This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa File: iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa (raw, json) Hash identifier: OfSTMvRyldawaL7wcMvycL+8+eQXeUtcB3572S96OXc= Subject key identifier: 88:48:CA:28:B4:43:80:9C:F6:2E:1B:CD:FE:CC:47:9C:99:31:05:CD Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019B7E38F1BE22E5EFF82F60E201BBE8ACE9 Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203623 IP address blocks: 185.127.108.0/24 maxlen: 24 185.127.109.0/24 maxlen: 24 185.127.110.0/24 maxlen: 24 185.127.111.0/24 maxlen: 24 2a06:c8c0::/30 maxlen: 30 2a06:c8c4::/30 maxlen: 30 2a06:c8c4:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f1:be:22:e5:ef:f8:2f:60:e2:01:bb:e8:ac:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8848ca28b443809cf62e1bcdfecc479c993105cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:1a:14:f3:80:42:62:cf:91:05:b8:99:62: 89:5e:ec:63:81:19:42:23:00:b3:61:98:23:c7:65: f2:ca:aa:3e:cb:d8:64:47:41:74:dc:0c:42:ce:57: 75:20:1a:87:d6:13:ec:44:89:95:71:1c:e3:c7:16: ba:98:b9:84:6b:53:db:66:9d:85:be:5d:bc:ca:3f: 31:15:de:7a:b8:8e:f8:a3:54:4f:ee:40:de:22:0d: c0:c4:49:ce:80:ca:ae:81:fa:9e:ed:10:87:de:a8: 0d:ac:2a:62:8f:7b:f1:bd:07:fc:15:4d:50:50:1f: 5c:5a:d6:98:fa:73:3d:48:80:95:bd:a5:c5:95:65: 83:6e:71:4f:db:ee:4d:e9:97:b9:bf:d3:90:a5:95: 61:4e:ac:68:4f:1e:e2:05:e1:c6:9f:54:9a:dc:5e: 36:14:45:99:ac:62:6b:18:63:94:d9:0b:19:9f:d9: e5:f7:19:3a:00:24:99:e3:4e:df:b0:64:38:d2:6c: 84:ed:4f:38:33:5e:3e:6e:a0:f6:a9:bc:de:d1:cd: 7e:cf:e3:ae:56:1a:53:ca:eb:97:69:d2:3c:c5:23: 6e:c1:38:54:cc:28:cc:f2:f8:cf:44:08:d6:bd:50: 6a:70:bd:1a:47:2d:e9:b0:14:c4:f3:99:8a:69:13: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:CA:28:B4:43:80:9C:F6:2E:1B:CD:FE:CC:47:9C:99:31:05:CD X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/iEjKKLRDgJz2LhvN_sxHnJkxBc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.127.108.0/22 IPv6: 2a06:c8c0::/29 Signature Algorithm: sha256WithRSAEncryption 2f:15:40:36:b3:92:93:cb:75:5e:bf:f2:24:9e:d5:29:60:59: 0a:74:2d:5d:15:8a:80:05:ab:3a:b1:68:11:66:9e:95:a5:d3: 89:1d:0c:d9:db:13:18:ee:81:16:db:2c:51:93:4d:83:08:07: 90:92:a8:9d:14:ed:46:72:e1:6f:71:b2:af:d5:f7:11:e3:c3: 95:99:3c:86:9e:20:4a:db:7e:e2:90:00:ec:67:05:ef:04:66: 66:f5:99:80:74:c9:cb:ee:06:c9:2f:bb:11:43:2e:60:15:76: ec:a7:13:85:fe:52:19:b0:30:a1:19:0e:6d:f0:a7:19:6f:b4: ff:45:72:3e:e0:2d:f3:0e:bb:d3:82:79:32:6b:62:c4:af:01: e0:6b:4f:42:f1:40:eb:f4:75:4f:53:09:1e:09:ae:35:b1:7b: e3:e5:b0:09:f0:04:26:4e:b4:43:56:35:d2:05:d4:b6:93:2e: cf:17:dd:c8:8a:5e:5c:e0:6a:d2:0c:21:b3:1b:83:39:d6:8a: ad:8b:73:5e:71:68:e9:e7:50:00:4a:0b:05:82:35:b8:1e:3d: 07:92:40:d7:05:78:fd:23:37:5f:7b:b2:8c:ba:45:5d:c0:25: 21:8d:e3:a3:aa:6c:b9:60:6f:9b:13:42:db:c0:96:b3:d4:8e: 6c:8a:53:8a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OPG+IuXv+C9g4gG76KzpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQ4Y2EyOGI0NDM4MDljZjYyZTFiY2RmZWNjNDc5Yzk5MzEwNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZQaFPOAQmLPkQW4mWKJXuxjgRlC IwCzYZgjx2Xyyqo+y9hkR0F03AxCzld1IBqH1hPsRImVcRzjxxa6mLmEa1PbZp2F vl28yj8xFd56uI74o1RP7kDeIg3AxEnOgMqugfqe7RCH3qgNrCpij3vxvQf8FU1Q UB9cWtaY+nM9SICVvaXFlWWDbnFP2+5N6Ze5v9OQpZVhTqxoTx7iBeHGn1Sa3F42 FEWZrGJrGGOU2QsZn9nl9xk6ACSZ407fsGQ40myE7U84M14+bqD2qbze0c1+z+Ou VhpTyuuXadI8xSNuwThUzCjM8vjPRAjWvVBqcL0aRy3psBTE85mKaRMPxwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIhIyii0Q4Cc9i4bzf7MR5yZMQXNMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvaUVqS0tMUkRnSnoyTGh2Tl9zeEhuSmt4QmMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuX9sMA0E AgACMAcDBQMqBsjAMA0GCSqGSIb3DQEBCwUAA4IBAQAvFUA2s5KTy3Vev/IkntUp YFkKdC1dFYqABas6sWgRZp6VpdOJHQzZ2xMY7oEW2yxRk02DCAeQkqidFO1GcuFv cbKv1fcR48OVmTyGniBK237ikADsZwXvBGZm9ZmAdMnL7gbJL7sRQy5gFXbspxOF /lIZsDChGQ5t8KcZb7T/RXI+4C3zDrvTgnkya2LErwHga09C8UDr9HVPUwkeCa41 sXvj5bAJ8AQmTrRDVjXSBdS2ky7PF93Iil5c4GrSDCGzG4M51oqti3NecWjp51AA SgsFgjW4Hj0HkkDXBXj9Izdfe7KMukVdwCUhjeOjqmy5YG+bE0LbwJaz1I5silOK -----END CERTIFICATE-----Generated at Sun Jan 25 21:28:00 2026 by rpki-client