This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/iCQOeluGzuF2H3yby0GDplaPkdI.roa File: iCQOeluGzuF2H3yby0GDplaPkdI.roa (raw, json) Hash identifier: FSXXrDNKGzru4cBB3J/wsVuN39ULCg+BCEi5BmI7ZZk= Subject key identifier: 88:24:0E:7A:5B:86:CE:E1:76:1F:7C:9B:CB:41:83:A6:56:8F:91:D2 Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a Certificate serial: 019B7AC83F5E0D699B1F90903FBD300C0FED Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/iCQOeluGzuF2H3yby0GDplaPkdI.roa Signing time: Thu 01 Jan 2026 18:18:22 +0000 ROA not before: Thu 01 Jan 2026 18:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30722 IP address blocks: 94.32.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:3f:5e:0d:69:9b:1f:90:90:3f:bd:30:0c:0f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a Validity Not Before: Jan 1 18:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88240e7a5b86cee1761f7c9bcb4183a6568f91d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:59:d5:4f:61:40:34:ac:7c:46:a3:02:15: 51:07:05:87:2b:a5:fb:70:e7:f1:15:39:32:27:17: fa:fa:d8:69:aa:b3:8a:6a:ba:df:b3:28:13:5a:12: 51:ec:84:6f:e1:2a:ed:f3:6c:20:91:c4:03:57:04: 2c:d5:f5:57:46:e7:ae:7f:04:eb:b1:a8:2a:1b:ce: 01:2d:1d:26:89:8e:55:04:1a:17:4d:94:3f:e4:cc: 81:aa:b2:3c:e5:8d:ff:44:1d:d9:d1:d1:25:db:7b: b9:a3:d4:03:b9:07:9f:98:c9:c2:9f:62:9f:11:1b: 58:0c:2b:e1:95:cb:17:8b:d1:1f:bf:22:fd:8b:de: 44:a2:5d:43:98:e0:50:6e:1c:f4:85:13:f2:e7:2e: 1a:51:57:f5:ca:bc:4e:e1:29:ca:94:d6:bf:e0:76: 84:fa:53:e6:a3:ea:5a:25:7f:97:0a:dd:66:5e:80: c7:ee:b6:a9:99:9c:72:88:d4:34:a1:19:b1:b1:fb: 25:76:d4:61:96:90:e7:59:bf:3d:e4:b8:84:69:dc: 20:0d:52:cd:a0:7b:81:c9:0c:0d:10:b6:16:be:7f: e9:30:8c:9b:68:fd:56:0d:14:9c:3d:bc:9d:3f:77: 86:80:17:27:04:0f:ac:09:25:44:fa:b9:64:47:8c: 35:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:0E:7A:5B:86:CE:E1:76:1F:7C:9B:CB:41:83:A6:56:8F:91:D2 X509v3 Authority Key Identifier: keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/iCQOeluGzuF2H3yby0GDplaPkdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.32.32.0/19 Signature Algorithm: sha256WithRSAEncryption a0:3d:d6:84:ba:60:c7:ab:a9:a9:fc:0f:1e:30:42:85:50:fd: 08:e8:17:ea:70:04:cf:a3:d6:25:5e:68:79:fb:dd:89:24:82: aa:7c:be:59:3a:f4:56:ea:8a:ce:71:3c:6f:58:21:81:bb:a2: de:60:10:37:ac:ad:c8:84:a5:d5:11:b8:14:d7:1c:b3:4a:74: fb:1a:7c:a3:bc:3a:2f:6d:aa:50:df:a0:99:d1:16:af:13:a8: 80:8f:fc:50:84:52:ee:17:41:6b:0a:f0:21:9a:63:72:05:fd: a5:96:86:85:7c:2f:17:0c:81:27:bc:0b:bd:05:9e:86:7d:c0: 5c:20:25:49:8f:81:df:e6:2e:a6:40:46:6d:ce:78:dd:7d:a1: 32:38:dd:73:ad:13:09:7d:85:e5:1c:62:9d:d8:7b:94:ad:3e: d5:c0:4e:96:97:cd:9e:4f:92:c0:7f:17:21:d7:6e:02:96:92: 75:ac:8a:2a:fa:5a:1b:58:94:d5:7b:9f:ce:87:7d:db:05:13: 60:e8:7a:96:17:a6:e1:ad:20:f2:ee:e8:82:f1:03:77:24:96: ac:39:8f:7d:a9:c0:be:b3:0d:eb:14:23:3a:7f:12:a8:4b:d8: 87:03:b7:f4:44:ad:d4:76:96:a5:7d:f2:3f:56:2c:f5:09:6f: a0:bd:b7:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yD9eDWmbH5CQP70wDA/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1 NTk1M2EwHhcNMjYwMTAxMTgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODI0MGU3YTViODZjZWUxNzYxZjdjOWJjYjQxODNhNjU2OGY5MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptVZ1U9hQDSsfEajAhVRBwWHK6X7 cOfxFTkyJxf6+thpqrOKarrfsygTWhJR7IRv4Srt82wgkcQDVwQs1fVXRueufwTr sagqG84BLR0miY5VBBoXTZQ/5MyBqrI85Y3/RB3Z0dEl23u5o9QDuQefmMnCn2Kf ERtYDCvhlcsXi9EfvyL9i95Eol1DmOBQbhz0hRPy5y4aUVf1yrxO4SnKlNa/4HaE +lPmo+paJX+XCt1mXoDH7rapmZxyiNQ0oRmxsfsldtRhlpDnWb895LiEadwgDVLN oHuByQwNELYWvn/pMIybaP1WDRScPbydP3eGgBcnBA+sCSVE+rlkR4w1OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIgkDnpbhs7hdh98m8tBg6ZWj5HSMB8GA1UdIwQY MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt ZDY1NjE3YmQzYjRmLzEvaUNRT2VsdUd6dUYySDN5YnkwR0RwbGFQa2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFXiAgMA0G CSqGSIb3DQEBCwUAA4IBAQCgPdaEumDHq6mp/A8eMEKFUP0I6BfqcATPo9YlXmh5 +92JJIKqfL5ZOvRW6orOcTxvWCGBu6LeYBA3rK3IhKXVEbgU1xyzSnT7GnyjvDov bapQ36CZ0RavE6iAj/xQhFLuF0FrCvAhmmNyBf2lloaFfC8XDIEnvAu9BZ6GfcBc ICVJj4Hf5i6mQEZtznjdfaEyON1zrRMJfYXlHGKd2HuUrT7VwE6Wl82eT5LAfxch 124ClpJ1rIoq+lobWJTVe5/Oh33bBRNg6HqWF6bhrSDy7uiC8QN3JJasOY99qcC+ sw3rFCM6fxKoS9iHA7f0RK3UdpalffI/Viz1CW+gvbfn -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:19 2026 by rpki-client