This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/IxT2p1USvkgGTKI4jIEAGlYZs-c.roa File: IxT2p1USvkgGTKI4jIEAGlYZs-c.roa (raw, json) Hash identifier: RpYym6oxELeUAn+F/Xd8p5iioExynMd0f+38UAxEIvY= Subject key identifier: 23:14:F6:A7:55:12:BE:48:06:4C:A2:38:8C:81:00:1A:56:19:B3:E7 Certificate issuer: /CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Certificate serial: 019B7F8431C170AB94F34852C60864C39F32 Authority key identifier: 38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/IxT2p1USvkgGTKI4jIEAGlYZs-c.roa Signing time: Fri 02 Jan 2026 16:22:08 +0000 ROA not before: Fri 02 Jan 2026 16:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64249 IP address blocks: 185.67.164.0/22 maxlen: 22 185.67.164.0/24 maxlen: 24 185.67.165.0/24 maxlen: 24 185.67.166.0/24 maxlen: 24 185.67.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.mft rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:31:c1:70:ab:94:f3:48:52:c6:08:64:c3:9f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380dd9e7355c72c751fff4f175dace7daa7b9cbf Validity Not Before: Jan 2 16:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2314f6a75512be48064ca2388c81001a5619b3e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:70:b7:f5:18:d2:d7:1e:90:38:4f:e6:76: 6e:26:63:8d:1e:97:dd:63:3e:61:48:64:47:e8:16: 70:70:fb:91:91:13:ef:4d:ad:53:31:5d:79:11:4a: 9f:5e:9b:d7:64:43:9e:22:3e:61:2f:11:ee:2e:17: 38:e2:9b:0b:7e:38:8a:9b:6f:db:73:9c:4f:82:d1: 39:75:20:57:df:16:ad:4a:49:5f:18:72:e8:e5:4e: 26:78:3e:88:cc:2e:03:a4:6a:b0:27:8d:c7:9d:da: 74:e3:e5:09:f7:af:55:1b:1e:77:35:09:97:de:50: c5:bb:df:fe:2b:28:ce:43:7b:db:0d:06:ba:f2:a8: 6c:53:a5:47:20:32:be:0a:60:5e:4b:9a:e6:c7:b0: c5:08:0a:ea:ed:2c:e7:d9:c6:2e:63:a4:17:4a:fa: 08:12:31:1a:8b:c7:1b:47:54:8f:63:39:75:d7:e2: 22:a7:6e:0f:a7:98:ad:35:c0:8a:a5:ad:48:45:e2: 74:4a:04:19:38:40:d8:c1:38:fd:3f:bd:70:c7:2d: 7d:ac:4a:0f:4b:e2:b5:63:fb:63:b4:d7:cf:f5:c8: e7:80:31:05:02:49:ae:2d:b0:2c:43:05:e6:75:3b: d3:bc:44:cc:2c:c3:72:49:ee:fc:f4:1c:8d:de:02: a1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:14:F6:A7:55:12:BE:48:06:4C:A2:38:8C:81:00:1A:56:19:B3:E7 X509v3 Authority Key Identifier: keyid:38:0D:D9:E7:35:5C:72:C7:51:FF:F4:F1:75:DA:CE:7D:AA:7B:9C:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA3Z5zVccsdR__TxddrOfap7nL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/IxT2p1USvkgGTKI4jIEAGlYZs-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b7fea2-a32d-4a5e-9982-54b4ca50d248/1/OA3Z5zVccsdR__TxddrOfap7nL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.67.164.0/22 