This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa File: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (raw, json) Hash identifier: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o= Subject key identifier: 89:AD:C5:F8:B8:32:8D:2D:8E:FD:20:DC:61:56:89:39:1E:20:35:89 Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17 Certificate serial: 019B7B369DB7AD2719941138BBCB6BC98FB6 Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204866 IP address blocks: 95.142.104.0/24 maxlen: 24 193.202.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9d:b7:ad:27:19:94:11:38:bb:cb:6b:c9:8f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89adc5f8b8328d2d8efd20dc615689391e203589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:b8:bd:fc:78:c8:b2:da:1a:c3:3c:44:7d: c0:9a:d3:56:69:b6:6d:5d:dc:fd:e9:96:2c:9b:34: eb:ba:07:54:44:91:74:ed:63:e9:6d:1b:22:fb:3b: 7e:58:80:91:7f:bc:f7:d9:aa:07:07:a0:d4:8f:b7: b1:2a:6b:20:9a:1c:f6:c6:53:93:2c:2f:72:88:d7: 12:7b:6a:86:0e:65:59:fa:3c:6c:91:7e:b8:f7:38: 51:94:5f:8e:49:5b:05:99:00:79:7e:51:6d:03:e0: 00:bd:09:ba:10:b8:32:97:60:55:82:82:ea:0f:34: 62:3d:45:a9:90:73:bf:8e:a6:d3:62:ce:5f:d5:06: 7c:74:f1:d1:96:b8:d9:19:a5:48:ad:34:ca:e2:d1: 3b:41:5c:17:39:96:24:5e:28:8c:c5:c5:f6:95:4b: 6d:1b:fe:bb:2a:7f:39:44:bd:ab:bb:e9:c6:96:fa: a7:0c:28:28:bc:e7:02:0c:91:77:9e:29:c5:b7:b1: d2:f6:84:58:38:d9:b4:c2:b1:b5:ef:30:52:a5:75: 40:51:14:d3:5b:97:76:f5:4c:09:47:12:43:83:9c: 32:4a:7d:e8:4e:d7:36:58:6a:68:ac:87:7d:6d:4b: ef:c8:95:9a:1d:3f:ff:c1:dd:14:77:47:35:4c:93: 3d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AD:C5:F8:B8:32:8D:2D:8E:FD:20:DC:61:56:89:39:1E:20:35:89 X509v3 Authority Key Identifier: keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.104.0/24 193.202.74.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:58:b3:c3:ef:97:0c:c6:23:7e:d3:e0:a7:1d:4b:92:c7:48: 45:14:f8:de:dc:29:6d:0a:b9:84:31:69:4c:8f:33:97:50:f8: 25:3e:7d:be:fd:46:37:0b:1c:ea:ec:e0:bd:ff:76:19:eb:e4: 50:3a:90:a1:39:d6:29:3a:07:f3:b5:94:51:63:b1:33:86:6e: c0:ca:b3:aa:aa:9e:99:a8:a2:82:21:1d:b4:59:8e:8b:79:d0: 3f:7e:0a:0e:33:9c:d4:33:9d:be:f7:bd:7f:5b:db:34:62:bc: f9:2e:30:f8:f7:b8:b0:c8:cc:8d:10:4f:c6:33:c6:c7:97:68: c7:3b:7b:51:73:7d:c4:06:41:00:cb:6c:e7:e4:5b:6e:c1:f3: 42:98:cd:22:a1:ad:ef:26:ef:4a:bb:a0:39:2b:e8:6a:05:14: 3c:bf:81:bc:2b:0e:35:fa:a0:11:b6:e8:73:ab:c4:40:7c:3c: 9a:2d:75:28:08:75:a6:90:60:6b:d2:80:3b:54:0b:a8:d1:63: 51:02:1e:3e:d0:01:06:4e:bb:bb:49:12:f4:6d:13:d8:88:d5: b3:0d:01:28:4d:31:7a:2b:48:7b:59:ac:9d:df:f7:55:01:dd: 2d:36:26:5a:f0:85:94:cc:ba:b7:87:fc:62:fd:5d:36:7b:dc: 0d:a8:6f:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Np23rScZlBE4u8tryY+2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4 NDlkMTcwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWFkYzVmOGI4MzI4ZDJkOGVmZDIwZGM2MTU2ODkzOTFlMjAzNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S64vfx4yLLaGsM8RH3AmtNWabZt Xdz96ZYsmzTrugdURJF07WPpbRsi+zt+WICRf7z32aoHB6DUj7exKmsgmhz2xlOT LC9yiNcSe2qGDmVZ+jxskX649zhRlF+OSVsFmQB5flFtA+AAvQm6ELgyl2BVgoLq DzRiPUWpkHO/jqbTYs5f1QZ8dPHRlrjZGaVIrTTK4tE7QVwXOZYkXiiMxcX2lUtt G/67Kn85RL2ru+nGlvqnDCgovOcCDJF3ninFt7HS9oRYONm0wrG17zBSpXVAURTT W5d29UwJRxJDg5wySn3oTtc2WGporId9bUvvyJWaHT//wd0Ud0c1TJM9MwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFImtxfi4Mo0tjv0g3GFWiTkeIDWJMB8GA1UdIwQY MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt OWRkOTk3ZWVmNGVmLzEvaWEzRi1MZ3lqUzJPX1NEY1lWYUpPUjRnTllrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX45oAwQA wcpKMA0GCSqGSIb3DQEBCwUAA4IBAQCfWLPD75cMxiN+0+CnHUuSx0hFFPje3Clt CrmEMWlMjzOXUPglPn2+/UY3Cxzq7OC9/3YZ6+RQOpChOdYpOgfztZRRY7Ezhm7A yrOqqp6ZqKKCIR20WY6LedA/fgoOM5zUM52+971/W9s0Yrz5LjD497iwyMyNEE/G M8bHl2jHO3tRc33EBkEAy2zn5FtuwfNCmM0ioa3vJu9Ku6A5K+hqBRQ8v4G8Kw41 +qARtuhzq8RAfDyaLXUoCHWmkGBr0oA7VAuo0WNRAh4+0AEGTru7SRL0bRPYiNWz DQEoTTF6K0h7Wayd3/dVAd0tNiZa8IWUzLq3h/xi/V02e9wNqG9P -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:43 2026 by rpki-client