This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa File: i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa (raw, json) Hash identifier: 0pIJsCnFNnNGfcQdssGDfxgQRG8K8uUqTLzzq6uJaEA= Subject key identifier: 8B:E4:B3:C6:98:D8:4A:5F:D2:25:97:FD:5F:0E:E2:5C:A9:18:20:E4 Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae Certificate serial: 019B7BA36204F4361C8A8F7E5ADC1B0C76AE Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa Signing time: Thu 01 Jan 2026 22:17:43 +0000 ROA not before: Thu 01 Jan 2026 22:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208917 IP address blocks: 185.102.24.0/23 maxlen: 23 185.102.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:62:04:f4:36:1c:8a:8f:7e:5a:dc:1b:0c:76:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8be4b3c698d84a5fd22597fd5f0ee25ca91820e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:8f:94:d8:b9:e7:c7:f7:cb:aa:31:17:23: 9b:d4:2a:44:eb:b2:f9:10:c6:fa:12:bd:3a:17:00: ad:e3:87:42:04:39:91:82:b8:e8:84:09:e7:bd:92: d3:95:ed:17:32:13:e5:66:eb:ba:c2:62:05:e8:4d: 47:07:16:de:d5:a7:33:fc:89:da:60:d8:c6:1a:44: 3f:73:ae:6c:23:39:8b:e1:04:b6:7b:29:64:07:f5: b6:4c:81:38:dc:06:11:6a:70:69:37:68:33:41:67: 33:f6:13:26:45:79:3c:58:55:4b:c0:fb:38:a4:cd: c0:6b:1b:ed:6a:78:b4:3e:a7:cf:70:26:71:a9:50: 8b:e4:ed:7d:53:3c:1f:8d:7e:d5:ca:11:90:8d:54: d1:1d:95:a2:9b:ce:df:1d:8c:61:0d:cb:aa:59:38: b6:65:00:6e:8c:d8:39:f4:56:e5:94:2d:ad:9f:0e: 5f:aa:89:23:1d:e7:b2:7d:70:78:b7:32:c8:d0:da: 68:e6:af:81:3b:fa:b3:5f:97:db:ea:93:b5:0f:d7: 93:f0:bc:8b:4a:5f:ed:79:6b:ef:9b:9c:55:7c:0a: 34:06:b9:06:4e:ba:69:df:dd:ca:9c:48:15:d8:6a: 55:57:4a:e9:99:1e:43:af:1b:15:52:ed:6a:69:15: 6c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E4:B3:C6:98:D8:4A:5F:D2:25:97:FD:5F:0E:E2:5C:A9:18:20:E4 X509v3 Authority Key Identifier: keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.102.24.0-185.102.26.255 Signature Algorithm: sha256WithRSAEncryption b1:26:07:34:5a:e5:5f:ca:17:96:2a:d2:fa:c3:ca:00:18:85: dd:47:2c:a0:d6:b2:c2:27:d3:0f:68:46:0a:29:91:15:67:8b: a1:0c:16:c4:d4:9d:46:f4:0f:55:e0:73:7c:fb:2b:fc:2e:33: 99:f5:b4:d2:ee:9b:27:1e:cd:e6:7c:30:a1:94:68:3c:61:b6: 89:17:ec:fb:6b:f9:42:4f:54:9e:3b:1c:96:a7:6c:e0:95:09: 28:a6:57:2b:7b:c0:05:6c:2d:09:99:54:24:ff:d5:92:5c:10: 49:e2:a4:11:97:76:0f:a4:c6:bc:34:c5:5f:48:1e:3e:3b:57: 92:74:60:ed:d5:f8:b5:fa:df:af:ac:48:cf:33:0f:98:8d:33: 62:11:e9:ba:28:bf:01:6b:25:6d:15:17:41:c4:9c:5c:f5:44: 70:9c:6c:74:37:2b:c6:b8:6e:5d:82:a0:0c:35:8a:38:b5:fd: da:ee:ef:38:cc:74:81:d2:9a:f3:ba:80:ea:ae:cf:a0:f4:7c: 06:45:12:00:ca:34:ba:37:c2:fb:9f:65:bf:59:07:d3:0d:a6: 20:e0:15:1e:cc:92:9d:37:c1:4f:e4:be:b0:5c:3a:7f:2a:13: dd:15:01:ba:b3:04:c8:35:2a:99:30:97:7b:66:10:16:67:18: 7c:83:8b:d8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7o2IE9DYcio9+WtwbDHauMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MWUyN2IyOWY2NWEyNGQ5Zjk0MjE1NzE1Y2QzNjcxODI1 YTllYWUwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YmU0YjNjNjk4ZDg0YTVmZDIyNTk3ZmQ1ZjBlZTI1Y2E5MTgyMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+2PlNi558f3y6oxFyOb1CpE67L5 EMb6Er06FwCt44dCBDmRgrjohAnnvZLTle0XMhPlZuu6wmIF6E1HBxbe1acz/Ina YNjGGkQ/c65sIzmL4QS2eylkB/W2TIE43AYRanBpN2gzQWcz9hMmRXk8WFVLwPs4 pM3Aaxvtani0PqfPcCZxqVCL5O19UzwfjX7VyhGQjVTRHZWim87fHYxhDcuqWTi2 ZQBujNg59FbllC2tnw5fqokjHeeyfXB4tzLI0Npo5q+BO/qzX5fb6pO1D9eT8LyL Sl/teWvvm5xVfAo0BrkGTrpp393KnEgV2GpVV0rpmR5DrxsVUu1qaRVsWwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIvks8aY2Epf0iWX/V8O4lypGCDkMB8GA1UdIwQY MBaAFBkeJ7KfZaJNn5QhVxXNNnGCWp6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTct YjhjNjY2ZTZkMzUxLzEvaS1TenhwallTbF9TSlpmOVh3N2lYS2tZSU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9hODk4MDEtYzcyMS00MWJiLWI1MTctYjhjNjY2ZTZkMzUx LzEvR1I0bnNwOWxvazJmbENGWEZjMDJjWUphbnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO5ZhgD BAC5ZhowDQYJKoZIhvcNAQELBQADggEBALEmBzRa5V/KF5Yq0vrDygAYhd1HLKDW ssIn0w9oRgopkRVni6EMFsTUnUb0D1Xgc3z7K/wuM5n1tNLumycezeZ8MKGUaDxh tokX7Ptr+UJPVJ47HJanbOCVCSimVyt7wAVsLQmZVCT/1ZJcEEnipBGXdg+kxrw0 xV9IHj47V5J0YO3V+LX636+sSM8zD5iNM2IR6boovwFrJW0VF0HEnFz1RHCcbHQ3 K8a4bl2CoAw1iji1/dru7zjMdIHSmvO6gOquz6D0fAZFEgDKNLo3wvufZb9ZB9MN piDgFR7Mkp03wU/kvrBcOn8qE90VAbqzBMg1Kpkwl3tmEBZnGHyDi9g= -----END CERTIFICATE-----Generated at Tue Feb 10 07:10:58 2026 by rpki-client