This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/ice_LDnA6TShJ0tbBNY5iT0MS20.roa File: ice_LDnA6TShJ0tbBNY5iT0MS20.roa (raw, json) Hash identifier: Ne/xr7FxI4PoMf09Z/160yY/95SJ/bfXY5TJhx10TCU= Subject key identifier: 89:C7:BF:2C:39:C0:E9:34:A1:27:4B:5B:04:D6:39:89:3D:0C:4B:6D Certificate issuer: /CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Certificate serial: 019B797E38823378B618EC7263759DD29CC4 Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/ice_LDnA6TShJ0tbBNY5iT0MS20.roa Signing time: Thu 01 Jan 2026 12:17:53 +0000 ROA not before: Thu 01 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50399 IP address blocks: 92.42.232.0/21 maxlen: 24 109.232.40.0/21 maxlen: 24 185.3.204.0/22 maxlen: 24 185.223.140.0/22 maxlen: 24 2a00:11e8::/32 maxlen: 64 2a03:3300::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:38:82:33:78:b6:18:ec:72:63:75:9d:d2:9c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64 Validity Not Before: Jan 1 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89c7bf2c39c0e934a1274b5b04d639893d0c4b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ef:2d:5f:3b:b7:1a:39:03:99:76:43:64:ae: 6a:74:b8:39:9f:9e:4e:5b:20:9b:a2:c0:d9:8a:11: 75:bd:ca:d3:18:dc:40:fd:d4:1d:4f:df:64:4b:64: 62:73:57:f8:54:5b:ae:37:e8:00:26:d6:e3:6f:9f: c8:29:bb:0b:36:80:b4:a5:f4:b6:81:25:ec:4e:45: e4:f2:98:53:d4:66:37:1a:86:ab:a4:39:01:77:2b: 2a:04:41:46:e2:9e:d0:f3:7b:27:16:de:cd:f2:e4: 09:ba:ff:06:52:8e:ab:31:2e:82:7e:3c:19:0c:35: 06:dd:0a:b7:7e:27:0b:07:7e:b1:41:25:1e:b6:7b: 48:62:d3:f2:af:92:8a:0b:9a:81:cf:80:7c:32:1c: 8f:c7:0d:11:ee:c4:8f:1b:11:69:f2:a5:0c:63:8e: 65:0f:bd:cb:7b:37:8e:b4:b7:0a:c5:50:69:a3:c3: 2e:15:1a:5f:fe:8f:67:a2:6f:8f:d0:3a:44:a4:70: af:3d:cd:65:70:de:b9:a8:90:6a:b4:f2:e0:8c:22: 1a:f4:20:ed:5c:d1:8a:fd:ed:29:53:0c:cc:cd:66: 99:38:63:1a:89:9f:6d:99:7b:e9:85:2e:87:a0:cd: a6:dd:99:94:9c:46:1c:9b:03:ef:3a:d8:a4:eb:6f: 92:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C7:BF:2C:39:C0:E9:34:A1:27:4B:5B:04:D6:39:89:3D:0C:4B:6D X509v3 Authority Key Identifier: keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/ice_LDnA6TShJ0tbBNY5iT0MS20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.232.0/21 109.232.40.0/21 185.3.204.0/22 185.223.140.0/22 IPv6: 2a00:11e8::/32 2a03:3300::/32 Signature Algorithm: sha256WithRSAEncryption 87:74:8b:02:4c:f7:9e:de:57:29:78:a9:d3:00:db:21:1e:02: 