This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/iNGJGnpRp8AcxHMxmP8wegfWCeU.roa File: iNGJGnpRp8AcxHMxmP8wegfWCeU.roa (raw, json) Hash identifier: ya12mt8QfVnZ29wP+KlJW9WEehxF6+N/fh0r/gblNNA= Subject key identifier: 88:D1:89:1A:7A:51:A7:C0:1C:C4:73:31:98:FF:30:7A:07:D6:09:E5 Certificate issuer: /CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Certificate serial: 019B7A5B8FB5C86C6F2C1E88F51A839ED098 Authority key identifier: 81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/iNGJGnpRp8AcxHMxmP8wegfWCeU.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39305 IP address blocks: 152.89.197.0/24 maxlen: 24 212.6.47.0/24 maxlen: 24 2a0e:9780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.mft rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:b5:c8:6c:6f:2c:1e:88:f5:1a:83:9e:d0:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81714b2a738ca3deae915af87c3a91c613e1bc49 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88d1891a7a51a7c01cc4733198ff307a07d609e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:59:d4:7b:28:b4:3b:b5:69:8f:ca:fc:d7:80: 76:31:7e:a8:58:35:62:88:92:42:98:0a:de:c1:fe: ca:e9:dd:44:a8:82:bc:99:6c:8f:e3:2d:77:18:84: a9:e9:24:9f:0e:80:ab:50:fe:e3:19:da:18:6e:13: c2:0e:f0:85:f1:85:5f:d3:4a:36:b9:fe:60:3a:e5: c4:5e:ca:2d:e7:8b:43:8f:04:70:8e:65:71:a6:0e: 31:06:13:07:4d:aa:4c:53:f7:5a:8d:cf:fc:fe:e6: 29:40:2a:61:61:be:04:bd:1e:25:38:dd:24:b2:47: 1d:0d:91:1a:a7:cb:68:53:91:7f:a7:92:20:6c:82: 19:ae:71:19:5f:53:cb:5d:0b:ed:b0:ac:da:13:9a: 6d:e7:49:34:64:d5:a6:e0:c1:b9:9d:23:31:b6:26: d7:2c:81:ec:39:1e:34:df:03:30:96:68:a2:45:eb: 66:2d:6c:6c:2a:0f:5e:dc:9c:74:05:63:bb:b3:b8: 69:33:8e:52:42:21:d6:20:31:7f:4c:51:44:8c:08: 53:9d:46:52:74:39:1f:37:49:55:11:ed:ef:14:eb: 73:77:ed:12:7a:8a:ca:c7:2a:c0:4d:01:cd:6b:16: 22:1f:40:a6:80:3e:e8:c6:a8:61:9c:30:89:0e:ea: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D1:89:1A:7A:51:A7:C0:1C:C4:73:31:98:FF:30:7A:07:D6:09:E5 X509v3 Authority Key Identifier: keyid:81:71:4B:2A:73:8C:A3:DE:AE:91:5A:F8:7C:3A:91:C6:13:E1:BC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXFLKnOMo96ukVr4fDqRxhPhvEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/iNGJGnpRp8AcxHMxmP8wegfWCeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a1e73d-5a1c-4f74-a45b-1897243c62ef/1/gXFLKnOMo96ukVr4fDqRxhPhvEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.197.0/24 212.6.47.0/24 IPv6: 2a0e:9780::/29 Signature