This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa File: I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa (raw, json) Hash identifier: /L+nfUszoFluPyMyZo9VlBC8cE+Ie4cQ8KAxPH1RRAw= Subject key identifier: 23:E5:C8:8D:1C:60:91:D3:59:79:9E:97:81:CC:48:F7:A9:0C:17:02 Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a Certificate serial: 019B7AC83FBB780E31830416AB7A7C16538A Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201935 IP address blocks: 82.85.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3f:bb:78:0e:31:83:04:16:ab:7a:7c:16:53:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23e5c88d1c6091d359799e9781cc48f7a90c1702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c7:f3:70:2b:e0:b5:cd:dd:cf:56:ce:a5:ad: 58:86:13:91:cc:f7:cb:49:13:46:95:a2:51:7d:c3: 03:22:66:ca:5c:d7:7f:49:a1:dc:2f:79:31:21:a9: 59:c5:97:17:66:30:11:95:dd:39:12:4c:fd:a5:cc: c8:91:51:6e:3b:3d:61:76:b6:b1:5d:a2:87:57:cd: a3:3e:ae:33:97:56:a4:d4:62:ff:d9:07:73:38:c5: 19:f5:0f:67:b3:52:da:41:27:83:74:5c:86:89:c4: 51:17:a1:a7:b4:41:b6:de:03:6c:c7:63:f3:4e:4f: 59:b0:3f:6d:ae:f8:36:0a:b3:4a:52:a7:4d:d8:a0: d4:32:5a:87:30:04:8b:43:a9:ae:36:f4:b3:44:8f: 2d:64:1c:b8:6c:11:2e:bc:67:ad:93:0b:86:ef:c4: 16:79:b4:e4:36:f3:c2:b7:30:42:ad:d9:af:af:da: df:14:ab:20:44:12:2a:d5:91:80:c4:e7:81:52:11: b2:60:4e:02:07:34:58:76:2f:c7:57:e0:c6:f8:d0: 58:e0:b1:ef:49:ed:d3:0b:25:98:11:f8:62:38:3f: a6:06:06:d8:ea:3b:09:bc:ec:bd:bb:37:50:1b:43: 8a:eb:8d:80:b2:71:79:99:6d:28:42:70:a5:74:b0: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E5:C8:8D:1C:60:91:D3:59:79:9E:97:81:CC:48:F7:A9:0C:17:02 X509v3 Authority Key Identifier: keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/I-XIjRxgkdNZeZ6XgcxI96kMFwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.85.176.0/24 Signature Algorithm: sha256WithRSAEncryption 90:79:5c:32:81:11:ee:df:ee:78:43:9a:22:fc:d2:dc:21:8f: 66:84:51:f1:27:2c:39:24:ae:7a:29:e9:1a:69:1d:df:eb:e4: 61:e1:02:bc:e6:d4:2e:9c:5f:03:f0:c4:5c:ab:25:10:ab:dc: 35:9d:9e:53:51:23:d4:ee:e1:1a:79:71:d2:b8:01:b4:4a:06: 93:5a:9d:8c:6a:5a:d9:73:f9:31:f0:87:fa:82:d4:78:36:43: e9:8d:82:08:d7:05:f7:a7:35:e7:7f:41:e3:f2:7b:97:4a:6c: 6d:7f:88:e7:02:f3:8c:ff:eb:9e:3c:26:4b:35:98:ef:bc:e8: ac:64:60:28:31:3f:08:85:9a:74:5a:da:60:d2:7a:48:ec:87: 55:18:83:60:0f:d7:29:c6:5f:a7:84:b8:f2:ef:ab:8c:ca:c5: 34:a2:54:ff:a8:a5:f8:41:12:0a:0b:89:b7:7d:c4:0a:ff:1f: 5e:0e:e9:77:4b:a1:40:5a:7a:8b:0a:3e:14:0c:c4:79:69:9c: 55:1b:38:1c:aa:28:48:10:80:95:bb:1a:ea:2b:31:17:5f:06: 9c:a3:1e:a9:d3:a8:ca:ed:3c:fd:92:df:cd:47:51:76:52:90: bb:81:73:86:19:58:4d:e7:50:cb:b3:66:3c:6d:7e:aa:23:6c: 9a:f9:90:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yD+7eA4xgwQWq3p8FlOKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1 NTk1M2EwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2U1Yzg4ZDFjNjA5MWQzNTk3OTllOTc4MWNjNDhmN2E5MGMxNzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsfzcCvgtc3dz1bOpa1YhhORzPfL SRNGlaJRfcMDImbKXNd/SaHcL3kxIalZxZcXZjARld05Ekz9pczIkVFuOz1hdrax XaKHV82jPq4zl1ak1GL/2QdzOMUZ9Q9ns1LaQSeDdFyGicRRF6GntEG23gNsx2Pz Tk9ZsD9trvg2CrNKUqdN2KDUMlqHMASLQ6muNvSzRI8tZBy4bBEuvGetkwuG78QW ebTkNvPCtzBCrdmvr9rfFKsgRBIq1ZGAxOeBUhGyYE4CBzRYdi/HV+DG+NBY4LHv Se3TCyWYEfhiOD+mBgbY6jsJvOy9uzdQG0OK642AsnF5mW0oQnCldLD4CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCPlyI0cYJHTWXmel4HMSPepDBcCMB8GA1UdIwQY MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt ZDY1NjE3YmQzYjRmLzEvSS1YSWpSeGdrZE5aZVo2WGdjeEk5NmtNRndJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUlWwMA0G CSqGSIb3DQEBCwUAA4IBAQCQeVwygRHu3+54Q5oi/NLcIY9mhFHxJyw5JK56Keka aR3f6+Rh4QK85tQunF8D8MRcqyUQq9w1nZ5TUSPU7uEaeXHSuAG0SgaTWp2MalrZ c/kx8If6gtR4NkPpjYII1wX3pzXnf0Hj8nuXSmxtf4jnAvOM/+uePCZLNZjvvOis ZGAoMT8IhZp0Wtpg0npI7IdVGINgD9cpxl+nhLjy76uMysU0olT/qKX4QRIKC4m3 fcQK/x9eDul3S6FAWnqLCj4UDMR5aZxVGzgcqihIEICVuxrqKzEXXwacox6p06jK 7Tz9kt/NR1F2UpC7gXOGGVhN51DLs2Y8bX6qI2ya+ZAQ -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:29 2026 by rpki-client