This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Iyc1jcRqhniBGaU-P7-j2GyYrCY.roa File: Iyc1jcRqhniBGaU-P7-j2GyYrCY.roa (raw, json) Hash identifier: Rrh3Rm0OxGHUcD16FWlrwrx6KvY+cB/vZYahxw2JHp4= Subject key identifier: 23:27:35:8D:C4:6A:86:78:81:19:A5:3E:3F:BF:A3:D8:6C:98:AC:26 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39017CF5589B36E920B3B02DC03D14 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Iyc1jcRqhniBGaU-P7-j2GyYrCY.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8732 IP address blocks: 194.149.64.0/24 maxlen: 24 2001:b08:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:01:7c:f5:58:9b:36:e9:20:b3:b0:2d:c0:3d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2327358dc46a86788119a53e3fbfa3d86c98ac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:e2:b3:87:73:4e:d8:5a:e8:67:d3:de:d1: 4a:4b:ba:c7:f6:b7:0a:81:3a:c3:d8:1e:5a:99:ae: 93:8a:0f:6c:92:2d:66:20:f8:7b:1d:94:d1:8e:3c: f5:ac:bf:00:9c:42:50:c4:dc:54:0b:66:fb:15:1c: 6a:ed:a7:f1:30:68:f7:eb:21:e1:c3:46:98:73:e6: eb:33:40:03:66:1a:d4:2f:a5:9b:21:de:97:63:27: 38:15:1d:52:e2:eb:86:6e:fa:87:cf:5b:5e:19:b6: 96:39:9c:af:97:ef:46:37:6b:5b:bc:75:69:97:49: 29:fb:82:9b:88:94:4c:ad:83:cf:17:b0:38:83:0e: bc:ef:d0:13:cd:80:f2:b9:f2:d7:26:c7:30:ff:5d: a2:d4:1f:27:25:c3:dd:10:af:ba:f8:ae:0f:43:0c: 58:28:23:55:9c:03:96:fa:9c:f0:13:cd:1a:be:77: 07:ee:68:60:38:30:cb:bc:56:8f:86:dc:4a:6d:c4: d0:bb:41:d2:0f:2f:e5:f9:e0:ec:da:1f:c8:de:8a: 53:7a:22:6b:c4:bd:8e:e0:d6:6c:7b:f0:aa:d2:04: 1c:45:a0:20:7c:ab:c7:ad:a6:f4:03:25:78:5c:71: a4:8a:fe:25:df:b8:43:27:3a:79:1c:7c:9d:2c:9a: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:27:35:8D:C4:6A:86:78:81:19:A5:3E:3F:BF:A3:D8:6C:98:AC:26 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/Iyc1jcRqhniBGaU-P7-j2GyYrCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.149.64.0/24 IPv6: 2001:b08:22::/48 Signature Algorithm: sha256WithRSAEncryption 3e:3e:70:3b:a0:74:8a:ef:e8:50:a9:a2:62:0b:f9:b8:e6:6a: 75:f9:04:fb:ab:16:79:1a:df:ac:24:5d:3e:dc:5f:d7:b3:36: 18:a4:de:d0:e5:2d:d6:b7:0a:c3:06:49:9a:69:64:73:62:92: 4e:3d:0b:70:c0:e3:7e:34:dc:67:4a:c6:85:b5:8e:7d:b8:28: 92:80:89:4f:fe:2c:37:05:80:2d:85:3d:47:a0:81:48:81:d1: 9e:3e:52:20:bc:84:b1:98:88:7b:eb:5a:f7:5b:6f:76:0a:2b: 8a:36:e5:e1:90:a1:8a:44:66:e0:1b:79:3b:72:f7:51:d1:2f: 72:43:eb:69:a0:73:ba:60:7a:74:df:9c:81:df:f6:bf:ce:e6: b7:1e:22:f1:34:6f:74:a5:34:3c:a7:d2:6f:57:72:46:09:f7: ee:94:13:cd:3c:93:b7:92:b5:5f:5c:78:d9:ff:d9:6e:58:82: 5e:3b:f6:4c:9e:89:e0:b9:76:97:64:86:cf:51:07:f8:a3:68: e7:49:ca:d7:96:d7:f4:fb:c3:7f:e4:56:c1:22:c1:2d:62:28: 43:34:b9:4f:32:1e:62:2d:8c:33:1d:ea:1a:0e:3b:6b:2f:fc: 8c:27:f8:f1:90:0a:19:4f:6d:2b:d4:8e:5b:6f:eb:ad:7f:52: 51:00:c2:30 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+OQF89VibNukgs7AtwD0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzI3MzU4ZGM0NmE4Njc4ODExOWE1M2UzZmJmYTNkODZjOThhYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUnis4dzTtha6GfT3tFKS7rH9rcK gTrD2B5ama6Tig9ski1mIPh7HZTRjjz1rL8AnEJQxNxUC2b7FRxq7afxMGj36yHh w0aYc+brM0ADZhrUL6WbId6XYyc4FR1S4uuGbvqHz1teGbaWOZyvl+9GN2tbvHVp l0kp+4KbiJRMrYPPF7A4gw6879ATzYDyufLXJscw/12i1B8nJcPdEK+6+K4PQwxY KCNVnAOW+pzwE80avncH7mhgODDLvFaPhtxKbcTQu0HSDy/l+eDs2h/I3opTeiJr xL2O4NZse/Cq0gQcRaAgfKvHrab0AyV4XHGkiv4l37hDJzp5HHydLJqPiwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCMnNY3EaoZ4gRmlPj+/o9hsmKwmMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvSXljMWpjUnFobmlCR2FVLVA3LWoyR3lZckNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwpVAMA8E AgACMAkDBwAgAQsIACIwDQYJKoZIhvcNAQELBQADggEBAD4+cDugdIrv6FCpomIL +bjmanX5BPurFnka36wkXT7cX9ezNhik3tDlLda3CsMGSZppZHNikk49C3DA4340 3GdKxoW1jn24KJKAiU/+LDcFgC2FPUeggUiB0Z4+UiC8hLGYiHvrWvdbb3YKK4o2 5eGQoYpEZuAbeTty91HRL3JD62mgc7pgenTfnIHf9r/O5rceIvE0b3SlNDyn0m9X ckYJ9+6UE808k7eStV9ceNn/2W5Ygl479kyeieC5dpdkhs9RB/ijaOdJyteW1/T7 w3/kVsEiwS1iKEM0uU8yHmItjDMd6hoOO2sv/Iwn+PGQChlPbSvUjltv661/UlEA wjA= -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:03 2026 by rpki-client