This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa File: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (raw, json) Hash identifier: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8= Subject key identifier: 89:CD:3C:67:2D:AD:A7:91:2B:3B:87:C2:52:D7:0B:63:3A:09:EC:70 Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c Certificate serial: 019B7D5C10A7BC512AF921285388C43AE59A Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa Signing time: Fri 02 Jan 2026 06:19:04 +0000 ROA not before: Fri 02 Jan 2026 06:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21396 IP address blocks: 5.182.220.0/22 maxlen: 24 5.182.220.0/24 maxlen: 24 80.249.96.0/20 maxlen: 24 141.0.208.0/20 maxlen: 24 2a02:68::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:10:a7:bc:51:2a:f9:21:28:53:88:c4:3a:e5:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c Validity Not Before: Jan 2 06:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89cd3c672dada7912b3b87c252d70b633a09ec70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:fe:83:b4:76:29:dd:6b:12:ec:27:db:c7: c5:e7:c8:5f:ee:85:b5:54:74:85:d7:fe:43:19:6e: 23:76:25:78:d7:30:7b:04:d8:f9:25:8f:f4:be:82: ff:b0:bf:a6:53:c0:fe:06:e8:f3:f5:37:84:eb:00: 90:57:1f:39:da:5a:e3:5a:99:b9:5c:be:95:d6:b8: f4:08:35:d3:28:0b:48:99:de:a4:25:91:d9:1c:bf: 6c:6f:d2:5e:3d:5e:80:f7:f2:d0:3b:e5:75:59:79: 50:87:7b:ee:db:77:ee:25:57:32:44:d5:f4:f4:2c: 16:c5:d4:01:f5:49:8d:c8:52:5f:48:50:23:97:74: 19:ec:aa:92:84:2c:f6:dd:87:a3:d6:93:e1:ce:60: a1:dd:58:94:4c:1a:8b:a9:a7:50:f5:5c:23:a6:d1: ae:cf:55:f4:75:71:9f:de:35:51:f8:4f:37:7a:71: 52:16:6c:03:92:cf:5a:2c:d4:1f:67:cf:a5:1d:d3: 4f:ee:63:1a:36:0f:43:fc:1a:02:49:ac:b1:f4:5f: 15:7c:6e:7a:93:5d:87:c8:17:b4:18:d4:c3:89:b1: 23:a6:b9:dd:01:4f:aa:94:55:34:4f:d5:1f:3c:cf: bc:be:19:43:35:4d:91:27:c5:be:93:dd:f1:c0:77: 55:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CD:3C:67:2D:AD:A7:91:2B:3B:87:C2:52:D7:0B:63:3A:09:EC:70 X509v3 Authority Key Identifier: keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.220.0/22 80.249.96.0/20 141.0.208.0/20 IPv6: 2a02:68::/29 Signature Algorithm: sha256WithRSAEncryption a6:ff:9a:5f:c0:ba:a3:9e:c5:91:e8:bd:40:22:f1:65:9b:2f: 56:55:ca:45:ec:85:d6:4d:a7:30:7c:22:4f:0b:30:8a:20:6e: 87:02:7b:85:4f:ab:f1:51:23:a6:2d:1b:46:a7:63:bb:c7:c0: 12:ea:01:1c:b6:c9:4e:06:b8:7a:80:75:b7:20:e4:d3:b9:5c: a3:7a:0d:6c:b2:a3:f4:92:13:0d:22:e6:42:50:7f:66:2d:50: d2:bc:24:9f:60:5d:64:b1:fe:65:87:1e:ee:98:1c:43:4f:e2: e3:90:89:da:d3:f6:d1:c6:bb:da:72:d7:6a:8b:66:87:0c:8e: f1:b5:df:9f:ea:17:07:9a:d3:2b:dd:55:ad:d2:b0:14:12:c1: 81:0e:7e:51:7f:f0:69:91:41:2e:71:6e:ef:2c:48:e1:f9:5e: 19:60:6f:ff:25:12:ae:18:c5:40:d7:5f:00:ec:63:c4:84:5e: 3d:16:e2:b2:d4:47:7c:d2:c8:61:d8:5b:d4:9a:1f:a9:c3:4b: c5:67:29:b4:83:c7:54:0d:69:98:b9:8d:4f:1c:83:22:02:25: 83:9e:cb:fa:60:79:d9:36:64:4c:ac:34:e0:1e:a9:dd:83:19: a7:b6:dd:a6:1b:07:f7:31:61:38:2b:10:0d:23:68:8f:29:8f: 28:b2:41:c3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XBCnvFEq+SEoU4jEOuWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5 NGU0OWMwHhcNMjYwMTAyMDYxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWNkM2M2NzJkYWRhNzkxMmIzYjg3YzI1MmQ3MGI2MzNhMDllYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri3+g7R2Kd1rEuwn28fF58hf7oW1 VHSF1/5DGW4jdiV41zB7BNj5JY/0voL/sL+mU8D+Bujz9TeE6wCQVx852lrjWpm5 XL6V1rj0CDXTKAtImd6kJZHZHL9sb9JePV6A9/LQO+V1WXlQh3vu23fuJVcyRNX0 9CwWxdQB9UmNyFJfSFAjl3QZ7KqShCz23Yej1pPhzmCh3ViUTBqLqadQ9VwjptGu z1X0dXGf3jVR+E83enFSFmwDks9aLNQfZ8+lHdNP7mMaNg9D/BoCSayx9F8VfG56 k12HyBe0GNTDibEjprndAU+qlFU0T9UfPM+8vhlDNU2RJ8W+k93xwHdVDwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFInNPGctraeRKzuHwlLXC2M6CexwMB8GA1UdIwQY MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt NTYwOTRmZDZjYzZjLzEvaWMwOFp5MnRwNUVyTzRmQ1V0Y0xZem9KN0hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBbbcAwQE UPlgAwQEjQDQMA0EAgACMAcDBQMqAgBoMA0GCSqGSIb3DQEBCwUAA4IBAQCm/5pf wLqjnsWR6L1AIvFlmy9WVcpF7IXWTacwfCJPCzCKIG6HAnuFT6vxUSOmLRtGp2O7 x8AS6gEctslOBrh6gHW3IOTTuVyjeg1ssqP0khMNIuZCUH9mLVDSvCSfYF1ksf5l hx7umBxDT+LjkIna0/bRxrvactdqi2aHDI7xtd+f6hcHmtMr3VWt0rAUEsGBDn5R f/BpkUEucW7vLEjh+V4ZYG//JRKuGMVA118A7GPEhF49FuKy1Ed80shh2FvUmh+p w0vFZym0g8dUDWmYuY1PHIMiAiWDnsv6YHnZNmRMrDTgHqndgxmntt2mGwf3MWE4 KxANI2iPKY8oskHD -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:52 2026 by rpki-client