This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/IKecYpJsyQoCMXhzFQm8qwezc6Q.roa File: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (raw, json) Hash identifier: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo= Subject key identifier: 20:A7:9C:62:92:6C:C9:0A:02:31:78:73:15:09:BC:AB:07:B3:73:A4 Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Certificate serial: 019B7834B64EB36091D7F04F7DB8FAC53CEF Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/IKecYpJsyQoCMXhzFQm8qwezc6Q.roa Signing time: Thu 01 Jan 2026 06:17:58 +0000 ROA not before: Thu 01 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202013 IP address blocks: 185.153.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b6:4e:b3:60:91:d7:f0:4f:7d:b8:fa:c5:3c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a Validity Not Before: Jan 1 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a79c62926cc90a023178731509bcab07b373a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:30:af:37:30:2b:5d:c7:a7:bc:7c:2f:6d:9d: 1c:f4:b4:82:ca:4a:19:ef:79:3f:19:d2:27:5b:16: c8:a2:68:7f:20:05:44:d0:1d:47:61:d6:e3:46:48: 2c:0f:b0:f3:78:cd:33:7c:e5:f3:aa:21:c0:fe:fc: c2:17:dd:00:42:80:d3:06:6d:ef:89:6a:51:35:e0: d9:66:3c:c1:5b:29:80:3b:94:0e:85:18:b6:b7:c1: bf:92:9e:e9:1f:e4:f2:8a:a8:5c:30:e7:e0:ae:a3: c1:43:ba:26:27:9c:d5:98:79:8f:9e:b1:86:1b:2a: e0:d6:98:09:db:06:b3:f2:a3:9f:21:58:70:11:e0: f0:0f:c2:bd:49:e5:3c:63:6b:96:10:ea:ca:68:1c: fc:5e:ff:cd:c2:8b:e4:b1:8c:c5:3c:c5:01:42:56: 9b:34:5b:85:32:20:fa:8a:c7:36:23:1e:74:ee:5a: 4f:8e:1c:7a:fd:83:32:99:2b:01:b3:bb:0a:aa:b0: 63:e5:35:de:89:2f:7a:65:b2:c3:bb:71:86:dc:91: 09:92:87:1e:f7:d5:4f:b2:21:1c:8a:16:2a:f2:a3: de:14:a1:ca:98:43:01:42:75:e1:69:54:77:20:5a: 74:14:db:13:32:75:25:6e:9a:f3:58:22:28:b9:72: 99:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A7:9C:62:92:6C:C9:0A:02:31:78:73:15:09:BC:AB:07:B3:73:A4 X509v3 Authority Key Identifier: keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/IKecYpJsyQoCMXhzFQm8qwezc6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.153.170.0/24 Signature Algorithm: sha256WithRSAEncryption 69:00:4d:e2:f6:6e:1a:0d:56:2e:7a:d7:5c:9f:a8:67:ea:d2: f3:a9:18:f5:b3:75:08:78:cf:f2:c2:fd:e4:68:7a:22:9d:2b: ad:a1:88:66:55:a7:e6:4b:97:bc:5b:bc:3e:79:44:cb:6c:2e: ad:0c:34:86:06:71:bc:5f:8d:a7:65:0c:2d:24:da:85:42:b6: 77:a8:4f:fb:57:54:77:60:78:c2:fc:8c:b8:ca:d2:01:48:be: 17:21:a3:36:f9:f3:5c:85:53:fd:6b:d4:ec:86:30:d8:24:6b: c9:12:ff:67:27:1b:9d:69:94:45:43:43:9e:97:fc:84:38:f3: 06:b5:49:27:44:4e:fe:55:fc:33:8d:3b:1a:67:de:81:d3:b7: 86:12:75:ae:55:35:e8:72:8d:9c:ad:52:58:7a:78:51:56:8c: 56:5f:b3:42:aa:90:2a:e2:20:a6:53:65:87:92:22:a3:ef:3d: 23:d5:9d:9e:2c:a3:8b:63:bc:5f:dd:95:f0:f4:ea:48:22:dc: 90:cf:ef:db:58:69:85:78:41:da:50:b3:35:1e:6a:af:b9:26: d4:7f:26:df:b1:65:a8:34:56:84:fc:ed:fe:d5:9c:62:8b:a6: 2f:48:95:aa:74:27:8a:7b:69:9d:84:77:77:14:2a:4c:de:d0: ff:e9:d7:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NLZOs2CR1/BPfbj6xTzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj ZTVhNGEwHhcNMjYwMTAxMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGE3OWM2MjkyNmNjOTBhMDIzMTc4NzMxNTA5YmNhYjA3YjM3M2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jCvNzArXcenvHwvbZ0c9LSCykoZ 73k/GdInWxbIomh/IAVE0B1HYdbjRkgsD7DzeM0zfOXzqiHA/vzCF90AQoDTBm3v iWpRNeDZZjzBWymAO5QOhRi2t8G/kp7pH+TyiqhcMOfgrqPBQ7omJ5zVmHmPnrGG Gyrg1pgJ2waz8qOfIVhwEeDwD8K9SeU8Y2uWEOrKaBz8Xv/NwovksYzFPMUBQlab NFuFMiD6isc2Ix507lpPjhx6/YMymSsBs7sKqrBj5TXeiS96ZbLDu3GG3JEJkoce 99VPsiEcihYq8qPeFKHKmEMBQnXhaVR3IFp0FNsTMnUlbprzWCIouXKZpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCnnGKSbMkKAjF4cxUJvKsHs3OkMB8GA1UdIwQY MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct ZDQ1YWI3ZGYyZGUxLzEvSUtlY1lwSnN5UW9DTVhoekZRbThxd2V6YzZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZmqMA0G CSqGSIb3DQEBCwUAA4IBAQBpAE3i9m4aDVYuetdcn6hn6tLzqRj1s3UIeM/ywv3k aHoinSutoYhmVafmS5e8W7w+eUTLbC6tDDSGBnG8X42nZQwtJNqFQrZ3qE/7V1R3 YHjC/Iy4ytIBSL4XIaM2+fNchVP9a9TshjDYJGvJEv9nJxudaZRFQ0Oel/yEOPMG tUknRE7+VfwzjTsaZ96B07eGEnWuVTXoco2crVJYenhRVoxWX7NCqpAq4iCmU2WH kiKj7z0j1Z2eLKOLY7xf3ZXw9OpIItyQz+/bWGmFeEHaULM1HmqvuSbUfybfsWWo NFaE/O3+1Zxii6YvSJWqdCeKe2mdhHd3FCpM3tD/6dfN -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:45 2026 by rpki-client