This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/I3IHAQxug4_1HmrgrU3KXo2mQRg.roa File: I3IHAQxug4_1HmrgrU3KXo2mQRg.roa (raw, json) Hash identifier: tVJzGCypdjSGtH0l+tgmxq2DhN32eao9EGkffOxQoKo= Subject key identifier: 23:72:07:01:0C:6E:83:8F:F5:1E:6A:E0:AD:4D:CA:5E:8D:A6:41:18 Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Certificate serial: 019B7E3756CAD5AB63E381CDC2D06C70258D Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/I3IHAQxug4_1HmrgrU3KXo2mQRg.roa Signing time: Fri 02 Jan 2026 10:18:34 +0000 ROA not before: Fri 02 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51188 IP address blocks: 185.166.28.0/22 maxlen: 24 193.28.203.0/24 maxlen: 24 193.93.132.0/22 maxlen: 22 194.28.0.0/22 maxlen: 22 2001:67c:25c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:56:ca:d5:ab:63:e3:81:cd:c2:d0:6c:70:25:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Validity Not Before: Jan 2 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=237207010c6e838ff51e6ae0ad4dca5e8da64118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:47:d2:98:2a:61:1d:c6:d0:f8:ae:01:41:ca: bb:a7:0c:b6:b8:db:32:14:e2:23:c0:76:e4:66:b7: 9d:ce:d7:c7:93:76:cb:d3:ae:9b:21:57:e3:d1:bd: 0c:5d:bc:60:43:2f:c2:53:e2:ef:37:c7:99:8a:6a: 80:c1:09:cd:cc:4d:c3:0b:5e:46:b9:33:0d:1c:9b: df:78:29:c6:65:1b:8e:76:a0:c9:b7:4c:46:ec:9c: 2f:6f:92:d2:50:e6:72:3f:4b:c4:95:61:fe:e5:f0: 7d:a5:99:b7:98:84:77:35:43:0f:6d:82:45:9f:31: fe:54:a0:7b:db:3c:01:c4:d1:de:04:a2:83:43:b5: 7a:70:b1:03:86:2e:7a:97:67:94:91:95:75:c8:7b: 1b:d7:5a:69:5f:b0:80:48:b5:43:0e:15:d0:72:cd: 98:ef:4a:20:3c:b5:3b:96:f2:7b:50:d7:e7:8a:04: f7:21:5e:99:df:50:0f:12:8b:60:ee:2e:92:20:fc: 60:2b:51:f2:7c:bd:3b:58:b1:cb:b9:d3:10:a5:0b: 40:6e:55:c8:13:70:50:d4:a9:e4:18:7f:ef:e7:7d: 59:99:05:e0:05:db:77:64:43:53:ad:21:53:19:00: c2:44:92:01:e7:e5:8a:13:30:31:80:5b:61:20:8f: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:72:07:01:0C:6E:83:8F:F5:1E:6A:E0:AD:4D:CA:5E:8D:A6:41:18 X509v3 Authority Key Identifier: keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/I3IHAQxug4_1HmrgrU3KXo2mQRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.166.28.0/22 193.28.203.0/24 193.93.132.0/22 194.28.0.0/22 IPv6: 2001:67c:25c::/48 Signature Algorithm: sha256WithRSAEncryption ab:73:d3:74:0c:6d:e8:c5:8a:48:02:dd:dd:a1:51:76:49:56: b1:61:56:84:91:84:49:4f:33:14:95:2b:d6:c2:94:97:24:89: c4:fd:9e:83:1b:ae:23:e4:ad:e1:36:23:91:44:23:d9:01:4a: ee:ed:4a:fe:52:4a:8b:c7:d7:fc:03:1d:42:62:4a:8a:7a:d5: 29:26:f0:26:ad:64:09:b4:d2:ee:51:f2:09:db:89:99:37:e2: c1:73:ea:33:11:ea:c0:05:0f:c3:11:c4:1a:86:db:7d:53:d4: 68:af:ff:90:3c:a6:59:ee:b2:59:67:3c:8f:9b:20:30:45:16: 94:26:1c:43:bf:c9:04:fd:3b:6b:51:7f:a1:85:da:bd:97:00: 68:cd:84:bf:a6:08:63:a1:55:e3:32:1a:f7:4f:f7:e7:4f:c4: 77:30:2f:a8:02:e7:63:ba:5b:9d:ed:87:74:e5:30:ff:15:1b: 13:c9:80:f7:27:b0:d9:7b:76:6d:49:c0:b9:8c:af:ac:f5:39: f6:87:be:d2:f1:14:f5:32:e2:41:af:37:b9:cf:0d:c5:7a:a7: f5:13:81:c6:3f:4d:e9:af:a4:4d:66:86:81:6e:b2:f5:6c:39: 00:46:1f:57:d5:46:b4:98:87:75:50:d0:c2:28:12:fa:0c:c4: ee:b3:2e:59 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt+N1bK1atj44HNwtBscCWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz MTczNjIwHhcNMjYwMTAyMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzcyMDcwMTBjNmU4MzhmZjUxZTZhZTBhZDRkY2E1ZThkYTY0MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEfSmCphHcbQ+K4BQcq7pwy2uNsy FOIjwHbkZredztfHk3bL066bIVfj0b0MXbxgQy/CU+LvN8eZimqAwQnNzE3DC15G uTMNHJvfeCnGZRuOdqDJt0xG7Jwvb5LSUOZyP0vElWH+5fB9pZm3mIR3NUMPbYJF nzH+VKB72zwBxNHeBKKDQ7V6cLEDhi56l2eUkZV1yHsb11ppX7CASLVDDhXQcs2Y 70ogPLU7lvJ7UNfnigT3IV6Z31APEotg7i6SIPxgK1HyfL07WLHLudMQpQtAblXI E3BQ1KnkGH/v531ZmQXgBdt3ZENTrSFTGQDCRJIB5+WKEzAxgFthII93lQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFCNyBwEMboOP9R5q4K1Nyl6NpkEYMB8GA1UdIwQY MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt OWU3MWY2YTg0ODAxLzEvSTNJSEFReHVnNF8xSG1yZ3JVM0tYbzJtUVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCuaYcAwQA wRzLAwQCwV2EAwQCwhwAMA8EAgACMAkDBwAgAQZ8AlwwDQYJKoZIhvcNAQELBQAD ggEBAKtz03QMbejFikgC3d2hUXZJVrFhVoSRhElPMxSVK9bClJckicT9noMbriPk reE2I5FEI9kBSu7tSv5SSovH1/wDHUJiSop61Skm8CatZAm00u5R8gnbiZk34sFz 6jMR6sAFD8MRxBqG231T1Giv/5A8plnusllnPI+bIDBFFpQmHEO/yQT9O2tRf6GF 2r2XAGjNhL+mCGOhVeMyGvdP9+dPxHcwL6gC52O6W53th3TlMP8VGxPJgPcnsNl7 dm1JwLmMr6z1OfaHvtLxFPUy4kGvN7nPDcV6p/UTgcY/TemvpE1mhoFusvVsOQBG H1fVRrSYh3VQ0MIoEvoMxO6zLlk= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:28 2026 by rpki-client