Signature Algorithm: sha256WithRSAEncryption b8:b1:ed:36:41:94:a3:fb:18:5d:2d:7c:73:eb:2d:3e:c1:28: ef:f8:73:5f:24:37:33:91:56:eb:f5:c9:9d:a4:80:ef:15:ea: b9:06:b2:5b:49:dd:d4:a2:55:3b:8c:15:a8:4c:b3:ea:86:58: a9:ea:91:ea:f9:7c:67:f1:29:db:22:f1:25:7c:7b:02:0c:67: b9:c6:a7:e2:d1:a7:e7:f2:e0:41:83:9c:dc:17:07:ba:d2:58: bc:4b:6c:4a:08:bb:70:cb:48:19:33:e2:f6:70:48:6d:db:5f: 7f:e6:7b:a5:02:11:b4:14:66:e6:9f:ba:f6:f8:1f:0e:a3:3f: d2:a0:09:f9:1e:a9:f0:49:04:c4:11:2c:88:9b:95:f4:16:b8: d3:8f:d1:29:86:07:fa:f3:a3:c5:70:ea:e6:5c:76:2a:14:69: 12:a4:2a:68:be:13:a0:b7:f5:3b:83:7c:58:b4:de:e4:4e:56: e4:f5:61:c2:0e:bb:99:91:e0:6b:2f:a5:c3:97:13:ab:18:fe: 51:a0:55:36:29:55:13:ca:92:a5:c0:e8:69:74:76:58:7b:47: 49:96:df:21:f7:5c:69:75:2f:62:7c:7f:51:ae:16:02:70:5a: 49:43:b3:45:1c:ef:da:e5:41:93:ff:9f:25:67:39:8c:e3:2e: 3d:1c:2a:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDHBcKuU80hSxghkw58yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MGRkOWU3MzU1YzcyYzc1MWZmZjRmMTc1ZGFjZTdkYWE3 YjljYmYwHhcNMjYwMTAyMTYyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzE0ZjZhNzU1MTJiZTQ4MDY0Y2EyMzg4YzgxMDAxYTU2MTliM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYNwt/UY0tcekDhP5nZuJmONHpfd Yz5hSGRH6BZwcPuRkRPvTa1TMV15EUqfXpvXZEOeIj5hLxHuLhc44psLfjiKm2/b c5xPgtE5dSBX3xatSklfGHLo5U4meD6IzC4DpGqwJ43Hndp04+UJ969VGx53NQmX 3lDFu9/+KyjOQ3vbDQa68qhsU6VHIDK+CmBeS5rmx7DFCArq7Szn2cYuY6QXSvoI EjEai8cbR1SPYzl11+Iip24Pp5itNcCKpa1IReJ0SgQZOEDYwTj9P71wxy19rEoP S+K1Y/tjtNfP9cjngDEFAkmuLbAsQwXmdTvTvETMLMNySe789ByN3gKhtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMU9qdVEr5IBkyiOIyBABpWGbPnMB8GA1UdIwQY MBaAFDgN2ec1XHLHUf/08XXazn2qe5y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODIt NTRiNGNhNTBkMjQ4LzEvSXhUMnAxVVN2a2dHVEtJNGpJRUFHbFlacy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9iN2ZlYTItYTMyZC00YTVlLTk5ODItNTRiNGNhNTBkMjQ4 LzEvT0EzWjV6VmNjc2RSX19UeGRkck9mYXA3bkw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUOkMA0G CSqGSIb3DQEBCwUAA4IBAQC4se02QZSj+xhdLXxz6y0+wSjv+HNfJDczkVbr9cmd pIDvFeq5BrJbSd3UolU7jBWoTLPqhlip6pHq+Xxn8SnbIvElfHsCDGe5xqfi0afn 8uBBg5zcFwe60li8S2xKCLtwy0gZM+L2cEht219/5nulAhG0FGbmn7r2+B8Ooz/S oAn5HqnwSQTEESyIm5X0FrjTj9Ephgf686PFcOrmXHYqFGkSpCpovhOgt/U7g3xY tN7kTlbk9WHCDruZkeBrL6XDlxOrGP5RoFU2KVUTypKlwOhpdHZYe0dJlt8h91xp dS9ifH9RrhYCcFpJQ7NFHO/a5UGT/58lZzmM4y49HCqq -----END CERTIFICATE-----Generated at Sat Feb 7 15:11:33 2026 by rpki-client