This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa File: ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa (raw, json) Hash identifier: 9Ixv1QcElvaUvLVayAC5q1i8Ay2oyoQHQj5D6wnH7iU= Subject key identifier: 20:22:48:2B:E8:3A:1C:1D:CC:BE:18:B6:8E:0A:88:57:C2:19:3A:13 Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77 Certificate serial: 019B7F15B70A94DC8158C9D2C0BFB9689E8B Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa Signing time: Fri 02 Jan 2026 14:21:28 +0000 ROA not before: Fri 02 Jan 2026 14:21:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41755 IP address blocks: 193.37.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b7:0a:94:dc:81:58:c9:d2:c0:bf:b9:68:9e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77 Validity Not Before: Jan 2 14:21:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2022482be83a1c1dccbe18b68e0a8857c2193a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:41:f4:60:5c:45:58:cd:3f:db:05:8d:10: 55:ca:ef:36:a8:b4:e0:ea:1b:7e:79:2f:f2:17:a5: bb:f4:c0:b8:dc:35:88:34:85:24:96:17:c7:de:16: 88:7e:f2:69:91:02:1a:ef:f4:fa:78:0f:54:24:de: e7:d7:70:f7:40:0d:5f:10:90:92:41:78:20:32:45: e8:06:9c:34:55:27:d3:cf:c1:11:8c:d4:cf:20:c3: b8:86:ec:9f:1d:57:81:94:e6:23:0d:41:13:d9:f8: a1:b2:a9:59:5b:3b:3e:34:29:d0:e7:99:93:91:a2: 46:80:f2:bd:b9:85:1d:e0:81:11:a2:b0:13:c5:2a: 46:94:0f:68:2e:5f:7e:00:ee:c0:fc:52:76:5b:89: 47:d0:93:2e:04:c4:03:d0:13:dd:d9:b4:74:5f:ca: b1:f6:00:79:98:08:b9:e4:35:58:11:47:c8:99:ad: 75:e4:de:f6:1f:51:7a:25:67:28:8e:a5:8c:86:28: 8f:cb:4d:19:35:ee:27:73:ba:c0:10:12:9e:90:56: aa:d0:8a:f1:00:53:87:48:de:f6:86:74:e6:14:e9: 4c:61:f0:ce:dc:ce:6e:6d:58:8e:d3:ab:dc:ce:7c: bb:b7:25:83:58:73:8a:8f:d6:1e:58:42:74:42:a5: 77:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:48:2B:E8:3A:1C:1D:CC:BE:18:B6:8E:0A:88:57:C2:19:3A:13 X509v3 Authority Key Identifier: keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/ICJIK-g6HB3Mvhi2jgqIV8IZOhM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.37.154.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:7a:33:a9:c0:aa:2a:aa:e5:d7:7c:d9:b3:05:01:a2:2e:b8: c8:8e:d2:e5:a2:15:8f:40:be:dd:a8:cc:1b:b7:12:8a:9c:78: 3b:0b:50:54:15:ec:60:15:23:8c:13:19:06:dd:35:28:4f:ce: e3:cd:01:44:f9:f5:02:3d:4d:8b:4a:00:1d:c7:ce:fb:9f:30: a0:1b:16:ea:ec:0e:2d:c6:7c:fd:52:09:41:16:63:b8:2f:fb: b3:1b:52:fa:62:a1:a9:9c:17:5e:85:eb:a9:33:2d:8b:23:a0: 3a:2b:a2:96:11:5d:c1:20:bd:82:ec:fd:45:44:58:b4:45:b2: 2a:5c:9d:f2:be:a5:24:80:47:7e:9d:70:7a:8f:72:b7:53:e2: 2b:bc:9d:c1:bd:9a:a8:9f:3d:04:41:a4:7f:a7:01:2d:f7:81: be:7b:1b:e5:2c:39:0e:58:51:aa:5e:93:f7:a9:87:e5:2e:3d: b9:52:96:a4:ed:e7:5e:05:c8:ad:fd:16:4a:48:e2:48:ad:72: 91:65:37:d3:fd:4e:4b:e3:7c:f6:3e:61:5d:dc:e2:e5:85:4e: f8:c4:09:da:07:fe:cf:9b:c4:c9:fb:6d:67:5c:22:cc:f9:e5: a5:e0:93:c2:56:be:78:73:5a:56:db:17:26:ca:01:57:22:b3: 7d:ab:a1:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FbcKlNyBWMnSwL+5aJ6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTNhMzQxOTY3YWVkYmU1MmE4YjExYzc5Y2IxMzkxMWE0 YTlmNzcwHhcNMjYwMTAyMTQyMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDIyNDgyYmU4M2ExYzFkY2NiZTE4YjY4ZTBhODg1N2MyMTkzYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDpB9GBcRVjNP9sFjRBVyu82qLTg 6ht+eS/yF6W79MC43DWINIUklhfH3haIfvJpkQIa7/T6eA9UJN7n13D3QA1fEJCS QXggMkXoBpw0VSfTz8ERjNTPIMO4huyfHVeBlOYjDUET2fihsqlZWzs+NCnQ55mT kaJGgPK9uYUd4IERorATxSpGlA9oLl9+AO7A/FJ2W4lH0JMuBMQD0BPd2bR0X8qx 9gB5mAi55DVYEUfIma115N72H1F6JWcojqWMhiiPy00ZNe4nc7rAEBKekFaq0Irx AFOHSN72hnTmFOlMYfDO3M5ubViO06vczny7tyWDWHOKj9YeWEJ0QqV3tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCAiSCvoOhwdzL4Yto4KiFfCGToTMB8GA1UdIwQY MBaAFCQTo0GWeu2+UqixHHnLE5EaSp93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZjY0MDEtMWYwMC00Yjc0LWFiOTkt NGQ5Mjk2ZTliM2FlLzEvSUNKSUstZzZIQjNNdmhpMmpncUlWOElaT2hNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9mZjY0MDEtMWYwMC00Yjc0LWFiOTktNGQ5Mjk2ZTliM2Fl LzEvSkJPalFaWjY3YjVTcUxFY2Vjc1RrUnBLbjNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSWaMA0G CSqGSIb3DQEBCwUAA4IBAQAvejOpwKoqquXXfNmzBQGiLrjIjtLlohWPQL7dqMwb txKKnHg7C1BUFexgFSOMExkG3TUoT87jzQFE+fUCPU2LSgAdx877nzCgGxbq7A4t xnz9UglBFmO4L/uzG1L6YqGpnBdeheupMy2LI6A6K6KWEV3BIL2C7P1FRFi0RbIq XJ3yvqUkgEd+nXB6j3K3U+IrvJ3BvZqonz0EQaR/pwEt94G+exvlLDkOWFGqXpP3 qYflLj25Upak7edeBcit/RZKSOJIrXKRZTfT/U5L43z2PmFd3OLlhU74xAnaB/7P m8TJ+21nXCLM+eWl4JPCVr54c1pW2xcmygFXIrN9q6GI -----END CERTIFICATE-----Generated at Tue Feb 10 00:29:14 2026 by rpki-client