This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/IjagGyFWurObl2pWMvY0N09uD1o.roa File: IjagGyFWurObl2pWMvY0N09uD1o.roa (raw, json) Hash identifier: hWJUOuTqtYv/o+T0eJBFqPEt0KW/yUBcSYg2LFL48DQ= Subject key identifier: 22:36:A0:1B:21:56:BA:B3:9B:97:6A:56:32:F6:34:37:4F:6E:0F:5A Certificate issuer: /CN=768ef9c104be22284bf7b2756d2a8173946a386e Certificate serial: 019B7CED37FAF2AFBE3AA11241B559349B07 Authority key identifier: 76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/IjagGyFWurObl2pWMvY0N09uD1o.roa Signing time: Fri 02 Jan 2026 04:17:59 +0000 ROA not before: Fri 02 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62286 IP address blocks: 185.40.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.mft rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:37:fa:f2:af:be:3a:a1:12:41:b5:59:34:9b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=768ef9c104be22284bf7b2756d2a8173946a386e Validity Not Before: Jan 2 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2236a01b2156bab39b976a5632f634374f6e0f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:05:fd:a1:f0:5d:c1:b0:b8:42:66:aa:e5: bd:b1:38:b4:16:4c:b0:7a:b6:99:ff:35:31:b6:84: 02:f7:df:7d:d7:61:68:5b:d9:f0:f7:2f:f2:84:51: a4:3c:cd:94:54:20:25:d5:bd:99:e9:2c:4d:3f:dd: 75:2e:08:d3:a8:32:fb:a0:97:49:5d:38:c1:9a:f6: f8:2d:09:39:48:74:1a:09:cc:5b:fd:ee:b8:5b:88: f9:f6:d0:18:47:1f:be:4b:7d:f6:79:a2:49:5e:6a: b9:74:c9:d9:6d:c1:67:d9:ad:94:b0:ef:1d:ed:33: 4f:0f:cb:98:6c:7c:8a:78:a4:ce:7c:63:17:a2:b8: d3:81:d5:6c:b7:5c:e0:ca:a2:ce:74:5f:8f:08:45: 4e:a4:c9:3c:26:be:4f:4b:6c:8d:a6:c6:9a:1b:8b: 76:8d:1e:b2:4a:67:14:6c:15:ef:11:9a:56:83:d8: c3:f2:c7:1b:c4:48:94:10:7f:12:4d:cb:07:5d:bd: 75:4e:ae:b6:46:76:3f:66:90:ad:f8:34:c6:4d:b8: af:5f:df:e8:c2:55:22:d8:d0:5b:46:aa:55:c8:f0: 93:8b:7f:fc:2d:6f:c2:ff:1d:d2:da:48:24:86:49: ec:93:3b:6b:cd:5a:0c:23:fc:fa:f1:1d:b5:66:2b: 86:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:36:A0:1B:21:56:BA:B3:9B:97:6A:56:32:F6:34:37:4F:6E:0F:5A X509v3 Authority Key Identifier: keyid:76:8E:F9:C1:04:BE:22:28:4B:F7:B2:75:6D:2A:81:73:94:6A:38:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do75wQS-IihL97J1bSqBc5RqOG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/IjagGyFWurObl2pWMvY0N09uD1o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/86b402-e43b-4b7e-98ee-b6b74cb299b0/1/do75wQS-IihL97J1bSqBc5RqOG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.40.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:ad:31:03:6c:11:e1:25:9d:cc:e0:17:13:9a:85:d6:6a:89: 74:bf:fd:7b:86:0b:84:0e:60:86:33:e4:ad:14:37:a4:17:31: 9d:3b:e8:2a:a1:cb:f7:77:1a:94:71:3b:00:1e:a4:d8:2e:3a: c0:86:2b:f7:b1:f8:83:16:04:39:46:48:0b:b2:a4:9c:90:89: 1b:4f:6b:3b:02:53:cc:c8:1c:06:70:6e:33:8a:83:75:96:ce: e6:45:8a:60:9b:1e:ae:78:76:2a:79:53:6a:d3:2a:91:97:3b: b9:c0:9b:3a:15:c1:01:69:58:52:6f:10:f2:a1:24:ad:f6:2e: 80:5a:d7:c8:bf:7f:58:11:c5:a6:41:d7:f0:33:f6:ef:cc:36: 99:7b:13:fd:58:ce:38:ea:ce:4a:e4:3f:af:5c:16:0c:8a:b6: 6d:a0:30:8a:43:ec:a9:cd:44:58:3e:f8:f2:75:77:00:5f:f0: 9f:82:8e:c0:ca:27:d8:a1:a8:44:bd:62:e9:ae:cb:b9:c6:2b: 53:8c:3c:1d:68:47:d9:ae:0b:95:74:13:2a:d3:cb:25:21:8e: 41:84:67:7c:a1:39:c0:67:ea:a0:f1:aa:77:66:bf:5b:2c:5b: f8:e6:94:bc:eb:f0:50:9e:8b:b7:95:9d:f4:1a:bd:bd:d2:3a: 9f:90:fe:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Tf68q++OqESQbVZNJsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OGVmOWMxMDRiZTIyMjg0YmY3YjI3NTZkMmE4MTczOTQ2 YTM4NmUwHhcNMjYwMTAyMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjM2YTAxYjIxNTZiYWIzOWI5NzZhNTYzMmY2MzQzNzRmNmUwZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0EF/aHwXcGwuEJmquW9sTi0Fkyw eraZ/zUxtoQC999912FoW9nw9y/yhFGkPM2UVCAl1b2Z6SxNP911LgjTqDL7oJdJ XTjBmvb4LQk5SHQaCcxb/e64W4j59tAYRx++S332eaJJXmq5dMnZbcFn2a2UsO8d 7TNPD8uYbHyKeKTOfGMXorjTgdVst1zgyqLOdF+PCEVOpMk8Jr5PS2yNpsaaG4t2 jR6ySmcUbBXvEZpWg9jD8scbxEiUEH8STcsHXb11Tq62RnY/ZpCt+DTGTbivX9/o wlUi2NBbRqpVyPCTi3/8LW/C/x3S2kgkhknskztrzVoMI/z68R21ZiuGawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCI2oBshVrqzm5dqVjL2NDdPbg9aMB8GA1UdIwQY MBaAFHaO+cEEviIoS/eydW0qgXOUajhuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUt YjZiNzRjYjI5OWIwLzEvSWphZ0d5Rld1ck9ibDJwV012WTBOMDl1RDFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84NmI0MDItZTQzYi00YjdlLTk4ZWUtYjZiNzRjYjI5OWIw LzEvZG83NXdRUy1JaWhMOTdKMWJTcUJjNVJxT0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSgoMA0G CSqGSIb3DQEBCwUAA4IBAQBLrTEDbBHhJZ3M4BcTmoXWaol0v/17hguEDmCGM+St FDekFzGdO+gqocv3dxqUcTsAHqTYLjrAhiv3sfiDFgQ5RkgLsqSckIkbT2s7AlPM yBwGcG4zioN1ls7mRYpgmx6ueHYqeVNq0yqRlzu5wJs6FcEBaVhSbxDyoSSt9i6A WtfIv39YEcWmQdfwM/bvzDaZexP9WM446s5K5D+vXBYMirZtoDCKQ+ypzURYPvjy dXcAX/Cfgo7AyifYoahEvWLprsu5xitTjDwdaEfZrguVdBMq08slIY5BhGd8oTnA Z+qg8ap3Zr9bLFv45pS86/BQnou3lZ30Gr290jqfkP7I -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:02 2026 by rpki-client