This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/ie_Pu7uiMx8GOXLlSXzf2113uw4.roa File: ie_Pu7uiMx8GOXLlSXzf2113uw4.roa (raw, json) Hash identifier: 0qiWVLbjFxTIJ5VjDihdh12+Gr4lOgtQTqIJcLMq4Wc= Subject key identifier: 89:EF:CF:BB:BB:A2:33:1F:06:39:72:E5:49:7C:DF:DB:5D:77:BB:0E Certificate issuer: /CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Certificate serial: 019B7EA726E832EB4F36A4A3266F0B7EB8D1 Authority key identifier: A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/ie_Pu7uiMx8GOXLlSXzf2113uw4.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57814 IP address blocks: 185.139.56.0/22 maxlen: 32 185.229.108.0/22 maxlen: 32 185.229.108.0/24 maxlen: 32 185.229.109.0/24 maxlen: 32 185.229.110.0/24 maxlen: 32 185.229.111.0/24 maxlen: 32 188.93.88.0/24 maxlen: 32 188.93.89.0/24 maxlen: 32 188.93.90.0/24 maxlen: 32 188.93.91.0/24 maxlen: 32 188.93.92.0/24 maxlen: 32 188.93.94.0/24 maxlen: 32 188.93.95.0/24 maxlen: 32 2a0a:5000::/29 maxlen: 128 2a0d:8a00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.mft rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:26:e8:32:eb:4f:36:a4:a3:26:6f:0b:7e:b8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9ec57bc8464fec2e9a1b098ffce34c21aaf9ca6 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89efcfbbbba2331f063972e5497cdfdb5d77bb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:c1:94:c3:f1:43:fd:55:cc:b2:09:71:10: e6:cf:f1:45:6d:64:9e:3c:43:a1:0c:29:c0:26:e8: 39:ff:ab:4a:c5:d9:33:2f:d2:9a:ff:f7:e6:b7:cf: ac:26:01:3b:c2:ad:bb:39:3e:ad:d7:b3:c7:98:a9: be:0a:58:c4:23:89:41:4f:dc:c4:fb:d9:b0:3b:25: ec:9a:8f:17:2f:ff:77:aa:1d:9e:66:b5:d7:1f:ae: cf:86:c5:01:f1:31:78:fb:bf:8a:eb:dd:b2:e1:c0: 3a:69:1b:7e:4e:1d:64:66:cc:df:ac:e4:fa:78:d9: 07:3c:d6:76:34:ef:a1:b7:30:d6:8b:6b:5b:fb:1d: a6:ec:14:04:df:ed:36:5e:bb:70:61:f3:67:c0:fb: 15:2d:d7:9c:23:04:83:97:d6:58:cf:c9:7f:ca:10: fe:7a:d7:6b:b8:73:b0:c3:b9:20:89:56:a7:6b:eb: 93:05:f6:7e:17:7b:07:93:ae:e1:6c:87:19:4d:17: 49:e0:67:6e:c4:84:27:cb:6c:bc:f0:7d:bb:80:5c: 05:a8:84:05:bc:9b:83:6f:c8:ec:ed:35:8a:be:f2: 94:5f:32:23:42:ee:75:72:93:21:59:da:d7:e3:f8: 91:4f:7c:22:18:53:0f:d8:6a:6b:d8:26:c3:b3:e0: 29:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:CF:BB:BB:A2:33:1F:06:39:72:E5:49:7C:DF:DB:5D:77:BB:0E X509v3 Authority Key Identifier: keyid:A9:EC:57:BC:84:64:FE:C2:E9:A1:B0:98:FF:CE:34:C2:1A:AF:9C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qexXvIRk_sLpobCY_840whqvnKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/ie_Pu7uiMx8GOXLlSXzf2113uw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/41b40c-f3b6-40b8-840c-19a3c5649b57/1/qexXvIRk_sLpobCY_840whqvnKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.56.0/22 