This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/iXTTTS-nkmqjatbhOVM0CNWv4xs.roa File: iXTTTS-nkmqjatbhOVM0CNWv4xs.roa (raw, json) Hash identifier: mekB3Ob2oSZO7b98NYgMQKBlF4RIFyldyH/8tcheBuM= Subject key identifier: 89:74:D3:4D:2F:A7:92:6A:A3:6A:D6:E1:39:53:34:08:D5:AF:E3:1B Certificate issuer: /CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8 Certificate serial: 019B76EB57295842469DC48A759614BBF588 Authority key identifier: E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/iXTTTS-nkmqjatbhOVM0CNWv4xs.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5588 IP address blocks: 195.90.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.mft rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:57:29:58:42:46:9d:c4:8a:75:96:14:bb:f5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8f41f6b02b93f85d1a7b48b48cfa322f088f8 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8974d34d2fa7926aa36ad6e139533408d5afe31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:8b:b7:31:1d:e6:72:74:38:c1:43:7e:e1: c9:cc:10:08:f2:11:32:d7:b8:65:8f:15:e5:ca:d7: 3e:a8:a6:1d:31:8e:5e:b2:11:a8:34:b1:26:e3:a6: 67:9d:33:6f:df:7c:41:18:fa:64:de:b0:8c:ab:58: 0a:46:b8:8e:44:35:55:13:80:e3:d8:31:e0:03:8e: e3:fa:78:bc:52:b8:c9:49:3d:28:56:12:4e:06:bf: 79:f5:83:c8:34:85:b6:74:dc:b5:a3:74:eb:09:8b: 9f:70:90:36:50:a2:34:9c:36:4c:cd:32:1a:d7:d7: 28:91:1e:80:70:56:a5:a4:cf:98:a5:40:64:cc:9f: 18:94:e0:c1:b0:9a:8f:16:50:da:ad:50:39:df:fa: 5e:96:b0:e1:50:bc:55:46:e6:3f:8b:13:00:1f:c6: 57:2d:3e:14:99:d7:f5:13:51:9f:58:11:87:ff:5a: 16:80:b2:20:bb:78:13:41:00:3b:9a:bf:1f:a4:55: 3b:f2:82:0c:5b:bb:02:bd:ac:94:84:41:62:f9:54: aa:02:d5:d0:d9:27:cf:dc:03:e3:4c:38:08:80:ac: 0c:76:08:f8:1c:98:2c:32:8c:8f:18:eb:59:03:2a: f8:a0:4b:79:03:ef:3c:b2:d0:65:b2:af:ac:f5:9b: b3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:74:D3:4D:2F:A7:92:6A:A3:6A:D6:E1:39:53:34:08:D5:AF:E3:1B X509v3 Authority Key Identifier: keyid:E1:E8:F4:1F:6B:02:B9:3F:85:D1:A7:B4:8B:48:CF:A3:22:F0:88:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ej0H2sCuT-F0ae0i0jPoyLwiPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/iXTTTS-nkmqjatbhOVM0CNWv4xs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ba940-0078-4fd0-afde-537a2b0b4dda/1/4ej0H2sCuT-F0ae0i0jPoyLwiPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.90.98.0/24 Signature Algorithm: sha256WithRSAEncryption 79:fc:2f:1f:b1:13:f0:f3:e1:90:52:ec:48:7c:75:9c:39:f8: 36:b2:e0:c6:f9:d4:b0:f4:2e:3c:e1:4a:5c:d4:1f:69:6d:b1: b7:47:73:b7:31:b2:ac:1a:6f:c9:c0:d8:64:89:e3:1d:a7:1b: 30:58:c3:04:13:3e:3a:9f:94:5f:07:65:1e:5f:51:b2:f2:96: 72:24:9a:52:fb:dd:e7:ca:a6:f1:1d:e8:50:61:09:57:05:d0: 3e:08:4b:e4:ac:f9:b6:da:d6:2c:3c:84:5d:a0:e5:83:4d:59: 49:f7:d7:c7:35:6e:e2:cf:02:4a:c7:b6:4e:03:60:ec:e6:64: 14:7d:1e:f3:a2:b2:e4:7d:11:bd:c0:88:a7:30:86:75:d4:4e: d4:d9:46:b7:d2:d0:86:aa:d3:fb:97:e1:c0:b3:40:37:ef:ba: 87:15:d2:93:37:cd:4a:bf:73:ad:03:e3:81:ea:4c:ba:bd:83: 1c:ff:fb:c8:9d:61:50:11:08:68:7f:6e:5f:11:f9:9f:b1:73: e6:be:20:04:57:0e:9b:66:e2:7b:1e:eb:0f:d0:be:0b:f8:a4: 57:d1:5e:41:40:ed:8a:db:d7:41:71:5a:57:62:2d:04:81:c9: ce:ed:88:f5:f6:bb:e4:d1:96:30:34:26:d8:cf:1e:08:63:bf: fa:05:f4:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt261cpWEJGncSKdZYUu/WIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThmNDFmNmIwMmI5M2Y4NWQxYTdiNDhiNDhjZmEzMjJm MDg4ZjgwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTc0ZDM0ZDJmYTc5MjZhYTM2YWQ2ZTEzOTUzMzQwOGQ1YWZlMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxOLtzEd5nJ0OMFDfuHJzBAI8hEy 17hljxXlytc+qKYdMY5eshGoNLEm46ZnnTNv33xBGPpk3rCMq1gKRriORDVVE4Dj 2DHgA47j+ni8UrjJST0oVhJOBr959YPINIW2dNy1o3TrCYufcJA2UKI0nDZMzTIa 19cokR6AcFalpM+YpUBkzJ8YlODBsJqPFlDarVA53/pelrDhULxVRuY/ixMAH8ZX LT4Umdf1E1GfWBGH/1oWgLIgu3gTQQA7mr8fpFU78oIMW7sCvayUhEFi+VSqAtXQ 2SfP3APjTDgIgKwMdgj4HJgsMoyPGOtZAyr4oEt5A+88stBlsq+s9ZuzOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIl0000vp5Jqo2rW4TlTNAjVr+MbMB8GA1UdIwQY MBaAFOHo9B9rArk/hdGntItIz6Mi8Ij4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUt NTM3YTJiMGI0ZGRhLzEvaVhUVFRTLW5rbXFqYXRiaE9WTTBDTld2NHhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85YmE5NDAtMDA3OC00ZmQwLWFmZGUtNTM3YTJiMGI0ZGRh LzEvNGVqMEgyc0N1VC1GMGFlMGkwalBveUx3aVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1piMA0G CSqGSIb3DQEBCwUAA4IBAQB5/C8fsRPw8+GQUuxIfHWcOfg2suDG+dSw9C484Upc 1B9pbbG3R3O3MbKsGm/JwNhkieMdpxswWMMEEz46n5RfB2UeX1Gy8pZyJJpS+93n yqbxHehQYQlXBdA+CEvkrPm22tYsPIRdoOWDTVlJ99fHNW7izwJKx7ZOA2Ds5mQU fR7zorLkfRG9wIinMIZ11E7U2Ua30tCGqtP7l+HAs0A377qHFdKTN81Kv3OtA+OB 6ky6vYMc//vInWFQEQhof25fEfmfsXPmviAEVw6bZuJ7HusP0L4L+KRX0V5BQO2K 29dBcVpXYi0EgcnO7Yj19rvk0ZYwNCbYzx4IY7/6BfRF -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:48 2026 by rpki-client