This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/I5caSNoaibT5a3lfttKZWdRp0l8.roa File: I5caSNoaibT5a3lfttKZWdRp0l8.roa (raw, json) Hash identifier: sSCXetknx1GQMkwjOpWfK+QxR9ZMLOdkrRFR3Fi1Ufk= Subject key identifier: 23:97:1A:48:DA:1A:89:B4:F9:6B:79:5F:B6:D2:99:59:D4:69:D2:5F Certificate issuer: /CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Certificate serial: 019B7F84332D8D74641BD84B9CCD1581032A Authority key identifier: FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/I5caSNoaibT5a3lfttKZWdRp0l8.roa Signing time: Fri 02 Jan 2026 16:22:08 +0000 ROA not before: Fri 02 Jan 2026 16:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15866 IP address blocks: 94.232.192.0/21 maxlen: 21 185.45.88.0/22 maxlen: 22 185.45.91.0/24 maxlen: 24 217.171.240.0/20 maxlen: 20 2a00:1920::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.mft rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:33:2d:8d:74:64:1b:d8:4b:9c:cd:15:81:03:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde8d1c6aaf4a93ff41bbfa1bd1dac6197d59575 Validity Not Before: Jan 2 16:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23971a48da1a89b4f96b795fb6d29959d469d25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:0b:ed:29:47:6c:21:f7:90:83:15:07:e8: 24:0f:ff:03:31:c0:13:77:5c:7f:bc:60:89:5a:3a: 69:f6:0c:80:f5:cc:ea:c3:5e:17:22:b2:4d:88:1a: 96:4e:2d:4f:11:6a:a8:1d:29:4b:15:1e:0b:5f:64: 3b:bf:89:5a:5f:1e:e4:14:29:08:57:32:b9:b4:39: 36:65:71:da:1d:15:28:6a:3d:95:43:d0:16:d4:7e: c3:7b:89:9a:df:c4:0e:43:2b:30:b4:02:aa:cc:8b: 29:08:a4:e1:42:fd:eb:2e:74:60:f2:39:18:ed:ba: 19:fa:b7:3b:f4:3c:c7:3c:3e:20:39:e8:bf:95:97: 5a:7b:db:12:07:0a:35:06:cf:64:da:c5:7e:b0:6f: e0:e4:f2:5d:c6:62:b8:3a:aa:3d:b1:5d:06:56:06: e0:fc:ca:bd:fe:10:09:68:44:f1:8e:17:01:39:6c: 1b:96:79:3a:db:b9:c9:b1:41:71:9a:02:02:02:7f: ed:ae:d1:d3:2f:ba:a6:16:5d:89:86:46:ed:ee:e5: 69:67:10:1c:3a:31:75:92:60:9e:c1:4d:d1:dd:c4: 1a:1d:96:0b:c6:84:b2:c9:a5:01:89:56:98:ee:e8: d6:fc:ef:c9:3c:cb:8f:7f:2f:86:0d:17:02:14:27: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:97:1A:48:DA:1A:89:B4:F9:6B:79:5F:B6:D2:99:59:D4:69:D2:5F X509v3 Authority Key Identifier: keyid:FD:E8:D1:C6:AA:F4:A9:3F:F4:1B:BF:A1:BD:1D:AC:61:97:D5:95:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ejRxqr0qT_0G7-hvR2sYZfVlXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/I5caSNoaibT5a3lfttKZWdRp0l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/496885-709f-4bbb-9375-954d19549b61/1/_ejRxqr0qT_0G7-hvR2sYZfVlXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.192.0/21 