This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa File: Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa (raw, json) Hash identifier: GgIIKDtcsrLVWYyQhd2aVmcWoVxW/Iu8qODTyb1TUu4= Subject key identifier: 21:EF:08:D2:7B:B2:15:22:23:D2:DE:14:B3:34:6F:B4:FF:88:CC:A2 Certificate issuer: /CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Certificate serial: 019B7C112B5D87ABFC3587D622CAE83FC687 Authority key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa Signing time: Fri 02 Jan 2026 00:17:38 +0000 ROA not before: Fri 02 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 164.138.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:2b:5d:87:ab:fc:35:87:d6:22:ca:e8:3f:c6:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4 Validity Not Before: Jan 2 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21ef08d27bb2152223d2de14b3346fb4ff88cca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:56:c7:78:30:cc:d5:81:02:3d:a2:83:3b: aa:54:ad:50:69:96:94:b5:f5:6d:02:db:c0:a4:e5: 07:4a:4b:5a:a5:23:f9:e3:80:41:70:30:c0:02:de: 60:a6:f8:b3:ef:c4:fc:1e:a4:ee:56:45:9c:e5:a0: dd:4a:68:b4:96:e1:ec:4a:c4:fe:92:fe:c1:5a:d5: b1:bc:f2:a4:81:4a:3b:f1:5b:4b:a0:71:e0:2c:60: 9c:48:91:8f:a3:bd:06:b0:d3:09:5b:b2:2e:00:3f: d1:cb:9b:92:59:3c:34:ba:17:37:e9:20:f3:dd:2c: c0:e4:c2:2f:92:b2:bd:ff:8b:68:2f:56:31:4e:ec: 16:dc:69:82:d3:42:4e:ad:90:13:cc:21:12:aa:04: 7d:81:fa:40:08:4e:3e:82:c3:ed:a3:b7:e3:9b:36: 54:9c:8c:17:24:9e:62:7c:a7:17:ee:76:b8:5d:96: 9c:41:4f:20:a5:41:f5:6a:0b:b6:a3:27:43:dc:a4: b3:cd:92:79:03:c9:d6:ca:64:6f:c5:71:41:82:8d: 75:be:c6:fe:9a:f6:20:d8:db:a9:f7:8a:7a:b6:3f: b9:7c:be:f9:36:e7:91:e3:cc:14:34:69:6f:d5:b5: a0:93:13:77:4b:f3:0e:2d:98:bb:ae:05:e2:d7:63: ff:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:08:D2:7B:B2:15:22:23:D2:DE:14:B3:34:6F:B4:FF:88:CC:A2 X509v3 Authority Key Identifier: keyid:CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/Ie8I0nuyFSIj0t4UszRvtP-IzKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.202.0/24 Signature Algorithm: sha256WithRSAEncryption b2:6f:09:a4:7c:d9:26:22:5c:a4:ea:87:c4:8a:14:26:81:b6: 7c:4a:e7:a8:82:2c:f5:4c:fa:c3:b5:d2:74:d1:4f:b9:a3:94: 63:6e:c8:8f:f5:d9:13:e1:86:3d:1d:a0:c7:35:35:b4:18:3d: 4a:46:8d:76:08:ba:92:ae:3e:b2:8f:6d:12:a3:52:02:4d:6e: 48:5f:25:bb:39:f4:80:ed:c2:2b:56:74:1e:4d:e6:43:25:de: d6:7b:3c:55:0d:0a:36:5a:01:2b:4d:d3:97:83:35:e0:35:bc: b9:79:b7:23:26:dc:4f:c7:b9:89:e5:8f:5b:9b:85:0e:80:5a: 39:a1:45:86:b2:55:5a:97:32:56:5c:bd:ec:8c:25:74:ff:74: 39:01:cf:68:80:9a:1b:06:fe:5f:12:b7:8a:21:13:dc:77:4f: fd:81:5a:c2:12:4a:2c:7c:e8:70:28:89:01:f1:00:bf:d5:b9: a5:37:4b:f0:f1:8c:47:dd:2e:60:99:e3:9a:0d:0b:62:88:5c: a4:aa:48:ec:ab:b5:db:60:79:34:91:17:85:07:97:94:32:57: ac:0c:03:47:b8:28:46:20:95:96:b9:08:79:e8:b6:03:41:cb: 46:4b:b6:f4:93:61:7a:46:bd:46:2b:b3:00:db:00:f0:db:80: 24:6c:9f:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EStdh6v8NYfWIsroP8aHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjhlZmQzZTMxNjZlODFhYWNmMTU4MGUyZjBiOTRkYTI5 YjNkYjQwHhcNMjYwMTAyMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWVmMDhkMjdiYjIxNTIyMjNkMmRlMTRiMzM0NmZiNGZmODhjY2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KVWx3gwzNWBAj2igzuqVK1QaZaU tfVtAtvApOUHSktapSP544BBcDDAAt5gpviz78T8HqTuVkWc5aDdSmi0luHsSsT+ kv7BWtWxvPKkgUo78VtLoHHgLGCcSJGPo70GsNMJW7IuAD/Ry5uSWTw0uhc36SDz 3SzA5MIvkrK9/4toL1YxTuwW3GmC00JOrZATzCESqgR9gfpACE4+gsPto7fjmzZU nIwXJJ5ifKcX7na4XZacQU8gpUH1agu2oydD3KSzzZJ5A8nWymRvxXFBgo11vsb+ mvYg2Nup94p6tj+5fL75NueR48wUNGlv1bWgkxN3S/MOLZi7rgXi12P/EQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCHvCNJ7shUiI9LeFLM0b7T/iMyiMB8GA1UdIwQY MBaAFM3479PjFm6Bqs8VgOLwuU2imz20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMt YTAzYWQ1Mjk5OTdjLzEvSWU4STBudXlGU0lqMHQ0VXN6UnZ0UC1JektJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NmMxNzAtMjA2Ny00MGVlLTg5MjMtYTAzYWQ1Mjk5OTdj LzEvemZqdjAtTVdib0dxenhXQTR2QzVUYUtiUGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIrKMA0G CSqGSIb3DQEBCwUAA4IBAQCybwmkfNkmIlyk6ofEihQmgbZ8Sueogiz1TPrDtdJ0 0U+5o5RjbsiP9dkT4YY9HaDHNTW0GD1KRo12CLqSrj6yj20So1ICTW5IXyW7OfSA 7cIrVnQeTeZDJd7WezxVDQo2WgErTdOXgzXgNby5ebcjJtxPx7mJ5Y9bm4UOgFo5 oUWGslValzJWXL3sjCV0/3Q5Ac9ogJobBv5fEreKIRPcd0/9gVrCEkosfOhwKIkB 8QC/1bmlN0vw8YxH3S5gmeOaDQtiiFykqkjsq7XbYHk0kReFB5eUMlesDANHuChG IJWWuQh56LYDQctGS7b0k2F6Rr1GK7MA2wDw24AkbJ85 -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:19 2026 by rpki-client