This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Iu4tkvX9eFepODgJW-D4xKTDxjg.roa File: Iu4tkvX9eFepODgJW-D4xKTDxjg.roa (raw, json) Hash identifier: tI+pzuy6NJ/herD8mWytW/brnOXFysFlcBWfh+iy2gQ= Subject key identifier: 22:EE:2D:92:F5:FD:78:57:A9:38:38:09:5B:E0:F8:C4:A4:C3:C6:38 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019B7EA49447B9786D8CA837DD875CF9C0BF Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Iu4tkvX9eFepODgJW-D4xKTDxjg.roa Signing time: Fri 02 Jan 2026 12:17:53 +0000 ROA not before: Fri 02 Jan 2026 12:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2832 IP address blocks: 193.10.255.0/24 maxlen: 24 2001:6b0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:94:47:b9:78:6d:8c:a8:37:dd:87:5c:f9:c0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jan 2 12:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ee2d92f5fd7857a93838095be0f8c4a4c3c638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:37:ed:fb:1d:9d:65:da:a8:33:ef:3f:bf: 26:b8:c9:f4:72:ff:a4:a5:f4:58:23:e4:6c:e7:71: a8:af:61:7c:8e:a8:8b:03:f9:73:14:21:e9:95:16: bb:b4:9f:8b:ee:ef:b8:f5:63:6d:1d:95:43:0f:4d: e1:01:29:6a:5b:0b:e9:eb:9f:0d:b6:7f:2f:4b:c6: ba:18:d3:4d:6a:24:e7:d5:4a:d6:a0:f7:ed:4a:75: 65:c4:e9:d7:e7:67:71:01:9c:b9:1f:32:03:0d:70: 60:02:c2:66:be:ce:9f:ff:95:90:6c:d9:dc:87:ac: ba:61:90:e2:e8:00:75:d5:6c:c2:c4:23:93:ae:2e: 8c:65:92:a1:05:61:f0:fa:80:0b:66:a4:a5:ad:e3: 3c:ce:0b:64:da:91:e7:3a:ff:66:7d:31:24:b0:e1: a2:14:2a:21:74:d8:51:d6:19:75:0b:b0:9d:e2:8f: 31:3f:2d:30:82:2f:b1:96:fb:06:49:19:37:d4:ed: 55:32:21:30:01:85:bd:57:43:28:30:c3:ce:a7:6d: 17:bc:ac:93:b0:3e:a1:42:b3:0f:d9:55:cd:93:96: 0c:75:bf:57:ad:76:b9:f0:aa:a4:e7:47:00:92:70: 5f:e1:c7:97:d0:d8:39:49:3a:b1:dc:00:73:9a:d7: 24:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:2D:92:F5:FD:78:57:A9:38:38:09:5B:E0:F8:C4:A4:C3:C6:38 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/Iu4tkvX9eFepODgJW-D4xKTDxjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.10.255.0/24 IPv6: 2001:6b0:4::/48 Signature Algorithm: sha256WithRSAEncryption 73:16:76:08:34:5c:ad:7f:ce:35:99:61:bc:35:13:cc:de:f7: 8c:d1:96:e2:36:9a:6f:9f:f3:93:53:00:9a:de:c5:4e:90:15: 1b:53:79:bf:10:61:3b:71:e0:e3:fa:17:89:7b:87:f8:96:b2: 31:4f:8c:0a:73:08:cd:dc:17:db:6b:7a:db:f7:65:af:1a:cc: c0:5f:f4:8c:e8:a0:b0:aa:03:ee:0f:dc:e5:13:1c:73:d2:07: 54:12:43:1e:35:d0:a4:c8:89:ee:a2:c6:9b:7c:f1:08:95:53: 84:38:8e:8d:8c:50:7d:10:e2:66:69:de:4f:59:4a:e4:e5:40: 18:43:93:8e:37:2c:d1:d9:94:c2:04:20:e8:10:84:2a:34:58: cf:24:57:c4:94:c8:47:a1:13:8a:3b:ee:be:5f:1d:06:3c:d3: ef:2c:b8:cf:3e:26:17:13:6c:7c:e0:b1:cf:5e:12:67:04:82: 48:9f:0a:8b:b7:21:a6:d3:d7:eb:f7:10:56:ac:75:9c:77:36: 70:91:98:7c:5a:c3:58:1c:f6:a3:49:20:9b:34:01:3f:6f:6d: b5:23:72:db:b1:8a:20:97:1a:65:97:05:0b:ed:85:8b:6d:4e: 63:b5:6a:f4:55:fe:7f:0d:6b:3f:6c:0d:c9:91:af:8f:c2:f3: f4:3e:00:7b -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pJRHuXhtjKg33Ydc+cC/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMTAyMTIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmVlMmQ5MmY1ZmQ3ODU3YTkzODM4MDk1YmUwZjhjNGE0YzNjNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLU37fsdnWXaqDPvP78muMn0cv+k pfRYI+Rs53Gor2F8jqiLA/lzFCHplRa7tJ+L7u+49WNtHZVDD03hASlqWwvp658N tn8vS8a6GNNNaiTn1UrWoPftSnVlxOnX52dxAZy5HzIDDXBgAsJmvs6f/5WQbNnc h6y6YZDi6AB11WzCxCOTri6MZZKhBWHw+oALZqSlreM8zgtk2pHnOv9mfTEksOGi FCohdNhR1hl1C7Cd4o8xPy0wgi+xlvsGSRk31O1VMiEwAYW9V0MoMMPOp20XvKyT sD6hQrMP2VXNk5YMdb9XrXa58Kqk50cAknBf4ceX0Ng5STqx3ABzmtckIQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCLuLZL1/XhXqTg4CVvg+MSkw8Y4MB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvSXU0dGt2WDllRmVwT0RnSlctRDR4S1REeGpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwQr/MA8E AgACMAkDBwAgAQawAAQwDQYJKoZIhvcNAQELBQADggEBAHMWdgg0XK1/zjWZYbw1 E8ze94zRluI2mm+f85NTAJrexU6QFRtTeb8QYTtx4OP6F4l7h/iWsjFPjApzCM3c F9tretv3Za8azMBf9IzooLCqA+4P3OUTHHPSB1QSQx410KTIie6ixpt88QiVU4Q4 jo2MUH0Q4mZp3k9ZSuTlQBhDk443LNHZlMIEIOgQhCo0WM8kV8SUyEehE4o77r5f HQY80+8suM8+JhcTbHzgsc9eEmcEgkifCou3IabT1+v3EFasdZx3NnCRmHxaw1gc 9qNJIJs0AT9vbbUjctuxiiCXGmWXBQvthYttTmO1avRV/n8Naz9sDcmRr4/C8/Q+ AHs= -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:53 2026 by rpki-client