This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/iTS27Wceu4G1ENitmEp2HFJ6ueo.roa File: iTS27Wceu4G1ENitmEp2HFJ6ueo.roa (raw, json) Hash identifier: +lhDbLjTqzt99j8T39MOW36oWk4LOFaRY5Ody7PJMbo= Subject key identifier: 89:34:B6:ED:67:1E:BB:81:B5:10:D8:AD:98:4A:76:1C:52:7A:B9:EA Certificate issuer: /CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895 Certificate serial: 019B78A228BD4D76694AB0CEB115DF8F7C65 Authority key identifier: A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/iTS27Wceu4G1ENitmEp2HFJ6ueo.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206642 IP address blocks: 185.179.140.0/24 maxlen: 24 185.179.141.0/24 maxlen: 24 185.179.142.0/24 maxlen: 24 185.179.143.0/24 maxlen: 24 2a0a:8780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.mft rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:28:bd:4d:76:69:4a:b0:ce:b1:15:df:8f:7c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ab79857e68c0205cce2f11a5387a6afa1f8895 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8934b6ed671ebb81b510d8ad984a761c527ab9ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:69:b9:63:dc:35:68:43:0f:ea:e6:9f:83: 3a:99:ee:59:33:83:8c:e6:9e:3f:30:36:a4:3f:a7: 36:8b:9b:e9:84:e6:51:87:8a:ef:eb:5e:92:0f:2a: 50:85:8b:5e:13:65:b9:64:34:f2:63:58:9d:c0:07: fb:68:22:56:6a:f2:87:2e:4b:7b:eb:d6:5a:22:5a: 95:2f:d4:94:e8:45:29:03:f6:2d:22:ed:28:36:a2: 7f:bd:d7:b9:72:a3:75:86:f0:83:3a:19:a5:c3:33: 2c:ed:15:38:f0:f1:5a:3b:a3:14:6f:8d:dd:c4:11: 8d:f4:f3:7c:05:c6:cc:ef:11:cc:f1:9a:3c:4f:e0: f4:c6:eb:c8:8c:3c:51:b1:00:25:c4:9e:7c:93:c6: ac:20:6d:e5:de:85:3a:10:3d:2e:7a:9b:e8:97:8a: ff:f0:03:6d:e4:29:c3:6d:a5:b3:df:d2:55:85:2d: 5b:95:07:97:da:be:17:87:c5:98:17:af:6f:a0:a3: 49:ed:5d:04:3d:e4:b5:ff:7a:53:c1:c0:6c:6a:1d: 06:60:29:13:cb:9a:ec:3f:17:bb:b0:6d:de:34:35: 07:6d:09:dd:b9:92:0d:2a:53:5a:96:f0:14:54:7d: 78:94:f3:3e:7c:ea:08:d6:93:b6:b5:80:6b:01:1b: 8e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:34:B6:ED:67:1E:BB:81:B5:10:D8:AD:98:4A:76:1C:52:7A:B9:EA X509v3 Authority Key Identifier: keyid:A5:AB:79:85:7E:68:C0:20:5C:CE:2F:11:A5:38:7A:6A:FA:1F:88:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pat5hX5owCBczi8RpTh6avofiJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/iTS27Wceu4G1ENitmEp2HFJ6ueo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e2a55c-b5e6-499a-b729-1e58ac87924a/1/pat5hX5owCBczi8RpTh6avofiJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.140.0/22 