This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa File: iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa (raw, json) Hash identifier: 2U9RkTvh/CP+gL154cvBJ8P7xRzyHflZ/rH4Y3M1elw= Subject key identifier: 89:9E:05:98:15:26:CD:0D:63:8D:3A:97:86:F5:11:AD:69:F8:05:EE Certificate issuer: /CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Certificate serial: 019B7A5A71493C343DC3BB572BE1EF7F0B63 Authority key identifier: D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa Signing time: Thu 01 Jan 2026 16:18:26 +0000 ROA not before: Thu 01 Jan 2026 16:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210108 IP address blocks: 194.49.100.0/23 maxlen: 23 194.49.102.0/24 maxlen: 24 194.49.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.mft rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:71:49:3c:34:3d:c3:bb:57:2b:e1:ef:7f:0b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d90784fd81d49ec445a09b2d06f8e560cdaa06a6 Validity Not Before: Jan 1 16:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=899e05981526cd0d638d3a9786f511ad69f805ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:bc:cf:31:e6:c6:e9:90:a0:2e:48:d9:6e: c2:b3:cf:c3:13:57:e2:b9:ef:56:6b:41:56:c8:d3: 49:72:c5:21:e2:2f:d8:6f:ca:bf:ed:e6:90:f4:4e: 6c:26:99:ef:9e:4f:8d:f7:50:f2:da:17:db:11:bd: 07:84:73:70:12:fa:5e:f2:52:65:30:db:41:36:bb: e4:9b:04:47:e6:f6:f5:df:eb:b9:50:91:66:41:14: 83:a2:1c:d1:4d:e8:a8:5f:76:95:f0:2a:45:e2:e5: 4d:4e:f8:64:02:b4:b7:59:97:1f:d3:f7:8d:a9:46: 3a:a1:7b:fa:aa:b8:e5:1b:55:47:11:97:ec:54:f3: 2f:fe:81:2d:eb:5a:25:60:2b:2a:bf:4c:d6:d8:86: 70:f3:da:dd:83:10:d6:95:d4:c1:42:e4:d4:fa:8a: b3:d4:c7:c1:53:58:37:8e:c9:5b:eb:83:ec:dc:8b: f8:d5:22:b5:d0:69:2d:0b:03:4c:29:89:1b:f2:b9: 6a:11:f2:fa:f5:5d:d3:00:6a:5b:02:2d:1f:d8:6d: 71:01:54:9a:03:0f:7c:9f:8d:83:52:ca:08:54:df: 42:a4:53:4d:45:90:13:d9:81:95:b6:c3:0d:4d:a8: b3:17:17:9d:fe:c6:2a:98:02:2c:04:71:b6:68:84: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:05:98:15:26:CD:0D:63:8D:3A:97:86:F5:11:AD:69:F8:05:EE X509v3 Authority Key Identifier: keyid:D9:07:84:FD:81:D4:9E:C4:45:A0:9B:2D:06:F8:E5:60:CD:AA:06:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2QeE_YHUnsRFoJstBvjlYM2qBqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/iZ4FmBUmzQ1jjTqXhvURrWn4Be4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f9097c-10c2-4ae6-94dd-1610a0c993b4/1/2QeE_YHUnsRFoJstBvjlYM2qBqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.49.100.0/22 Signature Algorithm: sha256WithRSAEncryption 68:4f:8e:93:78:1c:88:68:dc:dc:87:86:d6:94:88:35:06:ee: a2:e9:ef:db:67:b3:d7:0f:e4:66:5b:e1:0b:d3:07:95:d7:32: db:88:ea:da:94:8c:65:52:e2:83:91:3a:ad:50:da:56:87:d6: be:19:10:70:cf:6b:1d:79:6e:31:d8:c1:1f:4d:7b:17:33:7f: bc:91:9a:0a:3e:65:bd:14:57:67:88:3f:9b:87:dd:7f:fe:9b: 5b:22:53:44:5f:03:90:40:48:a5:dd:09:60:53:41:8e:a8:32: 13:81:6e:9c:59:95:0b:d2:6b:9c:bd:e5:00:6f:e8:44:06:4c: c8:d2:c3:8a:9e:21:9b:5f:75:b1:57:d9:59:05:30:d0:29:2e: c5:1f:3c:c9:7e:06:82:04:5b:63:fc:3f:7b:82:9b:23:0e:b7: 7b:f4:5d:ee:9e:a4:fd:94:4f:a8:57:14:90:6a:19:0c:4b:99: 80:c2:08:16:ac:f0:3f:94:ce:56:0a:49:e1:1b:d6:bc:c6:e6: 6f:de:ad:04:64:a1:74:8e:bb:8f:28:7a:72:78:59:55:67:63: 19:26:b3:30:3f:da:ce:a8:10:fd:84:bd:7e:70:53:b4:91:ad: 4b:af:fe:9a:d7:3c:56:2a:cd:18:1c:27:a6:c7:de:f4:65:6f: e5:8d:7e:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WnFJPDQ9w7tXK+HvfwtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5MDc4NGZkODFkNDllYzQ0NWEwOWIyZDA2ZjhlNTYwY2Rh YTA2YTYwHhcNMjYwMTAxMTYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTllMDU5ODE1MjZjZDBkNjM4ZDNhOTc4NmY1MTFhZDY5ZjgwNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvia8zzHmxumQoC5I2W7Cs8/DE1fi ue9Wa0FWyNNJcsUh4i/Yb8q/7eaQ9E5sJpnvnk+N91Dy2hfbEb0HhHNwEvpe8lJl MNtBNrvkmwRH5vb13+u5UJFmQRSDohzRTeioX3aV8CpF4uVNTvhkArS3WZcf0/eN qUY6oXv6qrjlG1VHEZfsVPMv/oEt61olYCsqv0zW2IZw89rdgxDWldTBQuTU+oqz 1MfBU1g3jslb64Ps3Iv41SK10GktCwNMKYkb8rlqEfL69V3TAGpbAi0f2G1xAVSa Aw98n42DUsoIVN9CpFNNRZAT2YGVtsMNTaizFxed/sYqmAIsBHG2aIQOOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFImeBZgVJs0NY406l4b1Ea1p+AXuMB8GA1UdIwQY MBaAFNkHhP2B1J7ERaCbLQb45WDNqgamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQt MTYxMGEwYzk5M2I0LzEvaVo0Rm1CVW16UTFqalRxWGh2VVJyV240QmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9mOTA5N2MtMTBjMi00YWU2LTk0ZGQtMTYxMGEwYzk5M2I0 LzEvMlFlRV9ZSFVuc1JGb0pzdEJ2amxZTTJxQnFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjFkMA0G CSqGSIb3DQEBCwUAA4IBAQBoT46TeByIaNzch4bWlIg1Bu6i6e/bZ7PXD+RmW+EL 0weV1zLbiOralIxlUuKDkTqtUNpWh9a+GRBwz2sdeW4x2MEfTXsXM3+8kZoKPmW9 FFdniD+bh91//ptbIlNEXwOQQEil3QlgU0GOqDITgW6cWZUL0mucveUAb+hEBkzI 0sOKniGbX3WxV9lZBTDQKS7FHzzJfgaCBFtj/D97gpsjDrd79F3unqT9lE+oVxSQ ahkMS5mAwggWrPA/lM5WCknhG9a8xuZv3q0EZKF0jruPKHpyeFlVZ2MZJrMwP9rO qBD9hL1+cFO0ka1Lr/6a1zxWKs0YHCemx970ZW/ljX6S -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:25 2026 by rpki-client