This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/iGPhaDb4xjM65dn-oJGw074wQpw.roa File: iGPhaDb4xjM65dn-oJGw074wQpw.roa (raw, json) Hash identifier: ig8b8ysSe/6l3MpyUlRkJNFNsW2Zyr5NYGbG0mVYDgk= Subject key identifier: 88:63:E1:68:36:F8:C6:33:3A:E5:D9:FE:A0:91:B0:D3:BE:30:42:9C Certificate issuer: /CN=f2262faf4376420024aad72983ac3e87944ea7a5 Certificate serial: 019B7CEE04F9BCC989863A4E3E1B48772F6B Authority key identifier: F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/iGPhaDb4xjM65dn-oJGw074wQpw.roa Signing time: Fri 02 Jan 2026 04:18:52 +0000 ROA not before: Fri 02 Jan 2026 04:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15614 IP address blocks: 193.35.44.0/24 maxlen: 24 2a04:2a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.mft rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:04:f9:bc:c9:89:86:3a:4e:3e:1b:48:77:2f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2262faf4376420024aad72983ac3e87944ea7a5 Validity Not Before: Jan 2 04:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8863e16836f8c6333ae5d9fea091b0d3be30429c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:0d:8e:12:26:7d:18:ee:a3:83:e6:28:92: 0a:17:d4:44:a6:40:1e:22:73:da:a5:37:5c:9f:87: 51:a0:4e:c2:eb:0b:59:39:a9:8b:9a:2f:cc:eb:0a: ad:85:db:cb:0a:bd:53:6d:db:7f:93:11:2a:d2:94: 34:77:7a:59:9b:a2:f2:ad:39:4c:f8:49:52:c8:64: a1:cc:b1:25:46:5d:10:6a:65:c4:3e:5f:53:46:3b: 83:41:7c:79:ed:79:18:02:8d:9b:d5:34:90:b1:4d: 0b:a2:04:bd:01:87:7a:a7:9e:ec:b0:ed:42:e7:28: 4a:4c:26:27:2e:78:27:b2:0e:ed:4e:de:61:cc:a4: e8:14:e9:d4:38:74:81:cc:ca:2d:c9:68:70:a3:a1: e2:ce:62:68:f2:d2:33:d0:3d:fa:b9:e5:8d:03:79: 53:ef:a8:0d:9c:57:4a:a4:cd:87:b3:1f:5f:c4:e0: da:cb:a2:cb:82:b6:71:0b:e8:78:de:9c:1e:07:5c: 27:62:ca:d8:cf:8d:1f:00:38:79:4d:5a:89:db:f0: c6:a6:ce:dd:c2:4f:65:46:09:27:03:7d:09:23:ca: 86:51:7e:a5:8d:1b:3c:c2:72:ee:88:69:43:42:91: 2a:07:2b:20:3f:66:c9:88:08:8f:9c:cf:37:6d:de: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:63:E1:68:36:F8:C6:33:3A:E5:D9:FE:A0:91:B0:D3:BE:30:42:9C X509v3 Authority Key Identifier: keyid:F2:26:2F:AF:43:76:42:00:24:AA:D7:29:83:AC:3E:87:94:4E:A7:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iYvr0N2QgAkqtcpg6w-h5ROp6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/iGPhaDb4xjM65dn-oJGw074wQpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bfd9d-6afc-4bd7-bb43-badafca3944f/1/8iYvr0N2QgAkqtcpg6w-h5ROp6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.35.44.0/24 