This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ibgpmqoF5299dQnDrnXW4A-2HkM.roa File: ibgpmqoF5299dQnDrnXW4A-2HkM.roa (raw, json) Hash identifier: zfihq1UEQdUf9nK13FAEffE7LzxP+yWcXUveLp2xbSc= Subject key identifier: 89:B8:29:9A:AA:05:E7:6F:7D:75:09:C3:AE:75:D6:E0:0F:B6:1E:43 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCAB7EF3E8648B1B2B481B4EA905D77 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ibgpmqoF5299dQnDrnXW4A-2HkM.roa Signing time: Fri 02 Jan 2026 08:19:55 +0000 ROA not before: Fri 02 Jan 2026 08:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12660 IP address blocks: 94.184.128.0/21 maxlen: 21 94.184.128.0/22 maxlen: 22 94.184.132.0/22 maxlen: 22 194.225.32.0/20 maxlen: 24 194.225.40.0/21 maxlen: 21 194.225.40.0/24 maxlen: 24 194.225.44.0/22 maxlen: 22 194.225.80.0/21 maxlen: 21 194.225.80.0/22 maxlen: 22 194.225.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:b7:ef:3e:86:48:b1:b2:b4:81:b4:ea:90:5d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89b8299aaa05e76f7d7509c3ae75d6e00fb61e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e3:a3:7d:c6:4a:34:b4:16:b4:7d:86:80:78: ed:52:45:cd:ca:f0:a1:53:8d:a4:26:97:e8:2d:fe: ec:35:00:c4:79:20:2a:26:5b:24:e8:da:02:9c:36: 5d:b0:8e:05:1d:cc:19:4d:b0:84:57:21:93:5c:92: f6:95:e3:59:48:99:14:58:67:3c:1c:5b:16:b6:60: 97:76:78:58:37:98:03:62:74:9d:f9:86:d7:03:2e: 18:48:30:2e:2f:a9:f0:2e:4b:4f:9c:39:65:0f:85: c6:5f:aa:e1:25:27:2a:3c:47:19:17:24:0a:68:fd: 87:7a:90:79:86:0f:08:b5:d9:c4:f8:08:7b:35:bf: 74:e6:92:7e:7e:2d:03:d2:17:83:81:6e:1b:33:98: 37:65:13:b8:5b:89:aa:fe:1a:2f:de:3d:5a:50:67: cf:d5:c6:8b:5c:d1:8e:ee:6e:73:d5:4b:3b:22:8b: 71:8f:fd:be:ed:53:e6:f0:00:cb:7a:dc:70:fe:0b: 77:dd:93:4c:09:9a:84:e2:0d:63:1f:71:9d:c7:8f: a8:cd:ad:a9:db:bd:6d:bd:4c:b9:a5:3b:77:ef:25: 2c:51:df:3f:3c:75:e0:22:e1:03:42:03:f9:f1:64: 03:00:75:aa:0a:66:9b:0a:d8:aa:e0:3b:f2:c3:d5: c8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B8:29:9A:AA:05:E7:6F:7D:75:09:C3:AE:75:D6:E0:0F:B6:1E:43 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/ibgpmqoF5299dQnDrnXW4A-2HkM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.184.128.0/21 194.225.32.0/20 194.225.80.0/21 Signature Algorithm: sha256WithRSAEncryption 72:84:a8:62:c6:e9:b5:a5:53:56:b2:ee:a3:8c:1a:06:61:e2: 9a:3e:28:1c:9b:99:dd:e1:d5:83:9c:a9:3b:b9:9d:4a:2a:f1: 1c:04:cf:cc:54:af:61:14:d4:dd:0e:1b:b1:b1:b9:ac:e7:49: f2:b3:89:e3:76:80:40:08:65:52:cd:ae:56:0a:76:cd:ec:7f: 51:46:25:f7:1b:83:a5:71:db:78:b1:22:b9:8f:48:c8:91:65: 93:38:31:ab:76:53:c3:8a:6e:dd:e0:73:fd:0b:de:e1:f7:47: 43:f0:ca:07:23:cf:a2:b5:52:16:dd:bf:d1:98:16:62:fc:bc: e1:d8:d0:c9:ae:20:24:17:c6:ca:a4:df:e4:ce:e6:03:97:40: 98:4d:e5:85:70:d1:a2:92:cb:f5:98:29:59:f8:41:08:4b:17: d5:f0:0f:e2:e8:dc:58:b7:69:62:51:63:39:6b:cf:0f:73:41: ea:bb:f1:3e:43:14:65:b5:e6:e7:b8:1d:c4:1f:10:d8:0e:d1: fb:11:1f:9b:9c:3d:42:09:ad:52:ea:57:66:bf:51:07:5d:2a: 35:c5:6b:f1:70:ba:f9:1e:af:c9:fd:0c:70:17:85:1a:4b:32: 1b:69:39:e8:8f:a9:e3:03:0c:21:8b:fa:e8:b9:48:d7:00:4b: 87:c2:ef:8b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yrfvPoZIsbK0gbTqkF13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWI4Mjk5YWFhMDVlNzZmN2Q3NTA5YzNhZTc1ZDZlMDBmYjYxZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+OjfcZKNLQWtH2GgHjtUkXNyvCh U42kJpfoLf7sNQDEeSAqJlsk6NoCnDZdsI4FHcwZTbCEVyGTXJL2leNZSJkUWGc8 HFsWtmCXdnhYN5gDYnSd+YbXAy4YSDAuL6nwLktPnDllD4XGX6rhJScqPEcZFyQK aP2HepB5hg8ItdnE+Ah7Nb905pJ+fi0D0heDgW4bM5g3ZRO4W4mq/hov3j1aUGfP 1caLXNGO7m5z1Us7Iotxj/2+7VPm8ADLetxw/gt33ZNMCZqE4g1jH3Gdx4+oza2p 271tvUy5pTt37yUsUd8/PHXgIuEDQgP58WQDAHWqCmabCtiq4Dvyw9XIMwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIm4KZqqBedvfXUJw6511uAPth5DMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvaWJncG1xb0Y1Mjk5ZFFuRHJuWFc0QS0ySGtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDXriAAwQE wuEgAwQDwuFQMA0GCSqGSIb3DQEBCwUAA4IBAQByhKhixum1pVNWsu6jjBoGYeKa Pigcm5nd4dWDnKk7uZ1KKvEcBM/MVK9hFNTdDhuxsbms50nys4njdoBACGVSza5W CnbN7H9RRiX3G4Olcdt4sSK5j0jIkWWTODGrdlPDim7d4HP9C97h90dD8MoHI8+i tVIW3b/RmBZi/Lzh2NDJriAkF8bKpN/kzuYDl0CYTeWFcNGiksv1mClZ+EEISxfV 8A/i6NxYt2liUWM5a88Pc0Hqu/E+QxRltebnuB3EHxDYDtH7ER+bnD1CCa1S6ldm v1EHXSo1xWvxcLr5Hq/J/QxwF4UaSzIbaTnoj6njAwwhi/rouUjXAEuHwu+L -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:24 2026 by rpki-client