This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa File: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (raw, json) Hash identifier: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk= Subject key identifier: 23:2B:7B:39:BF:EC:9C:A7:F5:64:FA:29:F9:E7:84:95:D5:CC:D1:F4 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834FB2D556E5345D4CC5D37040A65F8 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa Signing time: Thu 01 Jan 2026 06:18:16 +0000 ROA not before: Thu 01 Jan 2026 06:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205411 IP address blocks: 185.21.124.0/22 maxlen: 24 208.82.72.0/22 maxlen: 24 212.237.244.0/22 maxlen: 24 2a00:5560::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fb:2d:55:6e:53:45:d4:cc:5d:37:04:0a:65:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=232b7b39bfec9ca7f564fa29f9e78495d5ccd1f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a6:3f:0c:d7:01:d9:7e:02:dd:a6:47:4d:08: e3:8d:82:6e:c8:58:05:81:90:0e:6a:a1:5e:9f:d1: 7c:e0:e0:b7:d1:38:05:74:19:cb:b3:43:d7:ca:a4: e7:b3:8c:af:50:1f:62:7f:9f:a1:31:b0:a1:a1:32: 45:30:62:5f:bb:e1:67:df:8c:37:9f:58:8e:25:5d: 3c:08:8b:e6:e6:5f:ad:f7:76:b8:ba:57:27:ea:82: 7b:ac:26:90:e8:0d:43:5a:a8:33:a5:f3:01:ff:9b: 4a:fa:9c:cd:46:d3:82:7b:91:54:d4:9e:af:04:1a: 93:a9:04:07:1e:75:ed:de:c5:7b:af:3f:12:22:1c: 50:46:07:7c:09:85:1c:0c:9f:19:a8:7f:c4:7f:82: 8c:aa:d4:4d:1f:b0:14:89:64:5e:63:86:84:af:0d: e4:26:d7:a4:c7:34:8a:c8:72:08:3d:3f:74:38:2d: 6a:95:61:64:a7:88:c9:22:85:3b:c9:af:40:5d:9a: c0:13:18:d7:96:65:35:9a:d1:3c:14:10:12:5c:8c: 7c:8a:56:4e:2c:05:cc:b1:2f:58:cd:03:17:e4:34: 73:13:75:ef:97:c0:62:4b:d1:52:d5:07:ad:79:f5: 47:2c:de:4e:8a:ce:5c:8f:7c:87:81:43:cb:55:0d: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:7B:39:BF:EC:9C:A7:F5:64:FA:29:F9:E7:84:95:D5:CC:D1:F4 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.124.0/22 208.82.72.0/22 212.237.244.0/22 IPv6: 2a00:5560::/32 Signature Algorithm: sha256WithRSAEncryption 43:e9:90:cd:29:08:04:85:43:c4:de:8c:29:05:90:46:2d:db: 4d:b4:dd:ec:fc:19:64:e2:3f:63:b3:27:53:4b:a0:b7:16:21: 55:99:4d:9f:c0:18:23:04:bb:de:f6:94:7d:79:de:77:6a:a5: f9:eb:6e:82:7f:5f:3e:38:7f:c4:b1:e0:0b:d2:40:ef:a4:80: 9b:0d:44:5c:64:df:75:02:85:2e:ef:08:2a:22:ba:27:d1:38: af:15:a7:25:20:45:04:a1:63:48:fb:1e:02:d3:50:8e:26:c8: 06:2d:e8:dd:69:e6:13:f6:d7:b1:64:f1:c6:f9:48:0c:8d:5b: 81:2b:48:44:bf:39:20:b7:de:10:54:24:0b:a4:4e:8f:e3:e2: a4:9a:a8:3d:5f:c1:56:95:a6:86:4f:c4:ca:70:c0:ad:a7:96: 83:eb:4d:85:fd:6b:03:f6:60:15:cb:51:4b:90:e1:ba:5b:fc: fe:a6:e3:8f:ef:24:55:0b:00:88:8f:21:58:9c:a9:d3:f7:c9: 7d:10:a4:c0:95:76:1f:b2:d7:9d:33:73:7f:63:78:00:e4:aa: 0d:d1:56:1e:f4:fd:da:f1:a3:22:32:d6:66:be:82:13:f0:64: cc:f9:b7:d5:3d:44:e2:80:ee:b1:2a:43:62:2b:34:5f:b4:4a: db:65:00:89 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NPstVW5TRdTMXTcECmX4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzJiN2IzOWJmZWM5Y2E3ZjU2NGZhMjlmOWU3ODQ5NWQ1Y2NkMWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqY/DNcB2X4C3aZHTQjjjYJuyFgF gZAOaqFen9F84OC30TgFdBnLs0PXyqTns4yvUB9if5+hMbChoTJFMGJfu+Fn34w3 n1iOJV08CIvm5l+t93a4ulcn6oJ7rCaQ6A1DWqgzpfMB/5tK+pzNRtOCe5FU1J6v BBqTqQQHHnXt3sV7rz8SIhxQRgd8CYUcDJ8ZqH/Ef4KMqtRNH7AUiWReY4aErw3k JtekxzSKyHIIPT90OC1qlWFkp4jJIoU7ya9AXZrAExjXlmU1mtE8FBASXIx8ilZO LAXMsS9YzQMX5DRzE3Xvl8BiS9FS1QetefVHLN5Ois5cj3yHgUPLVQ0GnQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCMrezm/7Jyn9WT6KfnnhJXVzNH0MB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvSXl0N09iX3NuS2YxWlBvcC1lZUVsZFhNMGZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuRV8AwQC 0FJIAwQC1O30MA0EAgACMAcDBQAqAFVgMA0GCSqGSIb3DQEBCwUAA4IBAQBD6ZDN KQgEhUPE3owpBZBGLdtNtN3s/Blk4j9jsydTS6C3FiFVmU2fwBgjBLve9pR9ed53 aqX5626Cf18+OH/EseAL0kDvpICbDURcZN91AoUu7wgqIron0TivFaclIEUEoWNI +x4C01COJsgGLejdaeYT9texZPHG+UgMjVuBK0hEvzkgt94QVCQLpE6P4+Kkmqg9 X8FWlaaGT8TKcMCtp5aD602F/WsD9mAVy1FLkOG6W/z+puOP7yRVCwCIjyFYnKnT 98l9EKTAlXYfstedM3N/Y3gA5KoN0VYe9P3a8aMiMtZmvoIT8GTM+bfVPUTigO6x KkNiKzRftErbZQCJ -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:26 2026 by rpki-client