185.45.88.0/22 217.171.240.0/20 IPv6: 2a00:1920::/48 Signature Algorithm: sha256WithRSAEncryption 9e:63:12:03:6c:62:c7:3d:b3:28:f7:dc:9d:9c:2f:eb:e3:59: 44:cd:fc:ae:26:18:85:74:df:14:fa:13:44:79:94:81:38:a4: 05:46:4c:bc:d6:6f:95:91:7a:e9:e2:dc:41:65:b5:c6:0f:8e: 73:2f:06:48:86:33:8d:02:6e:b7:63:fe:a7:08:17:b8:ca:97: 27:e1:90:66:1a:75:18:b8:3e:9b:73:21:ab:41:71:f7:24:97: d6:3d:aa:2b:62:95:01:b1:9a:27:1e:97:1f:d3:8a:ff:1e:74: 65:23:d4:2e:f0:e9:5e:bd:63:f0:05:42:a4:df:84:53:21:3b: 36:b6:f8:38:a7:e7:5c:56:7c:a4:df:4f:c1:ea:77:ff:fe:24: b2:56:c0:2f:6f:af:4b:6c:c9:11:73:f5:ad:44:89:60:e3:bf: 67:f2:e7:d9:1f:79:ff:4f:d4:52:43:b9:32:0c:24:42:66:7b: af:20:04:69:e8:5c:2b:4d:49:ac:a6:14:22:cf:cf:d7:5d:60: 8e:c6:b6:7b:62:e5:2e:c2:fb:85:92:42:ea:ae:28:cc:9f:a6: 55:fa:9c:6f:35:87:bb:14:f9:78:a3:e3:a5:87:93:fb:57:27: 1e:43:1e:e8:d2:49:67:33:60:31:8b:5b:56:a3:a9:1c:01:ea: fc:c0:fe:0d -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/hDMtjXRkG9hLnM0VgQMqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZThkMWM2YWFmNGE5M2ZmNDFiYmZhMWJkMWRhYzYxOTdk NTk1NzUwHhcNMjYwMTAyMTYyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzk3MWE0OGRhMWE4OWI0Zjk2Yjc5NWZiNmQyOTk1OWQ0NjlkMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/8L7SlHbCH3kIMVB+gkD/8DMcAT d1x/vGCJWjpp9gyA9czqw14XIrJNiBqWTi1PEWqoHSlLFR4LX2Q7v4laXx7kFCkI VzK5tDk2ZXHaHRUoaj2VQ9AW1H7De4ma38QOQyswtAKqzIspCKThQv3rLnRg8jkY 7boZ+rc79DzHPD4gOei/lZdae9sSBwo1Bs9k2sV+sG/g5PJdxmK4Oqo9sV0GVgbg /Mq9/hAJaETxjhcBOWwblnk627nJsUFxmgICAn/trtHTL7qmFl2Jhkbt7uVpZxAc OjF1kmCewU3R3cQaHZYLxoSyyaUBiVaY7ujW/O/JPMuPfy+GDRcCFCcvpQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCOXGkjaGom0+Wt5X7bSmVnUadJfMB8GA1UdIwQY MBaAFP3o0caq9Kk/9Bu/ob0drGGX1ZV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUt OTU0ZDE5NTQ5YjYxLzEvSTVjYVNOb2FpYlQ1YTNsZnR0S1pXZFJwMGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OTY4ODUtNzA5Zi00YmJiLTkzNzUtOTU0ZDE5NTQ5YjYx LzEvX2VqUnhxcjBxVF8wRzctaHZSMnNZWmZWbFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQDXujAAwQC uS1YAwQE2avwMA8EAgACMAkDBwAqABkgAAAwDQYJKoZIhvcNAQELBQADggEBAJ5j EgNsYsc9syj33J2cL+vjWUTN/K4mGIV03xT6E0R5lIE4pAVGTLzWb5WReuni3EFl tcYPjnMvBkiGM40Cbrdj/qcIF7jKlyfhkGYadRi4PptzIatBcfckl9Y9qitilQGx micelx/Tiv8edGUj1C7w6V69Y/AFQqTfhFMhOza2+Din51xWfKTfT8Hqd//+JLJW wC9vr0tsyRFz9a1EiWDjv2fy59kfef9P1FJDuTIMJEJme68gBGnoXCtNSaymFCLP z9ddYI7Gtnti5S7C+4WSQuquKMyfplX6nG81h7sU+Xij46WHk/tXJx5DHujSSWcz YDGLW1ajqRwB6vzA/g0= -----END CERTIFICATE-----Generated at Mon Jan 12 01:42:28 2026 by rpki-client