This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/iUyBvay1HB04jjUCqmLzofikeiI.roa File: iUyBvay1HB04jjUCqmLzofikeiI.roa (raw, json) Hash identifier: YQOqKVVvW96raR8LDZq/96IB++aevKxnzXinzAloqYo= Subject key identifier: 89:4C:81:BD:AC:B5:1C:1D:38:8E:35:02:AA:62:F3:A1:F8:A4:7A:22 Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12 Certificate serial: 019B7E38713F83FA8DF17348DCC8467ECB95 Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/iUyBvay1HB04jjUCqmLzofikeiI.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42065 IP address blocks: 194.110.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:71:3f:83:fa:8d:f1:73:48:dc:c8:46:7e:cb:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12 Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=894c81bdacb51c1d388e3502aa62f3a1f8a47a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:86:a9:55:49:ca:95:9b:7a:c3:f7:0b:a2:bb: 15:bd:79:a0:b8:04:36:82:ae:52:58:fa:4a:e1:8e: 8f:ac:c1:60:1e:79:6a:12:79:c9:a8:bd:71:9d:59: 80:c5:36:b7:87:40:e6:8f:01:9e:07:fd:0c:d6:62: c6:89:03:bf:8b:d2:88:dd:6a:2a:38:73:06:6d:b5: 3c:bf:b9:c9:73:32:73:24:6f:31:b8:ea:5e:9e:f7: ce:0d:70:ad:2a:6a:5e:34:8b:5f:16:77:45:4a:38: 3c:04:6b:69:83:67:ff:25:7a:3e:37:3e:59:ad:43: ed:0c:2f:3c:a6:eb:15:6b:49:49:94:26:93:c4:8f: ef:6b:19:7a:4d:df:61:49:61:07:d8:27:c3:c3:9b: 38:65:a8:18:08:1f:aa:13:db:21:d8:25:0a:01:f4: 09:fc:74:68:bc:b4:29:f1:81:c9:c5:58:33:98:dd: a2:4e:39:b0:4e:6e:6f:74:fa:52:6b:e9:ae:58:6d: 89:f8:64:3f:51:97:78:a6:a5:68:25:2a:e6:d2:bb: 57:05:7a:ac:07:0f:1d:6b:75:d7:cd:67:0f:2c:3a: d8:44:6b:f5:e8:63:cd:f3:00:40:48:49:d5:d0:03: cd:52:e2:89:0f:5e:d5:d8:64:a9:cb:2e:b9:fc:ab: af:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4C:81:BD:AC:B5:1C:1D:38:8E:35:02:AA:62:F3:A1:F8:A4:7A:22 X509v3 Authority Key Identifier: keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/iUyBvay1HB04jjUCqmLzofikeiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.66.0/24 Signature Algorithm: sha256WithRSAEncryption 96:17:3c:ab:aa:ce:8c:a9:d0:2c:47:82:24:ba:24:a4:d9:f5: 62:d3:fc:79:98:7a:73:4a:7f:49:c5:2c:0e:61:67:b9:d4:38: e1:b6:ad:19:e2:36:35:70:5b:20:ab:26:f2:6b:3b:55:cf:0b: bb:a4:03:87:15:af:09:00:56:d3:31:16:43:5e:34:9b:7d:f5: 01:72:f1:4a:38:dd:9e:4c:a7:13:d8:68:f1:49:59:d4:6a:c6: 1e:1f:3b:53:f9:d4:7d:a9:35:30:40:0f:d0:8f:9c:10:c8:07: 66:a3:7b:cf:7a:45:4f:73:60:27:a5:b5:38:31:86:fc:c6:57: 44:76:03:b8:d1:63:fc:68:0e:3b:99:f5:f0:2c:f6:b2:ae:b8: d5:d6:d3:8e:e1:18:29:02:9c:b3:bf:7a:e7:96:7b:ce:12:b5: ab:a9:53:c9:76:39:ae:4c:da:41:94:c3:88:b2:2f:0e:f3:0e: 8f:a1:d2:2f:5b:1d:b9:25:c0:88:53:89:05:fa:dc:cd:6d:e5: 20:2d:62:d3:ce:40:0e:1c:99:81:6a:58:e4:3b:42:72:0d:1b: 6a:a8:75:e1:06:ab:a3:ef:b8:73:54:fe:15:d1:82:54:5b:18: 2b:e0:7b:ab:08:6e:24:48:9e:93:1c:7d:2a:21:91:b4:33:46: 89:cd:00:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHE/g/qN8XNI3MhGfsuVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MjllYjY2NDUwNmI4NmJmYTFmNzAyZjZiMWZmYjQ4NGNj MmNiMTIwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTRjODFiZGFjYjUxYzFkMzg4ZTM1MDJhYTYyZjNhMWY4YTQ3YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oapVUnKlZt6w/cLorsVvXmguAQ2 gq5SWPpK4Y6PrMFgHnlqEnnJqL1xnVmAxTa3h0DmjwGeB/0M1mLGiQO/i9KI3Woq OHMGbbU8v7nJczJzJG8xuOpenvfODXCtKmpeNItfFndFSjg8BGtpg2f/JXo+Nz5Z rUPtDC88pusVa0lJlCaTxI/vaxl6Td9hSWEH2CfDw5s4ZagYCB+qE9sh2CUKAfQJ /HRovLQp8YHJxVgzmN2iTjmwTm5vdPpSa+muWG2J+GQ/UZd4pqVoJSrm0rtXBXqs Bw8da3XXzWcPLDrYRGv16GPN8wBASEnV0APNUuKJD17V2GSpyy65/Kuv4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlMgb2stRwdOI41Aqpi86H4pHoiMB8GA1UdIwQY MBaAFCgp62ZFBrhr+h9wL2sf+0hMwssSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0NuclprVUd1R3Y2SDNBdmF4XzdTRXpDeXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMDliMjQtOGFhOC00MGU2LTg0MmMt MmY5ZWM1MzhjYzFkLzEvaVV5QnZheTFIQjA0ampVQ3FtTHpvZmlrZWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lMDliMjQtOGFhOC00MGU2LTg0MmMtMmY5ZWM1MzhjYzFk LzEvS0NuclprVUd1R3Y2SDNBdmF4XzdTRXpDeXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm5CMA0G CSqGSIb3DQEBCwUAA4IBAQCWFzyrqs6MqdAsR4IkuiSk2fVi0/x5mHpzSn9JxSwO YWe51Djhtq0Z4jY1cFsgqybyaztVzwu7pAOHFa8JAFbTMRZDXjSbffUBcvFKON2e TKcT2GjxSVnUasYeHztT+dR9qTUwQA/Qj5wQyAdmo3vPekVPc2AnpbU4MYb8xldE dgO40WP8aA47mfXwLPayrrjV1tOO4RgpApyzv3rnlnvOErWrqVPJdjmuTNpBlMOI si8O8w6PodIvWx25JcCIU4kF+tzNbeUgLWLTzkAOHJmBaljkO0JyDRtqqHXhBquj 77hzVP4V0YJUWxgr4HurCG4kSJ6THH0qIZG0M0aJzQAt -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:30 2026 by rpki-client