This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/iPVWn7SaJupNY5vib7S58Yw-EZA.roa File: iPVWn7SaJupNY5vib7S58Yw-EZA.roa (raw, json) Hash identifier: fPFHftYHhWb/RM8qpACz7tOWNLv4QdaQl0/39hYUSJM= Subject key identifier: 88:F5:56:9F:B4:9A:26:EA:4D:63:9B:E2:6F:B4:B9:F1:8C:3E:11:90 Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413 Certificate serial: 019B7EA75189A5714D8D33DAA9D2EC49EFC8 Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/iPVWn7SaJupNY5vib7S58Yw-EZA.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206774 IP address blocks: 185.176.246.0/23 maxlen: 23 2a0a:2784::/32 maxlen: 32 2a0a:2787::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:51:89:a5:71:4d:8d:33:da:a9:d2:ec:49:ef:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88f5569fb49a26ea4d639be26fb4b9f18c3e1190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f2:7b:73:00:8d:e2:cf:b2:47:5f:58:9f:0c: 0f:44:c1:22:c4:ff:88:49:4f:20:b7:e0:91:d0:08: 89:aa:ca:77:41:65:7c:35:90:14:72:9b:44:26:20: 15:a6:51:3b:62:b6:b7:9f:21:27:02:bd:f8:5b:b5: e5:4e:a2:f0:8a:e5:be:32:1f:7c:24:4e:4c:50:0d: e7:27:11:15:39:7a:fb:d9:57:da:fe:84:f5:30:ed: 32:e3:61:bc:53:1e:d2:b1:41:87:08:24:d3:66:55: 15:bf:f0:b2:33:33:00:ca:73:f4:36:73:64:ea:20: 99:d6:e4:9b:09:30:95:6f:96:56:8c:44:2d:1e:9a: d0:c9:0f:78:b8:a3:2e:53:b2:ec:f7:36:17:d5:88: a5:a0:4e:16:39:7a:08:cb:74:cc:2a:52:9d:94:b4: b2:74:0f:e5:15:44:5e:41:bd:25:b5:28:a9:50:48: 4e:52:15:ff:27:c6:8c:a2:3e:0e:a6:07:c1:72:58: 06:29:62:a3:36:9c:83:9a:68:a8:68:87:15:0e:32: 7c:4e:60:e8:53:ab:df:e1:4c:1d:56:75:ee:1f:23: 71:f4:ee:3a:ae:f2:80:a4:02:8b:22:e8:7d:2e:0e: 8d:a3:49:f9:10:5f:35:9d:c1:57:cb:41:ed:3b:ee: 55:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F5:56:9F:B4:9A:26:EA:4D:63:9B:E2:6F:B4:B9:F1:8C:3E:11:90 X509v3 Authority Key Identifier: keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/iPVWn7SaJupNY5vib7S58Yw-EZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.246.0/23 IPv6: 2a0a:2784::/32 2a0a:2787::/32 Signature Algorithm: sha256WithRSAEncryption 48:f8:d6:99:02:69:50:3a:0d:51:d4:32:40:8b:ec:da:18:bf: b6:cf:eb:00:90:52:4c:a9:08:01:e1:ca:a7:fb:fb:94:ca:89: c0:8d:30:b8:55:58:27:69:ad:6f:e3:a0:20:ee:8e:df:cc:03: 21:43:c2:60:97:06:bb:e2:b8:b9:38:ed:18:07:65:32:0f:32: ae:78:fe:5d:7c:b3:52:aa:40:90:31:3b:24:4e:4e:a0:48:70: e6:a4:98:21:1c:12:a9:b0:d2:b7:4b:69:04:29:d1:59:23:9d: 76:1a:ff:07:e0:73:67:38:30:20:95:fc:00:c9:20:7a:c7:b8: bc:71:58:c0:a6:3d:61:2f:15:05:94:a6:35:b5:d0:de:fe:2e: ed:ee:5c:9d:3e:3c:27:70:88:fe:ba:a1:b5:5f:5d:e3:24:37: fe:16:a4:ac:0b:83:e0:f0:ad:39:16:09:4e:6b:44:25:c1:92: 90:d1:a0:28:7b:03:df:cc:d5:f9:63:e8:f3:84:14:02:7f:52: c9:a7:16:c4:ff:5d:22:b7:e4:47:eb:a8:98:b7:02:22:69:e3: 15:d3:c7:59:38:94:b6:7e:5f:e4:09:a0:a9:f8:9a:a5:f2:55: de:16:7d:4a:b1:93:be:e5:cd:bb:f3:9f:fd:bb:be:7a:20:db: 7f:79:41:34 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt+p1GJpXFNjTPaqdLsSe/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz NGI0MTMwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGY1NTY5ZmI0OWEyNmVhNGQ2MzliZTI2ZmI0YjlmMThjM2UxMTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPJ7cwCN4s+yR19YnwwPRMEixP+I SU8gt+CR0AiJqsp3QWV8NZAUcptEJiAVplE7Yra3nyEnAr34W7XlTqLwiuW+Mh98 JE5MUA3nJxEVOXr72Vfa/oT1MO0y42G8Ux7SsUGHCCTTZlUVv/CyMzMAynP0NnNk 6iCZ1uSbCTCVb5ZWjEQtHprQyQ94uKMuU7Ls9zYX1YiloE4WOXoIy3TMKlKdlLSy dA/lFUReQb0ltSipUEhOUhX/J8aMoj4OpgfBclgGKWKjNpyDmmioaIcVDjJ8TmDo U6vf4UwdVnXuHyNx9O46rvKApAKLIuh9Lg6No0n5EF81ncFXy0HtO+5VpQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIj1Vp+0mibqTWOb4m+0ufGMPhGQMB8GA1UdIwQY MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt MzY2NTA2N2RiMjU2LzEvaVBWV243U2FKdXBOWTV2aWI3UzU4WXctRVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2 LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQBubD2MBQE AgACMA4DBQAqCieEAwUAKgonhzANBgkqhkiG9w0BAQsFAAOCAQEASPjWmQJpUDoN UdQyQIvs2hi/ts/rAJBSTKkIAeHKp/v7lMqJwI0wuFVYJ2mtb+OgIO6O38wDIUPC YJcGu+K4uTjtGAdlMg8yrnj+XXyzUqpAkDE7JE5OoEhw5qSYIRwSqbDSt0tpBCnR WSOddhr/B+BzZzgwIJX8AMkgese4vHFYwKY9YS8VBZSmNbXQ3v4u7e5cnT48J3CI /rqhtV9d4yQ3/hakrAuD4PCtORYJTmtEJcGSkNGgKHsD38zV+WPo84QUAn9SyacW xP9dIrfkR+uomLcCImnjFdPHWTiUtn5f5AmgqfiapfJV3hZ9SrGTvuXNu/Of/bu+ eiDbf3lBNA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:43 2026 by rpki-client