNGQy LzEvazlURXJYTWVSZTB5Q2k4NHEzQzNwN18zNm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR4kMA0G CSqGSIb3DQEBCwUAA4IBAQCLyhruUfqOxdBu+D9jlvQH3Prd1qQWvLth7MqseXal MuN19z4k0Ca61C3k42XkJrpRGa2TBovph+l8YeP2vz75yH0wBfPouImplekJpDui Mm8PqhiLHOj72buvK1tdYAedXX3cBhy8qM6WNOqgpjCm9/fq7njsTyPUDiat2p31 t3gk+DoLehMTAqrVCHOQ5A7zWMoaJcZDXtnTtKSJGjuhLIp0Fs3ScJ58A1b2+V6x 43zS89GIj2ctdqa0HErrD3SxL3irl1mzH8j97wtruU+GkhZpx4EykDcq/k5DkwfQ 455+YtazSYV4aGRHcvKlFThfzIMi9FIJAVv+QEENrNpS -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:33 2026 by rpki-client