This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/iGY_Mv10YgE-XbLN8s6W95SGc3w.roa File: iGY_Mv10YgE-XbLN8s6W95SGc3w.roa (raw, json) Hash identifier: 2VVKNx6PRdYWZ0nNRbCgG4Dar1wwW4X2eQNLFYqQiUE= Subject key identifier: 88:66:3F:32:FD:74:62:01:3E:5D:B2:CD:F2:CE:96:F7:94:86:73:7C Certificate issuer: /CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Certificate serial: 019B7834E526730720334C24A551651DE2BE Authority key identifier: D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/iGY_Mv10YgE-XbLN8s6W95SGc3w.roa Signing time: Thu 01 Jan 2026 06:18:10 +0000 ROA not before: Thu 01 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47549 IP address blocks: 93.159.200.0/24 maxlen: 24 93.159.201.0/24 maxlen: 24 93.159.202.0/24 maxlen: 24 93.159.205.0/24 maxlen: 24 93.159.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.mft rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e5:26:73:07:20:33:4c:24:a5:51:65:1d:e2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d125fac4a5d95b41a072ebbf4f035d09b3aa59c7 Validity Not Before: Jan 1 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88663f32fd7462013e5db2cdf2ce96f79486737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ad:60:32:ca:3e:aa:b0:9f:93:9e:f9:b3:dd: 92:4b:0c:60:78:2f:d7:36:c9:f2:42:c4:7d:33:67: 7e:88:6e:e8:7b:39:3a:d9:19:6e:b7:e5:5a:4e:12: f8:e5:54:1e:cf:13:89:d6:77:5c:32:05:1c:3d:66: 31:09:e6:2b:29:c4:e3:ba:5a:98:57:a1:9a:ba:e3: de:bb:89:2d:58:05:b5:35:25:af:3b:b0:9d:28:ca: 44:9c:d3:d6:2c:a0:06:ea:7f:70:ad:e7:64:c9:ac: 4f:52:7f:98:85:99:01:0e:41:d4:b5:5c:a8:e7:0a: a7:00:ab:2f:3c:94:29:2a:f6:eb:1f:b3:81:86:3e: fc:0c:24:bb:46:d4:c6:e5:2e:76:73:d2:8b:c4:74: 74:dd:a1:61:5c:27:e5:19:f2:a0:36:57:58:f0:ea: e4:70:ac:2b:55:03:d3:ee:35:3a:27:1a:2e:6b:21: 6c:c3:51:48:a6:25:55:6b:a0:1a:fc:f6:cc:b4:bd: d9:41:a4:e0:eb:ea:5c:79:90:12:7d:d8:10:1f:ec: fb:7d:d0:b9:f6:55:21:59:a7:d7:b2:55:d3:9c:4c: de:1b:46:9b:f7:01:5d:30:cb:ae:a2:52:1b:11:2c: 32:0a:00:27:51:2d:ce:90:77:ac:42:a5:41:9c:61: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:3F:32:FD:74:62:01:3E:5D:B2:CD:F2:CE:96:F7:94:86:73:7C X509v3 Authority Key Identifier: keyid:D1:25:FA:C4:A5:D9:5B:41:A0:72:EB:BF:4F:03:5D:09:B3:AA:59:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/iGY_Mv10YgE-XbLN8s6W95SGc3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8cea1f-45e4-4201-bebc-0ded06e40a75/1/0SX6xKXZW0Ggcuu_TwNdCbOqWcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.200.0-93.159.202.255 