This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/iGAec5WLgxQuZO87yGrv6vRcxNk.roa File: iGAec5WLgxQuZO87yGrv6vRcxNk.roa (raw, json) Hash identifier: qbtBIjuoPTdaV1pke2Rgv7Qz00a7lyCwRwSyFcFeCb8= Subject key identifier: 88:60:1E:73:95:8B:83:14:2E:64:EF:3B:C8:6A:EF:EA:F4:5C:C4:D9 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CE247BC106B8E76A0C854E4108AE Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/iGAec5WLgxQuZO87yGrv6vRcxNk.roa Signing time: Fri 02 Jan 2026 14:21:34 +0000 ROA not before: Fri 02 Jan 2026 14:21:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200081 IP address blocks: 185.236.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ce:24:7b:c1:06:b8:e7:6a:0c:85:4e:41:08:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88601e73958b83142e64ef3bc86aefeaf45cc4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:50:43:ae:f9:a8:db:ae:58:8e:2d:a8:cc: 79:38:0b:e7:35:2a:04:d5:0e:ab:26:c1:fd:a3:13: 4d:a4:ef:3e:bf:2a:d9:41:e8:dd:e8:17:cb:e9:34: 92:16:d0:77:10:9d:ef:ae:1d:f7:55:1d:9d:f7:0e: cc:1c:98:85:d6:08:30:15:a9:82:03:80:81:f0:b7: 8b:37:26:1c:db:9c:3e:6b:4f:2d:80:99:41:fb:37: 89:03:62:d8:a9:6b:47:e3:6b:d8:7b:65:90:77:04: 5a:2b:7c:c0:fd:07:f2:1a:ef:bb:99:39:28:a1:8b: ac:91:96:0b:21:ec:c6:21:b2:3b:f6:78:28:7b:52: 0c:50:db:d7:2e:4e:c2:f3:c2:50:f9:d0:59:f8:8b: 8b:09:9b:ac:b2:27:f7:92:bd:a1:8d:5f:29:4a:b7: b0:8d:d1:a7:df:3d:41:20:95:c5:c8:56:29:cc:46: 17:9e:1a:31:86:39:80:02:ee:47:76:01:a3:32:85: 11:4d:49:dd:7f:55:f6:fe:7d:63:70:5e:1a:d6:0c: e3:1d:c8:94:56:6a:21:c6:cf:52:2c:16:03:95:f0: b3:84:72:f7:9c:25:e4:5a:51:69:4d:22:8a:1d:58: 8b:c0:fa:cd:9d:7f:ee:8a:46:8f:f4:66:15:28:90: 03:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:60:1E:73:95:8B:83:14:2E:64:EF:3B:C8:6A:EF:EA:F4:5C:C4:D9 X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/iGAec5WLgxQuZO87yGrv6vRcxNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.9.0/24 Signature Algorithm: sha256WithRSAEncryption 53:98:eb:e6:be:3b:87:0f:0d:b4:7f:84:4f:58:34:7f:c4:44: da:e3:1f:ab:3c:db:8d:36:6f:2c:83:f3:fa:25:47:55:8d:77: ce:23:f0:c1:18:ab:7c:dc:80:00:fb:a6:f3:ed:1f:f4:81:2c: 65:e3:97:66:06:b9:43:14:ec:f8:96:4a:a6:fa:0c:a5:b9:f8: b0:71:63:d8:b9:f3:3f:30:e5:8f:3d:cb:3d:97:7d:9b:db:c2: 56:96:e1:5f:df:14:9d:2a:ed:4e:ed:c9:52:25:af:dd:79:7a: bb:64:31:74:93:87:d0:89:a9:a7:2c:22:f3:e6:ed:f4:5e:bb: 02:69:f2:cc:31:d8:25:db:84:43:86:7e:1d:55:22:98:e8:49: cf:52:4a:af:1e:f4:48:d3:75:b1:00:07:51:70:8c:a4:3d:cc: 0d:00:8b:06:fb:3b:c3:9f:99:e2:04:60:09:30:c3:b6:8b:1c: d8:c8:eb:ef:65:d4:8a:72:b6:54:c3:20:0a:d1:29:94:8f:94: 3e:55:e5:4c:ec:d9:f6:30:15:ca:b6:14:49:99:d9:4b:19:de: 41:5f:0a:5f:88:55:2b:73:24:a0:0c:9b:c7:12:50:88:b9:17: 10:b6:aa:b5:e5:27:6f:fb:ba:37:5d:df:f1:e9:56:10:21:f1: df:f6:b3:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fc4ke8EGuOdqDIVOQQiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODYwMWU3Mzk1OGI4MzE0MmU2NGVmM2JjODZhZWZlYWY0NWNjNGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJQQ675qNuuWI4tqMx5OAvnNSoE 1Q6rJsH9oxNNpO8+vyrZQejd6BfL6TSSFtB3EJ3vrh33VR2d9w7MHJiF1ggwFamC A4CB8LeLNyYc25w+a08tgJlB+zeJA2LYqWtH42vYe2WQdwRaK3zA/QfyGu+7mTko oYuskZYLIezGIbI79ngoe1IMUNvXLk7C88JQ+dBZ+IuLCZussif3kr2hjV8pSrew jdGn3z1BIJXFyFYpzEYXnhoxhjmAAu5HdgGjMoURTUndf1X2/n1jcF4a1gzjHciU Vmohxs9SLBYDlfCzhHL3nCXkWlFpTSKKHViLwPrNnX/uikaP9GYVKJADtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhgHnOVi4MULmTvO8hq7+r0XMTZMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvaUdBZWM1V0xneFF1Wk84N3lHcnY2dlJjeE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuewJMA0G CSqGSIb3DQEBCwUAA4IBAQBTmOvmvjuHDw20f4RPWDR/xETa4x+rPNuNNm8sg/P6 JUdVjXfOI/DBGKt83IAA+6bz7R/0gSxl45dmBrlDFOz4lkqm+gylufiwcWPYufM/ MOWPPcs9l32b28JWluFf3xSdKu1O7clSJa/deXq7ZDF0k4fQiamnLCLz5u30XrsC afLMMdgl24RDhn4dVSKY6EnPUkqvHvRI03WxAAdRcIykPcwNAIsG+zvDn5niBGAJ MMO2ixzYyOvvZdSKcrZUwyAK0SmUj5Q+VeVM7Nn2MBXKthRJmdlLGd5BXwpfiFUr cySgDJvHElCIuRcQtqq15Sdv+7o3Xd/x6VYQIfHf9rM0 -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:20 2026 by rpki-client