This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/ivkUxaGtEsJtdEm-0-az5FTe9g4.roa File: ivkUxaGtEsJtdEm-0-az5FTe9g4.roa (raw, json) Hash identifier: jf7yns1EHQl0bSQHREu9Zc2V/PBevRWEVblmvAVkiQk= Subject key identifier: 8A:F9:14:C5:A1:AD:12:C2:6D:74:49:BE:D3:E6:B3:E4:54:DE:F6:0E Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Certificate serial: 019B7CEE12D6496DE7ADFE8A6B29547A0569 Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/ivkUxaGtEsJtdEm-0-az5FTe9g4.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202211 IP address blocks: 185.69.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:12:d6:49:6d:e7:ad:fe:8a:6b:29:54:7a:05:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8af914c5a1ad12c26d7449bed3e6b3e454def60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:be:94:d9:37:a8:e6:d4:23:f7:52:b6:76: df:bd:e2:69:3f:42:af:45:bb:7f:b6:df:f5:7b:3d: 6c:16:da:4b:f5:1a:62:d9:57:93:21:d2:c2:34:0f: 45:4e:56:06:6e:84:cf:21:3d:2c:de:a5:2e:2c:a6: ef:66:14:f0:bb:3c:89:15:25:66:0a:8d:09:d7:e6: 85:9c:6e:33:ac:7c:ff:db:bb:c3:2d:d6:22:1f:23: e9:02:d5:ba:cd:19:8f:69:4f:90:40:2e:57:2d:b3: fb:21:ab:e8:98:9e:34:fc:98:aa:db:ef:cb:55:e4: 28:2c:40:4d:36:60:74:5f:f0:4d:fa:09:e3:80:64: 50:2a:57:34:6e:44:2a:aa:b7:5c:68:db:5e:c4:c0: 37:b1:99:5e:e0:85:e3:25:7f:8f:7f:4c:67:bb:c7: 99:47:e2:72:af:ea:a1:53:2d:ae:35:c8:f9:92:a6: 68:3e:66:25:bb:09:92:30:12:27:aa:6d:79:d2:e1: 37:c5:67:ff:46:68:4b:77:ed:60:d1:24:c4:09:fa: 6a:81:9c:6f:31:51:10:f2:e4:c8:18:3d:d7:78:bf: cf:cc:48:ba:fb:e7:9b:14:e5:67:5b:cf:42:54:55: 6c:7f:33:6e:99:09:d6:a5:1b:82:4c:4d:91:e2:0c: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F9:14:C5:A1:AD:12:C2:6D:74:49:BE:D3:E6:B3:E4:54:DE:F6:0E X509v3 Authority Key Identifier: keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/ivkUxaGtEsJtdEm-0-az5FTe9g4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.252.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:ad:15:df:a2:9a:51:98:2f:46:ec:83:de:16:61:ea:3a:f6: 4a:57:9a:1f:9c:41:76:93:92:77:ad:a5:14:49:65:0c:41:ba: 5d:d6:a8:86:f7:ff:73:d4:99:47:6c:8c:48:f2:10:d9:0d:57: 33:10:3f:8d:3d:e5:77:c0:4d:95:bb:37:d4:49:64:51:1f:b8: 98:85:70:a9:be:5d:62:f4:54:b2:c0:89:6c:05:9d:ea:63:32: 08:bb:ec:cd:18:35:17:4e:df:ce:2f:30:7b:7a:17:6c:a6:2c: e2:87:9e:1c:90:e5:2b:31:c0:82:7d:d3:83:4b:c5:59:12:74: ad:87:29:c4:4a:26:f5:22:90:9a:33:e0:ce:a4:2b:8b:7b:6a: 3e:11:ed:10:47:c0:17:7e:4a:94:7a:eb:79:5f:31:98:a1:8d: e6:a6:c2:c7:a6:f9:20:ff:8e:20:23:49:94:96:28:e3:96:3e: c5:f2:99:4e:f7:11:e0:e6:c9:d4:50:92:71:da:a8:ec:86:e1: 99:f4:0b:14:38:ec:43:48:36:d7:f8:c4:22:71:87:05:14:0b: f8:a6:cd:c3:be:bf:70:2d:c5:5c:c6:5a:44:d7:ba:82:62:c2: 6d:28:dd:30:34:01:a6:a8:43:e5:b6:92:67:e3:0a:ea:be:ea: 75:b0:ca:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87hLWSW3nrf6KaylUegVpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZTEyYTI3OTViNmU0ZGYyNjVmNjVkZjBhMDBjYjdjN2U0 NWRlZWYwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWY5MTRjNWExYWQxMmMyNmQ3NDQ5YmVkM2U2YjNlNDU0ZGVmNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaW+lNk3qObUI/dStnbfveJpP0Kv Rbt/tt/1ez1sFtpL9Rpi2VeTIdLCNA9FTlYGboTPIT0s3qUuLKbvZhTwuzyJFSVm Co0J1+aFnG4zrHz/27vDLdYiHyPpAtW6zRmPaU+QQC5XLbP7IavomJ40/Jiq2+/L VeQoLEBNNmB0X/BN+gnjgGRQKlc0bkQqqrdcaNtexMA3sZle4IXjJX+Pf0xnu8eZ R+Jyr+qhUy2uNcj5kqZoPmYluwmSMBInqm150uE3xWf/RmhLd+1g0STECfpqgZxv MVEQ8uTIGD3XeL/PzEi6++ebFOVnW89CVFVsfzNumQnWpRuCTE2R4gzmQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIr5FMWhrRLCbXRJvtPms+RU3vYOMB8GA1UdIwQY MBaAFOHhKieVtuTfJl9l3woAy3x+Rd7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYt ODJjNmNmMTRkZmUyLzEvaXZrVXhhR3RFc0p0ZEVtLTAtYXo1RlRlOWc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9kZDVjMTUtODE1ZC00MTFkLThhNTYtODJjNmNmMTRkZmUy LzEvNGVFcUo1VzI1TjhtWDJYZkNnRExmSDVGM3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUX8MA0G CSqGSIb3DQEBCwUAA4IBAQB7rRXfoppRmC9G7IPeFmHqOvZKV5ofnEF2k5J3raUU SWUMQbpd1qiG9/9z1JlHbIxI8hDZDVczED+NPeV3wE2VuzfUSWRRH7iYhXCpvl1i 9FSywIlsBZ3qYzIIu+zNGDUXTt/OLzB7ehdspizih54ckOUrMcCCfdODS8VZEnSt hynESib1IpCaM+DOpCuLe2o+Ee0QR8AXfkqUeut5XzGYoY3mpsLHpvkg/44gI0mU lijjlj7F8plO9xHg5snUUJJx2qjshuGZ9AsUOOxDSDbX+MQicYcFFAv4ps3Dvr9w LcVcxlpE17qCYsJtKN0wNAGmqEPltpJn4wrqvup1sMqQ -----END CERTIFICATE-----Generated at Mon Jan 12 23:47:26 2026 by rpki-client