This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa File: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (raw, json) Hash identifier: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM= Subject key identifier: 23:7F:33:D4:2A:89:BD:19:B5:36:5E:63:E9:9F:B7:DC:D3:79:BA:F8 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C77805A083DA8CF20F1AAD97EE224E Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198343 IP address blocks: 176.103.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:78:05:a0:83:da:8c:f2:0f:1a:ad:97:ee:22:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=237f33d42a89bd19b5365e63e99fb7dcd379baf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:15:fe:d1:53:33:a7:b8:99:e1:8b:95:09: 64:ef:9f:cb:e0:eb:e2:ec:05:fd:a4:62:5a:20:ba: a1:f7:47:5d:71:4d:a4:0c:01:bb:2a:d8:8d:f4:a1: f1:df:03:12:cd:ce:a1:84:ea:6a:f4:a5:5f:4a:ac: 44:73:60:13:cd:7b:62:b0:d0:d7:3c:1e:62:0d:67: 27:1a:34:3d:5f:68:90:14:16:c0:63:87:73:9f:0f: 8f:0b:51:e1:6f:36:f5:dc:d5:85:c3:f2:f6:2c:73: 03:87:eb:9e:67:50:4e:e4:86:33:65:ff:ed:b1:b0: 48:da:e0:df:34:a6:1a:45:30:20:ea:76:cd:2e:24: 29:9c:18:7a:64:a1:4e:ff:ab:93:43:cc:fc:e1:c3: ef:f2:19:b8:ae:61:2b:0f:67:3a:3f:06:76:bc:66: 6a:08:37:92:5c:ee:81:9d:f7:45:0d:fe:f6:3a:c3: b3:47:c5:b6:c2:af:77:0e:7e:bc:46:13:4f:b2:51: d0:a7:7d:ed:b9:c5:43:ee:d1:5e:98:36:d6:35:b9: 04:8c:f2:a1:a2:53:da:ef:fa:03:b1:83:06:11:5c: 90:18:54:14:d8:89:55:d6:5f:3f:90:10:c6:07:27: f6:41:6d:95:ee:88:5a:5a:be:07:f2:43:ea:ed:7d: 58:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7F:33:D4:2A:89:BD:19:B5:36:5E:63:E9:9F:B7:DC:D3:79:BA:F8 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.103.186.0/24 Signature Algorithm: sha256WithRSAEncryption 26:d1:97:2d:19:9e:ad:f5:85:ea:05:d1:eb:03:06:cd:0c:5a: 62:29:7e:14:4e:f8:a4:18:41:a6:50:85:d1:34:bf:b2:c7:9d: 4e:bc:cb:bb:74:9c:25:2e:c3:fa:09:8c:50:49:bc:aa:87:fd: 68:08:24:ad:96:d2:ce:54:35:4a:36:0e:b0:ac:c5:c3:8c:1e: 9a:b1:25:fb:2c:c4:ac:75:71:32:76:61:ea:aa:35:26:c9:42: 47:fd:0c:e0:e1:08:f3:bf:8c:1e:d9:b7:34:c8:49:c0:20:d0: 26:ed:ae:74:83:81:87:2f:33:b6:f5:e7:46:bd:bf:5c:0e:41: 93:45:59:80:11:ec:e2:9e:00:10:8a:3c:1c:3d:3a:69:c0:6a: 5c:ee:81:07:64:da:a3:d9:2e:2c:ee:2b:29:a1:8e:20:99:bc: b9:14:a1:7b:c6:19:da:1a:b2:62:d5:03:a6:7d:f1:94:19:d4: 60:8b:05:da:00:48:1d:c8:41:07:ad:45:fb:9e:e2:61:33:9c: ac:e2:32:d3:3f:ce:a1:70:d8:9e:3b:21:ec:52:8f:da:88:e8: 4a:50:25:5f:9a:9e:b6:9d:10:de:44:34:ed:5d:ae:a4:3b:33: a5:da:39:df:28:ce:81:a7:e7:32:b0:12:f8:a3:41:30:5d:09: ab:14:63:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3gFoIPajPIPGq2X7iJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzdmMzNkNDJhODliZDE5YjUzNjVlNjNlOTlmYjdkY2QzNzliYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25oV/tFTM6e4meGLlQlk75/L4Ovi 7AX9pGJaILqh90ddcU2kDAG7KtiN9KHx3wMSzc6hhOpq9KVfSqxEc2ATzXtisNDX PB5iDWcnGjQ9X2iQFBbAY4dznw+PC1Hhbzb13NWFw/L2LHMDh+ueZ1BO5IYzZf/t sbBI2uDfNKYaRTAg6nbNLiQpnBh6ZKFO/6uTQ8z84cPv8hm4rmErD2c6PwZ2vGZq CDeSXO6BnfdFDf72OsOzR8W2wq93Dn68RhNPslHQp33tucVD7tFemDbWNbkEjPKh olPa7/oDsYMGEVyQGFQU2IlV1l8/kBDGByf2QW2V7ohaWr4H8kPq7X1YbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCN/M9Qqib0ZtTZeY+mft9zTebr4MB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvSTM4ejFDcUp2Um0xTmw1ajZaLTMzTk41dXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGe6MA0G CSqGSIb3DQEBCwUAA4IBAQAm0ZctGZ6t9YXqBdHrAwbNDFpiKX4UTvikGEGmUIXR NL+yx51OvMu7dJwlLsP6CYxQSbyqh/1oCCStltLOVDVKNg6wrMXDjB6asSX7LMSs dXEydmHqqjUmyUJH/Qzg4Qjzv4we2bc0yEnAINAm7a50g4GHLzO29edGvb9cDkGT RVmAEezingAQijwcPTppwGpc7oEHZNqj2S4s7ispoY4gmby5FKF7xhnaGrJi1QOm ffGUGdRgiwXaAEgdyEEHrUX7nuJhM5ys4jLTP86hcNieOyHsUo/aiOhKUCVfmp62 nRDeRDTtXa6kOzOl2jnfKM6Bp+cysBL4o0EwXQmrFGOF -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:01 2026 by rpki-client