This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/IcCeL6AZfvX_kE4zzUkEMkzVtIU.roa File: IcCeL6AZfvX_kE4zzUkEMkzVtIU.roa (raw, json) Hash identifier: hklcyioL4dzXSkOdiGlFS+tOjckUBOw0pVZyfqrbXcc= Subject key identifier: 21:C0:9E:2F:A0:19:7E:F5:FF:90:4E:33:CD:49:04:32:4C:D5:B4:85 Certificate issuer: /CN=795013346c8d8f23e0128d306997980237db2374 Certificate serial: 019B7C135499D574888CB2AFC480A2926878 Authority key identifier: 79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/IcCeL6AZfvX_kE4zzUkEMkzVtIU.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34066 IP address blocks: 77.240.48.0/20 maxlen: 24 78.158.48.0/20 maxlen: 24 185.158.56.0/22 maxlen: 24 193.104.103.0/24 maxlen: 24 193.104.131.0/24 maxlen: 24 2a03:7600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:54:99:d5:74:88:8c:b2:af:c4:80:a2:92:68:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=795013346c8d8f23e0128d306997980237db2374 Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21c09e2fa0197ef5ff904e33cd4904324cd5b485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:6e:a4:57:5e:d4:c8:be:58:89:80:32:4f: 7c:3c:53:d7:ec:19:57:82:2c:c0:b4:37:c7:1e:32: 5a:83:36:5b:c0:ab:f2:98:20:f9:4b:be:cc:97:38: 0a:a7:a4:92:0d:25:0e:7c:ec:73:d5:2d:0a:38:ff: c4:00:65:d3:b6:c1:d1:0c:c8:56:6d:9b:0a:12:a0: 68:66:c8:15:71:b3:6a:02:bc:5a:96:4a:12:5f:50: 05:80:7d:f8:7b:42:2d:3f:6e:ed:c3:31:57:ef:63: b8:09:a6:82:97:ea:c6:0f:88:0f:c6:8d:88:86:1f: 12:36:e8:ef:fb:f7:51:41:ad:79:b3:be:d9:00:bf: d5:00:2f:3e:ec:05:07:78:20:de:a3:bc:a2:c7:9a: 5c:8a:c6:87:35:7c:fa:37:62:b3:e4:da:a3:78:4f: ea:86:bb:3f:76:5e:35:10:11:29:8d:c9:f1:56:a9: 33:e4:cb:7a:d0:3a:e0:96:f5:9e:42:55:7a:c6:ed: 42:8a:ba:fa:36:b6:1c:c8:36:8e:e7:21:4b:84:ed: a4:56:37:b4:ee:c5:88:f5:db:27:14:4a:c6:27:5b: 07:17:dd:f5:05:49:99:fe:9d:a8:77:88:cc:7e:b5: 47:ab:6e:55:ef:a3:76:ef:46:03:d1:21:c5:e4:b4: c8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C0:9E:2F:A0:19:7E:F5:FF:90:4E:33:CD:49:04:32:4C:D5:B4:85 X509v3 Authority Key Identifier: keyid:79:50:13:34:6C:8D:8F:23:E0:12:8D:30:69:97:98:02:37:DB:23:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVATNGyNjyPgEo0waZeYAjfbI3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/IcCeL6AZfvX_kE4zzUkEMkzVtIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82c01e-b8cd-44ad-8aa7-8e98ea6ca8ee/1/eVATNGyNjyPgEo0waZeYAjfbI3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.240.48.0/20 78.158.48.0/20 185.158.56.0/22 193.104.103.0/24 193.104.131.0/24 IPv6: 2a03:7600::/32 