This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/iCcCouY1S-nB4LsSEbuN21LdER8.roa File: iCcCouY1S-nB4LsSEbuN21LdER8.roa (raw, json) Hash identifier: b4tzlX7SLxO9i1S2FBRMsymp/F3ncDEjzvJear130vE= Subject key identifier: 88:27:02:A2:E6:35:4B:E9:C1:E0:BB:12:11:BB:8D:DB:52:DD:11:1F Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Certificate serial: 019B7C7FC6388BAA5286C68DC0A1F43DAF1F Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/iCcCouY1S-nB4LsSEbuN21LdER8.roa Signing time: Fri 02 Jan 2026 02:18:27 +0000 ROA not before: Fri 02 Jan 2026 02:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24768 IP address blocks: 176.111.108.0/22 maxlen: 22 176.111.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c6:38:8b:aa:52:86:c6:8d:c0:a1:f4:3d:af:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1 Validity Not Before: Jan 2 02:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=882702a2e6354be9c1e0bb1211bb8ddb52dd111f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:74:73:d0:6b:89:9b:0a:91:a2:21:b7:a9:82: b4:72:22:74:76:36:5d:c1:e4:f5:2a:03:6b:22:61: dd:96:68:ff:4e:b1:6d:6a:a2:12:1d:b0:2e:0f:74: bf:08:9c:71:6c:2f:90:43:0f:99:d0:99:fe:23:76: 8d:9b:48:52:55:24:b3:f4:61:13:f0:4e:a6:c8:77: b8:56:6d:5b:ba:be:65:89:77:05:e6:cc:04:da:67: 21:6b:71:60:b7:9e:1a:fd:e1:5c:82:75:53:cd:cc: 3a:f4:61:7a:a0:f5:43:9d:d4:fa:4b:ce:b2:cb:64: 69:6a:d4:73:a1:3c:2b:04:6c:d1:0b:31:f0:a8:38: 64:eb:f8:79:2d:82:c8:e5:38:0d:f7:bb:35:69:3b: 0e:d3:c6:37:aa:63:0e:70:c9:e3:c0:74:c8:04:00: f2:54:1d:9b:a3:bc:11:d4:7f:ec:8f:f5:9d:59:4d: 7c:23:a1:2b:79:af:9a:18:a5:5b:52:b3:9b:68:c6: 7a:b6:44:c3:f8:15:0d:c7:a7:ac:4b:f9:e7:12:e1: ef:0e:ab:22:bd:8d:77:34:99:7f:1d:19:50:26:b5: 52:cf:19:9c:71:65:73:ab:56:ce:34:ec:1a:f4:4a: 70:57:ab:55:80:49:6d:31:4e:3e:c1:86:40:4e:05: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:27:02:A2:E6:35:4B:E9:C1:E0:BB:12:11:BB:8D:DB:52:DD:11:1F X509v3 Authority Key Identifier: keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/iCcCouY1S-nB4LsSEbuN21LdER8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.111.108.0/22 Signature Algorithm: sha256WithRSAEncryption 87:2b:60:e1:be:b6:59:f6:1d:e1:f3:24:71:00:ca:de:f7:f6: 91:ef:a5:cd:1e:0d:19:7a:b8:57:ee:f1:e2:e2:80:76:15:3d: bd:ed:53:22:fc:60:dc:b1:71:35:12:9f:31:c1:b5:82:90:dd: ff:ce:3c:8a:97:3b:3a:13:33:1a:3e:34:1b:db:18:0a:8a:c2: 7d:73:cb:2f:5d:35:df:5a:14:bb:56:b4:92:94:a9:ea:43:43: 45:ea:83:16:11:f9:e0:24:08:3a:34:57:98:c5:cb:7c:39:b8: 9d:dd:37:f9:df:c6:9d:c3:99:13:c6:9e:f6:5b:b6:e3:eb:05: bb:46:c3:30:39:8b:54:ae:d7:48:02:ef:78:71:ca:92:72:03: e4:4c:2d:c9:0a:80:5e:c6:6d:3b:5e:6a:8a:ba:ce:47:c9:cc: a7:20:a9:55:75:bb:db:de:87:38:13:8b:6f:e9:57:68:44:6b: 30:58:02:1b:91:1f:5d:ee:17:ec:1f:ed:39:aa:2a:fc:2f:9c: 61:3e:78:4a:d0:2a:b3:6d:61:7a:46:60:c8:af:06:81:e8:0f: 88:75:83:5c:e8:9d:4e:69:f0:91:c4:48:41:76:77:7e:80:c1: c9:5d:a4:02:7d:2e:60:b3:31:50:21:96:91:49:06:c8:d8:69: cf:c5:50:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f8Y4i6pShsaNwKH0Pa8fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4 ZWEzYjEwHhcNMjYwMTAyMDIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODI3MDJhMmU2MzU0YmU5YzFlMGJiMTIxMWJiOGRkYjUyZGQxMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXRz0GuJmwqRoiG3qYK0ciJ0djZd weT1KgNrImHdlmj/TrFtaqISHbAuD3S/CJxxbC+QQw+Z0Jn+I3aNm0hSVSSz9GET 8E6myHe4Vm1bur5liXcF5swE2mcha3Fgt54a/eFcgnVTzcw69GF6oPVDndT6S86y y2RpatRzoTwrBGzRCzHwqDhk6/h5LYLI5TgN97s1aTsO08Y3qmMOcMnjwHTIBADy VB2bo7wR1H/sj/WdWU18I6Erea+aGKVbUrObaMZ6tkTD+BUNx6esS/nnEuHvDqsi vY13NJl/HRlQJrVSzxmccWVzq1bONOwa9EpwV6tVgEltMU4+wYZATgVyqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgnAqLmNUvpweC7EhG7jdtS3REfMB8GA1UdIwQY MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt ZTMzYWUxMDZiNTRkLzEvaUNjQ291WTFTLW5CNExzU0VidU4yMUxkRVI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsG9sMA0G CSqGSIb3DQEBCwUAA4IBAQCHK2DhvrZZ9h3h8yRxAMre9/aR76XNHg0ZerhX7vHi 4oB2FT297VMi/GDcsXE1Ep8xwbWCkN3/zjyKlzs6EzMaPjQb2xgKisJ9c8svXTXf WhS7VrSSlKnqQ0NF6oMWEfngJAg6NFeYxct8Obid3Tf538adw5kTxp72W7bj6wW7 RsMwOYtUrtdIAu94ccqScgPkTC3JCoBexm07XmqKus5HycynIKlVdbvb3oc4E4tv 6VdoRGswWAIbkR9d7hfsH+05qir8L5xhPnhK0CqzbWF6RmDIrwaB6A+IdYNc6J1O afCRxEhBdnd+gMHJXaQCfS5gszFQIZaRSQbI2GnPxVDn -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:05 2026 by rpki-client