This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/iWCv7hKkDTmy2BHgFj5y8bvZpHU.roa File: iWCv7hKkDTmy2BHgFj5y8bvZpHU.roa (raw, json) Hash identifier: QnlaBm+ud/x2dd33dIAeQeFMQgLks+AxViXjnT6/o9c= Subject key identifier: 89:60:AF:EE:12:A4:0D:39:B2:D8:11:E0:16:3E:72:F1:BB:D9:A4:75 Certificate issuer: /CN=d38579e4c7da01df0465186236e9af27eb7312ed Certificate serial: 019B7BA4F8A77BCBCB5C7EF9F8C7386DFDA3 Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/iWCv7hKkDTmy2BHgFj5y8bvZpHU.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28773 IP address blocks: 188.190.160.0/19 maxlen: 19 195.78.38.0/23 maxlen: 23 2001:67c:2ee4::/48 maxlen: 48 2001:3840::/29 maxlen: 29 2a13:e780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f8:a7:7b:cb:cb:5c:7e:f9:f8:c7:38:6d:fd:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8960afee12a40d39b2d811e0163e72f1bbd9a475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:ae:a2:cb:21:f5:30:1e:4f:88:82:64:8b: f8:38:83:af:01:f3:aa:41:21:d6:4a:fa:59:cf:c5: 7c:2a:d4:ab:d2:36:bd:7b:f2:2d:47:21:f7:14:fc: 55:0a:0d:de:1f:cf:c0:49:b9:d0:8a:ea:67:51:96: 8d:3e:5a:41:04:f1:ab:ae:77:65:03:7f:af:86:c5: 80:25:45:0a:a1:aa:d6:0b:28:ea:6d:d6:41:d7:47: f0:26:e7:33:1c:cb:b1:f7:06:20:f5:07:86:20:45: 8c:a9:85:43:97:10:74:b9:a8:bc:c7:14:fc:93:04: 74:27:4a:8e:15:52:8a:5d:fc:75:d1:e9:ec:3c:d3: 30:69:fa:3f:f0:4b:3b:99:12:dd:6b:9e:cc:1d:7b: 68:7b:9b:a9:9f:53:80:09:ba:1e:48:51:52:8e:99: ec:77:3d:0e:d9:72:a0:63:19:66:e4:37:a9:ef:ea: be:84:08:b5:08:73:34:c1:49:ee:a8:1a:9c:28:08: ef:b2:56:65:f6:6f:7e:98:63:c3:35:87:36:40:6a: fb:8a:f4:e2:e6:b1:2f:bc:5d:cd:2c:4d:b9:8a:34: 57:ff:2e:4d:7f:14:ac:e0:e8:bf:fa:3c:ad:50:22: 25:a3:6e:cc:f3:9e:56:56:22:85:1b:7a:a5:ef:2e: 6a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:60:AF:EE:12:A4:0D:39:B2:D8:11:E0:16:3E:72:F1:BB:D9:A4:75 X509v3 Authority Key Identifier: keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/iWCv7hKkDTmy2BHgFj5y8bvZpHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.190.160.0/19 195.78.38.0/23 IPv6: 2001:67c:2ee4::/48 2001:3840::/29 2a13:e780::/29 Signature Algorithm: sha256WithRSAEncryption 09:bc:93:db:a8:d3:32:50:58:c0:0e:fe:37:04:3b:0b:9c:a8: d3:6e:ab:f8:b8:d3:26:28:73:bb:84:cf:c2:a6:c1:22:54:e1: 60:8f:e9:e9:c2:a6:81:9f:03:77:72:6b:fd:43:ea:aa:44:50: 2a:55:08:36:7e:ea:c1:e0:c9:fd:9a:77:3f:72:84:e9:99:ee: