This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/igrteN5vqIxxznlHOmqBmnoDCxM.roa File: igrteN5vqIxxznlHOmqBmnoDCxM.roa (raw, json) Hash identifier: jDhUs8e7Zg5Ub3aoKeq6iFWO9yxzvyDpjaqplQBFShI= Subject key identifier: 8A:0A:ED:78:DE:6F:A8:8C:71:CE:79:47:3A:6A:81:9A:7A:03:0B:13 Certificate issuer: /CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9 Certificate serial: 019B7B36B4D3C24D42A6192286EB4EC5269D Authority key identifier: 39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/igrteN5vqIxxznlHOmqBmnoDCxM.roa Signing time: Thu 01 Jan 2026 20:19:01 +0000 ROA not before: Thu 01 Jan 2026 20:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30860 IP address blocks: 188.95.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.mft rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b4:d3:c2:4d:42:a6:19:22:86:eb:4e:c5:26:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3936daf03756baf83ba4f38dbe5d68cb9baceff9 Validity Not Before: Jan 1 20:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a0aed78de6fa88c71ce79473a6a819a7a030b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:45:97:75:78:3c:49:5d:ba:fa:4c:4c:8d: 80:a7:e2:6d:76:fe:e9:ef:84:79:30:bd:9d:c3:a1: 7a:de:e1:18:0f:11:f0:60:3e:26:04:82:ed:db:03: 4d:4e:4c:44:22:26:4e:9b:8f:86:52:3b:0e:8b:be: d6:2d:d9:93:cb:8c:c7:5a:66:26:40:dc:47:7e:14: 91:66:aa:e3:6a:69:35:e2:f3:71:4b:97:72:dc:14: 9a:7d:aa:ba:a8:9c:fa:86:35:57:6e:03:46:98:fc: bf:e0:c4:45:aa:d8:f2:b3:e4:d1:aa:30:5e:fc:ee: 3f:95:9e:d0:63:68:e2:19:88:88:e0:91:5f:0a:99: b6:c3:36:4d:55:ef:ca:31:e8:9e:2c:b2:ee:df:28: 83:6b:1d:40:ab:6a:e7:94:4d:60:25:e0:e8:9f:28: 36:48:3d:33:4b:fb:a1:70:16:22:ed:29:90:6c:f1: 2e:49:93:24:cd:ec:75:16:46:1a:23:42:26:c8:2c: e9:dc:9a:03:d1:09:4a:bf:6e:fa:fd:97:dd:44:80: c6:49:1f:87:bb:a6:d7:49:c8:f8:25:5b:73:1c:f0: 5b:51:71:5b:52:49:da:ce:65:18:45:64:ed:07:17: 44:70:01:5b:f2:5b:11:95:ba:74:be:2e:81:b9:14: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:ED:78:DE:6F:A8:8C:71:CE:79:47:3A:6A:81:9A:7A:03:0B:13 X509v3 Authority Key Identifier: keyid:39:36:DA:F0:37:56:BA:F8:3B:A4:F3:8D:BE:5D:68:CB:9B:AC:EF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTba8DdWuvg7pPONvl1oy5us7_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/igrteN5vqIxxznlHOmqBmnoDCxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/04ea33-83aa-4e56-98cc-f95f66d6055c/1/OTba8DdWuvg7pPONvl1oy5us7_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.89.0/24 