This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/iCGtMcKWAgHtdBjYxb9RAqEOB7w.roa File: iCGtMcKWAgHtdBjYxb9RAqEOB7w.roa (raw, json) Hash identifier: guUNmnJF7IxeIWyJsGQHdkbHY/AzsyJbtsB8emR784k= Subject key identifier: 88:21:AD:31:C2:96:02:01:ED:74:18:D8:C5:BF:51:02:A1:0E:07:BC Certificate issuer: /CN=58e02f2ca81ab802939530156e9631b18f515840 Certificate serial: 019C00411489FBCD5AB59EDCC51E75A4099B Authority key identifier: 58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/iCGtMcKWAgHtdBjYxb9RAqEOB7w.roa Signing time: Tue 27 Jan 2026 16:19:50 +0000 ROA not before: Tue 27 Jan 2026 16:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44925 IP address blocks: 89.127.232.0/22 maxlen: 22 89.147.108.0/22 maxlen: 22 93.95.224.0/21 maxlen: 21 185.112.144.0/22 maxlen: 22 195.246.230.0/23 maxlen: 23 2a00:5ee0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.mft rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:41:14:89:fb:cd:5a:b5:9e:dc:c5:1e:75:a4:09:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e02f2ca81ab802939530156e9631b18f515840 Validity Not Before: Jan 27 16:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8821ad31c2960201ed7418d8c5bf5102a10e07bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:dd:95:29:33:72:91:e7:1c:28:fb:6d:46: 1a:51:3c:88:b0:6d:de:64:88:b4:57:a4:ae:e8:4f: ef:18:24:b3:8e:7c:30:f1:7a:3f:83:21:91:a1:ef: 57:f4:e1:1e:58:19:e7:0f:fb:32:00:f5:63:c8:57: 5d:bd:b8:53:03:26:e0:ab:e8:75:49:57:72:c9:98: f3:29:cb:2f:8f:57:7f:e5:45:ce:71:13:83:5e:a8: 87:29:27:b6:de:36:52:cf:0e:66:4f:cb:0c:10:b5: ad:12:c6:36:ff:db:46:40:be:12:c3:a2:c3:3b:98: 09:0e:86:0d:2f:4f:4d:67:65:bc:4e:b0:76:1f:88: be:25:d0:5b:25:fe:40:db:58:90:60:49:f5:7e:25: 8d:da:28:ac:d2:19:a5:30:41:93:da:ce:12:28:78: 76:93:21:5f:3e:3d:60:f2:e6:d4:92:b7:45:b5:c9: 73:ec:6b:57:a9:fb:d6:38:cf:99:21:d2:05:c3:db: 98:6a:6c:04:8f:7c:45:ec:23:ab:d1:19:2d:8a:34: a3:9a:f5:98:81:9f:5f:3c:77:f0:19:73:f1:92:0e: b8:6c:ec:e8:6a:a2:cc:51:89:d6:4f:9c:c2:53:25: 31:ee:51:de:9a:91:33:64:96:20:e1:d7:0e:6e:b4: d9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:21:AD:31:C2:96:02:01:ED:74:18:D8:C5:BF:51:02:A1:0E:07:BC X509v3 Authority Key Identifier: keyid:58:E0:2F:2C:A8:1A:B8:02:93:95:30:15:6E:96:31:B1:8F:51:58:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOAvLKgauAKTlTAVbpYxsY9RWEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/iCGtMcKWAgHtdBjYxb9RAqEOB7w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9f8728-335e-4f7b-a1dc-d48d13a4de38/1/WOAvLKgauAKTlTAVbpYxsY9RWEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.127.232.0/22 