This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/iAeIno7DuYPMqcknH3ky1fpamag.roa File: iAeIno7DuYPMqcknH3ky1fpamag.roa (raw, json) Hash identifier: rBikDYA5I4diW8X9u3Y5/eGNwfKgRt/gX9YEBMjczvE= Subject key identifier: 88:07:88:9E:8E:C3:B9:83:CC:A9:C9:27:1F:79:32:D5:FA:5A:99:A8 Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Certificate serial: 019B797E424CE37D1D7F029413523211127F Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/iAeIno7DuYPMqcknH3ky1fpamag.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 192.207.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:42:4c:e3:7d:1d:7f:02:94:13:52:32:11:12:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8807889e8ec3b983cca9c9271f7932d5fa5a99a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ce:fe:54:b5:1d:19:26:8d:8d:3b:0b:85:53: 67:3c:97:22:7e:6f:c3:00:ca:2a:19:5e:a5:5e:75: 6a:e9:81:99:af:1d:c9:1a:db:43:2b:8a:d4:3e:cc: 9b:ca:02:e2:7c:f4:1d:43:55:fe:54:2b:18:d1:c0: 08:59:af:57:dc:08:cf:7e:bb:55:b7:e1:8b:49:52: 4b:06:b5:2e:bf:fc:69:30:2f:61:96:5b:73:30:e6: 9c:c6:94:e5:00:58:b6:ac:65:09:fb:08:e1:74:af: 90:e1:dc:07:8f:5b:bd:12:0b:7d:ad:5e:09:76:62: 9d:07:4f:02:b3:f3:27:10:03:f0:fb:8b:ac:01:dc: 95:1e:4c:3e:45:75:e4:fd:02:22:8d:4e:cc:f3:6b: 58:0c:36:c5:61:11:82:4c:be:7c:77:01:03:9b:16: 5a:c6:76:20:73:39:2c:fc:ef:d7:79:24:c9:c0:61: 21:64:d7:fd:a4:c5:49:b9:fe:d7:fa:59:e0:43:30: dd:4b:c2:06:22:72:e0:50:dd:2b:74:81:16:0c:16: 1a:57:75:f1:11:d6:4d:60:6f:75:55:c4:7e:4a:67: 82:46:76:cb:e0:2e:78:81:c7:8a:65:3d:ff:63:24: 8b:17:f6:b0:6d:81:b7:86:fe:c1:03:b6:c4:d4:0f: 92:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:07:88:9E:8E:C3:B9:83:CC:A9:C9:27:1F:79:32:D5:FA:5A:99:A8 X509v3 Authority Key Identifier: keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/iAeIno7DuYPMqcknH3ky1fpamag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.207.47.0/24 Signature Algorithm: sha256WithRSAEncryption 56:be:08:8e:79:61:53:23:b2:eb:c6:e5:76:f5:a6:36:cb:9b: f6:9b:a8:11:34:3f:f3:ee:bd:e7:71:45:4f:b8:af:64:2b:63: 58:0f:73:43:18:0a:c9:b7:8c:c6:53:19:86:8b:30:f6:da:af: 78:58:70:ac:b5:33:65:bc:b6:47:c5:4a:54:99:31:fa:d0:0b: dd:e3:44:5d:ab:d5:87:8d:69:98:b2:40:8a:fd:f0:cb:45:d6: 3a:8f:94:4e:10:a7:7f:e0:da:15:4e:43:38:39:0a:66:31:1d: 4b:7d:3e:3f:36:9c:d9:de:e9:a1:1c:53:2f:b6:a8:cc:15:30: 89:c7:fb:7e:50:c3:4a:39:ee:3e:cb:ad:55:c2:a3:17:ae:21: 3b:0d:90:44:7e:67:68:5c:47:14:0d:2f:07:5d:89:fc:a8:23: f7:ca:bf:de:8a:b0:db:9a:10:41:a0:21:0f:25:5f:9a:0f:59: a5:bd:e2:2f:d3:1d:fd:00:79:68:92:68:5b:43:51:b2:81:47: 1c:cb:db:bd:63:81:0e:06:69:c3:1d:93:53:a8:8c:94:98:d8: ec:6e:8e:80:b9:b5:48:ce:e6:55:bb:01:f2:41:4f:64:1d:84: ae:a6:0e:a9:f7:48:6a:a7:ee:c8:62:a1:1d:2e:9e:22:d6:d3: d5:9e:53:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkJM430dfwKUE1IyERJ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi ZGIzYjkwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODA3ODg5ZThlYzNiOTgzY2NhOWM5MjcxZjc5MzJkNWZhNWE5OWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM7+VLUdGSaNjTsLhVNnPJcifm/D AMoqGV6lXnVq6YGZrx3JGttDK4rUPsybygLifPQdQ1X+VCsY0cAIWa9X3AjPfrtV t+GLSVJLBrUuv/xpMC9hlltzMOacxpTlAFi2rGUJ+wjhdK+Q4dwHj1u9Egt9rV4J dmKdB08Cs/MnEAPw+4usAdyVHkw+RXXk/QIijU7M82tYDDbFYRGCTL58dwEDmxZa xnYgczks/O/XeSTJwGEhZNf9pMVJuf7X+lngQzDdS8IGInLgUN0rdIEWDBYaV3Xx EdZNYG91VcR+SmeCRnbL4C54gceKZT3/YySLF/awbYG3hv7BA7bE1A+S6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgHiJ6Ow7mDzKnJJx95MtX6WpmoMB8GA1UdIwQY MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt NmEyMzhiYTE3OWNkLzEvaUFlSW5vN0R1WVBNcWNrbkgza3kxZnBhbWFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM8vMA0G CSqGSIb3DQEBCwUAA4IBAQBWvgiOeWFTI7LrxuV29aY2y5v2m6gRND/z7r3ncUVP uK9kK2NYD3NDGArJt4zGUxmGizD22q94WHCstTNlvLZHxUpUmTH60Avd40Rdq9WH jWmYskCK/fDLRdY6j5ROEKd/4NoVTkM4OQpmMR1LfT4/NpzZ3umhHFMvtqjMFTCJ x/t+UMNKOe4+y61VwqMXriE7DZBEfmdoXEcUDS8HXYn8qCP3yr/eirDbmhBBoCEP JV+aD1mlveIv0x39AHlokmhbQ1GygUccy9u9Y4EOBmnDHZNTqIyUmNjsbo6AubVI zuZVuwHyQU9kHYSupg6p90hqp+7IYqEdLp4i1tPVnlO5 -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:34 2026 by rpki-client