Signature Algorithm: sha256WithRSAEncryption 07:df:b2:1f:94:f6:53:8a:41:b0:fb:00:d7:5c:69:10:e9:84: aa:f7:bc:37:a0:a4:0d:27:f3:81:7d:3f:9f:27:76:85:79:b9: 94:af:79:ab:17:dd:16:85:35:ac:89:12:02:22:0d:62:f9:ba: c7:41:d1:67:1a:10:7c:c1:0e:85:75:a0:b7:21:a6:75:d3:14: ef:8b:62:4e:b6:29:fa:3e:77:0e:49:20:a8:b5:d7:e0:c4:b6: 7b:6a:0c:6c:8a:2f:57:1b:ef:71:84:b4:78:dc:cd:14:01:42: 6c:9f:c8:ca:aa:23:1e:89:de:ec:15:7e:98:69:ab:05:24:09: 32:97:9d:de:e9:71:16:28:a1:e7:a8:18:ac:90:33:9e:49:d2: 45:84:14:67:db:c2:8d:77:3b:65:d7:a8:d7:a1:90:85:d0:bd: b8:4d:8e:55:ba:ec:82:98:cb:bd:8d:a5:72:26:c1:98:18:6d: c3:27:3f:e3:44:ad:65:8c:04:09:90:76:1c:56:8f:0f:ef:34: 17:71:01:ee:5c:96:07:a5:a2:77:89:57:be:4b:69:94:cb:ec: 78:10:f1:b7:30:0e:ae:5d:84:6a:2a:13:7e:de:86:1a:73:48: d4:e0:b2:7c:fb:10:04:99:64:2a:18:1c:f7:57:1e:40:7c:ec: a5:21:26:40 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8E1SZ1XSIjLKvxICikmh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NTAxMzM0NmM4ZDhmMjNlMDEyOGQzMDY5OTc5ODAyMzdk YjIzNzQwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWMwOWUyZmEwMTk3ZWY1ZmY5MDRlMzNjZDQ5MDQzMjRjZDViNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuJupFde1Mi+WImAMk98PFPX7BlX gizAtDfHHjJagzZbwKvymCD5S77MlzgKp6SSDSUOfOxz1S0KOP/EAGXTtsHRDMhW bZsKEqBoZsgVcbNqArxalkoSX1AFgH34e0ItP27twzFX72O4CaaCl+rGD4gPxo2I hh8SNujv+/dRQa15s77ZAL/VAC8+7AUHeCDeo7yix5pcisaHNXz6N2Kz5NqjeE/q hrs/dl41EBEpjcnxVqkz5Mt60DrglvWeQlV6xu1Cirr6NrYcyDaO5yFLhO2kVje0 7sWI9dsnFErGJ1sHF931BUmZ/p2od4jMfrVHq25V76N270YD0SHF5LTIOQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFCHAni+gGX71/5BOM81JBDJM1bSFMB8GA1UdIwQY MBaAFHlQEzRsjY8j4BKNMGmXmAI32yN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmMwMWUtYjhjZC00NGFkLThhYTct OGU5OGVhNmNhOGVlLzEvSWNDZUw2QVpmdlhfa0U0enpVa0VNa3pWdElVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84MmMwMWUtYjhjZC00NGFkLThhYTctOGU5OGVhNmNhOGVl LzEvZVZBVE5HeU5qeVBnRW8wd2FaZVlBamZiSTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQETfAwAwQE Tp4wAwQCuZ44AwQAwWhnAwQAwWiDMA0EAgACMAcDBQAqA3YAMA0GCSqGSIb3DQEB CwUAA4IBAQAH37IflPZTikGw+wDXXGkQ6YSq97w3oKQNJ/OBfT+fJ3aFebmUr3mr F90WhTWsiRICIg1i+brHQdFnGhB8wQ6FdaC3IaZ10xTvi2JOtin6PncOSSCotdfg xLZ7agxsii9XG+9xhLR43M0UAUJsn8jKqiMeid7sFX6YaasFJAkyl53e6XEWKKHn qBiskDOeSdJFhBRn28KNdztl16jXoZCF0L24TY5VuuyCmMu9jaVyJsGYGG3DJz/j RK1ljAQJkHYcVo8P7zQXcQHuXJYHpaJ3iVe+S2mUy+x4EPG3MA6uXYRqKhN+3oYa c0jU4LJ8+xAEmWQqGBz3Vx5AfOylISZA -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:22 2026 by rpki-client