IPv6: 2a04:2a40::/29 Signature Algorithm: sha256WithRSAEncryption 8a:0d:dc:cf:33:e4:fb:97:cf:65:95:1c:7f:ab:2b:96:02:23: 2a:2a:7f:5f:55:74:7d:0d:21:cb:5a:76:ec:22:fc:f4:af:e1: 5a:d2:83:62:a1:82:47:27:f9:b5:f1:ae:aa:e3:03:ec:5d:c1: 42:2c:79:bb:5f:91:ea:5b:7f:34:f3:ee:e7:f1:76:af:90:02: 59:62:0e:57:8c:14:a6:12:1d:92:d4:b9:72:ce:9b:6f:9d:48: 2c:8a:39:83:7a:2f:91:1d:ae:da:a6:56:b6:92:c8:ff:c9:30: 52:19:ba:17:6e:95:fc:d8:bc:c2:23:02:fc:46:bd:7f:4d:3f: 18:28:68:11:72:c5:41:79:d5:ac:ed:51:90:cb:21:b7:16:37: c3:a5:ec:b0:1e:9d:35:68:7c:19:78:89:e4:c0:c6:51:75:d6: 46:d9:82:b5:68:fb:16:1d:b2:f7:d2:1f:f5:32:03:ba:db:1b: f1:90:31:4a:cb:66:13:cb:25:fa:ae:ee:d0:b1:6b:1e:7e:fb: 37:a8:23:8c:b5:1b:da:59:05:c3:5b:c5:9f:e9:f6:66:47:04: 2a:e1:fa:85:14:35:dd:43:1f:7a:ae:27:d3:07:49:33:d5:f5: b0:5e:95:7a:51:f8:51:6b:63:e1:b7:71:1b:cb:16:2b:f2:e7: 0d:67:b2:0f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87gT5vMmJhjpOPhtIdy9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjYyZmFmNDM3NjQyMDAyNGFhZDcyOTgzYWMzZTg3OTQ0 ZWE3YTUwHhcNMjYwMTAyMDQxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODYzZTE2ODM2ZjhjNjMzM2FlNWQ5ZmVhMDkxYjBkM2JlMzA0MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkENjhImfRjuo4PmKJIKF9REpkAe InPapTdcn4dRoE7C6wtZOamLmi/M6wqthdvLCr1Tbdt/kxEq0pQ0d3pZm6LyrTlM +ElSyGShzLElRl0QamXEPl9TRjuDQXx57XkYAo2b1TSQsU0LogS9AYd6p57ssO1C 5yhKTCYnLngnsg7tTt5hzKToFOnUOHSBzMotyWhwo6HizmJo8tIz0D36ueWNA3lT 76gNnFdKpM2Hsx9fxODay6LLgrZxC+h43pweB1wnYsrYz40fADh5TVqJ2/DGps7d wk9lRgknA30JI8qGUX6ljRs8wnLuiGlDQpEqBysgP2bJiAiPnM83bd5/DQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIhj4Wg2+MYzOuXZ/qCRsNO+MEKcMB8GA1UdIwQY MBaAFPImL69DdkIAJKrXKYOsPoeUTqelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMt YmFkYWZjYTM5NDRmLzEvaUdQaGFEYjR4ak02NWRuLW9KR3cwNzR3UXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmZkOWQtNmFmYy00YmQ3LWJiNDMtYmFkYWZjYTM5NDRm LzEvOGlZdnIwTjJRZ0FrcXRjcGc2dy1oNVJPcDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSMsMA0E AgACMAcDBQMqBCpAMA0GCSqGSIb3DQEBCwUAA4IBAQCKDdzPM+T7l89llRx/qyuW AiMqKn9fVXR9DSHLWnbsIvz0r+Fa0oNioYJHJ/m18a6q4wPsXcFCLHm7X5HqW380 8+7n8XavkAJZYg5XjBSmEh2S1LlyzptvnUgsijmDei+RHa7apla2ksj/yTBSGboX bpX82LzCIwL8Rr1/TT8YKGgRcsVBedWs7VGQyyG3FjfDpeywHp01aHwZeInkwMZR ddZG2YK1aPsWHbL30h/1MgO62xvxkDFKy2YTyyX6ru7QsWsefvs3qCOMtRvaWQXD W8Wf6fZmRwQq4fqFFDXdQx96rifTB0kz1fWwXpV6UfhRa2Pht3EbyxYr8ucNZ7IP -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:15 2026 by rpki-client