This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/IfGCpj85Q4o-UGyQ31NliYn-gNM.roa File: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (raw, json) Hash identifier: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU= Subject key identifier: 21:F1:82:A6:3F:39:43:8A:3E:50:6C:90:DF:53:65:89:89:FE:80:D3 Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Certificate serial: 019B7BA4762FF9F3EB8352D6C456B073628E Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/IfGCpj85Q4o-UGyQ31NliYn-gNM.roa Signing time: Thu 01 Jan 2026 22:18:54 +0000 ROA not before: Thu 01 Jan 2026 22:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216235 IP address blocks: 176.10.93.0/24 maxlen: 24 2a13:f3c0::/48 maxlen: 48 2a13:f3c0:1::/48 maxlen: 48 2a13:f3c0:2::/48 maxlen: 48 2a13:f3c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:76:2f:f9:f3:eb:83:52:d6:c4:56:b0:73:62:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Validity Not Before: Jan 1 22:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21f182a63f39438a3e506c90df53658989fe80d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:82:bf:df:fb:4f:f2:05:5f:b6:51:38:00:ca: b6:d7:20:ab:d1:26:06:f2:74:d5:62:4b:bc:2e:62: 09:62:6f:81:93:9e:e6:0b:3e:c1:91:89:26:e6:62: cb:97:e2:30:83:ef:c1:ee:7b:98:ba:7c:d3:a5:7e: 8a:59:6e:ea:ec:5b:a1:79:8f:23:16:49:70:a6:e9: fd:e4:da:99:f6:e2:5b:92:e5:65:c3:3f:58:50:81: ef:79:cc:3d:38:52:c8:77:54:8c:4c:40:80:f9:7c: 7c:ca:59:be:c2:b3:8b:78:44:7b:58:40:62:12:c3: 3d:72:43:b0:be:eb:a4:10:54:d3:f0:29:ee:b3:b7: d0:0a:6e:83:34:73:28:a8:d0:5b:a8:0c:ee:8b:a0: dd:3e:7c:99:1e:80:d6:5f:f2:29:b2:27:88:9d:27: b2:3d:ff:fe:cc:b5:fa:19:06:45:dc:61:a6:9a:ce: 1c:78:df:c4:52:c4:7c:95:49:7d:81:be:26:2f:62: 0e:ca:ab:e6:1d:1b:52:75:c4:93:e9:ee:32:86:2b: 6f:e8:0d:11:cb:86:05:1a:98:a3:a2:9a:d9:d5:7d: 60:02:ed:fc:b3:db:79:99:e5:8b:01:42:c3:22:87: fb:68:b2:3c:60:53:68:a0:e3:72:b6:7a:14:33:9a: 68:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F1:82:A6:3F:39:43:8A:3E:50:6C:90:DF:53:65:89:89:FE:80:D3 X509v3 Authority Key Identifier: keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/IfGCpj85Q4o-UGyQ31NliYn-gNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.10.93.0/24 IPv6: 2a13:f3c0::-2a13:f3c0:2:ffff:ffff:ffff:ffff:ffff 2a13:f3c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 3b:3c:6c:6a:78:50:83:ee:5b:3a:21:05:4b:33:28:f1:49:00: 04:b9:5c:44:a3:b2:ff:61:99:6a:c7:79:dc:a2:ae:69:98:1f: 88:c2:f0:da:75:0e:d8:1c:54:9c:0c:43:1b:d5:c6:d4:19:55: 75:28:a5:ea:6e:4f:ae:e0:3a:1c:28:b1:8e:91:9d:d4:5a:c4: 2c:3b:7b:e3:cb:d4:3c:04:80:9a:21:1a:64:c8:b5:7b:a0:a6: 51:07:dd:38:b1:42:fc:b0:ae:73:3b:bc:90:29:5a:49:67:1f: 46:d4:7c:4a:40:85:1e:f1:af:8b:9f:72:9d:2a:ad:85:89:15: c6:10:74:f9:9c:5f:ac:bc:7f:30:7e:86:f8:7e:a1:1f:1e:e8: 6b:b0:58:d4:1e:7d:56:a7:1b:de:d1:eb:e3:1e:b0:d5:c7:1a: a5:67:c6:13:b7:8e:88:2c:73:f5:c9:98:54:7f:62:1b:90:c7: 3a:6b:c7:cb:12:91:e1:44:28:ef:54:02:9f:fb:dd:dd:91:d2: 0f:7f:2c:ae:35:cf:af:d7:6e:49:87:92:fa:79:f5:e4:2c:cd: cb:83:97:05:66:8a:88:93:c6:f5:ad:5d:85:8f:35:d7:29:4e: ac:67:cd:e9:db:1a:28:0b:ef:60:6f:e5:f8:b1:42:13:d4:d0: 7c:eb:31:60 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7pHYv+fPrg1LWxFawc2KOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh NGI4YTcwHhcNMjYwMTAxMjIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWYxODJhNjNmMzk0MzhhM2U1MDZjOTBkZjUzNjU4OTg5ZmU4MGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IK/3/tP8gVftlE4AMq21yCr0SYG 8nTVYku8LmIJYm+Bk57mCz7BkYkm5mLLl+Iwg+/B7nuYunzTpX6KWW7q7FuheY8j Fklwpun95NqZ9uJbkuVlwz9YUIHvecw9OFLId1SMTECA+Xx8ylm+wrOLeER7WEBi EsM9ckOwvuukEFTT8Cnus7fQCm6DNHMoqNBbqAzui6DdPnyZHoDWX/IpsieInSey Pf/+zLX6GQZF3GGmms4ceN/EUsR8lUl9gb4mL2IOyqvmHRtSdcST6e4yhitv6A0R y4YFGpijoprZ1X1gAu38s9t5meWLAULDIof7aLI8YFNooONytnoUM5posQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFCHxgqY/OUOKPlBskN9TZYmJ/oDTMB8GA1UdIwQY MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt NGJlMTI3ZmEzMTE4LzEvSWZHQ3BqODVRNG8tVUd5UTMxTmxpWW4tZ05NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4 LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQAsApdMCEE AgACMBswEAMFBioT88ADBwAqE/PAAAIDBwAqE/PAAAQwDQYJKoZIhvcNAQELBQAD ggEBADs8bGp4UIPuWzohBUszKPFJAAS5XESjsv9hmWrHedyirmmYH4jC8Np1Dtgc VJwMQxvVxtQZVXUopepuT67gOhwosY6RndRaxCw7e+PL1DwEgJohGmTItXugplEH 3TixQvywrnM7vJApWklnH0bUfEpAhR7xr4ufcp0qrYWJFcYQdPmcX6y8fzB+hvh+ oR8e6GuwWNQefVanG97R6+MesNXHGqVnxhO3jogsc/XJmFR/YhuQxzprx8sSkeFE KO9UAp/73d2R0g9/LK41z6/XbkmHkvp59eQszcuDlwVmioiTxvWtXYWPNdcpTqxn zenbGigL72Bv5fixQhPU0HzrMWA= -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:26 2026 by rpki-client