This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IyuNOfmUXirly0xEaKEHq8m71oY.roa File: IyuNOfmUXirly0xEaKEHq8m71oY.roa (raw, json) Hash identifier: uiMdpw1f0VdtzZapJik9ypl9f8HLQKGrIwk+Sh+eMA8= Subject key identifier: 23:2B:8D:39:F9:94:5E:2A:E5:CB:4C:44:68:A1:07:AB:C9:BB:D6:86 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2ED74FFD31F0CCEE5AB4D1C623BA5 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IyuNOfmUXirly0xEaKEHq8m71oY.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 85.237.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ed:74:ff:d3:1f:0c:ce:e5:ab:4d:1c:62:3b:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=232b8d39f9945e2ae5cb4c4468a107abc9bbd686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:e8:f0:dc:37:74:3d:4c:f8:38:24:c3:4b: 93:fd:1c:5a:a4:06:13:bc:52:d9:a3:df:69:d8:cd: 1c:70:2a:58:61:f6:6c:f8:94:11:10:1c:57:ac:74: 0f:19:f0:a9:76:13:7c:e5:f2:39:13:9e:c2:41:03: d8:f9:e5:82:d6:62:5a:4a:eb:59:cc:63:4b:9d:cc: 92:f3:a1:76:08:8e:2e:e6:b4:25:63:ad:d2:c5:3f: ff:2a:98:a5:5c:fe:fe:a2:61:24:89:07:41:22:9f: 6a:96:74:3e:89:81:e5:ba:ca:cd:3d:46:7b:96:be: 84:e0:a5:03:30:97:b8:12:03:dd:e7:6c:8e:4d:84: 79:d1:2a:65:e2:f1:58:b5:c1:8c:b5:a8:7a:06:b3: b6:28:de:2d:8a:9a:2a:90:ca:3b:6e:05:24:1c:39: 8e:c2:01:75:07:97:2e:95:24:78:3a:cb:c4:03:19: 76:81:d9:9a:27:ce:8e:fc:e4:a9:ec:72:a4:40:d8: f3:53:d3:5d:a7:7d:6e:83:24:32:71:ba:69:2c:59: fd:69:82:c1:25:34:df:e6:f2:b7:db:33:1f:3e:af: ff:f6:b5:e6:29:a8:a9:90:dc:a7:6e:cd:73:c1:4e: bb:33:78:f5:25:8f:c4:78:c6:83:3b:15:53:16:1a: b1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:2B:8D:39:F9:94:5E:2A:E5:CB:4C:44:68:A1:07:AB:C9:BB:D6:86 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IyuNOfmUXirly0xEaKEHq8m71oY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.89.0/24 Signature Algorithm: sha256WithRSAEncryption 10:2c:31:3a:5d:57:bb:2a:25:b9:71:0e:05:73:a9:35:20:5c: 99:70:9d:98:52:37:23:c4:56:f8:8d:93:83:c1:3b:ce:26:36: 1b:74:1e:45:52:60:56:52:b2:8d:db:d0:82:9e:44:98:ed:af: 8f:fc:a9:7c:50:da:cf:34:1e:45:85:a8:4d:51:07:d6:ef:b1: 3b:d9:89:47:c3:ef:ae:78:28:6c:66:a7:1e:13:e2:8d:4e:3a: 97:fe:3b:49:42:3f:5e:02:25:ea:83:42:d4:3a:99:cc:90:dd: ce:62:ac:b6:a7:0a:bc:6e:7b:68:28:9b:8a:53:b2:55:13:b2: 91:a8:4e:db:14:4c:ee:6d:59:24:e9:08:08:69:ca:f9:18:83: fa:dd:9d:24:bd:30:ad:f3:1a:1e:b5:f6:b6:1d:69:53:b9:44: 8f:e4:1c:38:68:1e:b5:7e:d5:90:04:1c:0a:98:40:19:42:88: 51:8d:a9:c3:de:62:e1:6b:91:1c:6c:74:0c:cb:16:00:87:2a: e9:2d:c2:56:39:f3:4d:00:0f:ca:d7:25:a1:22:48:b6:30:7b: b3:c1:43:cd:63:71:7b:86:a3:c8:de:38:e6:ad:74:b9:0d:02: b1:73:3f:4f:c3:32:69:07:54:77:f4:50:64:6c:23:af:82:23: 51:20:d8:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ou10/9MfDM7lq00cYjulMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzJiOGQzOWY5OTQ1ZTJhZTVjYjRjNDQ2OGExMDdhYmM5YmJkNjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe3o8Nw3dD1M+Dgkw0uT/RxapAYT vFLZo99p2M0ccCpYYfZs+JQREBxXrHQPGfCpdhN85fI5E57CQQPY+eWC1mJaSutZ zGNLncyS86F2CI4u5rQlY63SxT//KpilXP7+omEkiQdBIp9qlnQ+iYHlusrNPUZ7 lr6E4KUDMJe4EgPd52yOTYR50Spl4vFYtcGMtah6BrO2KN4tipoqkMo7bgUkHDmO wgF1B5culSR4OsvEAxl2gdmaJ86O/OSp7HKkQNjzU9Ndp31ugyQycbppLFn9aYLB JTTf5vK32zMfPq//9rXmKaipkNynbs1zwU67M3j1JY/EeMaDOxVTFhqxWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCMrjTn5lF4q5ctMRGihB6vJu9aGMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvSXl1Tk9mbVVYaXJseTB4RWFLRUhxOG03MW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1ZMA0G CSqGSIb3DQEBCwUAA4IBAQAQLDE6XVe7KiW5cQ4Fc6k1IFyZcJ2YUjcjxFb4jZOD wTvOJjYbdB5FUmBWUrKN29CCnkSY7a+P/Kl8UNrPNB5FhahNUQfW77E72YlHw++u eChsZqceE+KNTjqX/jtJQj9eAiXqg0LUOpnMkN3OYqy2pwq8bntoKJuKU7JVE7KR qE7bFEzubVkk6QgIacr5GIP63Z0kvTCt8xoetfa2HWlTuUSP5Bw4aB61ftWQBBwK mEAZQohRjanD3mLha5EcbHQMyxYAhyrpLcJWOfNNAA/K1yWhIki2MHuzwUPNY3F7 hqPI3jjmrXS5DQKxcz9PwzJpB1R39FBkbCOvgiNRINi3 -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:12 2026 by rpki-client