This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/iGjEi-RetR317ng4nZLQERiyp5Y.roa File: iGjEi-RetR317ng4nZLQERiyp5Y.roa (raw, json) Hash identifier: VlJirjJKzaqO+FqHC1L2a0e5Ten97AODI8Xgtdno6FA= Subject key identifier: 88:68:C4:8B:E4:5E:B5:1D:F5:EE:78:38:9D:92:D0:11:18:B2:A7:96 Certificate issuer: /CN=74d7da63929999603395877448ce50ac6e0213a9 Certificate serial: 019B7F857D284079618C117E1DC5E09BCA4A Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/iGjEi-RetR317ng4nZLQERiyp5Y.roa Signing time: Fri 02 Jan 2026 16:23:33 +0000 ROA not before: Fri 02 Jan 2026 16:23:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 193.16.48.0/21 maxlen: 21 193.16.56.0/22 maxlen: 22 193.16.60.0/23 maxlen: 23 193.16.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:7d:28:40:79:61:8c:11:7e:1d:c5:e0:9b:ca:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9 Validity Not Before: Jan 2 16:23:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8868c48be45eb51df5ee78389d92d01118b2a796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:4b:40:42:c9:04:66:aa:a9:25:1c:c0:c1: 50:bf:35:44:29:e9:ec:43:63:5c:31:f1:4c:5a:53: 11:37:b0:f1:d2:36:fd:cf:40:bb:36:8b:11:16:e4: aa:6c:7b:da:f2:dc:61:ac:52:3c:86:40:94:c7:2d: d3:71:69:d8:05:93:ba:74:37:5f:72:78:5d:50:3e: 1f:b8:b0:37:97:dd:e8:9f:e1:73:a4:d3:b5:47:a8: 9a:ff:aa:8a:7c:24:9a:30:8a:4b:04:f4:8f:7a:5c: 36:1c:5c:cb:b7:d1:9d:58:33:60:84:f1:7a:d8:cb: b9:94:75:39:bb:64:a7:b5:02:93:92:71:34:fe:3b: a9:a0:fc:5f:b8:a9:ea:4f:2c:09:5e:83:95:3f:c6: 05:91:32:ae:80:87:49:79:62:e1:4f:58:6c:22:1b: 98:82:45:fd:e6:b3:26:9f:75:1a:79:3f:e1:59:3c: f4:fb:c9:be:d3:79:d0:a2:21:d8:77:cc:e3:a7:90: ee:65:c1:f7:d5:36:77:b5:ea:39:3c:26:da:ce:c9: db:d7:bd:af:2b:9c:16:56:ed:d7:d2:29:42:fd:11: 4e:32:2c:0e:59:ec:58:38:be:8e:03:f5:1b:38:13: c7:82:db:a2:6d:3f:30:51:e0:a4:fd:6b:21:30:70: b0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:68:C4:8B:E4:5E:B5:1D:F5:EE:78:38:9D:92:D0:11:18:B2:A7:96 X509v3 Authority Key Identifier: keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/iGjEi-RetR317ng4nZLQERiyp5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.16.48.0-193.16.62.255 Signature Algorithm: sha256WithRSAEncryption 98:78:6a:dc:cc:89:1a:c1:9b:80:a2:6b:3c:f8:c8:68:1b:3e: 08:1e:4a:92:f5:03:3b:b5:2d:e7:c9:b1:7d:97:29:29:06:42: 75:1f:5f:f3:cf:d3:2d:e8:b8:53:35:d6:14:ed:66:34:e5:62: b6:f6:09:99:c8:10:f8:30:a9:91:e1:3d:97:15:7d:6e:e4:6f: c7:1d:66:f9:db:d0:5c:60:ac:c0:e0:2a:43:c2:a1:f9:23:36: c5:c0:c7:a0:30:cf:11:c1:b2:e6:a2:67:c1:78:84:97:4c:79: 3d:68:3b:a7:36:47:70:86:b0:5f:61:62:42:7b:89:c4:86:49: 7c:7c:14:c4:17:f8:0b:2d:95:1a:e4:ec:92:03:fb:c9:48:1a: 9f:7e:f9:e4:4a:aa:ca:2b:d4:f7:68:76:14:8e:5e:72:fa:a8: 26:b3:df:54:21:3b:51:02:b9:33:12:56:16:80:80:53:a3:db: 61:00:ec:b5:6b:9c:3c:0e:6d:f6:3c:49:91:62:79:a7:d6:6e: a1:a7:47:c9:29:36:c8:7f:0a:f2:4b:f3:83:af:f8:22:14:97: cc:e8:62:55:6f:b0:b3:a1:a6:0d:55:24:8c:56:8d:5e:84:58: 9e:d9:5a:39:06:20:ce:4b:73:8b:8c:01:17:25:96:16:fc:e7: 3a:f3:90:3e -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hX0oQHlhjBF+HcXgm8pKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZDdkYTYzOTI5OTk5NjAzMzk1ODc3NDQ4Y2U1MGFjNmUw MjEzYTkwHhcNMjYwMTAyMTYyMzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODY4YzQ4YmU0NWViNTFkZjVlZTc4Mzg5ZDkyZDAxMTE4YjJhNzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjShLQELJBGaqqSUcwMFQvzVEKens Q2NcMfFMWlMRN7Dx0jb9z0C7NosRFuSqbHva8txhrFI8hkCUxy3TcWnYBZO6dDdf cnhdUD4fuLA3l93on+FzpNO1R6ia/6qKfCSaMIpLBPSPelw2HFzLt9GdWDNghPF6 2Mu5lHU5u2SntQKTknE0/jupoPxfuKnqTywJXoOVP8YFkTKugIdJeWLhT1hsIhuY gkX95rMmn3UaeT/hWTz0+8m+03nQoiHYd8zjp5DuZcH31TZ3teo5PCbazsnb172v K5wWVu3X0ilC/RFOMiwOWexYOL6OA/UbOBPHgtuibT8wUeCk/WshMHCwFwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIhoxIvkXrUd9e54OJ2S0BEYsqeWMB8GA1UdIwQY MBaAFHTX2mOSmZlgM5WHdEjOUKxuAhOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUt NGI1ZDVkNWY4Njk5LzEvaUdqRWktUmV0UjMxN25nNG5aTFFFUml5cDVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wZWI4NTItYWYzNC00Y2I5LTg3MmUtNGI1ZDVkNWY4Njk5 LzEvZE5mYVk1S1ptV0F6bFlkMFNNNVFyRzRDRTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATBEDAD BADBED4wDQYJKoZIhvcNAQELBQADggEBAJh4atzMiRrBm4Ciazz4yGgbPggeSpL1 Azu1LefJsX2XKSkGQnUfX/PP0y3ouFM11hTtZjTlYrb2CZnIEPgwqZHhPZcVfW7k b8cdZvnb0FxgrMDgKkPCofkjNsXAx6AwzxHBsuaiZ8F4hJdMeT1oO6c2R3CGsF9h YkJ7icSGSXx8FMQX+AstlRrk7JID+8lIGp9++eRKqsor1PdodhSOXnL6qCaz31Qh O1ECuTMSVhaAgFOj22EA7LVrnDwObfY8SZFieafWbqGnR8kpNsh/CvJL84Ov+CIU l8zoYlVvsLOhpg1VJIxWjV6EWJ7ZWjkGIM5Lc4uMARcllhb85zrzkD4= -----END CERTIFICATE-----Generated at Wed Jan 21 12:21:04 2026 by rpki-client