37:8b:e0:c5:8b:f5:e4:e6:f0:ba:85:8b:ba:74:fb:17:55:d1: 9b:cc:33:94:6d:94:01:fe:b5:fa:32:b3:93:c7:f7:d4:a4:1b: 6f:0b:e7:14:0e:6d:41:a1:e4:5d:e4:ce:87:57:c9:9e:eb:83: 20:68:92:08:f1:16:9b:3e:eb:b4:be:ea:04:30:23:54:cc:b4: 90:53:b9:fc:e8:dc:8a:85:f4:b4:eb:20:6c:65:63:79:f5:e5: 29:0b:8f:f5:eb:f3:c6:fa:89:d6:9b:f0:da:59:35:46:95:60: 4e:19:79:85:90:a0:56:08:62:42:28:84:27:7f:e3:b1:0e:24: f4:f7:c3:98:59:29:88:a4:59:16:15:2c:9b:29:a2:b3:20:b7: d4:46:78:07:1f:1d:89:9c:92:56:3b:71:c0:e5:02:59:8f:4d: cb:c9:04:27:f8:ef:80:cd:d8:ef:f4:02:26:42:b0:4e:54:28: e9:36:32:c3:84:73:98:b8:0c:96:35:05:7c:fb:73:cb:c1:fe: 04:ac:73:29:ac:78:15:cc:98:2f:f0:80:ea:bf:2c:6b:79:1f: 11:62:96:67:98:b9:d0:a0:13:f9:ab:4a:28:12:75:77:f0:8f: 4e:56:95:fb -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt5fjiCM3i2GOxyY3Wd0pzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjY2ZkYWVlMWU5ZWFiZDgwMjM3NjAyOTYxYmFhMjVhYmM2 OWNkNjQwHhcNMjYwMTAxMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWM3YmYyYzM5YzBlOTM0YTEyNzRiNWIwNGQ2Mzk4OTNkMGM0YjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+8tXzu3GjkDmXZDZK5qdLg5n55O WyCbosDZihF1vcrTGNxA/dQdT99kS2Ric1f4VFuuN+gAJtbjb5/IKbsLNoC0pfS2 gSXsTkXk8phT1GY3GoarpDkBdysqBEFG4p7Q83snFt7N8uQJuv8GUo6rMS6CfjwZ DDUG3Qq3ficLB36xQSUetntIYtPyr5KKC5qBz4B8MhyPxw0R7sSPGxFp8qUMY45l D73LezeOtLcKxVBpo8MuFRpf/o9nom+P0DpEpHCvPc1lcN65qJBqtPLgjCIa9CDt XNGK/e0pUwzMzWaZOGMaiZ9tmXvphS6HoM2m3ZmUnEYcmwPvOtik62+S8wIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFInHvyw5wOk0oSdLWwTWOYk9DEttMB8GA1UdIwQY MBaAFOzP2u4enqvYAjdgKWG6olq8ac1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQt M2YxYzE1MjNhMTIzLzEvaWNlX0xEbkE2VFNoSjB0YkJOWTVpVDBNUzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jMmE1YmQtNWYyOC00NmY5LWE0MTQtM2YxYzE1MjNhMTIz LzEvN01fYTdoNmVxOWdDTjJBcFlicWlXcnhweldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDXCroAwQD begoAwQCuQPMAwQCud+MMBQEAgACMA4DBQAqABHoAwUAKgMzADANBgkqhkiG9w0B AQsFAAOCAQEAh3SLAkz3nt5XKXip0wDbIR4CN4vgxYv15ObwuoWLunT7F1XRm8wz lG2UAf61+jKzk8f31KQbbwvnFA5tQaHkXeTOh1fJnuuDIGiSCPEWmz7rtL7qBDAj VMy0kFO5/OjcioX0tOsgbGVjefXlKQuP9evzxvqJ1pvw2lk1RpVgThl5hZCgVghi QiiEJ3/jsQ4k9PfDmFkpiKRZFhUsmymisyC31EZ4Bx8diZySVjtxwOUCWY9Ny8kE J/jvgM3Y7/QCJkKwTlQo6TYyw4RzmLgMljUFfPtzy8H+BKxzKax4FcyYL/CA6r8s a3kfEWKWZ5i50KAT+atKKBJ1d/CPTlaV+w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:23 2026 by rpki-client