This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa File: IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa (raw, json) Hash identifier: WrbsU2ay1yqb6dXswy4M2OA4fKF6n6NbHM9kyKcjgco= Subject key identifier: 20:E8:A7:2D:A2:F2:26:D4:73:EA:39:C2:E9:77:F7:B8:ED:DD:43:29 Certificate issuer: /CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Certificate serial: 019B7BA4DCE86814A3FA12941CB7044CDED2 Authority key identifier: 80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa Signing time: Thu 01 Jan 2026 22:19:20 +0000 ROA not before: Thu 01 Jan 2026 22:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211391 IP address blocks: 109.236.168.0/21 maxlen: 21 193.3.57.0/24 maxlen: 24 194.105.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.mft rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:dc:e8:68:14:a3:fa:12:94:1c:b7:04:4c:de:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8016ccb1ac77c7c02a4ede606df1f7ef973a0bf9 Validity Not Before: Jan 1 22:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20e8a72da2f226d473ea39c2e977f7b8eddd4329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:0f:06:e5:0e:e0:13:22:97:14:bc:d1:79: c4:77:7b:58:6e:d8:1f:db:8e:c0:b9:b8:d2:6b:55: 8d:41:81:46:ac:ba:ea:6d:27:0c:99:69:23:10:79: f1:8f:1a:9a:28:8a:36:b7:99:ca:2c:63:cf:94:ac: 12:23:17:52:c3:12:0f:ae:e8:c8:ab:b2:f1:20:cd: 29:8d:b8:6c:3a:e0:9b:16:49:4a:ac:58:58:a2:20: a2:49:33:92:2a:1d:aa:3d:23:54:31:43:17:c9:b2: 17:65:e0:27:00:b2:84:d9:26:ed:aa:86:32:94:e0: 90:2e:b0:1e:d1:d7:bc:cb:b1:78:a2:db:26:34:70: 0e:01:c9:56:21:df:1a:7c:c0:aa:cf:ac:b7:04:94: 39:c1:4e:fa:e1:7e:e3:ac:bd:1a:d1:ff:19:b6:8d: 3e:e5:f2:46:fc:33:c0:b3:7e:e9:ff:cd:d2:70:00: 0c:a6:ba:3b:de:3d:1a:6c:b3:b9:40:25:15:c6:bb: 0d:0d:8e:d3:95:01:da:54:60:fc:85:3b:69:9f:de: 4e:99:fb:04:a3:d9:54:4d:d7:03:73:41:2a:8d:66: 76:e8:da:d7:78:f6:4b:c6:05:14:e5:5e:9d:16:98: 5f:d4:f1:b0:5b:22:7b:3c:2e:38:82:ea:c0:04:e0: 23:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E8:A7:2D:A2:F2:26:D4:73:EA:39:C2:E9:77:F7:B8:ED:DD:43:29 X509v3 Authority Key Identifier: keyid:80:16:CC:B1:AC:77:C7:C0:2A:4E:DE:60:6D:F1:F7:EF:97:3A:0B:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBbMsax3x8AqTt5gbfH375c6C_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/IOinLaLyJtRz6jnC6Xf3uO3dQyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/abc0f8-1f1f-4c65-bb85-a966ae856926/1/gBbMsax3x8AqTt5gbfH375c6C_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.236.168.0/21 