This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/9erLWxF1i2Yda53dAoQL85cyRkQ.roa File: 9erLWxF1i2Yda53dAoQL85cyRkQ.roa (raw, json) Hash identifier: HcHl1aLLGyWyupRGZPmxNJ07j4g0I7ADLsDIJrI6OWA= Subject key identifier: F5:EA:CB:5B:11:75:8B:66:1D:6B:9D:DD:02:84:0B:F3:97:32:46:44 Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Certificate serial: 019B79ECDC5468F5875D897AC7A285E58D19 Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/9erLWxF1i2Yda53dAoQL85cyRkQ.roa Signing time: Thu 01 Jan 2026 14:18:44 +0000 ROA not before: Thu 01 Jan 2026 14:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196615 IP address blocks: 93.175.147.0/24 maxlen: 24 2001:7fb:fd03::/48 maxlen: 48 2001:7fb:fd04::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:dc:54:68:f5:87:5d:89:7a:c7:a2:85:e5:8d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922 Validity Not Before: Jan 1 14:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f5eacb5b11758b661d6b9ddd02840bf397324644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:d5:a5:13:f3:6c:c2:ed:c7:ab:8e:5f:2b: 43:3e:cc:ab:e2:31:70:b1:95:9d:49:67:d5:47:62: c9:94:cc:ed:af:9a:4d:a1:d4:8e:b8:79:da:8f:9b: 91:f0:e9:f6:49:05:97:df:0b:05:ae:fd:86:1d:1d: a9:8d:b3:e9:15:c6:15:7a:87:81:b6:f0:bb:39:ed: 22:44:a7:39:f0:60:b1:ca:3e:91:8d:f3:f6:36:24: d8:3c:05:de:63:a8:f8:50:d4:6e:b0:01:f4:89:54: 64:f6:50:77:5d:06:16:23:fb:7f:e2:d4:74:d5:b6: c4:bf:93:90:ee:8f:c0:1e:2f:96:ed:40:e0:0d:2d: 7a:4f:a7:90:ba:a4:1f:20:3b:36:a7:d0:03:35:3d: f6:a1:62:cd:90:08:00:4f:df:96:f6:e5:38:86:b0: 8b:c6:4b:50:f6:b7:0c:31:cc:a0:7c:1b:d5:e9:78: ca:c1:d4:8d:a8:e9:90:44:fa:0b:ad:88:cb:c4:5e: 19:d1:7d:99:25:fe:be:86:9b:0a:e8:72:cd:98:c4: 0f:30:2f:27:b7:97:5e:e3:4c:74:2e:76:7c:75:f1: d3:54:c7:7f:2f:36:5f:5f:27:5e:9d:38:fb:65:cb: cb:c8:b7:81:26:f2:58:4b:4d:aa:ba:5f:83:8c:aa: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EA:CB:5B:11:75:8B:66:1D:6B:9D:DD:02:84:0B:F3:97:32:46:44 X509v3 Authority Key Identifier: keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/9erLWxF1i2Yda53dAoQL85cyRkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.175.147.0/24 IPv6: 2001:7fb:fd03::-2001:7fb:fd04:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 23:04:99:88:3c:8f:d6:6c:dc:4e:1d:5b:62:cc:f6:6c:18:51: d8:14:87:c8:6f:41:27:cd:fc:ee:32:fc:bd:8d:1c:83:eb:14: c1:b3:f2:f1:95:33:0d:2b:2c:ee:c3:d0:dd:59:07:21:fb:c5: 7f:c7:94:7f:e5:21:b0:be:8d:19:25:63:aa:b8:f6:a5:88:aa: 28:98:9c:33:14:cc:35:16:53:54:b8:85:ed:a4:e3:78:2e:16: 6f:32:dd:fd:b8:ce:c2:2e:c4:3e:1c:03:53:4b:f4:4e:24:d2: ba:76:20:43:d3:18:35:20:d8:d4:2d:2b:e9:10:7b:ab:43:42: b9:ae:b8:fb:92:3c:e4:82:c2:f4:67:01:ae:2f:f2:2b:93:8e: 82:af:cc:9c:f6:5b:b7:6b:f8:8a:c4:6e:32:aa:af:3c:24:00: dc:0a:23:1b:74:8c:92:16:4e:1e:fe:ea:91:8a:82:22:84:41: 8f:a6:3c:9d:12:0b:d2:89:ea:88:df:cb:2f:4a:8b:85:14:02: 00:95:ae:ce:6c:eb:aa:6e:6c:07:78:c3:ae:f6:6c:09:5d:3a: 21:e2:c7:71:84:6d:36:5d:43:c3:ed:7b:bb:1a:d4:27:9b:d4: 0c:6d:42:f1:09:1b:9a:24:31:c7:a1:20:f9:a1:53:4a:d3:79: bf:be:6a:6b -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt57NxUaPWHXYl6x6KF5Y0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez ZGY5MjIwHhcNMjYwMTAxMTQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNWVhY2I1YjExNzU4YjY2MWQ2YjlkZGQwMjg0MGJmMzk3MzI0NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1zVpRPzbMLtx6uOXytDPsyr4jFw sZWdSWfVR2LJlMztr5pNodSOuHnaj5uR8On2SQWX3wsFrv2GHR2pjbPpFcYVeoeB tvC7Oe0iRKc58GCxyj6RjfP2NiTYPAXeY6j4UNRusAH0iVRk9lB3XQYWI/t/4tR0 1bbEv5OQ7o/AHi+W7UDgDS16T6eQuqQfIDs2p9ADNT32oWLNkAgAT9+W9uU4hrCL xktQ9rcMMcygfBvV6XjKwdSNqOmQRPoLrYjLxF4Z0X2ZJf6+hpsK6HLNmMQPMC8n t5de40x0LnZ8dfHTVMd/LzZfXydenTj7ZcvLyLeBJvJYS02qul+DjKq+RwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPXqy1sRdYtmHWud3QKEC/OXMkZEMB8GA1UdIwQY MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt ZTY2MzY5NjQ5NDExLzEvOWVyTFd4RjFpMllkYTUzZEFvUUw4NWN5UmtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAMBAIAATAGAwQAXa+TMBoE AgACMBQwEgMHACABB/v9AwMHACABB/v9BDANBgkqhkiG9w0BAQsFAAOCAQEAIwSZ iDyP1mzcTh1bYsz2bBhR2BSHyG9BJ8387jL8vY0cg+sUwbPy8ZUzDSss7sPQ3VkH IfvFf8eUf+UhsL6NGSVjqrj2pYiqKJicMxTMNRZTVLiF7aTjeC4WbzLd/bjOwi7E PhwDU0v0TiTSunYgQ9MYNSDY1C0r6RB7q0NCua64+5I85ILC9GcBri/yK5OOgq/M nPZbt2v4isRuMqqvPCQA3AojG3SMkhZOHv7qkYqCIoRBj6Y8nRIL0onqiN/LL0qL hRQCAJWuzmzrqm5sB3jDrvZsCV06IeLHcYRtNl1Dw+17uxrUJ5vUDG1C8QkbmiQx x6Eg+aFTStN5v75qaw== -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:02 2026 by rpki-client