This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iMoZMzkhEG0gUmHbzw2TesgOCk8.roa File: iMoZMzkhEG0gUmHbzw2TesgOCk8.roa (raw, json) Hash identifier: qRT4JYProw6Zt2fMnp/wGGbsHCu+zfweKlPkIZyNxNs= Subject key identifier: 88:CA:19:33:39:21:10:6D:20:52:61:DB:CF:0D:93:7A:C8:0E:0A:4F Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77A1DD97606719AFABB01EADF752A Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iMoZMzkhEG0gUmHbzw2TesgOCk8.roa Signing time: Thu 01 Jan 2026 04:18:40 +0000 ROA not before: Thu 01 Jan 2026 04:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204357 IP address blocks: 188.164.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7a:1d:d9:76:06:71:9a:fa:bb:01:ea:df:75:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88ca19333921106d205261dbcf0d937ac80e0a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:b6:99:82:fc:0a:42:0b:58:fa:cd:7e:1a: 67:1b:ad:c9:dc:8c:42:ad:ee:9f:09:45:00:cb:ef: 81:f4:10:d4:3e:24:0a:49:af:d5:30:94:c7:5f:13: b5:72:7a:0b:dd:ba:88:a9:71:ae:cd:c5:42:29:cd: 2e:89:2e:e6:4e:87:80:2a:dc:0c:21:08:8e:cb:49: 67:aa:ec:7e:bd:77:1c:1e:c7:36:59:a7:44:1a:cb: c7:4b:af:4c:56:5c:f0:d3:cd:56:cd:3f:c6:e9:e4: 6f:0d:82:ff:72:c5:3e:30:2a:70:fe:19:84:fd:9f: ac:92:62:3b:02:f7:c5:5b:c7:d3:fc:6e:bb:3e:ac: 29:fe:4f:e8:6f:24:ce:31:10:f8:bd:c4:ba:12:43: df:04:ec:c2:74:7d:5d:20:fe:93:22:f2:32:e5:e4: e9:01:02:c3:ab:3a:b6:66:92:50:cc:53:21:1f:dc: b1:fc:c0:6c:b4:2a:7a:6f:59:09:81:81:a7:6c:b1: 33:c9:b5:17:cb:ca:ac:43:e6:4e:01:e0:af:46:32: bd:66:a1:53:62:81:d0:ae:86:1e:bb:fb:9f:68:9a: 78:04:ce:20:96:94:b7:f9:b3:bb:56:2e:92:95:51: bb:01:67:dc:4a:90:05:86:4a:99:40:c8:ce:2d:b7: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CA:19:33:39:21:10:6D:20:52:61:DB:CF:0D:93:7A:C8:0E:0A:4F X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/iMoZMzkhEG0gUmHbzw2TesgOCk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.164.211.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:d1:5d:30:2e:15:c5:fd:d6:73:f0:5c:5e:e0:a1:44:e6:d0: bd:f0:dd:9a:84:c0:e8:00:58:a7:19:c2:75:01:a7:19:80:9d: 21:fe:0d:de:c2:fe:7b:2f:4f:ec:a3:ff:4e:38:1a:31:a4:23: 9e:c4:78:9c:d4:eb:34:df:01:96:ce:d2:d6:dc:75:34:db:1c: 53:1f:c8:b5:15:89:a8:cd:91:f6:20:af:2b:4a:cd:bb:80:bd: d9:4c:d6:61:26:81:bc:d3:79:b4:43:7f:3e:c8:7f:18:f7:f1: 61:bb:57:ce:27:16:ba:a9:67:f7:bb:5c:2e:09:db:62:cd:e2: e6:06:96:39:cb:e3:ac:89:f8:40:a6:b0:6f:ca:d1:21:1a:b1: c4:de:c4:da:c1:55:60:e8:33:40:03:a6:c0:db:94:24:68:7d: b8:de:58:6f:08:f2:c2:54:9e:e3:1a:b9:e6:5f:33:8a:71:04: 4a:0f:35:c2:be:5a:1a:1f:06:dc:c6:d2:26:ce:d0:8b:c3:41: 10:c2:79:34:69:3c:89:99:79:4a:34:96:9e:be:df:40:5d:e2: 83:a0:03:44:13:72:e2:28:0b:9c:4e:e6:eb:97:3d:7b:63:b4: 2a:ee:b2:10:f8:d3:e2:35:5c:13:d7:f8:8e:7a:da:c1:08:77: 89:53:d0:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3od2XYGcZr6uwHq33UqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGNhMTkzMzM5MjExMDZkMjA1MjYxZGJjZjBkOTM3YWM4MGUwYTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNm2mYL8CkILWPrNfhpnG63J3IxC re6fCUUAy++B9BDUPiQKSa/VMJTHXxO1cnoL3bqIqXGuzcVCKc0uiS7mToeAKtwM IQiOy0lnqux+vXccHsc2WadEGsvHS69MVlzw081WzT/G6eRvDYL/csU+MCpw/hmE /Z+skmI7AvfFW8fT/G67Pqwp/k/obyTOMRD4vcS6EkPfBOzCdH1dIP6TIvIy5eTp AQLDqzq2ZpJQzFMhH9yx/MBstCp6b1kJgYGnbLEzybUXy8qsQ+ZOAeCvRjK9ZqFT YoHQroYeu/ufaJp4BM4glpS3+bO7Vi6SlVG7AWfcSpAFhkqZQMjOLbezjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjKGTM5IRBtIFJh288Nk3rIDgpPMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvaU1vWk16a2hFRzBnVW1IYnp3MlRlc2dPQ2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvKTTMA0G CSqGSIb3DQEBCwUAA4IBAQBN0V0wLhXF/dZz8Fxe4KFE5tC98N2ahMDoAFinGcJ1 AacZgJ0h/g3ewv57L0/so/9OOBoxpCOexHic1Os03wGWztLW3HU02xxTH8i1FYmo zZH2IK8rSs27gL3ZTNZhJoG803m0Q38+yH8Y9/Fhu1fOJxa6qWf3u1wuCdtizeLm BpY5y+OsifhAprBvytEhGrHE3sTawVVg6DNAA6bA25QkaH243lhvCPLCVJ7jGrnm XzOKcQRKDzXCvloaHwbcxtImztCLw0EQwnk0aTyJmXlKNJaevt9AXeKDoANEE3Li KAucTubrlz17Y7Qq7rIQ+NPiNVwT1/iOetrBCHeJU9Al -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:48 2026 by rpki-client