IPv6: 2a0a:8780::/32 Signature Algorithm: sha256WithRSAEncryption 11:8f:b0:1d:f1:f3:00:60:98:0a:11:8d:6b:72:05:3b:c2:6e: b2:aa:f4:6b:b0:dd:bb:ea:b1:94:dd:09:6f:0d:c2:de:ac:a1: fc:c3:bf:f7:72:36:dc:0d:e2:8b:9b:a7:23:f2:aa:0e:b9:0d: 13:bc:2c:fc:4f:ed:ca:30:07:5e:4a:ee:f6:58:f0:f4:00:bf: ca:a4:7a:44:b2:25:67:e2:34:d6:47:62:e0:c8:53:99:65:0e: 70:0b:1e:52:b5:d9:a7:54:c1:04:8f:4b:1d:c7:60:45:fa:ac: af:6a:db:17:fa:37:2d:3f:5c:5e:db:1e:ec:57:d2:e7:62:0f: c9:f4:ec:97:78:5c:80:61:f2:cc:99:9e:36:c8:f7:c1:59:24: 8b:0a:a6:29:ce:37:dc:e5:80:6b:11:24:dd:c7:48:c2:bf:26: cc:19:74:de:b8:f5:94:e5:90:89:2c:9b:c1:f5:dd:74:08:44: 43:77:ff:af:f4:19:a8:9b:9e:be:69:82:f8:08:69:3f:05:d3: 4f:f4:1c:a8:04:16:7e:af:06:84:e7:60:e2:b6:e9:de:1b:d9: b8:3f:a2:81:bf:5a:c1:0e:e5:81:36:16:25:ca:b6:41:22:f5: 76:cb:99:6f:45:b9:19:8d:04:e0:71:c9:57:85:0c:8f:21:89: 62:1e:99:a2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4oii9TXZpSrDOsRXfj3xlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWI3OTg1N2U2OGMwMjA1Y2NlMmYxMWE1Mzg3YTZhZmEx Zjg4OTUwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTM0YjZlZDY3MWViYjgxYjUxMGQ4YWQ5ODRhNzYxYzUyN2FiOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMppuWPcNWhDD+rmn4M6me5ZM4OM 5p4/MDakP6c2i5vphOZRh4rv616SDypQhYteE2W5ZDTyY1idwAf7aCJWavKHLkt7 69ZaIlqVL9SU6EUpA/YtIu0oNqJ/vde5cqN1hvCDOhmlwzMs7RU48PFaO6MUb43d xBGN9PN8BcbM7xHM8Zo8T+D0xuvIjDxRsQAlxJ58k8asIG3l3oU6ED0uepvol4r/ 8ANt5CnDbaWz39JVhS1blQeX2r4Xh8WYF69voKNJ7V0EPeS1/3pTwcBsah0GYCkT y5rsPxe7sG3eNDUHbQnduZINKlNalvAUVH14lPM+fOoI1pO2tYBrARuOpQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIk0tu1nHruBtRDYrZhKdhxSernqMB8GA1UdIwQY MBaAFKWreYV+aMAgXM4vEaU4emr6H4iVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3Mjkt MWU1OGFjODc5MjRhLzEvaVRTMjdXY2V1NEcxRU5pdG1FcDJIRko2dWVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lMmE1NWMtYjVlNi00OTlhLWI3MjktMWU1OGFjODc5MjRh LzEvcGF0NWhYNW93Q0Jjemk4UnBUaDZhdm9maUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCubOMMA0E AgACMAcDBQAqCoeAMA0GCSqGSIb3DQEBCwUAA4IBAQARj7Ad8fMAYJgKEY1rcgU7 wm6yqvRrsN276rGU3QlvDcLerKH8w7/3cjbcDeKLm6cj8qoOuQ0TvCz8T+3KMAde Su72WPD0AL/KpHpEsiVn4jTWR2LgyFOZZQ5wCx5StdmnVMEEj0sdx2BF+qyvatsX +jctP1xe2x7sV9LnYg/J9OyXeFyAYfLMmZ42yPfBWSSLCqYpzjfc5YBrESTdx0jC vybMGXTeuPWU5ZCJLJvB9d10CERDd/+v9Bmom56+aYL4CGk/BdNP9ByoBBZ+rwaE 52DituneG9m4P6KBv1rBDuWBNhYlyrZBIvV2y5lvRbkZjQTgcclXhQyPIYliHpmi -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:45 2026 by rpki-client