e7:c7:4d:38:a2:ce:71:41:34:37:0e:7b:9a:c0:cd:ba:fb:19: 73:ae:98:9a:d8:6b:02:f7:3c:80:a2:69:08:84:f9:ad:34:32: 88:97:fb:23:0e:e8:6a:98:00:27:58:5b:fb:9d:4a:63:31:73: 7c:b6:af:58:e1:43:9d:02:84:76:07:ea:c6:5b:e2:41:f7:8d: 04:24:f2:e5:cb:58:a0:48:2b:9d:36:ec:1c:78:36:66:8b:61: 4a:4b:c6:9f:fd:8a:a4:1d:1c:7d:2d:e4:d6:88:76:77:f3:0a: 61:f4:86:95:b7:55:2d:2e:9e:ee:bf:dd:f7:b2:51:61:90:26: 47:9a:68:7d:0d:12:90:93:4b:09:cc:a6:c8:a7:80:d8:a7:ad: c0:9c:5b:f9:81:b6:28:8c:37:55:89:0b:c0:dc:d1:77:30:93: b6:75:17:40:0f:30:25:85:1a:2b:e7:38:6c:36:04:ee:3e:fa: 9e:b2:e4:d3 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt7pPine8vLXH75+Mc4bf2jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzODU3OWU0YzdkYTAxZGYwNDY1MTg2MjM2ZTlhZjI3ZWI3 MzEyZWQwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTYwYWZlZTEyYTQwZDM5YjJkODExZTAxNjNlNzJmMWJiZDlhNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsGuossh9TAeT4iCZIv4OIOvAfOq QSHWSvpZz8V8KtSr0ja9e/ItRyH3FPxVCg3eH8/ASbnQiupnUZaNPlpBBPGrrndl A3+vhsWAJUUKoarWCyjqbdZB10fwJuczHMux9wYg9QeGIEWMqYVDlxB0uai8xxT8 kwR0J0qOFVKKXfx10ensPNMwafo/8Es7mRLda57MHXtoe5upn1OACboeSFFSjpns dz0O2XKgYxlm5Dep7+q+hAi1CHM0wUnuqBqcKAjvslZl9m9+mGPDNYc2QGr7ivTi 5rEvvF3NLE25ijRX/y5NfxSs4Oi/+jytUCIlo27M855WViKFG3ql7y5qIwIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFIlgr+4SpA05stgR4BY+cvG72aR1MB8GA1UdIwQY MBaAFNOFeeTH2gHfBGUYYjbpryfrcxLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDRWNTVNZmFBZDhFWlJoaU51bXZKLXR6RXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85NDYyMmQtYzI2ZC00Mzc2LWIwNTkt YmQ0MDU0MTliMDBkLzEvaVdDdjdoS2tEVG15MkJIZ0ZqNXk4YnZacEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC85NDYyMmQtYzI2ZC00Mzc2LWIwNTktYmQ0MDU0MTliMDBk LzEvMDRWNTVNZmFBZDhFWlJoaU51bXZKLXR6RXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzASBAIAATAMAwQFvL6gAwQB w04mMB0EAgACMBcDBwAgAQZ8LuQDBQMgAThAAwUDKhPngDANBgkqhkiG9w0BAQsF AAOCAQEACbyT26jTMlBYwA7+NwQ7C5yo026r+LjTJihzu4TPwqbBIlThYI/p6cKm gZ8Dd3Jr/UPqqkRQKlUINn7qweDJ/Zp3P3KE6Znu58dNOKLOcUE0Nw57msDNuvsZ c66YmthrAvc8gKJpCIT5rTQyiJf7Iw7oapgAJ1hb+51KYzFzfLavWOFDnQKEdgfq xlviQfeNBCTy5ctYoEgrnTbsHHg2ZothSkvGn/2KpB0cfS3k1oh2d/MKYfSGlbdV LS6e7r/d97JRYZAmR5pofQ0SkJNLCcymyKeA2KetwJxb+YG2KIw3VYkLwNzRdzCT tnUXQA8wJYUaK+c4bDYE7j76nrLk0w== -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:25 2026 by rpki-client