This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/ipd84dEDEe7cj4KStBVIlQrMGyg.roa File: ipd84dEDEe7cj4KStBVIlQrMGyg.roa (raw, json) Hash identifier: Sbm22JKwRV49kiJvKoySC0PxR1MmmHGGM53bqn3Gb1c= Subject key identifier: 8A:97:7C:E1:D1:03:11:EE:DC:8F:82:92:B4:15:48:95:0A:CC:1B:28 Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a Certificate serial: 019B7C804A8402E8B0E0ED1FB8E6B3E79399 Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/ipd84dEDEe7cj4KStBVIlQrMGyg.roa Signing time: Fri 02 Jan 2026 02:19:01 +0000 ROA not before: Fri 02 Jan 2026 02:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201127 IP address blocks: 185.189.60.0/22 maxlen: 24 2a0b:d680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4a:84:02:e8:b0:e0:ed:1f:b8:e6:b3:e7:93:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a Validity Not Before: Jan 2 02:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a977ce1d10311eedc8f8292b41548950acc1b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:68:19:e4:db:61:86:b3:e9:ee:21:a3:ab:c2: be:e9:7b:46:13:c5:54:ef:04:6d:2c:55:16:f8:8e: a7:b0:4c:e2:47:97:a0:5c:fd:00:35:3f:e2:79:f2: 66:2e:f5:fc:17:e9:f1:07:66:04:8a:6b:cb:37:80: bf:91:8c:ca:91:25:94:24:04:de:82:f9:b9:a2:01: cc:2c:d6:72:1f:e2:3d:6a:67:4a:e1:42:38:8a:43: be:6a:53:7c:08:16:ae:f7:59:bd:35:62:20:a5:83: 1d:2f:8f:78:b7:59:68:86:37:d2:09:86:06:24:75: 68:b5:e5:d9:93:86:f2:23:35:61:3f:72:16:8c:c3: 73:df:e9:f1:73:76:6c:75:d7:1b:16:fc:a4:c5:13: 04:80:14:ff:4b:3b:09:27:8d:10:e3:72:01:b2:b1: fb:7f:13:78:a7:55:d9:9a:40:a2:0f:1c:28:40:8e: 7a:cd:e1:db:0c:09:f8:97:04:a5:61:d4:d7:ae:0d: 7d:0b:c4:04:7f:75:23:6a:6a:ab:42:3d:44:7a:28: a5:c9:f0:c7:44:d9:f8:99:9c:0d:a1:b2:70:15:d4: 38:4f:91:13:3b:2a:ec:11:1d:d6:66:c0:ad:86:40: 62:8a:32:5a:64:28:f7:c1:2a:dd:0d:0d:69:fe:e3: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:97:7C:E1:D1:03:11:EE:DC:8F:82:92:B4:15:48:95:0A:CC:1B:28 X509v3 Authority Key Identifier: keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/ipd84dEDEe7cj4KStBVIlQrMGyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.60.0/22 IPv6: 2a0b:d680::/32 Signature Algorithm: sha256WithRSAEncryption 6f:9b:a5:94:84:50:e5:f2:ba:73:70:10:d9:08:15:f8:bd:e4: c8:cf:ce:5a:9a:85:70:44:58:07:0b:36:a2:19:9e:f3:bb:11: f2:98:7f:d9:70:f6:1e:1e:db:65:f7:e0:03:42:28:83:78:0e: ce:19:fa:8f:f6:c6:a6:a8:7c:30:25:aa:94:17:2d:25:b7:e5: f8:d7:f1:e5:63:8e:8f:ac:0f:28:19:37:b9:44:a5:4c:53:a3: bd:54:a1:19:ee:1c:d8:35:d0:7c:71:78:0b:6e:53:36:4e:23: c5:de:02:48:59:02:4c:20:7a:e2:c9:8f:09:01:78:bf:7a:3d: f7:79:fe:62:73:32:9a:46:37:25:d0:77:d7:74:22:b8:41:f1: 6d:41:c1:75:5c:64:1f:67:aa:c2:6c:8d:4b:e6:23:fe:82:7f: 75:e7:a6:08:34:4c:e9:e4:04:d9:51:70:2d:06:5c:16:64:16: 2f:d6:8b:17:3b:2e:8b:e4:88:1a:6f:39:03:e4:a3:97:bc:b4: 0a:70:34:4e:05:f2:44:d0:da:55:2e:51:4f:4a:8c:7f:3e:73: dc:d0:9a:87:41:4a:07:38:37:1b:79:d4:f2:44:e0:f7:59:e9: e0:30:aa:6d:a3:ed:18:5a:8c:fb:bb:8b:5c:88:38:3d:72:d0: 4e:96:b3:65 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gEqEAuiw4O0fuOaz55OZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGRmMmM0NjljOTc4ODk1Zjg0NTgwMjRjNTA2ZTgwMWM4 ZmIyMWEwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTk3N2NlMWQxMDMxMWVlZGM4ZjgyOTJiNDE1NDg5NTBhY2MxYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWgZ5NthhrPp7iGjq8K+6XtGE8VU 7wRtLFUW+I6nsEziR5egXP0ANT/iefJmLvX8F+nxB2YEimvLN4C/kYzKkSWUJATe gvm5ogHMLNZyH+I9amdK4UI4ikO+alN8CBau91m9NWIgpYMdL494t1lohjfSCYYG JHVoteXZk4byIzVhP3IWjMNz3+nxc3ZsddcbFvykxRMEgBT/SzsJJ40Q43IBsrH7 fxN4p1XZmkCiDxwoQI56zeHbDAn4lwSlYdTXrg19C8QEf3UjamqrQj1EeiilyfDH RNn4mZwNobJwFdQ4T5ETOyrsER3WZsCthkBiijJaZCj3wSrdDQ1p/uNWGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIqXfOHRAxHu3I+CkrQVSJUKzBsoMB8GA1UdIwQY MBaAFPWN8sRpyXiJX4RYAkxQboAcj7IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZTk2MjEtNjI2ZS00MDMyLTliNTQt NzZlMzM0OWM5N2MyLzEvaXBkODRkRURFZTdjajRLU3RCVklsUXJNR3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xZTk2MjEtNjI2ZS00MDMyLTliNTQtNzZlMzM0OWM5N2My LzEvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub08MA0E AgACMAcDBQAqC9aAMA0GCSqGSIb3DQEBCwUAA4IBAQBvm6WUhFDl8rpzcBDZCBX4 veTIz85amoVwRFgHCzaiGZ7zuxHymH/ZcPYeHttl9+ADQiiDeA7OGfqP9samqHww JaqUFy0lt+X41/HlY46PrA8oGTe5RKVMU6O9VKEZ7hzYNdB8cXgLblM2TiPF3gJI WQJMIHriyY8JAXi/ej33ef5iczKaRjcl0HfXdCK4QfFtQcF1XGQfZ6rCbI1L5iP+ gn9156YINEzp5ATZUXAtBlwWZBYv1osXOy6L5IgabzkD5KOXvLQKcDROBfJE0NpV LlFPSox/PnPc0JqHQUoHODcbedTyROD3WengMKpto+0YWoz7u4tciDg9ctBOlrNl -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:37 2026 by rpki-client