This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/I9_8ex5RLgU9zB0YLgF9xqOG47g.roa
File: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (raw, json)
Hash identifier: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=
Subject key identifier: 23:DF:FC:7B:1E:51:2E:05:3D:CC:1D:18:2E:01:7D:C6:A3:86:E3:B8
Certificate issuer: /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial: 019B7C8034FFAA66A2D7B653F8478CE8505C
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/I9_8ex5RLgU9zB0YLgF9xqOG47g.roa
Signing time: Fri 02 Jan 2026 02:18:55 +0000
ROA not before: Fri 02 Jan 2026 02:18:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1103
IP address blocks: 194.26.8.0/22 maxlen: 24
194.26.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:34:ff:aa:66:a2:d7:b6:53:f8:47:8c:e8:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Validity
Not Before: Jan 2 02:18:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23dffc7b1e512e053dcc1d182e017dc6a386e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:58:ac:1e:00:f8:b8:6c:73:cc:12:2c:c8:77:
0e:5e:65:5c:f4:11:e3:34:d9:25:1e:7e:a5:bb:6d:
09:90:9a:86:a2:77:d3:a0:ce:78:01:43:36:a1:99:
81:9e:61:44:c7:f3:d6:5c:f1:3b:97:ea:de:57:04:
37:c8:f9:a9:17:8a:b0:b2:13:36:46:bc:20:5f:f2:
bd:6d:33:68:ab:f7:57:35:ae:35:5b:47:18:f0:b1:
5a:fb:97:86:5c:43:31:2d:f9:99:a5:c1:bd:24:cc:
35:09:bb:af:f3:7f:11:8d:cc:4c:a9:4a:01:9d:4a:
6e:ac:9f:48:d6:77:f8:b4:ba:59:e7:a9:12:ca:47:
be:23:09:71:18:fe:88:83:36:65:a3:e6:cd:e7:5e:
c7:ad:84:80:64:c6:e8:e6:72:2b:ad:d5:87:a3:65:
e7:bc:61:f6:15:de:a3:b8:50:28:50:f7:79:85:5b:
0f:70:a0:04:45:02:23:16:d1:da:b9:16:35:bb:cd:
90:eb:09:95:ce:a3:8d:17:28:6d:29:2d:59:a8:17:
4a:33:0d:f5:7f:98:0a:93:21:e9:8f:e8:69:4f:d6:
70:b4:82:6e:fe:52:f8:d5:2e:27:bb:42:a0:b1:e3:
f0:6b:2a:46:d8:bf:64:ec:a3:c9:37:27:d0:8b:fd:
f8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DF:FC:7B:1E:51:2E:05:3D:CC:1D:18:2E:01:7D:C6:A3:86:E3:B8
X509v3 Authority Key Identifier:
keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/I9_8ex5RLgU9zB0YLgF9xqOG47g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.8.0/21
Signature Algorithm: sha256WithRSAEncryption
68:84:01:4d:37:b2:3e:c1:6c:60:c6:ad:ec:56:06:22:a6:63:
b7:68:a9:65:05:e6:f3:b2:7a:d6:37:5d:5b:85:a6:bc:55:e8:
5d:d9:36:66:84:e1:35:38:8c:c5:ce:b7:17:51:29:66:c3:73:
81:f6:1e:98:02:8a:11:f9:21:f5:82:e0:0e:4a:c3:ab:b7:bd:
bd:58:d9:94:93:ea:c2:22:a6:35:ec:8a:0b:9b:38:38:d7:4c:
55:e3:79:7b:7a:75:61:72:07:b8:1c:ac:a1:bd:84:75:75:57:
43:5c:df:15:d4:c9:ee:df:64:e6:ae:17:60:e6:21:8b:dc:23:
40:86:80:9f:7a:7b:10:a7:04:a6:59:c3:1f:4c:10:9c:59:a4:
ac:dd:ac:58:e6:86:44:11:f2:83:91:05:1b:0d:c7:0b:7f:90:
3c:5c:bf:cf:3b:61:36:58:a1:cf:96:76:44:14:50:22:74:43:
94:d7:d0:e9:ee:5d:48:03:2b:17:2c:4f:d8:71:7f:fd:87:3b:
59:27:6b:c4:41:85:07:d0:40:6c:53:73:7d:1d:6c:67:df:93:
b2:a9:c3:41:6d:38:a0:f3:3e:ae:d5:7c:10:ca:be:62:42:ff:
49:3c:e9:ff:2b:77:c6:6a:4a:7c:e2:cf:8e:21:01:58:e4:ce:
dd:c8:88:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gDT/qmai17ZT+EeM6FBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj
ZjU3YzgwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2RmZmM3YjFlNTEyZTA1M2RjYzFkMTgyZTAxN2RjNmEzODZlM2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11isHgD4uGxzzBIsyHcOXmVc9BHj
NNklHn6lu20JkJqGonfToM54AUM2oZmBnmFEx/PWXPE7l+reVwQ3yPmpF4qwshM2
RrwgX/K9bTNoq/dXNa41W0cY8LFa+5eGXEMxLfmZpcG9JMw1Cbuv838RjcxMqUoB
nUpurJ9I1nf4tLpZ56kSyke+IwlxGP6IgzZlo+bN517HrYSAZMbo5nIrrdWHo2Xn
vGH2Fd6juFAoUPd5hVsPcKAERQIjFtHauRY1u82Q6wmVzqONFyhtKS1ZqBdKMw31
f5gKkyHpj+hpT9ZwtIJu/lL41S4nu0KgsePwaypG2L9k7KPJNyfQi/34lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPf/HseUS4FPcwdGC4BfcajhuO4MB8GA1UdIwQY
MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt
YjkwYTk0MWVhNTFhLzEvSTlfOGV4NVJMZ1U5ekIwWUxnRjl4cU9HNDdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh
LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwhoIMA0G
CSqGSIb3DQEBCwUAA4IBAQBohAFNN7I+wWxgxq3sVgYipmO3aKllBebzsnrWN11b
haa8Vehd2TZmhOE1OIzFzrcXUSlmw3OB9h6YAooR+SH1guAOSsOrt729WNmUk+rC
IqY17IoLmzg410xV43l7enVhcge4HKyhvYR1dVdDXN8V1Mnu32Tmrhdg5iGL3CNA
hoCfensQpwSmWcMfTBCcWaSs3axY5oZEEfKDkQUbDccLf5A8XL/PO2E2WKHPlnZE
FFAidEOU19Dp7l1IAysXLE/YcX/9hztZJ2vEQYUH0EBsU3N9HWxn35OyqcNBbTig
8z6u1XwQyr5iQv9JPOn/K3fGakp84s+OIQFY5M7dyIgI
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:03:12 2026 by rpki-client