This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/ielQr4EC94tydWptb7Zy7oQJTlg.roa File: ielQr4EC94tydWptb7Zy7oQJTlg.roa (raw, json) Hash identifier: IK1qVKo+95L3ssLme0pcM7macPsa/yBGCJukgetUuXk= Subject key identifier: 89:E9:50:AF:81:02:F7:8B:72:75:6A:6D:6F:B6:72:EE:84:09:4E:58 Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53 Certificate serial: 019B7A5B19A040D713DE5A49B97BFA10E6EB Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/ielQr4EC94tydWptb7Zy7oQJTlg.roa Signing time: Thu 01 Jan 2026 16:19:09 +0000 ROA not before: Thu 01 Jan 2026 16:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212552 IP address blocks: 185.202.113.0/24 maxlen: 24 195.248.240.0/24 maxlen: 24 195.248.241.0/24 maxlen: 24 195.248.242.0/24 maxlen: 24 195.248.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:19:a0:40:d7:13:de:5a:49:b9:7b:fa:10:e6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53 Validity Not Before: Jan 1 16:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89e950af8102f78b72756a6d6fb672ee84094e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3e:ca:c1:49:7b:54:48:80:ad:83:ce:3b:75: 15:89:95:d4:d4:3b:2c:bd:ea:cf:59:ea:78:9a:ef: 98:77:88:43:50:9a:c6:5e:7e:27:33:57:b9:79:ec: 46:b8:9f:3d:78:9b:b7:38:a3:33:1f:d0:53:00:ae: 4d:03:a0:a4:3d:46:92:e6:b0:1b:4c:88:5c:83:52: 13:7d:e4:03:2d:4d:ed:ee:f1:b0:ad:ea:53:ae:17: 92:cd:04:9b:b2:68:b7:f6:60:52:d6:8a:ab:58:d2: 65:9d:eb:d2:a3:73:53:ce:49:68:cb:9b:ad:a6:0b: 62:87:f0:c5:67:5b:73:a1:cc:e2:c1:39:62:68:fc: a4:46:56:fe:37:6d:d4:64:29:02:b8:c9:ef:62:17: 1c:de:17:85:70:3d:e7:5b:fb:a9:45:13:23:3e:c4: e7:c7:33:4a:d2:9b:df:9a:03:e5:74:a0:5c:0e:e3: bd:13:ea:a4:39:9e:75:25:f7:38:bd:ce:3e:3f:ee: c5:08:f0:ff:f3:49:16:fe:b2:c5:6e:75:24:c4:73: d2:15:b6:b7:b5:08:a8:72:8e:ba:18:23:4d:5d:2a: 60:2a:93:7a:b4:bd:30:3f:17:2f:a2:b3:22:13:99: 0f:96:cf:ad:55:f9:92:31:57:e8:d7:fa:da:6e:d4: b0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E9:50:AF:81:02:F7:8B:72:75:6A:6D:6F:B6:72:EE:84:09:4E:58 X509v3 Authority Key Identifier: keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/ielQr4EC94tydWptb7Zy7oQJTlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.113.0/24 195.248.240.0/22 Signature Algorithm: sha256WithRSAEncryption 37:e8:5f:cd:7d:79:ca:22:0e:60:32:77:d6:58:ff:79:46:37: 82:57:4b:83:e4:c8:ef:fd:fd:87:ae:b9:95:6f:6a:6c:f2:0d: 2c:9d:6d:d8:ad:51:1a:6d:9b:3c:23:82:2f:19:c4:e9:d1:1b: 4d:af:e2:8d:95:cb:bd:ea:5f:14:05:1c:fc:3e:71:5b:30:3f: f5:fc:fd:0b:be:c8:6c:86:cd:30:b5:e2:59:84:dd:4c:aa:9e: 2c:27:4e:06:0d:5c:a6:d1:ec:10:8b:61:0c:d3:ff:bc:00:61: 4f:f3:74:5b:a2:da:e4:85:58:de:c8:14:c2:eb:a2:47:10:46: f8:38:9a:c7:2b:fd:0c:f9:b4:45:04:e4:f8:94:90:25:e3:3e: 70:45:92:d1:46:e8:17:50:06:7e:0e:ec:e6:62:72:3f:4e:88: 1e:73:c5:96:e2:c5:61:06:6a:83:28:da:62:51:ac:f6:fb:3c: 26:65:42:bb:c0:fe:d7:67:46:6f:54:02:d9:ad:9e:c6:4a:78: ed:74:a2:da:38:18:fd:c4:de:44:31:f4:b1:89:a9:c4:ae:74: 34:24:bf:19:11:4c:3f:08:c0:f9:76:b5:cc:b5:09:ff:46:19: 70:0b:df:01:e0:9e:9c:8a:ca:90:61:68:91:0b:5b:c9:00:af: e5:ed:9e:14 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WxmgQNcT3lpJuXv6EObrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZjExNTQyNGMxODFjNjc5NjZjY2MyNDY3ZWRlNjlkMDYw Y2NmNTMwHhcNMjYwMTAxMTYxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWU5NTBhZjgxMDJmNzhiNzI3NTZhNmQ2ZmI2NzJlZTg0MDk0ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D7KwUl7VEiArYPOO3UViZXU1Dss verPWep4mu+Yd4hDUJrGXn4nM1e5eexGuJ89eJu3OKMzH9BTAK5NA6CkPUaS5rAb TIhcg1ITfeQDLU3t7vGwrepTrheSzQSbsmi39mBS1oqrWNJlnevSo3NTzkloy5ut pgtih/DFZ1tzocziwTliaPykRlb+N23UZCkCuMnvYhcc3heFcD3nW/upRRMjPsTn xzNK0pvfmgPldKBcDuO9E+qkOZ51Jfc4vc4+P+7FCPD/80kW/rLFbnUkxHPSFba3 tQioco66GCNNXSpgKpN6tL0wPxcvorMiE5kPls+tVfmSMVfo1/rabtSw9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFInpUK+BAveLcnVqbW+2cu6ECU5YMB8GA1UdIwQY MBaAFLTxFUJMGBxnlmzMJGft5p0GDM9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2Ut MzJlOTMyZDZmZDBlLzEvaWVsUXI0RUM5NHR5ZFdwdGI3Wnk3b1FKVGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS84NjkyMTQtMTZkNC00NWUwLWI4N2UtMzJlOTMyZDZmZDBl LzEvdFBFVlFrd1lIR2VXYk13a1otM21uUVlNejFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAucpxAwQC w/jwMA0GCSqGSIb3DQEBCwUAA4IBAQA36F/NfXnKIg5gMnfWWP95RjeCV0uD5Mjv /f2HrrmVb2ps8g0snW3YrVEabZs8I4IvGcTp0RtNr+KNlcu96l8UBRz8PnFbMD/1 /P0Lvshshs0wteJZhN1Mqp4sJ04GDVym0ewQi2EM0/+8AGFP83RbotrkhVjeyBTC 66JHEEb4OJrHK/0M+bRFBOT4lJAl4z5wRZLRRugXUAZ+DuzmYnI/Togec8WW4sVh BmqDKNpiUaz2+zwmZUK7wP7XZ0ZvVALZrZ7GSnjtdKLaOBj9xN5EMfSxianErnQ0 JL8ZEUw/CMD5drXMtQn/RhlwC98B4J6cisqQYWiRC1vJAK/l7Z4U -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:40 2026 by rpki-client