This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/i2pSpEnVtokJriFjoKmVIGfuRJo.roa File: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (raw, json) Hash identifier: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4= Subject key identifier: 8B:6A:52:A4:49:D5:B6:89:09:AE:21:63:A0:A9:95:20:67:EE:44:9A Certificate issuer: /CN=f0a9005423147453909366c6b4d09c31958acc1c Certificate serial: 019B7C12D04C7889B221FF08F039269BB2F5 Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/i2pSpEnVtokJriFjoKmVIGfuRJo.roa Signing time: Fri 02 Jan 2026 00:19:26 +0000 ROA not before: Fri 02 Jan 2026 00:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8648 IP address blocks: 194.97.192.0/19 maxlen: 19 2001:748:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d0:4c:78:89:b2:21:ff:08:f0:39:26:9b:b2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c Validity Not Before: Jan 2 00:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b6a52a449d5b68909ae2163a0a9952067ee449a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:87:8d:6a:7b:77:47:ec:27:2c:b7:03:a0:70: 6b:28:dd:53:e1:d7:8a:6f:ef:18:cf:39:86:87:ec: 27:ac:15:61:b5:e4:6e:f8:4f:60:5d:26:2a:ff:b9: b6:b5:9f:95:80:04:a2:a5:63:7f:ec:4b:3c:35:91: 1a:02:a3:a0:7b:68:71:28:6e:91:45:5d:d5:0f:dd: 10:16:1a:80:05:ef:5e:bf:8c:4b:b2:8e:0c:12:2e: c3:6c:e4:fd:97:66:1f:0a:c2:ab:0d:b1:dd:ea:f8: f9:f6:6d:56:4b:a7:65:a7:86:3a:72:49:a1:85:ba: 77:db:f6:cd:6e:6e:cc:ab:65:c0:7d:81:7b:72:50: bc:12:8f:85:1f:7a:11:25:80:35:b5:6e:ee:d4:91: 6e:61:d0:8a:d6:e1:3a:64:74:c3:e4:e9:74:9f:30: d4:e4:0a:16:25:84:96:b2:f1:54:53:35:31:5f:ee: ad:e0:ff:42:7f:06:21:f1:22:ea:28:82:3d:10:aa: ab:2c:41:e3:51:72:43:4a:dc:52:ef:cf:af:e0:c6: 4b:28:f3:82:35:ca:4b:9b:8b:04:ac:0e:df:84:f0: de:fa:00:c6:29:60:ff:b9:e3:ed:79:13:f0:a0:31: ff:21:09:a6:f6:51:99:4f:1d:87:af:1f:57:92:66: 0f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6A:52:A4:49:D5:B6:89:09:AE:21:63:A0:A9:95:20:67:EE:44:9A X509v3 Authority Key Identifier: keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/i2pSpEnVtokJriFjoKmVIGfuRJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.97.192.0/19 IPv6: 2001:748:400::/48 Signature Algorithm: sha256WithRSAEncryption c2:79:6e:0c:96:3b:40:1e:e0:b4:77:e7:1d:3c:e9:6c:7c:c4: 37:f8:28:11:29:e2:cb:f1:f3:63:1d:9e:da:05:19:d2:57:15: 03:b1:f4:3f:ca:53:3f:26:62:ca:43:a6:d4:16:65:68:34:25: 10:df:dc:29:d6:fa:5c:21:14:0b:fd:a3:e0:13:c5:ac:6d:e6: b5:a8:7e:dd:08:f8:b8:4d:8b:1c:fa:12:bb:f4:0b:c8:e5:dc: b0:32:e1:91:d4:dc:08:ac:c6:2c:73:04:8c:d7:bb:86:81:51: 8e:b4:3e:14:d9:44:cd:f1:f5:8b:84:d8:76:e0:30:93:0d:26: b2:a7:cd:af:7b:a6:f3:6e:a7:fe:fe:e2:d0:d0:d3:13:41:8b: 4e:6f:50:6c:0c:da:54:83:e9:8e:b6:97:04:67:1a:9f:f5:1a: c8:d8:7f:0c:3a:04:0c:83:b4:8e:9e:9e:85:d9:bd:60:a8:f4: 07:78:72:43:f1:37:2c:a7:9c:bf:ca:d6:22:4c:bc:af:86:25: 96:82:d0:b8:43:f2:b2:37:4c:ac:7d:3b:68:1c:99:06:49:c1: 8a:b5:54:f7:01:60:10:a1:ac:ad:e8:fd:8c:30:57:fd:7d:72: ad:34:a2:af:dc:92:41:3d:f9:0c:fc:a4:1f:5a:57:d1:16:f1: 1f:59:39:ff -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EtBMeImyIf8I8Dkmm7L1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwYTkwMDU0MjMxNDc0NTM5MDkzNjZjNmI0ZDA5YzMxOTU4 YWNjMWMwHhcNMjYwMTAyMDAxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjZhNTJhNDQ5ZDViNjg5MDlhZTIxNjNhMGE5OTUyMDY3ZWU0NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIeNant3R+wnLLcDoHBrKN1T4deK b+8YzzmGh+wnrBVhteRu+E9gXSYq/7m2tZ+VgASipWN/7Es8NZEaAqOge2hxKG6R RV3VD90QFhqABe9ev4xLso4MEi7DbOT9l2YfCsKrDbHd6vj59m1WS6dlp4Y6ckmh hbp32/bNbm7Mq2XAfYF7clC8Eo+FH3oRJYA1tW7u1JFuYdCK1uE6ZHTD5Ol0nzDU 5AoWJYSWsvFUUzUxX+6t4P9CfwYh8SLqKII9EKqrLEHjUXJDStxS78+v4MZLKPOC NcpLm4sErA7fhPDe+gDGKWD/uePteRPwoDH/IQmm9lGZTx2Hrx9XkmYPUwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFItqUqRJ1baJCa4hY6CplSBn7kSaMB8GA1UdIwQY MBaAFPCpAFQjFHRTkJNmxrTQnDGViswcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMt MzBkNzlmOWFhODc3LzEvaTJwU3BFblZ0b2tKcmlGam9LbVZJR2Z1UkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xNTdhZjYtY2NlMi00ZTZkLWJjMjMtMzBkNzlmOWFhODc3 LzEvOEtrQVZDTVVkRk9RazJiR3ROQ2NNWldLekJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQFwmHAMA8E AgACMAkDBwAgAQdIBAAwDQYJKoZIhvcNAQELBQADggEBAMJ5bgyWO0Ae4LR35x08 6Wx8xDf4KBEp4svx82MdntoFGdJXFQOx9D/KUz8mYspDptQWZWg0JRDf3CnW+lwh FAv9o+ATxaxt5rWoft0I+LhNixz6Erv0C8jl3LAy4ZHU3AisxixzBIzXu4aBUY60 PhTZRM3x9YuE2HbgMJMNJrKnza97pvNup/7+4tDQ0xNBi05vUGwM2lSD6Y62lwRn Gp/1GsjYfww6BAyDtI6enoXZvWCo9Ad4ckPxNyynnL/K1iJMvK+GJZaC0LhD8rI3 TKx9O2gcmQZJwYq1VPcBYBChrK3o/YwwV/19cq00oq/ckkE9+Qz8pB9aV9EW8R9Z Of8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:37:51 2026 by rpki-client