This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/RIk8mcO0XUHeY1yE3bLpyK41RDc.roa File: RIk8mcO0XUHeY1yE3bLpyK41RDc.roa (raw, json) Hash identifier: 7ot83Q70csEm6+GFN6TqnACE6Bsk3KoPtGK0mmsksq0= Subject key identifier: 44:89:3C:99:C3:B4:5D:41:DE:63:5C:84:DD:B2:E9:C8:AE:35:44:37 Certificate issuer: /CN=fb79c26f31575345159c840ed278a878a9256615 Certificate serial: 019B77C688B50B022DFBFF0F0CE2B735ADFF Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/RIk8mcO0XUHeY1yE3bLpyK41RDc.roa Signing time: Thu 01 Jan 2026 04:17:38 +0000 ROA not before: Thu 01 Jan 2026 04:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199968 IP address blocks: 185.7.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:88:b5:0b:02:2d:fb:ff:0f:0c:e2:b7:35:ad:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb79c26f31575345159c840ed278a878a9256615 Validity Not Before: Jan 1 04:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44893c99c3b45d41de635c84ddb2e9c8ae354437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:ec:7f:65:4d:c6:b7:fb:8d:27:bd:e1:65: e3:47:fc:07:a6:cd:ca:51:2b:64:0f:c4:0b:90:27: 58:78:ca:29:12:44:3a:36:8b:6d:0b:e4:b8:a7:dc: 75:aa:81:5a:1f:ec:e5:c7:c6:49:0d:a3:b0:89:78: 47:bd:5f:e6:63:8a:80:c4:21:52:fe:c1:b6:ac:72: 3c:42:b3:6b:a3:23:f6:70:98:04:f8:43:89:e3:9f: 52:c8:9c:b8:66:ce:59:8a:94:d8:ae:4e:93:40:08: 30:50:a3:20:88:20:74:4a:35:67:e7:f5:03:a3:3f: c1:3d:de:dd:4d:54:af:94:65:95:00:0a:7d:6c:13: 8d:30:85:87:ed:de:6a:b3:33:93:3f:93:3d:6e:44: 23:9a:64:99:47:fe:18:ec:67:b3:f1:31:25:87:90: 10:54:78:5c:4e:db:23:96:1f:f5:cd:e3:0f:cb:24: 7f:85:f8:3b:8d:14:61:25:38:be:86:45:86:d2:ec: 05:66:00:88:05:0d:00:11:00:3e:3b:5a:95:68:b7: 23:f2:a6:ca:45:71:cc:59:a7:dd:e7:52:8b:7f:88: 2b:ea:1a:3e:be:6f:29:96:72:74:cb:64:bf:3a:e2: c8:be:2f:d0:1b:41:f7:95:67:b4:8a:19:6c:9e:a1: c0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:89:3C:99:C3:B4:5D:41:DE:63:5C:84:DD:B2:E9:C8:AE:35:44:37 X509v3 Authority Key Identifier: keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/RIk8mcO0XUHeY1yE3bLpyK41RDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.33.0/24 Signature Algorithm: sha256WithRSAEncryption 94:f3:57:54:bd:44:ff:fe:fd:d3:f3:af:20:5d:e8:e5:a1:43: d7:ab:a3:d3:45:bf:7e:8e:ae:45:25:f5:ba:0d:fc:a1:d9:70: 56:b2:e4:e8:9e:5c:b7:42:3d:35:32:67:37:e5:0f:14:35:4f: ce:cc:44:ce:e9:13:c9:b5:31:f1:f8:8d:4d:9d:67:dc:d6:a8: 1b:d6:21:03:3d:f2:d2:d6:ce:11:7d:64:79:e2:3c:a3:e3:07: 7a:38:e8:d7:e7:e2:12:2c:64:ca:4d:6b:35:c1:dc:c2:28:9c: 47:e9:8b:33:0c:d8:eb:3f:de:c7:7a:cf:26:cf:04:3a:58:19: 3e:32:73:ac:f9:45:7b:d7:d4:ad:63:4c:ee:56:05:04:fb:14: b0:38:99:41:75:8c:b6:ee:d3:3b:5a:53:97:0e:39:ec:ba:fa: ef:d4:55:6b:a4:ba:15:ef:dc:7d:18:24:f5:1c:43:aa:6f:aa: 4e:17:42:67:67:df:b3:a4:f6:31:ad:e9:b3:0f:ba:c4:27:7c: 61:7a:51:77:cb:03:b7:af:c0:43:f1:ed:d0:a1:e5:d9:70:de: 5e:5f:e4:0c:aa:4e:a9:81:cc:84:16:da:d6:ca:ec:bb:c6:fe: 95:42:0b:f7:43:bd:ff:d6:d0:d0:fd:3e:32:09:4d:b4:e9:76: f4:37:6b:4f -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3xoi1CwIt+/8PDOK3Na3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzljMjZmMzE1NzUzNDUxNTljODQwZWQyNzhhODc4YTky NTY2MTUwHhcNMjYwMTAxMDQxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDg5M2M5OWMzYjQ1ZDQxZGU2MzVjODRkZGIyZTljOGFlMzU0NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VHsf2VNxrf7jSe94WXjR/wHps3K UStkD8QLkCdYeMopEkQ6NottC+S4p9x1qoFaH+zlx8ZJDaOwiXhHvV/mY4qAxCFS /sG2rHI8QrNroyP2cJgE+EOJ459SyJy4Zs5ZipTYrk6TQAgwUKMgiCB0SjVn5/UD oz/BPd7dTVSvlGWVAAp9bBONMIWH7d5qszOTP5M9bkQjmmSZR/4Y7Gez8TElh5AQ VHhcTtsjlh/1zeMPyyR/hfg7jRRhJTi+hkWG0uwFZgCIBQ0AEQA+O1qVaLcj8qbK RXHMWafd51KLf4gr6ho+vm8plnJ0y2S/OuLIvi/QG0H3lWe0ihlsnqHANQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFESJPJnDtF1B3mNchN2y6ciuNUQ3MB8GA1UdIwQY MBaAFPt5wm8xV1NFFZyEDtJ4qHipJWYVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zbkNiekZYVTBVVm5JUU8wbmlvZUtrbFpoVS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2Vh LWJkMzdkYTBlNDQ3Yy8xL1JJazhtY08wWFVIZVkxeUUzYkxweUs0MVJEYy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODAvMTJkNjkxLTM3YTQtNGIxNS1hN2VhLWJkMzdkYTBlNDQ3 Yy8xLzEtM25DYnpGWFUwVVZuSVFPMG5pb2VLa2xaaFUuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5ByEw DQYJKoZIhvcNAQELBQADggEBAJTzV1S9RP/+/dPzryBd6OWhQ9ero9NFv36OrkUl 9boN/KHZcFay5OieXLdCPTUyZzflDxQ1T87MRM7pE8m1MfH4jU2dZ9zWqBvWIQM9 8tLWzhF9ZHniPKPjB3o46Nfn4hIsZMpNazXB3MIonEfpizMM2Os/3sd6zybPBDpY GT4yc6z5RXvX1K1jTO5WBQT7FLA4mUF1jLbu0ztaU5cOOey6+u/UVWukuhXv3H0Y JPUcQ6pvqk4XQmdn37Ok9jGt6bMPusQnfGF6UXfLA7evwEPx7dCh5dlw3l5f5Ayq TqmBzIQW2tbK7LvG/pVCC/dDvf/W0ND9PjIJTbTpdvQ3a08= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:02 2026 by rpki-client