This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/ISG7wd6pLCoSiDnLQmoPtvGHwik.roa File: ISG7wd6pLCoSiDnLQmoPtvGHwik.roa (raw, json) Hash identifier: 8ye3uM7bxUh3STzMCoYVpX9YPeampsjAg7+ykblDc/0= Subject key identifier: 21:21:BB:C1:DE:A9:2C:2A:12:88:39:CB:42:6A:0F:B6:F1:87:C2:29 Certificate issuer: /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5 Certificate serial: 019B790FFE485069506576AD5FD0B75E7A1E Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/ISG7wd6pLCoSiDnLQmoPtvGHwik.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35044 IP address blocks: 193.189.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fe:48:50:69:50:65:76:ad:5f:d0:b7:5e:7a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2121bbc1dea92c2a128839cb426a0fb6f187c229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:53:d8:14:ef:23:b3:22:21:88:d9:f8:25:6e: de:bc:e5:87:c5:2b:86:1c:86:fc:ae:73:83:a6:b9: a8:75:2a:bb:fc:1a:b2:5f:ca:0c:32:50:e6:bc:ca: 39:aa:d9:f0:2b:27:e5:91:50:96:9b:32:53:3d:f9: 35:ff:21:3b:54:7c:57:28:1f:a1:e9:24:4a:39:b4: 54:29:83:10:92:52:b1:3d:8b:aa:bd:ed:bb:ab:19: 32:b2:b2:d7:78:94:01:11:17:7b:91:c9:5b:08:57: fa:d5:46:6a:dc:6f:f4:d5:52:6f:c3:8a:8a:04:0b: 6a:a1:22:b6:70:e0:58:99:5f:f2:4e:e1:d0:4a:80: db:74:13:4c:78:57:25:d2:b8:f5:c8:d0:f9:5c:bf: ca:26:d2:ca:50:16:d8:0b:b1:4d:09:ce:36:54:1b: 3a:24:03:e5:12:39:2d:a9:3d:78:7b:d6:f5:47:44: c0:af:78:df:24:dc:c9:9c:f5:d4:f5:cd:53:b3:7a: 84:e0:62:b6:c6:18:c5:2b:9e:c3:be:c4:59:5d:55: dd:3c:c8:97:62:e2:3f:01:65:84:1a:8a:df:31:33: 5c:1e:98:e4:c1:b7:9e:85:11:70:b5:a4:11:1a:93: 44:05:b4:21:2d:d0:88:81:d3:24:f5:5d:28:d0:fb: 51:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:21:BB:C1:DE:A9:2C:2A:12:88:39:CB:42:6A:0F:B6:F1:87:C2:29 X509v3 Authority Key Identifier: keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/ISG7wd6pLCoSiDnLQmoPtvGHwik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.108.0/23 Signature Algorithm: sha256WithRSAEncryption 95:b5:b2:ee:b3:f2:a9:4c:7b:8d:23:c2:3c:3b:86:8e:60:47: 82:b0:c8:9c:a0:28:83:13:8f:bc:04:94:26:d3:da:24:5f:34: 47:e0:9d:08:ad:d1:f3:10:9f:97:21:3d:4a:8b:cf:aa:a3:0e: 0d:76:53:83:66:fa:18:a5:64:74:4e:69:40:2f:b3:04:5a:5a: d0:06:36:52:b3:6b:7d:f7:66:a6:1b:4b:c0:a0:67:75:e7:67: 2a:84:69:37:67:0d:98:b8:c6:47:3b:d0:a5:5c:85:38:4e:2d: b7:f1:25:50:a6:23:97:e4:9c:e5:52:5a:03:e2:ee:c5:72:15: 53:35:61:b3:82:01:3b:e8:45:18:c8:bb:11:6d:a4:4c:64:f5: 25:cb:8c:e4:65:91:73:7b:22:bf:91:5f:4f:09:36:ed:1e:28: 70:d5:a2:cf:4c:c1:53:5c:f3:e7:6a:8a:02:36:16:ec:f1:09: 51:eb:42:9d:6f:de:70:95:e6:fc:f0:ff:0b:7d:5c:2d:00:09: 87:be:f9:f8:f3:53:12:75:1e:91:65:61:ff:82:2b:b7:f9:3b: d8:32:bf:ce:09:22:6b:d0:10:27:82:6f:ab:c9:29:9b:1c:e6: 06:10:d3:81:5d:5a:53:4c:9c:54:1b:7c:63:fe:cd:09:7e:05: 28:20:81:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/5IUGlQZXatX9C3XnoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5NjY4NjFiZTU3ZDM2ZDVmNmQ5ZDlmOGViZjYyODE3NjE2 YTIxZjUwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTIxYmJjMWRlYTkyYzJhMTI4ODM5Y2I0MjZhMGZiNmYxODdjMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFPYFO8jsyIhiNn4JW7evOWHxSuG HIb8rnODprmodSq7/BqyX8oMMlDmvMo5qtnwKyflkVCWmzJTPfk1/yE7VHxXKB+h 6SRKObRUKYMQklKxPYuqve27qxkysrLXeJQBERd7kclbCFf61UZq3G/01VJvw4qK BAtqoSK2cOBYmV/yTuHQSoDbdBNMeFcl0rj1yND5XL/KJtLKUBbYC7FNCc42VBs6 JAPlEjktqT14e9b1R0TAr3jfJNzJnPXU9c1Ts3qE4GK2xhjFK57DvsRZXVXdPMiX YuI/AWWEGorfMTNcHpjkwbeehRFwtaQRGpNEBbQhLdCIgdMk9V0o0PtRIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEhu8HeqSwqEog5y0JqD7bxh8IpMB8GA1UdIwQY MBaAFIlmhhvlfTbV9tnZ+Ov2KBdhaiH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9mNTYyYTQtMmYwNC00NmRkLWIxYzEt MzU2Y2RlYmViODRmLzEvSVNHN3dkNnBMQ29TaURuTFFtb1B0dkdId2lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9mNTYyYTQtMmYwNC00NmRkLWIxYzEtMzU2Y2RlYmViODRm LzEvaVdhR0ctVjlOdFgyMmRuNDZfWW9GMkZxSWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwb1sMA0G CSqGSIb3DQEBCwUAA4IBAQCVtbLus/KpTHuNI8I8O4aOYEeCsMicoCiDE4+8BJQm 09okXzRH4J0IrdHzEJ+XIT1Ki8+qow4NdlODZvoYpWR0TmlAL7MEWlrQBjZSs2t9 92amG0vAoGd152cqhGk3Zw2YuMZHO9ClXIU4Ti238SVQpiOX5JzlUloD4u7FchVT NWGzggE76EUYyLsRbaRMZPUly4zkZZFzeyK/kV9PCTbtHihw1aLPTMFTXPPnaooC Nhbs8QlR60Kdb95wleb88P8LfVwtAAmHvvn481MSdR6RZWH/giu3+TvYMr/OCSJr 0BAngm+rySmbHOYGENOBXVpTTJxUG3xj/s0JfgUoIIH4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:34 2026 by rpki-client