This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/IkjRDZvjoet-DMCFuA1SVxVn9z0.roa File: IkjRDZvjoet-DMCFuA1SVxVn9z0.roa (raw, json) Hash identifier: KDG2SPZXlzy1qLYoQcv1WkPT39XYjh45It7qEUlD6Rw= Subject key identifier: 22:48:D1:0D:9B:E3:A1:EB:7E:0C:C0:85:B8:0D:52:57:15:67:F7:3D Certificate issuer: /CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4 Certificate serial: 019B7AC891AB333FD7A5EF36135682544275 Authority key identifier: A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/IkjRDZvjoet-DMCFuA1SVxVn9z0.roa Signing time: Thu 01 Jan 2026 18:18:43 +0000 ROA not before: Thu 01 Jan 2026 18:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207794 IP address blocks: 194.113.139.0/24 maxlen: 24 194.113.140.0/24 maxlen: 24 194.113.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:91:ab:33:3f:d7:a5:ef:36:13:56:82:54:42:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a800ba639e65dbdcc690f58a5a740641b4ff88d4 Validity Not Before: Jan 1 18:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2248d10d9be3a1eb7e0cc085b80d52571567f73d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2c:ac:e1:29:80:af:25:2e:0c:0d:8f:a4:8e: 51:9f:d0:59:3d:77:e6:e5:b5:4c:d8:4a:47:33:ae: 05:4f:5f:bc:f5:d7:3e:29:71:38:18:eb:c3:17:7a: 07:bb:ff:10:f0:e5:f5:63:c7:a8:40:72:ec:c7:bf: 77:dc:4c:aa:b7:de:25:37:08:20:5b:a2:1f:5c:b4: d4:e5:d2:b0:a9:70:b7:f1:36:06:5f:43:b8:75:64: 25:55:97:2d:54:47:8c:4d:80:e8:77:76:17:d9:6f: f4:8a:09:22:71:8f:69:aa:6e:64:4e:19:2c:9d:86: 5a:d7:05:e1:39:ff:c1:21:89:bb:a9:66:08:61:19: ba:41:58:70:86:8c:e4:a6:fd:18:5d:a9:72:90:a5: c6:73:d3:52:c3:94:ab:b1:b7:8d:e4:b1:97:67:52: cd:fb:33:84:53:b1:25:a5:66:38:da:f8:d5:14:2a: b0:95:9b:8d:6c:2c:29:c1:e5:25:9a:7e:1b:8f:a6: 75:8b:b8:09:e5:10:00:12:00:de:e4:13:d7:f0:04: a1:79:37:90:fa:ae:b0:eb:75:84:75:30:61:32:a7: 49:bd:74:96:2e:e3:6a:fa:d0:11:a4:02:36:5b:78: 3f:58:6a:a2:5e:83:e6:87:06:df:e7:fc:05:ad:36: e8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:48:D1:0D:9B:E3:A1:EB:7E:0C:C0:85:B8:0D:52:57:15:67:F7:3D X509v3 Authority Key Identifier: keyid:A8:00:BA:63:9E:65:DB:DC:C6:90:F5:8A:5A:74:06:41:B4:FF:88:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAC6Y55l29zGkPWKWnQGQbT_iNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/IkjRDZvjoet-DMCFuA1SVxVn9z0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b63517-3f1e-451e-8850-8db0efb5620a/1/qAC6Y55l29zGkPWKWnQGQbT_iNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.113.139.0-194.113.140.255 