This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/ieUGguqrKvcNhkrMXAP72jx_K8Q.roa File: ieUGguqrKvcNhkrMXAP72jx_K8Q.roa (raw, json) Hash identifier: FH+hfr4zdjk2044475wgvLS1qj40hiexUTsIxUjhke0= Subject key identifier: 89:E5:06:82:EA:AB:2A:F7:0D:86:4A:CC:5C:03:FB:DA:3C:7F:2B:C4 Certificate issuer: /CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb Certificate serial: 019B7EA734304165674EDCCD8033E426C9E3 Authority key identifier: FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/ieUGguqrKvcNhkrMXAP72jx_K8Q.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203602 IP address blocks: 185.255.244.0/22 maxlen: 22 2a0c:61c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.mft rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:34:30:41:65:67:4e:dc:cd:80:33:e4:26:c9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc6a4c595f0b2dd05a1fe67287c13ce0ebc80adb Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89e50682eaab2af70d864acc5c03fbda3c7f2bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ff:41:4d:69:bb:a8:22:0f:c2:2a:57:f0:c5: f4:63:47:36:27:e8:3c:76:3a:35:41:32:af:f4:00: 85:34:a8:71:35:19:65:fd:07:ef:ce:fb:15:82:a9: 43:35:ee:9a:34:55:f8:f9:91:54:15:29:0f:a0:63: 36:e8:82:cb:96:81:f2:ef:65:f7:ca:ca:bb:9b:99: b5:7c:7a:c6:9c:ab:b5:0e:7e:eb:2f:7f:5b:ef:9e: 10:d5:49:cf:df:9f:52:11:86:5a:0f:33:61:4a:38: 22:ba:ac:48:dc:0c:22:e7:b6:e9:60:60:1b:e6:70: 05:33:33:3f:82:38:c4:1b:ce:3f:d7:45:12:7f:b1: 67:10:5a:a3:2e:cd:77:45:b0:34:b8:49:7a:5a:3e: 2c:ad:81:13:67:a8:38:a2:46:3d:c9:a3:99:eb:ec: 95:a4:bb:4a:e9:1f:24:23:ac:a8:be:8f:02:9f:df: a9:22:d7:ee:dc:6d:e7:98:07:6d:c3:66:11:82:f9: 1b:6b:ed:14:e2:6c:3f:9b:fa:53:fe:f8:21:e0:be: d8:32:ec:68:0e:4d:d6:86:fb:d1:5a:b0:2f:00:44: 3e:d5:6e:50:0e:37:4a:c5:9c:d6:6b:c8:c8:95:f7: 64:be:4d:7d:b4:64:b3:e2:fc:8a:e0:80:c2:07:03: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E5:06:82:EA:AB:2A:F7:0D:86:4A:CC:5C:03:FB:DA:3C:7F:2B:C4 X509v3 Authority Key Identifier: keyid:FC:6A:4C:59:5F:0B:2D:D0:5A:1F:E6:72:87:C1:3C:E0:EB:C8:0A:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_GpMWV8LLdBaH-Zyh8E84OvICts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/ieUGguqrKvcNhkrMXAP72jx_K8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/06970a-2866-489d-b71a-84e6cd2232ac/1/_GpMWV8LLdBaH-Zyh8E84OvICts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.244.0/22 IPv6: 2a0c:61c0::/32 Signature Algorithm: