This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/iXwUxzso3pt35Li0dSOoT5DmX3U.roa File: iXwUxzso3pt35Li0dSOoT5DmX3U.roa (raw, json) Hash identifier: glAbr9K3ZOByGif0Hc8fgA/M/XOvS9j+i7ULdB74cTs= Subject key identifier: 89:7C:14:C7:3B:28:DE:9B:77:E4:B8:B4:75:23:A8:4F:90:E6:5F:75 Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Certificate serial: 019B7D5AE3B6397FE40C0EE41DCB9714AA63 Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/iXwUxzso3pt35Li0dSOoT5DmX3U.roa Signing time: Fri 02 Jan 2026 06:17:47 +0000 ROA not before: Fri 02 Jan 2026 06:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208173 IP address blocks: 185.187.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e3:b6:39:7f:e4:0c:0e:e4:1d:cb:97:14:aa:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe Validity Not Before: Jan 2 06:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=897c14c73b28de9b77e4b8b47523a84f90e65f75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:46:1a:f4:5d:93:a7:71:7c:4b:8f:6d:1b:1d: a4:ce:ad:ff:45:3e:01:5f:54:91:1e:29:90:dd:5b: 05:f3:95:e9:06:5e:2b:98:4c:cb:61:c3:f6:6d:2f: b3:18:1f:66:07:6e:46:3a:96:2e:b8:08:28:4d:a4: ac:cd:38:83:60:a4:9c:f7:18:c3:50:e8:a1:0c:a9: 4b:4a:7b:91:c1:c0:12:86:de:61:8f:33:0b:c6:24: 40:8c:27:4c:ff:9c:dc:34:f2:13:3c:82:71:6b:f8: 5d:5b:ee:e6:f8:b3:6a:16:e0:c9:ea:5d:85:1a:49: fc:16:b2:08:86:c5:28:da:fb:92:33:d1:ad:5c:df: 49:6b:94:b4:06:b7:53:bf:b9:fe:dd:07:cc:34:83: a3:48:0e:33:d8:53:66:94:29:09:d3:2e:68:3d:26: 34:02:eb:53:8f:bb:5e:ea:a7:1d:08:21:07:26:b0: 50:0a:78:9e:ad:8e:48:6d:f8:0f:c2:a7:91:d7:7f: e8:d8:54:04:7d:f0:18:98:27:e9:41:13:5d:c3:2b: f6:3f:bd:4c:54:1d:67:5d:cc:28:ce:23:d9:a8:d3: 9e:f4:04:db:a6:3a:81:2f:fb:80:9d:8b:d9:bf:66: d9:a9:70:c4:d2:21:9a:32:db:8a:9b:92:e8:6c:60: c8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7C:14:C7:3B:28:DE:9B:77:E4:B8:B4:75:23:A8:4F:90:E6:5F:75 X509v3 Authority Key Identifier: keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/iXwUxzso3pt35Li0dSOoT5DmX3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.51.0/24 Signature Algorithm: sha256WithRSAEncryption c4:f1:d3:57:d3:59:8f:ed:4e:c9:41:1f:56:e5:51:b6:59:5e: 3b:b8:3f:e0:8b:0c:0f:99:74:c9:c8:0d:16:57:10:11:1b:22: 27:2c:62:ef:6e:80:98:3a:78:c0:90:1e:30:52:0b:b5:55:02: 3e:fe:23:b1:5b:22:fc:52:1d:1f:4b:a6:2c:66:d0:a2:61:12: 29:96:ea:0e:b5:a5:28:56:7f:86:01:ff:07:d2:d7:9d:08:f4: 7e:a3:16:06:a5:cb:62:1b:5f:96:3b:70:45:94:3e:8e:93:30: 2c:aa:c5:e9:cb:78:7f:b9:b2:7c:17:b7:2b:c4:d1:a5:99:e1: 8f:10:3e:65:b0:a0:c7:4d:e8:fb:ce:88:a4:0d:6e:0c:9f:44: a2:86:8d:85:93:ac:bb:4a:66:66:cf:4c:26:e3:9c:a9:14:82: 17:7d:01:4c:52:69:d8:bc:e9:13:b1:63:6e:45:d9:87:6c:05: 09:db:89:24:24:14:10:1c:ac:ce:95:d5:f8:d7:cc:20:83:0e: e6:0a:1f:2c:31:0f:ca:b7:a6:e7:6b:90:08:f0:7a:82:4a:e7: 9a:51:9e:48:67:9a:88:5e:66:21:81:36:73:25:33:01:3f:29: 7e:be:2b:2a:6a:3f:0b:97:f3:88:46:8c:2a:12:19:62:0d:c4: 9b:31:53:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WuO2OX/kDA7kHcuXFKpjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4 MWJhYmUwHhcNMjYwMTAyMDYxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTdjMTRjNzNiMjhkZTliNzdlNGI4YjQ3NTIzYTg0ZjkwZTY1Zjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEYa9F2Tp3F8S49tGx2kzq3/RT4B X1SRHimQ3VsF85XpBl4rmEzLYcP2bS+zGB9mB25GOpYuuAgoTaSszTiDYKSc9xjD UOihDKlLSnuRwcASht5hjzMLxiRAjCdM/5zcNPITPIJxa/hdW+7m+LNqFuDJ6l2F Gkn8FrIIhsUo2vuSM9GtXN9Ja5S0BrdTv7n+3QfMNIOjSA4z2FNmlCkJ0y5oPSY0 AutTj7te6qcdCCEHJrBQCnierY5IbfgPwqeR13/o2FQEffAYmCfpQRNdwyv2P71M VB1nXcwoziPZqNOe9ATbpjqBL/uAnYvZv2bZqXDE0iGaMtuKm5LobGDIswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIl8FMc7KN6bd+S4tHUjqE+Q5l91MB8GA1UdIwQY MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt YTQ4OGJkNDIwMjRmLzEvaVh3VXh6c28zcHQzNUxpMGRTT29UNURtWDNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubszMA0G CSqGSIb3DQEBCwUAA4IBAQDE8dNX01mP7U7JQR9W5VG2WV47uD/giwwPmXTJyA0W VxARGyInLGLvboCYOnjAkB4wUgu1VQI+/iOxWyL8Uh0fS6YsZtCiYRIpluoOtaUo Vn+GAf8H0tedCPR+oxYGpctiG1+WO3BFlD6OkzAsqsXpy3h/ubJ8F7crxNGlmeGP ED5lsKDHTej7zoikDW4Mn0Siho2Fk6y7SmZmz0wm45ypFIIXfQFMUmnYvOkTsWNu RdmHbAUJ24kkJBQQHKzOldX418wggw7mCh8sMQ/Kt6bna5AI8HqCSueaUZ5IZ5qI XmYhgTZzJTMBPyl+visqaj8Ll/OIRowqEhliDcSbMVPb -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:04 2026 by rpki-client