This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/ih6xiPv8P5foQSryApqM1wuthiw.roa File: ih6xiPv8P5foQSryApqM1wuthiw.roa (raw, json) Hash identifier: 4r9ce2PRoKlZkWqzYoMO2QMeDdt4J/qFvNMaUscc/gw= Subject key identifier: 8A:1E:B1:88:FB:FC:3F:97:E8:41:2A:F2:02:9A:8C:D7:0B:AD:86:2C Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4 Certificate serial: 019B76EB099189B52F6CC6BF8DDE63574593 Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/ih6xiPv8P5foQSryApqM1wuthiw.roa Signing time: Thu 01 Jan 2026 00:17:53 +0000 ROA not before: Thu 01 Jan 2026 00:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8648 IP address blocks: 185.105.252.0/24 maxlen: 24 185.105.253.0/24 maxlen: 24 185.105.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:09:91:89:b5:2f:6c:c6:bf:8d:de:63:57:45:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4 Validity Not Before: Jan 1 00:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a1eb188fbfc3f97e8412af2029a8cd70bad862c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:ce:ae:d7:88:94:b7:a0:20:f9:63:aa:70: d2:cd:90:25:dd:aa:94:ce:a2:dc:f2:1b:62:39:6b: cf:00:2a:00:88:07:af:4b:2f:e4:bc:27:1a:12:e3: 1d:35:cf:2e:89:cf:6c:df:a9:2a:e8:cb:19:73:01: 13:98:0f:c7:41:af:82:3e:d7:84:0a:11:99:32:cc: 3b:6e:61:cc:2f:24:23:db:50:b9:9e:7e:07:19:c2: 51:ad:59:b0:c3:9f:f2:36:67:2a:53:80:75:ff:a3: bc:d3:60:3e:48:61:3c:e3:c4:96:55:71:f1:2f:73: a1:1a:07:ba:74:f8:d5:39:e4:2d:84:89:8c:11:cb: 0e:a1:26:7f:f6:40:c0:e0:b8:cb:0b:f5:28:ac:92: 08:bf:1a:b1:58:60:01:3d:9c:41:f7:cc:e0:91:5e: fa:a5:0d:ed:2a:04:eb:5f:1e:db:36:91:29:0e:8a: 1d:0c:ff:d9:0e:73:07:b7:0f:39:20:9d:b2:80:e9: 3b:8a:c3:63:e4:d6:90:02:63:ee:04:df:f1:19:4b: 54:09:9d:82:fd:88:0a:03:e4:4b:ac:64:5c:06:0e: 83:cd:62:c1:7d:38:b8:37:0f:38:5c:98:5c:93:44: 81:6b:f6:3d:86:6d:06:37:32:93:8f:9e:a9:b6:e1: 29:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:B1:88:FB:FC:3F:97:E8:41:2A:F2:02:9A:8C:D7:0B:AD:86:2C X509v3 Authority Key Identifier: keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/ih6xiPv8P5foQSryApqM1wuthiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.252.0-185.105.254.255 Signature Algorithm: sha256WithRSAEncryption 30:94:be:6d:aa:d5:f9:c9:b0:76:8b:bb:30:22:c0:d0:53:e2: 6d:fb:e6:33:74:35:00:be:fa:4d:00:e3:da:04:a7:41:8c:34: 8b:84:bb:cd:ad:29:2f:fb:81:d2:85:1f:43:cc:c4:40:a3:cf: 26:0a:27:4e:0f:08:6a:c9:af:b1:36:74:7e:d9:6b:53:36:bd: b6:ff:b3:87:dc:fd:91:c0:48:e7:10:ac:31:7d:e1:2c:74:27: de:9d:d2:d4:3d:c9:61:92:75:8a:18:46:b7:87:95:87:ca:4a: a0:3f:a0:78:55:86:8c:17:3a:b5:f4:eb:1f:17:e3:b1:fa:e2: 59:3f:7c:40:c0:f7:a7:de:d5:8b:d9:cd:e2:5f:45:2e:ca:22: df:cd:68:82:3d:35:63:5a:99:18:f4:f0:1a:b3:00:73:92:30: bb:f9:4e:24:1b:44:7c:af:18:a5:10:89:32:4a:18:46:c1:e8: ac:d7:78:2e:d2:a7:b5:7b:6f:7e:63:28:ed:9e:8f:90:86:02: 0b:57:66:2a:97:63:4e:4d:62:e4:7b:18:30:43:5f:45:dc:44: a6:ea:19:d9:cc:95:0f:11:6a:b8:92:39:d2:f9:ec:b8:40:b1: 03:de:52:39:54:e3:c5:a8:9d:36:b2:74:96:ef:fe:51:87:31: 2d:d6:0e:e4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26wmRibUvbMa/jd5jV0WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjhhNGNmYjZiMWI2NDQ3ZGE5MzgzMzMyMWRkMzE1MDYx MTkzZDQwHhcNMjYwMTAxMDAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTFlYjE4OGZiZmMzZjk3ZTg0MTJhZjIwMjlhOGNkNzBiYWQ4NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7vOrteIlLegIPljqnDSzZAl3aqU zqLc8htiOWvPACoAiAevSy/kvCcaEuMdNc8uic9s36kq6MsZcwETmA/HQa+CPteE ChGZMsw7bmHMLyQj21C5nn4HGcJRrVmww5/yNmcqU4B1/6O802A+SGE848SWVXHx L3OhGge6dPjVOeQthImMEcsOoSZ/9kDA4LjLC/UorJIIvxqxWGABPZxB98zgkV76 pQ3tKgTrXx7bNpEpDoodDP/ZDnMHtw85IJ2ygOk7isNj5NaQAmPuBN/xGUtUCZ2C /YgKA+RLrGRcBg6DzWLBfTi4Nw84XJhck0SBa/Y9hm0GNzKTj56ptuEpgQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFIoesYj7/D+X6EEq8gKajNcLrYYsMB8GA1UdIwQY MBaAFEJopM+2sbZEfak4MzId0xUGEZPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMt MmZlZThiNjMwOWNiLzEvaWg2eGlQdjhQNWZvUVNyeUFwcU0xd3V0aGl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS83ZDQzYmItYTFjNi00MDU1LThjNTMtMmZlZThiNjMwOWNi LzEvUW1pa3o3YXh0a1I5cVRnek1oM1RGUVlSazlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5afwD BAC5af4wDQYJKoZIhvcNAQELBQADggEBADCUvm2q1fnJsHaLuzAiwNBT4m375jN0 NQC++k0A49oEp0GMNIuEu82tKS/7gdKFH0PMxECjzyYKJ04PCGrJr7E2dH7Za1M2 vbb/s4fc/ZHASOcQrDF94Sx0J96d0tQ9yWGSdYoYRreHlYfKSqA/oHhVhowXOrX0 6x8X47H64lk/fEDA96fe1YvZzeJfRS7KIt/NaII9NWNamRj08BqzAHOSMLv5TiQb RHyvGKUQiTJKGEbB6KzXeC7Sp7V7b35jKO2ej5CGAgtXZiqXY05NYuR7GDBDX0Xc RKbqGdnMlQ8RariSOdL57LhAsQPeUjlU48WonTaydJbv/lGHMS3WDuQ= -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:33 2026 by rpki-client