185.229.108.0/22 188.93.88.0-188.93.92.255 188.93.94.0/23 IPv6: 2a0a:5000::/29 2a0d:8a00::/32 Signature Algorithm: sha256WithRSAEncryption 75:c4:f7:32:11:8a:c3:15:f9:20:7e:aa:fb:92:9f:ba:35:bb: bf:45:45:4e:d3:43:1d:f1:aa:b3:94:11:d9:6a:ca:de:92:4b: 5c:36:39:ec:d5:58:b3:12:82:fb:28:37:c5:08:38:38:62:d6: b1:d1:a6:37:03:3d:8f:82:30:0c:07:14:25:4f:33:7e:91:15: 71:ae:b9:2c:b2:c7:72:b9:0b:f5:91:fd:3d:90:e2:d4:7a:45: 3b:03:f6:24:1e:38:fa:56:63:df:59:a9:67:33:2b:13:1b:64: 79:e3:d8:ab:1a:ed:e9:00:96:bc:0d:2d:be:ca:53:72:c5:41: 00:8d:58:b5:15:68:0a:2b:e0:f7:00:b7:1e:f1:c1:88:5e:4d: 5f:1f:22:39:62:3e:c2:8e:1c:4b:98:1b:91:cb:24:1c:86:b4: de:82:d2:71:d5:da:d9:cb:d6:bb:47:32:38:cc:40:2b:25:dd: 6c:6e:02:76:c5:9c:e7:a0:69:f8:0b:d2:fd:33:16:e1:9b:52: 0c:81:f8:0e:f1:91:1c:4f:9f:37:0f:29:2c:6e:e5:e5:3d:46: 55:42:53:04:8c:70:80:6d:a9:73:27:15:c8:f9:c1:d3:33:e5: 6c:2f:75:60:e0:ab:2b:95:5f:40:cf:eb:f0:b0:55:3b:93:c9: ee:4f:0b:6d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+pyboMutPNqSjJm8LfrjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ZWM1N2JjODQ2NGZlYzJlOWExYjA5OGZmY2UzNGMyMWFh ZjljYTYwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWVmY2ZiYmJiYTIzMzFmMDYzOTcyZTU0OTdjZGZkYjVkNzdiYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qnBlMPxQ/1VzLIJcRDmz/FFbWSe PEOhDCnAJug5/6tKxdkzL9Ka//fmt8+sJgE7wq27OT6t17PHmKm+CljEI4lBT9zE +9mwOyXsmo8XL/93qh2eZrXXH67PhsUB8TF4+7+K692y4cA6aRt+Th1kZszfrOT6 eNkHPNZ2NO+htzDWi2tb+x2m7BQE3+02XrtwYfNnwPsVLdecIwSDl9ZYz8l/yhD+ etdruHOww7kgiVana+uTBfZ+F3sHk67hbIcZTRdJ4GduxIQny2y88H27gFwFqIQF vJuDb8js7TWKvvKUXzIjQu51cpMhWdrX4/iRT3wiGFMP2Gpr2CbDs+ApkQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFInvz7u7ojMfBjly5Ul839tdd7sOMB8GA1UdIwQY MBaAFKnsV7yEZP7C6aGwmP/ONMIar5ymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMt MTlhM2M1NjQ5YjU3LzEvaWVfUHU3dWlNeDhHT1hMbFNYemYyMTEzdXc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80MWI0MGMtZjNiNi00MGI4LTg0MGMtMTlhM2M1NjQ5YjU3 LzEvcWV4WHZJUmtfc0xwb2JDWV84NDB3aHF2bktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAmBAIAATAgAwQCuYs4AwQC ueVsMAwDBAO8XVgDBAC8XVwDBAG8XV4wFAQCAAIwDgMFAyoKUAADBQAqDYoAMA0G CSqGSIb3DQEBCwUAA4IBAQB1xPcyEYrDFfkgfqr7kp+6Nbu/RUVO00Md8aqzlBHZ asrekktcNjns1VizEoL7KDfFCDg4Ytax0aY3Az2PgjAMBxQlTzN+kRVxrrksssdy uQv1kf09kOLUekU7A/YkHjj6VmPfWalnMysTG2R549irGu3pAJa8DS2+ylNyxUEA jVi1FWgKK+D3ALce8cGIXk1fHyI5Yj7CjhxLmBuRyyQchrTegtJx1drZy9a7RzI4 zEArJd1sbgJ2xZznoGn4C9L9Mxbhm1IMgfgO8ZEcT583DyksbuXlPUZVQlMEjHCA balzJxXI+cHTM+VsL3Vg4KsrlV9Az+vwsFU7k8nuTwtt -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:07 2026 by rpki-client