193.3.57.0/24 194.105.36.0/22 Signature Algorithm: sha256WithRSAEncryption bd:9c:67:78:60:f3:71:ac:6a:27:ce:ca:4f:7d:48:e2:30:f6: e7:65:d6:e4:c5:ce:47:89:fc:8f:b7:5a:70:36:40:e9:6e:b1: da:02:fd:d9:ae:9f:cd:60:00:16:86:b4:65:5f:86:a1:f3:18: 7e:0c:90:44:47:42:ef:e1:7f:65:47:3b:ef:f8:29:ec:2e:12: 87:9a:b6:9f:95:4f:e2:19:53:89:2f:9f:4a:27:8a:e1:ae:74: 29:5e:86:50:80:bd:c7:0c:13:37:ad:38:8d:f9:f6:ec:e2:e0: 5c:44:b8:b2:21:e1:15:a3:14:f6:e8:56:5e:a5:0c:a2:66:72: 34:c6:0c:05:cb:f6:f4:79:13:ba:1d:31:27:4e:76:22:90:87: 16:04:f0:e6:76:7c:16:f4:17:de:57:51:1d:17:32:0d:92:75: 3c:ff:22:de:58:32:23:2d:3e:bf:7a:1e:49:1e:dd:53:de:89: f2:4b:d4:5d:85:c7:86:09:ae:d4:1d:88:32:9e:02:05:1e:05: ff:21:ba:1f:92:d8:d8:00:fc:cd:ca:88:69:b2:9f:c7:ff:2f: 6f:83:37:0e:f0:01:9c:a4:ce:1f:64:47:02:22:de:7f:f9:86: 9a:16:4b:f8:ed:d9:4a:59:44:c2:ce:35:07:90:5a:0a:c8:5d: f4:c2:2b:3e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pNzoaBSj+hKUHLcETN7SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMTZjY2IxYWM3N2M3YzAyYTRlZGU2MDZkZjFmN2VmOTcz YTBiZjkwHhcNMjYwMTAxMjIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGU4YTcyZGEyZjIyNmQ0NzNlYTM5YzJlOTc3ZjdiOGVkZGQ0MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywMPBuUO4BMilxS80XnEd3tYbtgf 247AubjSa1WNQYFGrLrqbScMmWkjEHnxjxqaKIo2t5nKLGPPlKwSIxdSwxIPrujI q7LxIM0pjbhsOuCbFklKrFhYoiCiSTOSKh2qPSNUMUMXybIXZeAnALKE2SbtqoYy lOCQLrAe0de8y7F4otsmNHAOAclWId8afMCqz6y3BJQ5wU764X7jrL0a0f8Zto0+ 5fJG/DPAs37p/83ScAAMpro73j0abLO5QCUVxrsNDY7TlQHaVGD8hTtpn95OmfsE o9lUTdcDc0EqjWZ26NrXePZLxgUU5V6dFphf1PGwWyJ7PC44gurABOAjBwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCDopy2i8ibUc+o5wul397jt3UMpMB8GA1UdIwQY MBaAFIAWzLGsd8fAKk7eYG3x9++XOgv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUt YTk2NmFlODU2OTI2LzEvSU9pbkxhTHlKdFJ6NmpuQzZYZjN1TzNkUXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9hYmMwZjgtMWYxZi00YzY1LWJiODUtYTk2NmFlODU2OTI2 LzEvZ0JiTXNheDN4OEFxVHQ1Z2JmSDM3NWM2Q19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDbeyoAwQA wQM5AwQCwmkkMA0GCSqGSIb3DQEBCwUAA4IBAQC9nGd4YPNxrGonzspPfUjiMPbn Zdbkxc5HifyPt1pwNkDpbrHaAv3Zrp/NYAAWhrRlX4ah8xh+DJBER0Lv4X9lRzvv +CnsLhKHmraflU/iGVOJL59KJ4rhrnQpXoZQgL3HDBM3rTiN+fbs4uBcRLiyIeEV oxT26FZepQyiZnI0xgwFy/b0eRO6HTEnTnYikIcWBPDmdnwW9BfeV1EdFzINknU8 /yLeWDIjLT6/eh5JHt1T3onyS9RdhceGCa7UHYgyngIFHgX/IbofktjYAPzNyohp sp/H/y9vgzcO8AGcpM4fZEcCIt5/+YaaFkv47dlKWUTCzjUHkFoKyF30wis+ -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:24 2026 by rpki-client