This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/iw2hZNABaxf3BqGSoH50zlpBmZo.roa File: iw2hZNABaxf3BqGSoH50zlpBmZo.roa (raw, json) Hash identifier: FEmu0jxWn7X0gK1R2H3JsdW7Vd44llV6L5PVfKQuGIw= Subject key identifier: 8B:0D:A1:64:D0:01:6B:17:F7:06:A1:92:A0:7E:74:CE:5A:41:99:9A Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Certificate serial: 019B79EC5803631B8C71F9EF34669890D94B Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/iw2hZNABaxf3BqGSoH50zlpBmZo.roa Signing time: Thu 01 Jan 2026 14:18:10 +0000 ROA not before: Thu 01 Jan 2026 14:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209080 IP address blocks: 185.239.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:58:03:63:1b:8c:71:f9:ef:34:66:98:90:d9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Validity Not Before: Jan 1 14:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b0da164d0016b17f706a192a07e74ce5a41999a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:a0:62:47:02:8c:aa:a9:ca:e3:bb:cf:12: 7d:dc:7b:4b:e8:2d:6e:a7:b9:d2:ef:79:ff:7c:68: c4:5b:e2:fd:de:61:66:d6:46:e8:dd:14:97:c2:3b: 3d:4f:e3:40:50:cd:93:ae:45:bd:e9:fa:fe:c8:d7: 96:46:74:01:f1:6b:c3:10:32:8a:f3:d4:41:08:08: ef:8f:5b:ea:e3:8a:97:6f:f3:43:fa:1d:04:cc:da: 7c:b2:a6:26:13:73:97:66:ce:82:d2:6d:77:e2:89: 9e:8f:91:d1:cd:e8:7c:67:3c:5f:d2:f8:6b:6f:58: 83:7b:3f:ab:07:9c:99:6f:20:09:fa:97:1e:a1:27: 75:85:96:1d:0d:31:2c:7a:a5:e7:44:e7:25:4e:a2: 31:81:b3:3c:e7:4e:d9:75:7e:d2:27:fe:96:da:59: 7c:62:a7:4d:30:0b:93:6c:29:92:1e:5f:1d:fc:b5: b1:25:4a:e2:58:3a:49:21:9a:f5:f6:03:51:9b:cc: 72:4f:d2:5d:4a:c9:5d:93:86:1b:e6:c8:83:f9:84: b5:90:32:23:71:22:78:7b:d0:11:67:5b:29:de:e6: b9:48:dc:d2:5c:f4:41:0c:a5:cb:39:e8:10:80:ce: 78:9f:a1:d7:e4:4e:8d:b9:97:93:06:7c:8f:e0:ca: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0D:A1:64:D0:01:6B:17:F7:06:A1:92:A0:7E:74:CE:5A:41:99:9A X509v3 Authority Key Identifier: keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/iw2hZNABaxf3BqGSoH50zlpBmZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.112.0/24 Signature Algorithm: sha256WithRSAEncryption 21:1a:95:20:41:25:1d:aa:7a:87:dd:79:1f:52:e4:cc:bf:83: cb:6c:7e:7a:7b:0b:95:da:de:c1:6f:53:3f:aa:0d:a4:a6:a4: ed:6a:14:11:be:e9:72:26:de:45:ed:61:10:4f:a5:8a:bc:8f: a2:3c:d6:47:79:f7:4d:9c:35:05:cf:29:58:ae:82:46:85:f9: a2:71:a4:08:5e:31:5d:43:b9:ab:a6:2a:91:06:53:a8:ec:d5: 7b:7d:c4:f1:84:af:db:3f:c7:95:26:50:99:09:f9:2a:d2:5a: 7d:ac:91:e8:ac:98:f3:d6:58:cd:e7:d9:54:62:cf:fb:85:5c: 55:89:b9:32:ec:81:40:a3:1a:96:71:0d:77:17:25:fd:40:1a: ab:5e:c7:82:ca:fd:c3:99:50:18:17:ec:b2:35:21:11:66:76: dc:e1:59:85:91:73:90:2c:ed:6e:a3:5b:5c:02:ce:e0:bb:2d: 88:f7:12:7e:0c:2c:7d:e4:0c:f0:65:1e:86:0f:63:ec:e9:8d: 35:7a:d4:26:a8:bc:28:4d:c1:68:06:ce:40:d6:fa:15:d8:03: 7e:27:4a:a1:49:79:cd:73:9f:cd:17:72:6f:7c:00:ac:92:a8: 72:31:06:b5:97:44:e7:5c:3a:c9:9a:a3:50:89:33:b5:0a:9a: 08:eb:69:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57FgDYxuMcfnvNGaYkNlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTBkNTg1ZjFhYzg1ZjU0NDkyY2ZjOTVlMWRjZTBmYzJm Nzk3MGYwHhcNMjYwMTAxMTQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjBkYTE2NGQwMDE2YjE3ZjcwNmExOTJhMDdlNzRjZTVhNDE5OTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygygYkcCjKqpyuO7zxJ93HtL6C1u p7nS73n/fGjEW+L93mFm1kbo3RSXwjs9T+NAUM2TrkW96fr+yNeWRnQB8WvDEDKK 89RBCAjvj1vq44qXb/ND+h0EzNp8sqYmE3OXZs6C0m134omej5HRzeh8Zzxf0vhr b1iDez+rB5yZbyAJ+pceoSd1hZYdDTEseqXnROclTqIxgbM8507ZdX7SJ/6W2ll8 YqdNMAuTbCmSHl8d/LWxJUriWDpJIZr19gNRm8xyT9JdSsldk4Yb5siD+YS1kDIj cSJ4e9ARZ1sp3ua5SNzSXPRBDKXLOegQgM54n6HX5E6NuZeTBnyP4Mp+kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsNoWTQAWsX9wahkqB+dM5aQZmaMB8GA1UdIwQY MBaAFHTg1YXxrIX1RJLPyV4dzg/C95cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMt NjU5ODkxMDIwMmEyLzEvaXcyaFpOQUJheGYzQnFHU29INTB6bHBCbVpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMtNjU5ODkxMDIwMmEy LzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue9wMA0G CSqGSIb3DQEBCwUAA4IBAQAhGpUgQSUdqnqH3XkfUuTMv4PLbH56ewuV2t7Bb1M/ qg2kpqTtahQRvulyJt5F7WEQT6WKvI+iPNZHefdNnDUFzylYroJGhfmicaQIXjFd Q7mrpiqRBlOo7NV7fcTxhK/bP8eVJlCZCfkq0lp9rJHorJjz1ljN59lUYs/7hVxV ibky7IFAoxqWcQ13FyX9QBqrXseCyv3DmVAYF+yyNSERZnbc4VmFkXOQLO1uo1tc As7guy2I9xJ+DCx95AzwZR6GD2Ps6Y01etQmqLwoTcFoBs5A1voV2AN+J0qhSXnN c5/NF3JvfACskqhyMQa1l0TnXDrJmqNQiTO1CpoI62mb -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:26 2026 by rpki-client