This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ICgtilE1KfRqPpdrsKq-9ieun7U.roa File: ICgtilE1KfRqPpdrsKq-9ieun7U.roa (raw, json) Hash identifier: jAB4w8zNNLfJaxE/GqWwjjdxDfor3RlSbFXaC5OV0hQ= Subject key identifier: 20:28:2D:8A:51:35:29:F4:6A:3E:97:6B:B0:AA:BE:F6:27:AE:9F:B5 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B36735D32E3AFCB18C526C7184647B4 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ICgtilE1KfRqPpdrsKq-9ieun7U.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25472 IP address blocks: 37.6.0.0/16 maxlen: 24 46.190.0.0/17 maxlen: 24 62.169.192.0/18 maxlen: 24 79.107.0.0/16 maxlen: 24 80.245.160.0/20 maxlen: 24 81.92.48.0/20 maxlen: 24 84.254.0.0/18 maxlen: 24 91.140.0.0/17 maxlen: 24 109.242.0.0/16 maxlen: 24 176.58.128.0/17 maxlen: 24 185.3.220.0/22 maxlen: 24 188.73.192.0/18 maxlen: 24 212.152.80.0/22 maxlen: 22 2a03:f000::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:73:5d:32:e3:af:cb:18:c5:26:c7:18:46:47:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20282d8a513529f46a3e976bb0aabef627ae9fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:88:0d:63:3a:f1:41:a2:4f:69:5d:5f:47: a3:69:7d:6e:14:b3:86:eb:46:d2:31:7e:99:80:53: 95:33:83:6f:3b:e5:95:cc:b3:17:99:36:c0:21:21: 4d:30:47:0a:f4:43:e7:f8:c4:d0:30:1f:e3:11:45: c5:fe:42:e0:e9:00:26:04:6d:bb:d8:ed:03:a2:da: 7c:cf:1f:f4:8f:2d:df:86:30:0b:51:d0:65:e6:59: b0:1d:86:93:b5:9f:6f:ae:e8:4d:10:5a:d9:a7:af: 30:46:bb:99:49:6d:2e:7b:df:1e:c2:82:c6:8e:32: 5b:bc:ff:28:9c:3b:64:bb:77:07:55:6c:40:df:b7: 6e:bb:4a:d3:56:32:83:73:6e:53:9a:21:18:74:12: 08:8d:49:04:e1:3f:a3:c1:e5:5c:e1:91:50:b1:88: b9:ea:88:4f:f1:49:d7:61:ea:37:d5:80:25:41:74: 2a:01:cf:86:d0:c6:64:6e:f4:3d:dc:af:6e:cc:23: 62:ca:3d:5f:80:73:02:ef:84:39:91:e2:d6:da:7e: ae:78:47:24:e2:2b:51:21:51:3e:01:24:ef:27:15: 42:f7:63:9d:57:de:0b:9d:83:6a:0c:75:eb:d9:d4: 04:be:ae:43:d5:8f:c6:ad:63:e2:44:1d:22:f2:2a: 0a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:2D:8A:51:35:29:F4:6A:3E:97:6B:B0:AA:BE:F6:27:AE:9F:B5 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/ICgtilE1KfRqPpdrsKq-9ieun7U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.6.0.0/16 46.190.0.0/17 62.169.192.0/18 79.107.0.0/16 80.245.160.0/20 81.92.48.0/20 84.254.0.0/18 91.140.0.0/17 109.242.0.0/16 176.58.128.0/17 185.3.220.0/22 188.73.192.0/18 212.152.80.0/22 IPv6: 2a03:f000::/29 Signature Algorithm: sha256WithRSAEncryption 86:f5:af:71:2d:a8:28:72:17:2b:a9:3e:31:70:fd:3c:dd:8b: 69:1e:e4:db:e6:d8:79:f1:13:2c:ea:f9:66:4d:c1:e0:30:e8: ae:d1:4d:80:4f:50:b7:a8:44:91:c4:ed:dc:f5:93:f5:21:5a: 12:55:77:51:c3:a3:65:17:7f:18:0b:7d:29:b5:44:1e:9c:ee: 41:b7:87:47:9c:32:5e:f8:ab:22:5a:13:be:8e:31:c0:fe:e6: 2e:fe:f1:4c:df:1b:80:9a:7d:05:fa:e5:aa:fc:9d:fd:00:e9: c9:4f:e2:16:7c:48:66:a5:77:c1:97:5c:03:21:23:33:57:a2: 92:2f:f2:f7:17:57:e0:6f:80:b7:71:8f:d1:fe:ff:67:dd:92: d6:03:56:4f:03:47:0c:7a:2a:e1:ed:91:e1:56:8d:35:88:b3: b8:19:59:86:28:de:7c:8f:07:ee:99:33:30:fa:fd:4a:36:f2: 2c:f8:88:f1:14:0e:52:59:8f:25:ab:a7:58:83:8f:27:71:d1: 11:bb:50:bd:e3:52:e7:37:19:e3:de:39:c8:96:bb:d7:e1:2b: 7d:2b:ae:1d:84:48:4f:2b:1a:d8:72:d0:71:7d:52:96:4c:dc: 4c:26:ae:8d:cf:61:2a:24:d0:74:17:3f:0a:4e:4c:c1:89:4d: 81:f3:aa:11 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt7NnNdMuOvyxjFJscYRke0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI4MmQ4YTUxMzUyOWY0NmEzZTk3NmJiMGFhYmVmNjI3YWU5ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5mIDWM68UGiT2ldX0ejaX1uFLOG 60bSMX6ZgFOVM4NvO+WVzLMXmTbAISFNMEcK9EPn+MTQMB/jEUXF/kLg6QAmBG27 2O0Dotp8zx/0jy3fhjALUdBl5lmwHYaTtZ9vruhNEFrZp68wRruZSW0ue98ewoLG jjJbvP8onDtku3cHVWxA37duu0rTVjKDc25TmiEYdBIIjUkE4T+jweVc4ZFQsYi5 6ohP8UnXYeo31YAlQXQqAc+G0MZkbvQ93K9uzCNiyj1fgHMC74Q5keLW2n6ueEck 4itRIVE+ASTvJxVC92OdV94LnYNqDHXr2dQEvq5D1Y/GrWPiRB0i8ioKDwIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFCAoLYpRNSn0aj6Xa7CqvvYnrp+1MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvSUNndGlsRTFLZlJxUHBkcnNLcS05aWV1bjdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBRBAIAATBLAwMAJQYDBAcu vgADBAY+qcADAwBPawMEBFD1oAMEBFFcMAMEBlT+AAMEB1uMAAMDAG3yAwQHsDqA AwQCuQPcAwQGvEnAAwQC1JhQMA0EAgACMAcDBQMqA/AAMA0GCSqGSIb3DQEBCwUA A4IBAQCG9a9xLagochcrqT4xcP083YtpHuTb5th58RMs6vlmTcHgMOiu0U2AT1C3 qESRxO3c9ZP1IVoSVXdRw6NlF38YC30ptUQenO5Bt4dHnDJe+KsiWhO+jjHA/uYu /vFM3xuAmn0F+uWq/J39AOnJT+IWfEhmpXfBl1wDISMzV6KSL/L3F1fgb4C3cY/R /v9n3ZLWA1ZPA0cMeirh7ZHhVo01iLO4GVmGKN58jwfumTMw+v1KNvIs+IjxFA5S WY8lq6dYg48ncdERu1C941LnNxnj3jnIlrvX4St9K64dhEhPKxrYctBxfVKWTNxM Jq6Nz2EqJNB0Fz8KTkzBiU2B86oR -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:30 2026 by rpki-client