93.159.205.0-93.159.206.255 Signature Algorithm: sha256WithRSAEncryption b0:90:1a:39:00:e1:79:c8:24:d6:0e:1e:ab:9d:9b:ca:8f:3e: 82:83:35:c8:e0:a8:d5:80:52:fb:a2:5d:fb:2a:07:b4:a6:5a: fa:0c:75:4b:de:cc:b6:3b:05:c4:50:60:5f:e2:0f:a2:cf:cc: 6f:e6:b1:25:e8:30:8c:c8:5f:dd:b6:13:f9:8c:4c:0a:08:6f: fc:13:74:14:f9:04:5e:15:d8:f1:f9:c6:14:5d:94:96:b4:98: 65:6f:6a:12:ae:33:53:be:39:6d:87:c6:01:39:84:3b:47:9e: 7a:95:75:52:6f:67:5b:cb:63:a5:12:a2:03:c1:b3:25:ae:ce: 66:8e:96:ae:24:71:d6:93:7e:f5:b6:44:5d:9c:18:6b:3e:57: 3f:69:cc:31:eb:1c:f8:1c:8b:e6:f3:c4:cc:e5:65:8d:65:4b: d2:9f:b9:ad:71:d2:c2:21:b9:04:28:f4:d0:23:35:9e:a8:61: 26:a4:f0:99:56:f7:a7:6c:4f:5d:bd:22:1a:ea:0d:57:f3:40: 40:9b:de:dd:9e:c8:19:9a:43:eb:5e:21:43:4c:a6:f5:5b:91: 7c:b5:b8:d9:28:14:f1:1b:99:56:d0:8d:fc:06:e0:f8:71:8c: c6:26:2d:6b:8e:c2:9c:ac:70:45:6d:d9:1b:b3:aa:02:b8:05: 6a:eb:e7:20 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt4NOUmcwcgM0wkpVFlHeK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMjVmYWM0YTVkOTViNDFhMDcyZWJiZjRmMDM1ZDA5YjNh YTU5YzcwHhcNMjYwMTAxMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODY2M2YzMmZkNzQ2MjAxM2U1ZGIyY2RmMmNlOTZmNzk0ODY3MzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu61gMso+qrCfk575s92SSwxgeC/X NsnyQsR9M2d+iG7oezk62Rlut+VaThL45VQezxOJ1ndcMgUcPWYxCeYrKcTjulqY V6GauuPeu4ktWAW1NSWvO7CdKMpEnNPWLKAG6n9wredkyaxPUn+YhZkBDkHUtVyo 5wqnAKsvPJQpKvbrH7OBhj78DCS7RtTG5S52c9KLxHR03aFhXCflGfKgNldY8Ork cKwrVQPT7jU6JxouayFsw1FIpiVVa6Aa/PbMtL3ZQaTg6+pceZASfdgQH+z7fdC5 9lUhWafXslXTnEzeG0ab9wFdMMuuolIbESwyCgAnUS3OkHesQqVBnGHNowIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIhmPzL9dGIBPl2yzfLOlveUhnN8MB8GA1UdIwQY MBaAFNEl+sSl2VtBoHLrv08DXQmzqlnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMt MGRlZDA2ZTQwYTc1LzEvaUdZX012MTBZZ0UtWGJMTjhzNlc5NVNHYzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84Y2VhMWYtNDVlNC00MjAxLWJlYmMtMGRlZDA2ZTQwYTc1 LzEvMFNYNnhLWFpXMEdnY3V1X1R3TmRDYk9xV2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBANdn8gD BABdn8owDAMEAF2fzQMEAF2fzjANBgkqhkiG9w0BAQsFAAOCAQEAsJAaOQDhecgk 1g4eq52byo8+goM1yOCo1YBS+6Jd+yoHtKZa+gx1S97MtjsFxFBgX+IPos/Mb+ax JegwjMhf3bYT+YxMCghv/BN0FPkEXhXY8fnGFF2UlrSYZW9qEq4zU745bYfGATmE O0eeepV1Um9nW8tjpRKiA8GzJa7OZo6WriRx1pN+9bZEXZwYaz5XP2nMMesc+ByL 5vPEzOVljWVL0p+5rXHSwiG5BCj00CM1nqhhJqTwmVb3p2xPXb0iGuoNV/NAQJve 3Z7IGZpD614hQ0ym9VuRfLW42SgU8RuZVtCN/Abg+HGMxiYta47CnKxwRW3ZG7Oq ArgFauvnIA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:12 2026 by rpki-client