sha256WithRSAEncryption 4c:7b:f8:52:64:98:e2:c3:6e:3d:8b:de:38:1b:24:f9:53:a7: 28:13:b9:b2:31:0e:c4:aa:17:a9:1d:97:6f:57:c4:1a:ba:86: c8:e2:45:81:a8:86:b7:83:a0:84:0d:2e:c6:5f:bc:0e:eb:59: 84:7c:f9:6d:02:20:6b:7a:b1:69:a4:f6:23:28:5a:ce:63:b5: 1b:4c:b6:14:dd:28:c3:50:08:83:e7:be:a7:79:8b:3f:af:5b: b5:b9:ed:ff:7b:e5:da:17:58:15:13:00:26:12:17:d1:0b:ee: a2:8d:d0:24:2c:41:53:d1:55:df:40:31:ba:3e:a6:cf:12:3c: ef:4a:c8:7a:d8:01:a5:72:6e:2b:75:b4:db:52:b4:01:a4:75: 8a:e8:3a:00:cd:12:7a:36:dd:11:72:2c:37:bf:a8:fb:75:1c: 53:ca:3b:ed:37:c2:be:d7:13:8f:2d:04:00:9c:89:9d:52:1a: 47:84:3f:4f:8f:39:c7:b1:98:bd:9c:85:36:f4:a5:d7:81:24: a1:7c:f0:08:58:73:bd:ba:2b:f4:61:36:b4:0e:f4:60:44:6e: 95:b7:df:97:4f:25:34:db:b5:04:9f:9d:b5:c0:86:11:fc:61: fc:35:14:3e:cb:6a:cb:7d:72:40:2f:88:d3:30:1e:02:68:b2: 47:45:1d:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pzQwQWVnTtzNgDPkJsnjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNmE0YzU5NWYwYjJkZDA1YTFmZTY3Mjg3YzEzY2UwZWJj ODBhZGIwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWU1MDY4MmVhYWIyYWY3MGQ4NjRhY2M1YzAzZmJkYTNjN2YyYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/9BTWm7qCIPwipX8MX0Y0c2J+g8 djo1QTKv9ACFNKhxNRll/QfvzvsVgqlDNe6aNFX4+ZFUFSkPoGM26ILLloHy72X3 ysq7m5m1fHrGnKu1Dn7rL39b754Q1UnP359SEYZaDzNhSjgiuqxI3Awi57bpYGAb 5nAFMzM/gjjEG84/10USf7FnEFqjLs13RbA0uEl6Wj4srYETZ6g4okY9yaOZ6+yV pLtK6R8kI6yovo8Cn9+pItfu3G3nmAdtw2YRgvkba+0U4mw/m/pT/vgh4L7YMuxo Dk3WhvvRWrAvAEQ+1W5QDjdKxZzWa8jIlfdkvk19tGSz4vyK4IDCBwPncQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFInlBoLqqyr3DYZKzFwD+9o8fyvEMB8GA1UdIwQY MBaAFPxqTFlfCy3QWh/mcofBPODryArbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEt ODRlNmNkMjIzMmFjLzEvaWVVR2d1cXJLdmNOaGtyTVhBUDcyanhfSzhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wNjk3MGEtMjg2Ni00ODlkLWI3MWEtODRlNmNkMjIzMmFj LzEvX0dwTVdWOExMZEJhSC1aeWg4RTg0T3ZJQ3RzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf/0MA0E AgACMAcDBQAqDGHAMA0GCSqGSIb3DQEBCwUAA4IBAQBMe/hSZJjiw249i944GyT5 U6coE7myMQ7EqhepHZdvV8QauobI4kWBqIa3g6CEDS7GX7wO61mEfPltAiBrerFp pPYjKFrOY7UbTLYU3SjDUAiD576neYs/r1u1ue3/e+XaF1gVEwAmEhfRC+6ijdAk LEFT0VXfQDG6PqbPEjzvSsh62AGlcm4rdbTbUrQBpHWK6DoAzRJ6Nt0Rciw3v6j7 dRxTyjvtN8K+1xOPLQQAnImdUhpHhD9PjznHsZi9nIU29KXXgSShfPAIWHO9uiv0 YTa0DvRgRG6Vt9+XTyU027UEn521wIYR/GH8NRQ+y2rLfXJAL4jTMB4CaLJHRR0a -----END CERTIFICATE-----Generated at Mon Jan 26 08:07:13 2026 by rpki-client