Algorithm: sha256WithRSAEncryption 69:d9:98:91:12:6c:93:af:42:d9:6f:5a:87:21:da:ed:99:12: a9:39:06:15:80:87:d4:80:e2:53:a8:f9:65:80:e1:12:db:2c: 65:78:62:27:5e:49:77:d9:78:f4:86:8a:c4:11:ac:d9:31:12: ac:2d:2c:36:aa:60:1b:20:e3:28:d2:a6:eb:38:3c:3c:a1:84: 69:db:b3:29:f0:40:70:6a:fb:92:82:11:0a:76:3d:60:fc:3d: 4d:f2:ce:f0:2b:ca:ad:2e:a7:42:23:46:2f:b1:95:96:8c:6a: 18:0d:68:ac:ee:79:83:89:a0:54:85:85:90:9b:77:0e:ba:66: 25:bc:5e:06:d5:fd:2d:cc:73:36:f2:a9:01:47:fa:d8:5a:83: f8:28:8c:6f:bf:cf:fd:3a:25:1a:c6:e7:a5:f8:e7:a5:c4:3b: 64:2d:9f:50:cc:43:12:48:dd:e0:99:77:90:8a:71:a1:64:4b: e6:5b:e0:75:71:b4:23:9d:ff:7b:c4:5d:2c:29:67:c6:ea:83: 65:cd:f4:df:6d:b7:b4:f3:68:52:65:88:3f:87:dd:0a:ba:20: 0e:cc:5e:29:e8:06:d6:45:84:ba:e4:1f:1c:7f:bd:0c:2b:6a: aa:0d:68:c1:08:a6:18:4c:52:69:00:f6:40:13:a0:ac:85:3e: 0f:1e:7a:54 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W4+1yGxvLB6I9RqDntCYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNzE0YjJhNzM4Y2EzZGVhZTkxNWFmODdjM2E5MWM2MTNl MWJjNDkwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGQxODkxYTdhNTFhN2MwMWNjNDczMzE5OGZmMzA3YTA3ZDYwOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11nUeyi0O7Vpj8r814B2MX6oWDVi iJJCmArewf7K6d1EqIK8mWyP4y13GISp6SSfDoCrUP7jGdoYbhPCDvCF8YVf00o2 uf5gOuXEXsot54tDjwRwjmVxpg4xBhMHTapMU/dajc/8/uYpQCphYb4EvR4lON0k skcdDZEap8toU5F/p5IgbIIZrnEZX1PLXQvtsKzaE5pt50k0ZNWm4MG5nSMxtibX LIHsOR403wMwlmiiRetmLWxsKg9e3Jx0BWO7s7hpM45SQiHWIDF/TFFEjAhTnUZS dDkfN0lVEe3vFOtzd+0SeorKxyrATQHNaxYiH0CmgD7oxqhhnDCJDuqQGwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIjRiRp6UafAHMRzMZj/MHoH1gnlMB8GA1UdIwQY MBaAFIFxSypzjKPerpFa+Hw6kcYT4bxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWIt MTg5NzI0M2M2MmVmLzEvaU5HSkducFJwOEFjeEhNeG1QOHdlZ2ZXQ2VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9hMWU3M2QtNWExYy00Zjc0LWE0NWItMTg5NzI0M2M2MmVm LzEvZ1hGTEtuT01vOTZ1a1ZyNGZEcVJ4aFBodkVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAmFnFAwQA 1AYvMA0EAgACMAcDBQMqDpeAMA0GCSqGSIb3DQEBCwUAA4IBAQBp2ZiREmyTr0LZ b1qHIdrtmRKpOQYVgIfUgOJTqPllgOES2yxleGInXkl32Xj0horEEazZMRKsLSw2 qmAbIOMo0qbrODw8oYRp27Mp8EBwavuSghEKdj1g/D1N8s7wK8qtLqdCI0YvsZWW jGoYDWis7nmDiaBUhYWQm3cOumYlvF4G1f0tzHM28qkBR/rYWoP4KIxvv8/9OiUa xuel+OelxDtkLZ9QzEMSSN3gmXeQinGhZEvmW+B1cbQjnf97xF0sKWfG6oNlzfTf bbe082hSZYg/h90KuiAOzF4p6AbWRYS65B8cf70MK2qqDWjBCKYYTFJpAPZAE6Cs hT4PHnpU -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:56 2026 by rpki-client