This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa
File: Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa (raw, json)
Hash identifier: zEpFycfVYnZq5Lv9INkh/ljd5iU1KyImwbjPqDc/m94=
Subject key identifier: 22:AB:F0:DA:A7:18:36:2B:03:45:A6:16:28:85:DB:35:9E:41:4A:01
Certificate issuer: /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial: 019B791079AB84E728A2453F50165C5B9A22
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa
Signing time: Thu 01 Jan 2026 10:18:01 +0000
ROA not before: Thu 01 Jan 2026 10:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51588
IP address blocks: 194.56.92.0/22 maxlen: 22
194.56.92.0/23 maxlen: 23
194.56.92.0/24 maxlen: 24
194.56.94.0/23 maxlen: 23
194.56.94.0/24 maxlen: 24
194.56.95.0/24 maxlen: 24
2a06:3100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:10:79:ab:84:e7:28:a2:45:3f:50:16:5c:5b:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Validity
Not Before: Jan 1 10:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22abf0daa718362b0345a6162885db359e414a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0a:f4:fe:e5:0d:e9:a5:6a:92:a0:46:c2:41:
06:9b:66:31:2c:41:2f:cf:d2:c7:46:b0:48:51:e9:
a3:fe:72:e0:15:1c:54:34:66:c5:39:a1:75:ef:0f:
e0:f9:b5:f8:63:db:d2:74:91:09:58:4e:f3:ac:41:
aa:ac:80:6f:1d:d8:17:ee:96:0e:1e:ce:98:07:27:
0d:e6:fd:06:6e:1a:c3:64:67:fc:cf:be:3e:f2:fb:
37:83:19:e5:9f:a1:f5:17:de:fd:75:56:e8:4a:b8:
dd:ba:10:85:e7:13:fd:81:1c:dc:69:3c:8a:4e:f8:
17:cf:c1:15:e1:c0:02:11:01:a5:04:28:60:7c:ee:
cf:94:bc:df:94:17:af:47:5b:7d:9e:2d:36:ce:6e:
e3:d3:94:38:77:7d:66:78:c6:f4:cb:d5:a6:b8:46:
e7:31:60:d6:20:b5:ab:13:d2:eb:aa:c1:a7:e4:63:
28:98:9e:d9:83:6c:e1:53:f1:36:02:32:43:26:b3:
07:06:04:ee:dc:de:96:40:c8:96:24:59:21:c9:46:
b5:14:87:e8:d3:ac:b1:ee:48:71:96:02:9d:ad:32:
8a:1b:66:5d:c3:b5:13:25:5d:d4:c6:67:85:1a:94:
5a:52:42:06:05:01:8c:5e:f1:72:6f:1d:6c:1b:c8:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AB:F0:DA:A7:18:36:2B:03:45:A6:16:28:85:DB:35:9E:41:4A:01
X509v3 Authority Key Identifier:
keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/Iqvw2qcYNisDRaYWKIXbNZ5BSgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.92.0/22
IPv6:
2a06:3100::/29
Signature Algorithm: sha256WithRSAEncryption
0f:4d:db:8a:e7:37:31:3b:39:a3:0d:cb:a5:19:e5:d8:b2:ae:
46:f3:95:cd:ab:1a:b3:27:2c:05:de:43:9b:03:00:bd:27:45:
08:07:f4:9a:e6:0a:d8:8a:54:5f:84:e9:db:5c:b7:90:a4:e1:
3b:93:fa:8f:36:df:af:3a:da:44:af:0b:16:42:04:95:89:69:
e2:9e:37:22:29:05:ec:8e:db:cf:cd:9e:d7:b6:3f:d8:b8:fd:
08:74:c4:1b:69:50:35:af:68:2a:6c:50:46:89:59:6b:cc:b0:
7e:5e:8c:41:88:80:67:36:30:b1:4b:ae:05:32:ef:5a:eb:4d:
31:8d:e0:27:a8:5e:cc:62:c9:97:f1:97:69:85:23:df:33:2f:
0d:84:91:d5:f9:95:c9:7d:ed:c3:37:d8:de:5c:11:c8:f2:ae:
1f:44:7d:ef:51:7a:0e:37:84:ca:d8:42:ad:4a:84:75:ed:c3:
c6:e2:08:10:4c:a7:ca:db:2d:d4:0b:b6:41:d8:e9:49:ea:65:
f7:07:39:13:32:39:83:6f:65:c0:d5:28:ac:c9:a9:7a:d3:2e:
2a:72:68:04:9b:a0:b1:dc:87:7d:25:52:db:39:64:50:f8:a8:
e2:0b:10:2a:ec:20:50:28:1a:84:ff:02:a1:ef:b1:46:08:72:
4b:84:1d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:00:51 2026 by rpki-client