Signature Algorithm: sha256WithRSAEncryption 49:09:ec:1d:56:34:ad:39:88:4a:46:cf:ca:ca:6b:a4:68:5c: c4:88:6b:be:d1:23:b6:8f:20:5e:41:2f:35:57:68:00:35:91: 04:8e:9c:21:a5:92:90:00:22:72:a5:d7:18:a0:a3:8a:d9:a7: 7f:81:ab:4e:06:60:25:7a:52:90:f4:08:ec:36:94:2e:bc:0d: 21:ad:cf:9d:a4:0a:2e:13:16:0b:70:0f:8f:3d:a6:21:aa:af: 11:da:fc:38:c9:71:0f:4f:34:08:6d:73:4c:5b:5a:2a:52:8a: c7:9f:c4:c5:8d:de:51:fb:ac:c5:00:02:54:a3:42:e2:73:64: 60:60:45:6d:cd:f6:12:32:c9:dd:8d:d4:e0:db:e9:61:cd:6f: 96:cf:40:46:4d:d8:48:e3:50:4e:6b:b5:2d:ea:cc:f5:67:de: 7b:6a:ad:73:e9:ec:68:69:d0:2c:5a:3c:c8:1c:75:69:a5:99: e1:3d:d8:ff:f1:0d:90:a7:d9:11:31:08:33:f7:2c:13:22:51: c6:f2:06:9f:ff:f2:e8:b8:f6:5c:5f:95:b4:06:16:6b:22:f3: 75:09:51:77:a6:a4:11:f2:5f:1e:b2:ab:40:07:6f:0d:4d:fc: 7e:a9:5b:2b:f8:26:f3:e9:bd:37:37:e7:f8:04:da:58:67:df: 12:7e:6c:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrTTwk1CphkihutOxSadMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MzZkYWYwMzc1NmJhZjgzYmE0ZjM4ZGJlNWQ2OGNiOWJh Y2VmZjkwHhcNMjYwMTAxMjAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTBhZWQ3OGRlNmZhODhjNzFjZTc5NDczYTZhODE5YTdhMDMwYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC9Fl3V4PElduvpMTI2Ap+Jtdv7p 74R5ML2dw6F63uEYDxHwYD4mBILt2wNNTkxEIiZOm4+GUjsOi77WLdmTy4zHWmYm QNxHfhSRZqrjamk14vNxS5dy3BSafaq6qJz6hjVXbgNGmPy/4MRFqtjys+TRqjBe /O4/lZ7QY2jiGYiI4JFfCpm2wzZNVe/KMeieLLLu3yiDax1Aq2rnlE1gJeDonyg2 SD0zS/uhcBYi7SmQbPEuSZMkzex1FkYaI0ImyCzp3JoD0QlKv276/ZfdRIDGSR+H u6bXScj4JVtzHPBbUXFbUknazmUYRWTtBxdEcAFb8lsRlbp0vi6BuRT53QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIoK7Xjeb6iMcc55RzpqgZp6AwsTMB8GA1UdIwQY MBaAFDk22vA3Vrr4O6Tzjb5daMubrO/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wNGVhMzMtODNhYS00ZTU2LTk4Y2Mt Zjk1ZjY2ZDYwNTVjLzEvaWdydGVONXZxSXh4em5sSE9tcUJtbm9EQ3hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8wNGVhMzMtODNhYS00ZTU2LTk4Y2MtZjk1ZjY2ZDYwNTVj LzEvT1RiYThEZFd1dmc3cFBPTnZsMW95NXVzN19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvF9ZMA0G CSqGSIb3DQEBCwUAA4IBAQBJCewdVjStOYhKRs/KymukaFzEiGu+0SO2jyBeQS81 V2gANZEEjpwhpZKQACJypdcYoKOK2ad/gatOBmAlelKQ9AjsNpQuvA0hrc+dpAou ExYLcA+PPaYhqq8R2vw4yXEPTzQIbXNMW1oqUorHn8TFjd5R+6zFAAJUo0Lic2Rg YEVtzfYSMsndjdTg2+lhzW+Wz0BGTdhI41BOa7Ut6sz1Z957aq1z6exoadAsWjzI HHVppZnhPdj/8Q2Qp9kRMQgz9ywTIlHG8gaf//LouPZcX5W0BhZrIvN1CVF3pqQR 8l8esqtAB28NTfx+qVsr+Cbz6b03N+f4BNpYZ98SfmyK -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:45 2026 by rpki-client