This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa File: 0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa (raw, json) Hash identifier: FJlCbonLD9dF4g0EKnBAz84rCEY7Zmpte8ZXE9ooZuo= Subject key identifier: D0:87:BC:CC:9D:EF:A1:B7:03:47:DB:A3:1A:56:6A:82:3B:C7:50:06 Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Certificate serial: 019B76EB0568D606BD6AF626C896F9A39214 Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49879 IP address blocks: 185.141.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:05:68:d6:06:bd:6a:f6:26:c8:96:f9:a3:92:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d087bccc9defa1b70347dba31a566a823bc75006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:14:bb:7b:71:09:42:15:29:2c:10:ab:15: f6:f1:6a:1c:6d:45:aa:d6:4b:9d:24:9d:61:38:c1: 5c:c9:37:c4:66:e0:42:a7:0f:01:e8:69:6f:b4:33: 7b:74:90:c0:90:b1:30:b4:40:89:10:02:5a:0b:59: 45:7c:17:ba:11:05:63:9f:02:59:5a:70:90:31:db: 5f:0c:67:c8:aa:c6:33:de:4e:eb:07:e2:84:75:28: 0a:e2:ff:b7:fc:e4:d0:d4:24:fd:35:b8:f4:8e:77: 7a:59:e4:e4:c8:8b:3d:8a:6b:c0:90:b1:f5:04:12: c4:76:c2:14:69:d9:36:aa:6c:e3:fa:43:e8:77:e9: f4:22:6b:19:bd:4e:99:c6:b5:fd:67:a5:ee:d6:f1: 71:3e:4a:7f:1a:d5:3d:31:a1:3a:74:fd:8c:82:e2: 61:f7:34:d9:2b:48:72:ef:54:9b:07:f7:5a:de:b2: e7:5c:e8:01:f9:c6:f0:a3:b2:0a:fc:58:4f:48:2f: ea:52:a3:0a:3f:36:28:ea:de:c8:b6:72:5d:d3:92: eb:4a:63:f5:82:cd:04:bf:0a:89:b9:ab:22:7e:c5: 58:12:73:26:22:cf:0a:f5:6a:d5:42:7b:e7:2b:88: b8:c7:22:f1:73:56:9a:4b:51:bf:32:7f:6a:4a:b2: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:87:BC:CC:9D:EF:A1:B7:03:47:DB:A3:1A:56:6A:82:3B:C7:50:06 X509v3 Authority Key Identifier: keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.141.109.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7e:5c:bb:a1:eb:02:a6:3e:98:11:c7:2c:58:2e:04:44:10: c4:f8:11:96:09:d4:cb:4d:93:f3:42:27:dd:94:76:cd:cc:39: 13:c7:da:10:09:2c:42:03:e9:2f:7a:dd:84:da:99:91:4d:25: d4:50:cd:34:ec:e7:31:0c:d2:9d:41:91:8f:ea:37:11:a2:c8: b8:ff:b4:84:29:2b:af:81:c5:67:6d:dd:95:68:a7:da:fc:c5: 51:08:a0:d5:d3:31:ac:22:28:42:91:2e:35:1d:05:44:65:61: 8f:22:dc:56:0d:8d:96:40:13:b3:5e:e1:14:38:f7:4b:e2:8e: 0a:41:85:85:82:56:c3:65:7c:b3:09:b4:bb:f9:ab:6b:b3:e5: e8:d5:7b:e2:7f:92:dd:c1:2c:c8:eb:d3:90:71:dd:65:c9:28: 51:77:57:4a:b6:0c:37:98:df:7d:3c:cc:0f:42:36:33:fa:1e: fe:f8:97:4b:7c:c6:54:49:0b:b0:5d:7b:78:28:29:b0:20:b2: fc:a9:ec:5c:4a:82:38:79:b9:89:cf:74:b0:82:61:ff:43:7e: fc:a3:4b:3b:af:96:ac:af:9a:dc:c6:e6:e1:79:aa:a7:d4:65: 02:95:9c:39:71:7f:b9:83:a2:ff:09:50:75:47:62:72:3e:fc: 53:f6:2f:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26wVo1ga9avYmyJb5o5IUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwY2RlMmMxZmNlM2Q2ZmUyMTg1MzQ3ZGQ4OWRjZmQxM2Vi YmIxNTEwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDg3YmNjYzlkZWZhMWI3MDM0N2RiYTMxYTU2NmE4MjNiYzc1MDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG0Uu3txCUIVKSwQqxX28WocbUWq 1kudJJ1hOMFcyTfEZuBCpw8B6GlvtDN7dJDAkLEwtECJEAJaC1lFfBe6EQVjnwJZ WnCQMdtfDGfIqsYz3k7rB+KEdSgK4v+3/OTQ1CT9Nbj0jnd6WeTkyIs9imvAkLH1 BBLEdsIUadk2qmzj+kPod+n0ImsZvU6ZxrX9Z6Xu1vFxPkp/GtU9MaE6dP2MguJh 9zTZK0hy71SbB/da3rLnXOgB+cbwo7IK/FhPSC/qUqMKPzYo6t7ItnJd05LrSmP1 gs0EvwqJuasifsVYEnMmIs8K9WrVQnvnK4i4xyLxc1aaS1G/Mn9qSrIzbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCHvMyd76G3A0fboxpWaoI7x1AGMB8GA1UdIwQY MBaAFODN4sH849b+IYU0fdidz9E+u7FRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEt ZWNiMzEyNmZjOGVkLzEvMEllOHpKM3ZvYmNEUjl1akdsWnFnanZIVUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lY2RkOTMtMWFhMC00YjlhLWI2YWEtZWNiMzEyNmZjOGVk LzEvNE0zaXdmemoxdjRoaFRSOTJKM1AwVDY3c1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY1tMA0G CSqGSIb3DQEBCwUAA4IBAQArfly7oesCpj6YEccsWC4ERBDE+BGWCdTLTZPzQifd lHbNzDkTx9oQCSxCA+kvet2E2pmRTSXUUM007OcxDNKdQZGP6jcRosi4/7SEKSuv gcVnbd2VaKfa/MVRCKDV0zGsIihCkS41HQVEZWGPItxWDY2WQBOzXuEUOPdL4o4K QYWFglbDZXyzCbS7+atrs+Xo1Xvif5LdwSzI69OQcd1lyShRd1dKtgw3mN99PMwP QjYz+h7++JdLfMZUSQuwXXt4KCmwILL8qexcSoI4ebmJz3SwgmH/Q378o0s7r5as r5rcxubheaqn1GUClZw5cX+5g6L/CVB1R2JyPvxT9i8k -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:41 2026 by rpki-client