This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa File: Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa (raw, json) Hash identifier: DJFlUJTizA9NLrEk8PUMB7MGXkecQxJA+XnDIeJTTP0= Subject key identifier: 22:BE:1F:4F:EC:2D:BB:79:33:17:94:0D:19:34:E4:90:C9:B4:67:BE Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B7AC7E40C2D2E80709AED25F41563FFAF Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50352 IP address blocks: 185.94.80.0/23 maxlen: 23 185.94.82.0/24 maxlen: 24 193.42.157.0/24 maxlen: 24 2a05:bf81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e4:0c:2d:2e:80:70:9a:ed:25:f4:15:63:ff:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22be1f4fec2dbb793317940d1934e490c9b467be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:94:62:40:ae:8f:8a:8a:d4:d8:ba:26:5c:9b: 11:14:2a:70:21:3e:b3:fc:ef:45:f2:01:28:b7:f8: b1:e0:6b:9d:f2:1f:ad:58:49:d6:b6:4c:dd:68:86: 49:6f:11:a7:5f:68:53:d9:ce:e9:5a:89:36:f7:e4: 29:44:dd:55:64:cc:10:c3:bc:50:80:74:0f:e3:01: 52:2b:ee:51:33:a7:65:0c:bc:9c:42:7f:e2:c6:15: bb:a3:99:05:9f:89:45:af:6d:2c:3e:09:c4:ec:c4: 21:40:9d:9e:52:78:0c:c0:60:30:25:e6:12:76:37: b1:73:6c:b7:0e:44:10:e6:b4:48:5e:01:02:19:4d: 96:6b:56:e5:84:22:c2:5e:93:86:43:5e:1e:f7:e0: b3:db:14:86:6d:53:88:d9:4d:6e:7f:1e:05:ab:52: 5c:a0:ef:87:d1:3b:02:50:dc:ee:28:27:f1:44:24: a4:08:20:86:6f:04:ea:f1:36:87:dc:e9:ee:e3:c2: 65:ab:22:76:5e:ad:a5:6c:b6:8c:c6:63:fb:6c:66: 4e:e3:7b:07:4e:6e:ff:12:08:1d:fc:95:c4:2c:3f: 99:d1:3d:72:90:23:22:57:d5:58:38:6e:07:20:85: aa:11:32:a5:fc:f0:67:d9:bb:9f:d9:0c:25:49:f8: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:1F:4F:EC:2D:BB:79:33:17:94:0D:19:34:E4:90:C9:B4:67:BE X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/Ir4fT-wtu3kzF5QNGTTkkMm0Z74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.80.0-185.94.82.255 193.42.157.0/24 IPv6: 2a05:bf81::/32 Signature Algorithm: sha256WithRSAEncryption 56:16:23:ce:39:3e:e8:bb:ad:05:fe:44:c9:7e:7b:94:b1:8a: 79:23:56:d5:82:b9:65:e8:d8:e0:58:56:ee:ff:32:f6:52:f4: bd:95:4d:8d:f9:90:09:9e:f3:1c:c8:c9:84:f1:ef:8a:19:d1: 27:84:b3:b3:b5:68:fd:40:39:b2:9d:67:3b:92:36:36:ba:62: 23:80:0f:60:55:c9:7a:c3:5d:07:63:66:fa:0f:37:d0:dc:84: 77:7f:b7:f4:a2:e3:d6:04:8f:26:95:d6:10:77:87:f4:e8:c3: 8a:ae:e5:72:33:5c:98:d0:82:1e:20:27:07:e7:4e:9f:ae:78: f1:e2:62:fd:1c:b3:0e:82:95:f6:1f:9a:6a:15:a3:2b:8d:e1: 86:bf:b4:7d:1c:f0:b6:0b:7f:db:c3:9b:51:6e:c0:8b:34:92: 0f:45:3d:72:ba:e1:a6:f2:4d:76:1f:1a:b3:0a:9b:00:d7:6f: 7a:d3:51:13:2c:11:2d:ff:7f:40:4e:0d:f4:d4:20:bb:12:20: 99:72:d1:59:84:80:f9:72:51:1c:51:34:bf:86:31:af:66:e2: d8:a3:7e:1a:27:c2:a1:81:ce:aa:f2:25:ad:84:f9:32:67:13: 88:99:f4:8a:61:97:7b:08:ab:8d:60:79:35:d0:d7:62:4a:85: d5:b3:d4:86 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6x+QMLS6AcJrtJfQVY/+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJlMWY0ZmVjMmRiYjc5MzMxNzk0MGQxOTM0ZTQ5MGM5YjQ2N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JRiQK6PiorU2LomXJsRFCpwIT6z /O9F8gEot/ix4Gud8h+tWEnWtkzdaIZJbxGnX2hT2c7pWok29+QpRN1VZMwQw7xQ gHQP4wFSK+5RM6dlDLycQn/ixhW7o5kFn4lFr20sPgnE7MQhQJ2eUngMwGAwJeYS djexc2y3DkQQ5rRIXgECGU2Wa1blhCLCXpOGQ14e9+Cz2xSGbVOI2U1ufx4Fq1Jc oO+H0TsCUNzuKCfxRCSkCCCGbwTq8TaH3Onu48JlqyJ2Xq2lbLaMxmP7bGZO43sH Tm7/Eggd/JXELD+Z0T1ykCMiV9VYOG4HIIWqETKl/PBn2buf2QwlSfgepQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCK+H0/sLbt5MxeUDRk05JDJtGe+MB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvSXI0ZlQtd3R1M2t6RjVRTkdUVGtrTW0wWjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAS5XlAD BAC5XlIDBADBKp0wDQQCAAIwBwMFACoFv4EwDQYJKoZIhvcNAQELBQADggEBAFYW I845Pui7rQX+RMl+e5SxinkjVtWCuWXo2OBYVu7/MvZS9L2VTY35kAme8xzIyYTx 74oZ0SeEs7O1aP1AObKdZzuSNja6YiOAD2BVyXrDXQdjZvoPN9DchHd/t/Si49YE jyaV1hB3h/Tow4qu5XIzXJjQgh4gJwfnTp+uePHiYv0csw6ClfYfmmoVoyuN4Ya/ tH0c8LYLf9vDm1FuwIs0kg9FPXK64abyTXYfGrMKmwDXb3rTURMsES3/f0BODfTU ILsSIJly0VmEgPlyURxRNL+GMa9m4tijfhonwqGBzqryJa2E+TJnE4iZ9Iphl3sI q41geTXQ12JKhdWz1IY= -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:42 2026 by rpki-client