194.113.155.0/24 Signature Algorithm: sha256WithRSAEncryption ad:ce:bf:bc:83:59:af:20:40:f2:c4:d3:23:d2:98:71:5e:63: 4d:43:35:8b:3f:84:7a:72:82:34:50:ec:f8:6c:9b:ac:6e:cc: 55:61:0d:bf:fc:cf:08:87:bb:4b:29:f1:c4:a8:c7:63:80:26: 30:bf:92:d2:83:6d:53:e2:6f:74:84:c2:dc:f1:07:60:47:38: de:b7:4f:78:f8:16:a0:23:27:69:37:6a:31:48:b8:9c:23:75: fa:89:f3:c0:a7:ba:80:7f:83:31:35:f5:19:03:28:a5:d2:6b: 4b:e7:31:57:f9:23:36:3a:b1:47:6e:4f:53:e8:e3:b3:da:66: 8d:12:61:1d:6e:5e:98:9c:b6:93:b0:e1:a7:e8:ac:05:41:33: 4d:34:2f:0f:13:d5:4b:e3:be:2a:20:1c:0c:54:7d:a6:fe:63: 25:60:23:2a:c5:65:d7:d1:91:8d:40:e5:de:8a:9b:a4:ff:0e: a8:4e:ed:2f:bb:84:6d:b3:99:f8:67:d5:99:e7:f2:74:f2:0a: f0:a5:27:23:9d:09:d8:8b:81:c5:81:b5:23:40:7b:05:7d:2f: a9:df:1c:a4:d6:cf:b6:a5:a5:da:52:ff:c4:0e:45:55:e5:2a: 89:00:19:43:73:00:bd:35:a5:12:be:c7:a4:d2:fe:d4:c4:27: ae:c2:0e:d0 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yJGrMz/Xpe82E1aCVEJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MDBiYTYzOWU2NWRiZGNjNjkwZjU4YTVhNzQwNjQxYjRm Zjg4ZDQwHhcNMjYwMTAxMTgxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ4ZDEwZDliZTNhMWViN2UwY2MwODViODBkNTI1NzE1NjdmNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCys4SmAryUuDA2PpI5Rn9BZPXfm 5bVM2EpHM64FT1+89dc+KXE4GOvDF3oHu/8Q8OX1Y8eoQHLsx7933Eyqt94lNwgg W6IfXLTU5dKwqXC38TYGX0O4dWQlVZctVEeMTYDod3YX2W/0igkicY9pqm5kThks nYZa1wXhOf/BIYm7qWYIYRm6QVhwhozkpv0YXalykKXGc9NSw5SrsbeN5LGXZ1LN +zOEU7ElpWY42vjVFCqwlZuNbCwpweUlmn4bj6Z1i7gJ5RAAEgDe5BPX8ASheTeQ +q6w63WEdTBhMqdJvXSWLuNq+tARpAI2W3g/WGqiXoPmhwbf5/wFrTboDwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCJI0Q2b46HrfgzAhbgNUlcVZ/c9MB8GA1UdIwQY MBaAFKgAumOeZdvcxpD1ilp0BkG0/4jUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAt OGRiMGVmYjU2MjBhLzEvSWtqUkRadmpvZXQtRE1DRnVBMVNWeFZuOXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iNjM1MTctM2YxZS00NTFlLTg4NTAtOGRiMGVmYjU2MjBh LzEvcUFDNlk1NWwyOXpHa1BXS1duUUdRYlRfaU5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADCcYsD BADCcYwDBADCcZswDQYJKoZIhvcNAQELBQADggEBAK3Ov7yDWa8gQPLE0yPSmHFe Y01DNYs/hHpygjRQ7Phsm6xuzFVhDb/8zwiHu0sp8cSox2OAJjC/ktKDbVPib3SE wtzxB2BHON63T3j4FqAjJ2k3ajFIuJwjdfqJ88CnuoB/gzE19RkDKKXSa0vnMVf5 IzY6sUduT1Po47PaZo0SYR1uXpictpOw4aforAVBM000Lw8T1UvjviogHAxUfab+ YyVgIyrFZdfRkY1A5d6Km6T/DqhO7S+7hG2zmfhn1Znn8nTyCvClJyOdCdiLgcWB tSNAewV9L6nfHKTWz7alpdpS/8QORVXlKokAGUNzAL01pRK+x6TS/tTEJ67CDtA= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:37 2026 by rpki-client