This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ib3cAwbg8C9r2aqBWyNBb5uSoms.roa File: ib3cAwbg8C9r2aqBWyNBb5uSoms.roa (raw, json) Hash identifier: KrmwOWhj2jFqWpLOhPbRuQeJTVBkN+LvN0H+FMdxOSg= Subject key identifier: 89:BD:DC:03:06:E0:F0:2F:6B:D9:AA:81:5B:23:41:6F:9B:92:A2:6B Certificate issuer: /CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Certificate serial: 019B77C6BECB16C5220BDF4E9F4208B48641 Authority key identifier: 1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ib3cAwbg8C9r2aqBWyNBb5uSoms.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209803 IP address blocks: 193.32.156.0/22 maxlen: 22 2a09:880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.mft rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:be:cb:16:c5:22:0b:df:4e:9f:42:08:b4:86:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd9a94679ec9ab33e65e069c9aa440db273e14e Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89bddc0306e0f02f6bd9aa815b23416f9b92a26b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ea:2a:9e:e2:b6:94:49:2c:09:c0:39:7c:14: ba:66:46:c9:30:57:51:4b:83:96:95:e4:44:b7:98: 06:64:79:22:60:02:66:df:61:18:6b:4e:99:3b:bf: 23:47:66:d1:dc:cb:ce:de:21:c3:d7:f6:94:33:22: b5:d1:df:6f:c3:58:e7:1e:9b:ac:98:03:d5:90:e1: cb:de:ac:ac:7e:44:e4:27:68:28:34:cd:7d:a8:fe: 23:99:d4:93:f0:a5:24:90:6e:a0:f1:9e:94:4d:4f: e3:8d:16:73:af:19:7b:ec:36:70:5c:67:36:f1:47: 0a:59:b6:25:5c:75:66:4c:c2:fd:3c:75:ab:30:bc: 0c:b2:0f:6e:a0:e9:38:ff:13:e9:ad:c5:93:68:e8: 04:bc:9e:89:24:4f:f9:f0:fc:14:58:58:9a:73:d5: 23:08:87:68:6d:37:24:a4:04:d0:b7:16:ca:bf:cc: 6b:a8:6c:99:09:f0:2e:6b:52:f5:33:a8:50:f9:98: 29:ea:d4:a9:aa:6b:a2:c4:36:8b:bd:ea:a5:3b:5b: e7:eb:c9:41:ae:05:b2:09:e8:c4:61:ad:2a:17:68: 7e:08:a7:47:12:08:f0:91:eb:4d:32:2e:33:91:64: cb:78:21:37:6c:cc:41:21:d8:08:65:67:4a:01:64: e0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BD:DC:03:06:E0:F0:2F:6B:D9:AA:81:5B:23:41:6F:9B:92:A2:6B X509v3 Authority Key Identifier: keyid:1D:D9:A9:46:79:EC:9A:B3:3E:65:E0:69:C9:AA:44:0D:B2:73:E1:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdmpRnnsmrM-ZeBpyapEDbJz4U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/ib3cAwbg8C9r2aqBWyNBb5uSoms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a3b9b9-217c-41c9-9476-27dd0ad2adf3/1/HdmpRnnsmrM-ZeBpyapEDbJz4U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.156.0/22 IPv6: 2a09:880::/29 Signature Algorithm: sha256WithRSAEncryption 64:92:e7:e5:cc:00:52:57:42:13:bf:5b:f6:e7:c7:30:bd:50: 01:54:05:86:0d:de:58:2a:b3:55:98:0f:45:f8:60:11:e1:df: 3e:ce:dc:b0:7f:8d:c0:7a:23:08:21:67:b5:23:a8:69:7d:bf: ee:93:83:a9:66:77:0b:13:7e:a2:ec:a6:d6:8d:d4:0d:3f:63: 88:b1:9f:7f:4b:69:de:d6:3c:df:4c:97:4c:5a:9a:b1:bc:a1: 70:13:85:16:e0:5d:0d:3f:7e:68:73:14:15:25:cb:39:c5:1b: 49:16:0b:de:63:b0:4e:cc:1f:19:5d:fc:0a:c9:87:99:04:69: 1b:fa:b2:a1:81:88:ae:45:14:4e:0c:81:36:f7:af:37:bf:62: 7c:48:31:0d:b9:a4:8a:2b:de:09:ad:e8:38:c7:fc:a0:0b:1f: 6e:ae:cb:02:4f:9d:e1:06:bb:2e:e2:2a:61:de:e4:a8:02:cd: 54:75:dd:22:3d:b7:14:4b:14:66:24:9a:ef:d7:aa:84:61:d2: c0:be:2c:6f:96:a5:6e:19:8e:e8:07:bf:a1:44:d1:fa:4a:db: b7:22:be:3a:6d:ce:6e:c6:ed:cc:b2:cf:ce:33:4d:02:ce:22: ea:77:30:b4:fb:74:25:68:56:42:e9:9a:fd:94:c8:b1:49:c4: ed:c5:d6:47 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xr7LFsUiC99On0IItIZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZDlhOTQ2NzllYzlhYjMzZTY1ZTA2OWM5YWE0NDBkYjI3 M2UxNGUwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWJkZGMwMzA2ZTBmMDJmNmJkOWFhODE1YjIzNDE2ZjliOTJhMjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOoqnuK2lEksCcA5fBS6ZkbJMFdR S4OWleREt5gGZHkiYAJm32EYa06ZO78jR2bR3MvO3iHD1/aUMyK10d9vw1jnHpus mAPVkOHL3qysfkTkJ2goNM19qP4jmdST8KUkkG6g8Z6UTU/jjRZzrxl77DZwXGc2 8UcKWbYlXHVmTML9PHWrMLwMsg9uoOk4/xPprcWTaOgEvJ6JJE/58PwUWFiac9Uj CIdobTckpATQtxbKv8xrqGyZCfAua1L1M6hQ+Zgp6tSpqmuixDaLveqlO1vn68lB rgWyCejEYa0qF2h+CKdHEgjwketNMi4zkWTLeCE3bMxBIdgIZWdKAWTgIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIm93AMG4PAva9mqgVsjQW+bkqJrMB8GA1UdIwQY MBaAFB3ZqUZ57JqzPmXgacmqRA2yc+FOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYt MjdkZDBhZDJhZGYzLzEvaWIzY0F3Ymc4QzlyMmFxQld5TkJiNXVTb21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hM2I5YjktMjE3Yy00MWM5LTk0NzYtMjdkZDBhZDJhZGYz LzEvSGRtcFJubnNtck0tWmVCcHlhcEVEYkp6NFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwSCcMA0E AgACMAcDBQMqCQiAMA0GCSqGSIb3DQEBCwUAA4IBAQBkkuflzABSV0ITv1v258cw vVABVAWGDd5YKrNVmA9F+GAR4d8+ztywf43AeiMIIWe1I6hpfb/uk4OpZncLE36i 7KbWjdQNP2OIsZ9/S2ne1jzfTJdMWpqxvKFwE4UW4F0NP35ocxQVJcs5xRtJFgve Y7BOzB8ZXfwKyYeZBGkb+rKhgYiuRRRODIE29683v2J8SDENuaSKK94Jreg4x/yg Cx9urssCT53hBrsu4iph3uSoAs1Udd0iPbcUSxRmJJrv16qEYdLAvixvlqVuGY7o B7+hRNH6Stu3Ir46bc5uxu3Mss/OM00CziLqdzC0+3QlaFZC6Zr9lMixScTtxdZH -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:15 2026 by rpki-client