This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/IO5mUJfpT1xU43YlzKHSEsPH-sM.roa File: IO5mUJfpT1xU43YlzKHSEsPH-sM.roa (raw, json) Hash identifier: eQXB16Lc63zu32ovMGwxvRTwr/w6x80LNOqhE2sjF08= Subject key identifier: 20:EE:66:50:97:E9:4F:5C:54:E3:76:25:CC:A1:D2:12:C3:C7:FA:C3 Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e Certificate serial: 019B7CED5891B6A6E3F8CBDFF17FAB696845 Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/IO5mUJfpT1xU43YlzKHSEsPH-sM.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41227 IP address blocks: 87.247.168.0/23 maxlen: 23 87.247.170.0/23 maxlen: 24 87.247.174.0/23 maxlen: 23 87.247.178.0/24 maxlen: 24 87.247.184.0/21 maxlen: 24 194.34.160.0/24 maxlen: 24 194.34.161.0/24 maxlen: 24 194.34.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:58:91:b6:a6:e3:f8:cb:df:f1:7f:ab:69:68:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20ee665097e94f5c54e37625cca1d212c3c7fac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:71:76:28:f7:89:62:98:9d:f3:d4:3c:d8:61: 9e:75:3a:2b:26:e4:07:19:a7:34:e8:a8:15:8e:85: a3:7c:64:c7:25:cc:3c:75:f5:eb:ae:39:1d:f2:08: cf:f6:a6:e9:a0:b9:de:e9:11:1a:4e:92:c8:6f:09: ee:e8:2e:21:50:da:45:f2:d3:a4:5a:b9:c3:ee:b3: da:f5:46:65:4e:1d:92:00:0b:54:41:2a:5b:69:53: 1e:e1:30:f9:c2:de:81:e9:5e:38:0f:9f:cd:5c:7a: 6d:4d:93:e2:36:77:9f:74:44:c1:a4:86:de:91:27: a7:a1:99:65:b7:15:37:42:06:3f:0d:30:09:ea:b2: 16:1d:f0:f9:7d:be:1b:9c:c9:05:a0:df:65:de:91: 73:77:c1:15:3e:35:78:68:35:3b:16:f5:67:9e:26: 2b:75:87:c8:0a:90:90:19:ca:71:71:f2:b4:89:06: 8e:dc:45:72:9c:50:22:60:69:3a:40:29:8e:7d:61: 32:0d:d4:4f:e7:67:0a:3e:64:d0:a4:d6:96:3a:af: 4d:43:6a:63:5d:2b:67:9f:01:81:ae:ee:52:aa:ca: 79:05:d9:43:b8:9e:01:9e:14:cd:76:df:8a:f5:3a: 50:c3:e8:bb:31:f6:61:70:73:a8:f7:5d:9a:e1:fa: 6b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:EE:66:50:97:E9:4F:5C:54:E3:76:25:CC:A1:D2:12:C3:C7:FA:C3 X509v3 Authority Key Identifier: keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/IO5mUJfpT1xU43YlzKHSEsPH-sM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.247.168.0/22 87.247.174.0/23 87.247.178.0/24 87.247.184.0/21 194.34.160.0-194.34.162.255 Signature Algorithm: sha256WithRSAEncryption 36:6e:f5:b1:c4:54:3f:d3:86:05:92:e3:4f:3f:a0:c9:06:fc: 5f:5c:a2:5c:52:d2:3b:93:9e:9c:85:30:12:26:3e:05:8a:ba: 05:2c:8c:d6:b3:d0:2a:1a:19:0e:89:01:42:b3:c0:d9:ee:19: 89:0f:bf:9a:4e:70:97:e3:87:7e:e2:7c:a8:c7:c5:f2:c5:ca: c8:17:a0:eb:b3:8b:3e:b4:d7:dc:2f:27:e1:f8:17:b9:f9:a4: 29:7f:62:25:68:9f:c0:14:52:a4:91:fc:56:27:f7:86:55:60: f1:81:0b:7e:0a:c8:88:3e:01:77:4b:5b:91:ec:30:c7:a3:73: 33:fa:09:9b:c9:ed:fd:3d:64:ee:19:cb:ef:ab:b0:75:e0:c6: 92:ec:49:79:25:fc:87:6e:e0:26:fc:3b:ab:3b:08:df:cd:e6: 3e:39:23:72:a5:9a:35:e3:6f:0d:5f:87:7f:8a:55:49:e9:cf: 32:d6:9b:1d:02:12:6d:21:a6:f5:48:83:fa:b5:be:4f:a3:e3: ba:9f:a1:54:8a:82:5d:d3:8c:4f:c4:37:f4:9b:b0:86:c7:5d: ad:84:09:34:ef:4b:4f:57:2b:c0:78:51:cf:d9:42:96:03:9b: f9:d9:19:17:5c:9e:b0:5d:64:b1:40:90:76:15:20:f1:64:a7: 7b:98:62:e6 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt87ViRtqbj+Mvf8X+raWhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4 ZmFiM2UwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGVlNjY1MDk3ZTk0ZjVjNTRlMzc2MjVjY2ExZDIxMmMzYzdmYWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3F2KPeJYpid89Q82GGedTorJuQH Gac06KgVjoWjfGTHJcw8dfXrrjkd8gjP9qbpoLne6REaTpLIbwnu6C4hUNpF8tOk WrnD7rPa9UZlTh2SAAtUQSpbaVMe4TD5wt6B6V44D5/NXHptTZPiNnefdETBpIbe kSenoZlltxU3QgY/DTAJ6rIWHfD5fb4bnMkFoN9l3pFzd8EVPjV4aDU7FvVnniYr dYfICpCQGcpxcfK0iQaO3EVynFAiYGk6QCmOfWEyDdRP52cKPmTQpNaWOq9NQ2pj XStnnwGBru5Sqsp5BdlDuJ4BnhTNdt+K9TpQw+i7MfZhcHOo912a4fpr6wIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCDuZlCX6U9cVON2Jcyh0hLDx/rDMB8GA1UdIwQY MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt MDQxMzEyMjQyZmYzLzEvSU81bVVKZnBUMXhVNDNZbHpLSFNFc1BILXNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCV/eoAwQB V/euAwQAV/eyAwQDV/e4MAwDBAXCIqADBADCIqIwDQYJKoZIhvcNAQELBQADggEB ADZu9bHEVD/ThgWS408/oMkG/F9colxS0juTnpyFMBImPgWKugUsjNaz0CoaGQ6J AUKzwNnuGYkPv5pOcJfjh37ifKjHxfLFysgXoOuziz6019wvJ+H4F7n5pCl/YiVo n8AUUqSR/FYn94ZVYPGBC34KyIg+AXdLW5HsMMejczP6CZvJ7f09ZO4Zy++rsHXg xpLsSXkl/Idu4Cb8O6s7CN/N5j45I3KlmjXjbw1fh3+KVUnpzzLWmx0CEm0hpvVI g/q1vk+j47qfoVSKgl3TjE/EN/SbsIbHXa2ECTTvS09XK8B4Uc/ZQpYDm/nZGRdc nrBdZLFAkHYVIPFkp3uYYuY= -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:32 2026 by rpki-client