This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa File: iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa (raw, json) Hash identifier: 976ItUZMl+4c4FqQDI0diTxTkkRGxTQv/DsyWTxfnHQ= Subject key identifier: 88:CB:C9:01:AB:9E:A5:63:09:D7:0C:1F:EC:24:39:A0:F0:36:2A:81 Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Certificate serial: 019B7E37258B8840C09AB0F44E5CF5711666 Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa Signing time: Fri 02 Jan 2026 10:18:21 +0000 ROA not before: Fri 02 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212414 IP address blocks: 93.179.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:25:8b:88:40:c0:9a:b0:f4:4e:5c:f5:71:16:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84 Validity Not Before: Jan 2 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88cbc901ab9ea56309d70c1fec2439a0f0362a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a4:74:f9:ef:33:1a:95:93:46:5b:83:7a:40: b1:5e:4f:4b:ee:92:83:f9:4e:05:d8:f5:3b:f2:22: 95:9e:18:7b:fa:bf:1b:78:34:33:e8:09:95:5d:9f: 42:54:e8:79:69:0e:4f:1e:44:1f:c8:f0:bf:55:61: 45:a2:f3:62:64:1e:0f:2a:46:cf:e3:8f:14:a4:3d: 6b:b7:c5:fd:c5:a5:6c:9c:53:20:2d:41:ba:ce:31: 63:7c:3c:88:16:ab:32:6d:71:f8:2f:87:c5:dc:2b: fd:c8:a3:c2:86:86:ee:f8:b3:d3:65:50:d9:ca:a7: 3c:d9:b2:8a:ea:55:22:26:d3:0b:e8:f0:bb:fe:72: 6f:d0:87:35:ae:11:61:21:a6:fe:65:b4:96:71:e0: 0b:93:5e:83:88:3b:0c:c1:97:a6:19:ad:32:74:04: 80:13:3f:20:5e:99:e8:0e:61:fa:2e:f8:fa:0c:92: e1:0c:e4:b3:8b:40:88:86:e1:31:2a:fe:e2:7b:af: 3c:43:df:8b:ec:95:b7:64:c3:dc:7f:0a:74:33:37: f9:40:56:22:03:81:de:67:5e:63:f9:c4:d3:79:50: b9:62:b0:4d:2f:e2:b6:10:80:c6:f3:bb:60:de:a9: 1e:a8:84:6f:7d:41:9f:60:71:41:6c:92:ae:76:07: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CB:C9:01:AB:9E:A5:63:09:D7:0C:1F:EC:24:39:A0:F0:36:2A:81 X509v3 Authority Key Identifier: keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/iMvJAauepWMJ1wwf7CQ5oPA2KoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.179.64.0/23 Signature Algorithm: sha256WithRSAEncryption 61:ec:18:a4:bb:44:02:d6:de:f1:69:62:ef:ca:20:4c:a2:99: 58:c3:80:bc:27:f9:4f:db:d4:5d:75:8e:0c:7b:40:1d:df:a7: 7d:3c:e2:a0:b0:c0:96:c7:45:68:fe:d1:4c:04:ba:37:34:29: 3d:c1:1e:35:04:ad:bb:0c:84:75:62:5a:2c:45:00:03:71:ec: fd:ef:d0:9e:63:d1:c3:b0:d5:d9:80:4d:11:ea:f2:62:88:24: 5c:78:af:0b:75:e5:ce:0c:0a:13:6c:67:7c:3b:1a:ff:aa:f5: 5d:2a:71:49:a2:ff:a1:4e:a2:1b:6e:6a:ca:a6:e4:50:75:ca: 49:5e:9d:20:20:a5:75:07:43:0c:03:ca:5e:3b:66:1d:fc:0a: 88:a4:db:50:a8:43:48:f7:0b:fd:ed:33:f1:07:e7:60:e3:e3: 4e:17:96:01:33:6c:05:8f:ce:8d:c5:21:15:89:e9:40:4a:c3: 16:ea:91:dd:4b:45:2e:37:af:16:5d:c3:98:26:3d:7a:1f:20: 7b:20:f1:c4:c2:aa:bf:3a:ba:23:37:47:97:64:4f:39:e1:4f: 02:3e:99:52:36:6b:b7:2b:86:ef:38:7f:54:0e:39:05:c4:07: 08:2f:97:c6:22:5f:1a:8c:ea:7f:1e:f5:d4:c4:98:61:cb:85: 28:a3:cc:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+NyWLiEDAmrD0Tlz1cRZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy OWZmODQwHhcNMjYwMTAyMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGNiYzkwMWFiOWVhNTYzMDlkNzBjMWZlYzI0MzlhMGYwMzYyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6R0+e8zGpWTRluDekCxXk9L7pKD +U4F2PU78iKVnhh7+r8beDQz6AmVXZ9CVOh5aQ5PHkQfyPC/VWFFovNiZB4PKkbP 448UpD1rt8X9xaVsnFMgLUG6zjFjfDyIFqsybXH4L4fF3Cv9yKPChobu+LPTZVDZ yqc82bKK6lUiJtML6PC7/nJv0Ic1rhFhIab+ZbSWceALk16DiDsMwZemGa0ydASA Ez8gXpnoDmH6Lvj6DJLhDOSzi0CIhuExKv7ie688Q9+L7JW3ZMPcfwp0Mzf5QFYi A4HeZ15j+cTTeVC5YrBNL+K2EIDG87tg3qkeqIRvfUGfYHFBbJKudgeEywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjLyQGrnqVjCdcMH+wkOaDwNiqBMB8GA1UdIwQY MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt MjhmYzc3OTY3NzYzLzEvaU12SkFhdWVwV01KMXd3ZjdDUTVvUEEyS29FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXbNAMA0G CSqGSIb3DQEBCwUAA4IBAQBh7Biku0QC1t7xaWLvyiBMoplYw4C8J/lP29RddY4M e0Ad36d9POKgsMCWx0Vo/tFMBLo3NCk9wR41BK27DIR1YlosRQADcez979CeY9HD sNXZgE0R6vJiiCRceK8LdeXODAoTbGd8Oxr/qvVdKnFJov+hTqIbbmrKpuRQdcpJ Xp0gIKV1B0MMA8peO2Yd/AqIpNtQqENI9wv97TPxB+dg4+NOF5YBM2wFj86NxSEV ielASsMW6pHdS0UuN68WXcOYJj16HyB7IPHEwqq/OrojN0eXZE854U8CPplSNmu3 K4bvOH9UDjkFxAcIL5fGIl8ajOp/HvXUxJhhy4Uoo8wc -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:53 2026 by rpki-client