89.147.108.0/22 93.95.224.0/21 185.112.144.0/22 195.246.230.0/23 IPv6: 2a00:5ee0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:4b:d6:a0:1b:a0:69:bb:1d:e7:b0:b0:b5:ec:3e:5e:03:a9: b6:9d:70:90:bd:25:7e:0e:cd:67:62:07:54:4d:7f:2a:0a:b9: 77:d6:bb:dc:8e:88:ac:74:37:85:be:70:cb:09:d5:a9:98:d9: de:85:14:34:36:82:6a:89:7a:5d:f4:05:e9:b5:c2:c0:32:fc: c6:bf:92:01:a4:19:6c:c3:87:9f:83:78:83:99:da:5b:a1:d7: 53:19:16:d9:31:01:15:91:4b:82:b8:69:f9:01:40:75:0d:fa: 50:dc:6f:4f:62:65:01:91:da:3c:7f:60:f4:2a:9d:16:12:4a: 0c:c1:55:f4:15:23:de:74:3a:12:f3:ae:92:e9:10:86:e8:69: 8f:37:57:50:03:57:27:82:93:36:bd:75:c6:24:6d:73:d0:bb: 2f:ec:84:42:d8:b4:34:0b:81:a8:52:67:1e:8b:9e:24:d2:55: d2:7c:29:94:14:77:75:ef:bb:82:fb:6a:44:3c:a1:f0:77:74: 27:96:ad:18:98:2d:c5:82:bf:b9:75:29:ce:c6:98:d3:0d:96: 8d:03:f3:ce:90:12:d0:7f:ff:bd:5c:f5:2f:13:e3:a5:b0:d0: 2f:a3:1c:2e:f7:ae:de:34:be:ff:c6:7e:d7:88:de:c3:13:03: fa:7c:b6:dd -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZwAQRSJ+81atZ7cxR51pAmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTAyZjJjYTgxYWI4MDI5Mzk1MzAxNTZlOTYzMWIxOGY1 MTU4NDAwHhcNMjYwMTI3MTYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODIxYWQzMWMyOTYwMjAxZWQ3NDE4ZDhjNWJmNTEwMmExMGUwN2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSDdlSkzcpHnHCj7bUYaUTyIsG3e ZIi0V6Su6E/vGCSzjnww8Xo/gyGRoe9X9OEeWBnnD/syAPVjyFddvbhTAybgq+h1 SVdyyZjzKcsvj1d/5UXOcRODXqiHKSe23jZSzw5mT8sMELWtEsY2/9tGQL4Sw6LD O5gJDoYNL09NZ2W8TrB2H4i+JdBbJf5A21iQYEn1fiWN2iis0hmlMEGT2s4SKHh2 kyFfPj1g8ubUkrdFtclz7GtXqfvWOM+ZIdIFw9uYamwEj3xF7COr0RktijSjmvWY gZ9fPHfwGXPxkg64bOzoaqLMUYnWT5zCUyUx7lHempEzZJYg4dcObrTZAwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIghrTHClgIB7XQY2MW/UQKhDge8MB8GA1UdIwQY MBaAFFjgLyyoGrgCk5UwFW6WMbGPUVhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMt ZDQ4ZDEzYTRkZTM4LzEvaUNHdE1jS1dBZ0h0ZEJqWXhiOVJBcUVPQjd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC85Zjg3MjgtMzM1ZS00ZjdiLWExZGMtZDQ4ZDEzYTRkZTM4 LzEvV09BdkxLZ2F1QUtUbFRBVmJwWXhzWTlSV0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCWX/oAwQC WZNsAwQDXV/gAwQCuXCQAwQBw/bmMA0EAgACMAcDBQAqAF7gMA0GCSqGSIb3DQEB CwUAA4IBAQA/S9agG6Bpux3nsLC17D5eA6m2nXCQvSV+Ds1nYgdUTX8qCrl31rvc joisdDeFvnDLCdWpmNnehRQ0NoJqiXpd9AXptcLAMvzGv5IBpBlsw4efg3iDmdpb oddTGRbZMQEVkUuCuGn5AUB1DfpQ3G9PYmUBkdo8f2D0Kp0WEkoMwVX0FSPedDoS 866S6RCG6GmPN1dQA1cngpM2vXXGJG1z0Lsv7IRC2LQ0C4GoUmcei54k0lXSfCmU FHd177uC+2pEPKHwd3Qnlq0YmC3Fgr+5dSnOxpjTDZaNA/POkBLQf/+9XPUvE+Ol sNAvoxwu967eNL7/xn7XiN7DEwP6fLbd -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:38 2026 by rpki-client