This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/iUaiCf92bE9L1AogU_P4Ws5OIvg.roa File: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (raw, json) Hash identifier: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs= Subject key identifier: 89:46:A2:09:FF:76:6C:4F:4B:D4:0A:20:53:F3:F8:5A:CE:4E:22:F8 Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558 Certificate serial: 019B797F23B119EF101C372D72BFBC779BC2 Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/iUaiCf92bE9L1AogU_P4Ws5OIvg.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204356 IP address blocks: 185.252.100.0/24 maxlen: 24 185.252.101.0/24 maxlen: 24 185.252.102.0/24 maxlen: 24 185.252.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:23:b1:19:ef:10:1c:37:2d:72:bf:bc:77:9b:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558 Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8946a209ff766c4f4bd40a2053f3f85ace4e22f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:09:bd:67:58:01:52:4e:6d:db:76:d3:c5: ff:a4:0a:33:17:02:c6:f8:eb:3f:e4:7d:80:5e:9f: 5f:ee:a1:ba:ad:47:cf:81:44:31:7e:ba:54:ec:23: 2a:4e:b8:bd:5e:77:e3:42:06:49:0d:2f:bf:a0:d6: fb:3e:b3:e5:ab:32:55:b1:a8:57:d0:da:31:76:1b: e7:db:05:7b:c7:97:f5:98:31:fe:eb:dd:c9:a1:02: da:81:cd:c8:4a:61:29:8b:b9:dc:82:c6:de:33:f2: 99:ef:1c:4e:04:75:f1:45:8f:fb:d3:b5:9e:ba:34: 7d:00:05:d1:44:31:a9:76:61:9f:a5:54:3a:9d:77: 17:c6:35:63:25:2e:3f:7a:59:26:c8:d9:0f:e8:c2: c5:52:6a:cd:d2:ae:9c:28:9c:32:39:18:96:da:89: 5f:08:5b:81:e5:7b:cf:db:4c:97:a5:a9:96:b1:b0: df:6f:6e:19:6d:c6:e3:90:ab:61:3e:41:03:10:70: e3:8a:b3:27:d4:25:ea:9a:7e:dc:9e:f5:d8:04:27: d7:84:c3:3e:ef:b1:94:de:72:0d:4c:b5:15:4d:a8: b1:dd:03:cc:57:57:38:8e:35:b1:8b:cd:a1:78:5b: c4:7f:44:50:c3:04:22:e5:f9:5f:76:d4:ac:d2:f7: aa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:46:A2:09:FF:76:6C:4F:4B:D4:0A:20:53:F3:F8:5A:CE:4E:22:F8 X509v3 Authority Key Identifier: keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/iUaiCf92bE9L1AogU_P4Ws5OIvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.252.100.0/22 Signature Algorithm: sha256WithRSAEncryption 27:9b:35:09:c9:9f:76:24:89:bc:2e:e6:78:93:06:d8:1d:80: 36:e9:52:09:17:80:87:ec:de:77:7d:bc:b1:12:4e:f4:cc:e3: ee:db:a1:e4:2c:01:8c:9b:df:dd:79:c7:03:4b:01:36:35:23: 1a:81:ab:a3:39:33:e4:dc:fe:a2:99:d5:3b:af:07:b9:78:19: d5:6d:ae:b8:fe:4d:ea:0c:c3:6a:aa:9c:47:f9:8c:7d:a0:43: 19:10:08:1f:fe:1b:87:65:61:aa:df:12:2f:72:5c:46:11:05: db:82:53:7e:11:eb:7b:d7:c9:4a:66:6f:d4:c8:ab:4b:66:fe: 83:2f:26:a1:74:06:24:66:25:68:7a:b2:fc:d8:0e:20:ef:f7: 70:52:c7:e2:3c:73:6f:77:d9:25:61:05:3b:07:bd:e9:a5:75: 43:35:1f:51:59:47:06:bc:bb:e3:64:ba:30:d9:e8:20:2b:c8: 67:bf:5a:b5:0a:8c:0e:d3:13:0c:35:e6:b1:96:db:78:a9:40: 98:94:b7:6d:1f:ff:2f:20:8d:a5:1f:b4:af:e2:c3:24:9f:b3: ab:48:72:81:bf:00:47:af:1a:ca:45:7f:c3:27:70:70:30:dd: 97:45:89:de:07:9d:e1:c0:34:9a:6b:5b:ee:f9:fb:30:16:91: 41:87:41:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyOxGe8QHDctcr+8d5vCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGVhMmQ0YWIxMzgwZjBhM2I3ZmU3ZDRmYTc4MjhlMWM5 NDM1NTgwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTQ2YTIwOWZmNzY2YzRmNGJkNDBhMjA1M2YzZjg1YWNlNGUyMmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9YJvWdYAVJObdt208X/pAozFwLG +Os/5H2AXp9f7qG6rUfPgUQxfrpU7CMqTri9XnfjQgZJDS+/oNb7PrPlqzJVsahX 0Noxdhvn2wV7x5f1mDH+693JoQLagc3ISmEpi7ncgsbeM/KZ7xxOBHXxRY/707We ujR9AAXRRDGpdmGfpVQ6nXcXxjVjJS4/elkmyNkP6MLFUmrN0q6cKJwyORiW2olf CFuB5XvP20yXpamWsbDfb24ZbcbjkKthPkEDEHDjirMn1CXqmn7cnvXYBCfXhMM+ 77GU3nINTLUVTaix3QPMV1c4jjWxi82heFvEf0RQwwQi5flfdtSs0veqPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlGogn/dmxPS9QKIFPz+FrOTiL4MB8GA1UdIwQY MBaAFIveotSrE4Dwo7f+fU+ngo4clDVYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQt MWUzMjZkZWJhNGQwLzEvaVVhaUNmOTJiRTlMMUFvZ1VfUDRXczVPSXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jNjdkOTAtZDMwNC00ODFiLThhNjQtMWUzMjZkZWJhNGQw LzEvaTk2aTFLc1RnUENqdF81OVQ2ZUNqaHlVTlZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufxkMA0G CSqGSIb3DQEBCwUAA4IBAQAnmzUJyZ92JIm8LuZ4kwbYHYA26VIJF4CH7N53fbyx Ek70zOPu26HkLAGMm9/deccDSwE2NSMagaujOTPk3P6imdU7rwe5eBnVba64/k3q DMNqqpxH+Yx9oEMZEAgf/huHZWGq3xIvclxGEQXbglN+Eet718lKZm/UyKtLZv6D LyahdAYkZiVoerL82A4g7/dwUsfiPHNvd9klYQU7B73ppXVDNR9RWUcGvLvjZLow 2eggK8hnv1q1CowO0xMMNeaxltt4qUCYlLdtH/8vII2lH7Sv4sMkn7OrSHKBvwBH rxrKRX/DJ3BwMN2XRYneB53hwDSaa1vu+fswFpFBh0H/ -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:41 2026 by rpki-client