This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa File: IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa (raw, json) Hash identifier: paS2HrmO9LI/c37GN0LFXIStqUHvKAKZhc4SNlkMN68= Subject key identifier: 21:51:F6:4E:0D:42:63:86:51:2B:A4:FF:38:5B:4A:1E:BE:53:83:8C Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Certificate serial: 019B775921B0C9183765FF46D49E804AA7ED Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202 IP address blocks: 185.168.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:21:b0:c9:18:37:65:ff:46:d4:9e:80:4a:a7:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2151f64e0d426386512ba4ff385b4a1ebe53838c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b0:5f:3b:8f:dd:39:39:43:f7:37:46:1e:3e: 51:7e:04:fd:99:0d:89:fc:6a:a5:cd:0f:6d:00:d3: 28:67:7b:1d:36:db:1d:95:4e:0a:9f:16:79:35:0c: 8d:ad:8c:7d:74:44:f5:3d:49:cb:90:61:12:fd:f0: a3:7e:8c:57:70:e3:36:79:74:cb:6f:4e:65:87:bc: 37:2d:6e:02:06:7f:03:a6:51:e0:ee:96:24:ea:91: b2:ff:2e:7d:7b:91:14:41:c3:ca:99:89:54:82:eb: 12:80:55:38:11:6d:f9:b8:aa:19:6c:4a:49:29:7f: 34:08:6d:69:87:87:ca:23:64:8d:89:78:b6:e0:7c: d4:b1:a0:88:56:50:85:cd:71:5d:43:8e:a1:86:a5: ab:05:5c:c0:17:bb:4e:cf:ef:e8:87:66:7b:de:c1: f8:ac:e8:46:c9:43:59:17:3e:10:8b:90:c8:45:ce: ee:8e:6d:2b:c0:14:b9:20:a2:ed:31:e7:26:9d:dc: b9:de:15:57:f2:1e:b8:c2:17:a2:5a:26:d8:2c:95: 54:8e:0b:7a:a9:74:bb:a6:a3:28:d3:00:05:90:d7: cd:7f:a7:34:9f:94:6c:6b:39:d8:44:83:67:8c:2f: 2e:e5:16:ee:27:15:1b:6e:83:87:48:0f:c8:40:4a: 5f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:51:F6:4E:0D:42:63:86:51:2B:A4:FF:38:5B:4A:1E:BE:53:83:8C X509v3 Authority Key Identifier: keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.168.10.0/24 Signature Algorithm: sha256WithRSAEncryption 98:aa:01:f8:e0:79:b7:6c:96:28:6b:7a:2f:c9:e5:19:5a:cd: 4a:b9:f4:46:6c:f1:79:ea:a3:4d:1b:18:8e:89:6b:b2:41:ab: 7f:87:cb:db:a4:56:b2:1e:1e:13:ac:64:80:24:07:f2:c6:aa: 7d:ac:d6:63:89:87:41:a9:0a:1f:42:81:fa:a2:d2:84:ad:99: 74:82:34:b4:61:73:0e:b8:96:5d:df:d2:63:53:94:57:12:3d: 5a:d1:bd:7a:7e:68:87:9b:57:2f:5d:e5:38:17:b3:e8:4d:8e: e8:7f:9c:8a:d2:5e:be:e7:47:ed:fc:86:e5:f4:d8:bc:6d:ac: 25:bd:3f:2e:35:54:0a:14:40:5c:f0:f0:31:e0:b2:67:35:46: 33:3b:6d:53:b4:df:8b:10:d8:06:c4:ec:7f:3a:ce:e6:4b:5b: 05:2a:77:6c:dc:08:ae:bb:07:b5:6a:48:3c:8e:e0:23:24:0f: 3d:15:88:7d:c2:3a:5e:38:1e:f4:53:1e:f1:cb:27:17:b3:47: 18:8a:44:f3:6a:c9:a9:ed:75:8d:8a:5a:da:87:f9:cb:ca:3e: 4d:81:ea:8f:32:f0:c0:48:39:32:ac:c1:d8:b7:43:46:47:30: 25:8a:ec:a6:88:0a:dd:71:3c:00:90:64:ea:e2:79:01:f2:bb: 3a:73:ff:0c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WSGwyRg3Zf9G1J6ASqftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi YjJlYzcwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTUxZjY0ZTBkNDI2Mzg2NTEyYmE0ZmYzODViNGExZWJlNTM4MzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbBfO4/dOTlD9zdGHj5RfgT9mQ2J /GqlzQ9tANMoZ3sdNtsdlU4KnxZ5NQyNrYx9dET1PUnLkGES/fCjfoxXcOM2eXTL b05lh7w3LW4CBn8DplHg7pYk6pGy/y59e5EUQcPKmYlUgusSgFU4EW35uKoZbEpJ KX80CG1ph4fKI2SNiXi24HzUsaCIVlCFzXFdQ46hhqWrBVzAF7tOz+/oh2Z73sH4 rOhGyUNZFz4Qi5DIRc7ujm0rwBS5IKLtMecmndy53hVX8h64wheiWibYLJVUjgt6 qXS7pqMo0wAFkNfNf6c0n5RsaznYRINnjC8u5RbuJxUbboOHSA/IQEpfEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFR9k4NQmOGUSuk/zhbSh6+U4OMMB8GA1UdIwQY MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt ZmZiMTZlYmQxMTFmLzEvSVZIMlRnMUNZNFpSSzZUX09GdEtIcjVUZzR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuagKMA0G CSqGSIb3DQEBCwUAA4IBAQCYqgH44Hm3bJYoa3ovyeUZWs1KufRGbPF56qNNGxiO iWuyQat/h8vbpFayHh4TrGSAJAfyxqp9rNZjiYdBqQofQoH6otKErZl0gjS0YXMO uJZd39JjU5RXEj1a0b16fmiHm1cvXeU4F7PoTY7of5yK0l6+50ft/Ibl9Ni8bawl vT8uNVQKFEBc8PAx4LJnNUYzO21TtN+LENgGxOx/Os7mS1sFKnds3Aiuuwe1akg8 juAjJA89FYh9wjpeOB70Ux7xyycXs0cYikTzasmp7XWNilrah/nLyj5NgeqPMvDA SDkyrMHYt0NGRzAliuymiArdcTwAkGTq4nkB8rs6c/8M -----END CERTIFICATE-----Generated at Tue Jan 20 23:14:23 2026 by rpki-client