This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iRcKySZZEFCosSixQJxSzljm5ng.roa File: iRcKySZZEFCosSixQJxSzljm5ng.roa (raw, json) Hash identifier: akfO8gb9Q3aR+GOneUEFcvIbH9NfOFL91pJHtOTIPv0= Subject key identifier: 89:17:0A:C9:26:59:10:50:A8:B1:28:B1:40:9C:52:CE:58:E6:E6:78 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775968D87871EF5E954CBEDC2C6EE14D Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iRcKySZZEFCosSixQJxSzljm5ng.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62151 IP address blocks: 188.215.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:68:d8:78:71:ef:5e:95:4c:be:dc:2c:6e:e1:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89170ac926591050a8b128b1409c52ce58e6e678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:17:71:f1:4f:ba:1c:84:e5:59:95:ca:54: 26:a3:2e:2e:f8:39:25:2e:a3:18:5e:f6:21:bd:8a: 4e:c9:84:df:62:68:41:01:14:5e:ac:f1:90:85:9d: 44:e0:74:b4:ef:2e:b8:1c:57:13:4d:fa:e2:2c:1a: df:12:41:da:de:f3:7b:12:f3:56:25:a2:51:62:56: ca:36:ab:81:f3:6c:ff:e3:ed:c3:4b:a2:38:ad:06: f3:c0:aa:9f:18:73:86:23:2a:83:60:eb:c7:ae:92: 5f:a8:99:54:10:a6:77:4f:f8:43:bf:a1:45:85:1f: 4c:36:78:2d:08:1c:f4:19:f7:f9:0d:ee:63:45:e2: 50:8f:20:55:04:2c:e6:3b:20:65:cc:17:46:38:cc: 26:28:b4:76:0d:66:e8:6d:bd:08:15:22:2a:c6:c2: 65:22:71:51:88:31:a8:d6:9a:7f:f7:78:19:3f:08: a9:6d:17:9a:35:a3:2c:a5:b4:71:69:d3:6a:55:7d: 84:9d:f1:5d:1a:1b:ec:eb:3d:78:ea:25:e3:52:c0: e7:b8:0d:1a:f4:a5:b9:6d:57:f2:d1:a5:f3:8f:8e: ef:f8:1c:8c:28:78:c9:b3:c8:58:39:c8:35:ff:3e: 7f:b3:69:27:91:a1:08:c8:9e:43:89:01:94:07:48: fe:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:17:0A:C9:26:59:10:50:A8:B1:28:B1:40:9C:52:CE:58:E6:E6:78 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/iRcKySZZEFCosSixQJxSzljm5ng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.215.232.0/24 Signature Algorithm: sha256WithRSAEncryption 27:82:80:dc:8a:02:d6:16:5c:61:bd:14:89:5f:41:ab:5c:92: 17:26:7e:aa:a7:1f:4d:f5:3a:aa:21:28:58:93:ee:1d:0d:6d: c3:be:da:6a:29:e7:6b:dc:ae:b7:0b:1f:35:aa:a5:2b:82:26: 68:8e:f7:c3:85:b6:b5:e4:1f:3d:50:47:5e:93:cf:ab:f8:56: ab:40:80:02:85:fc:06:3a:75:56:fd:38:93:54:fc:6f:e6:f3: 50:40:d3:49:38:44:a0:f9:a1:75:e8:c7:00:08:40:27:6e:e9: be:45:0f:31:77:b9:8c:3e:99:10:24:68:b1:7c:83:86:98:d9: 8b:8d:ab:ee:9e:22:27:f4:90:cf:21:72:15:d5:87:1d:ba:7e: 19:1c:e2:c5:66:97:e9:f5:1e:60:f5:46:48:0e:81:94:7c:4f: d1:fb:ab:ee:96:54:49:a7:73:e8:41:3d:b8:da:65:dc:94:a7: bb:58:1f:67:87:84:ff:3c:6e:35:93:66:be:d5:10:14:2d:2d: 9a:b4:44:ea:06:5c:fe:71:c8:e8:15:a6:69:92:dd:19:18:6b: fb:e0:1c:4a:c4:98:eb:7e:72:3c:7f:70:df:8e:ac:92:49:f2: 32:e2:8b:3e:c1:a0:c5:b0:8c:4c:7c:e7:fb:d3:f1:29:52:82: 6d:ac:71:0d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWjYeHHvXpVMvtwsbuFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTE3MGFjOTI2NTkxMDUwYThiMTI4YjE0MDljNTJjZTU4ZTZlNjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpgXcfFPuhyE5VmVylQmoy4u+Dkl LqMYXvYhvYpOyYTfYmhBARRerPGQhZ1E4HS07y64HFcTTfriLBrfEkHa3vN7EvNW JaJRYlbKNquB82z/4+3DS6I4rQbzwKqfGHOGIyqDYOvHrpJfqJlUEKZ3T/hDv6FF hR9MNngtCBz0Gff5De5jReJQjyBVBCzmOyBlzBdGOMwmKLR2DWbobb0IFSIqxsJl InFRiDGo1pp/93gZPwipbReaNaMspbRxadNqVX2EnfFdGhvs6z146iXjUsDnuA0a 9KW5bVfy0aXzj47v+ByMKHjJs8hYOcg1/z5/s2knkaEIyJ5DiQGUB0j+9QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFIkXCskmWRBQqLEosUCcUs5Y5uZ4MB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL2lSY0t5U1paRUZDb3NTaXhRSnhTemxqbTVuZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC81+gw DQYJKoZIhvcNAQELBQADggEBACeCgNyKAtYWXGG9FIlfQatckhcmfqqnH031Oqoh KFiT7h0NbcO+2mop52vcrrcLHzWqpSuCJmiO98OFtrXkHz1QR16Tz6v4VqtAgAKF /AY6dVb9OJNU/G/m81BA00k4RKD5oXXoxwAIQCdu6b5FDzF3uYw+mRAkaLF8g4aY 2YuNq+6eIif0kM8hchXVhx26fhkc4sVml+n1HmD1RkgOgZR8T9H7q+6WVEmnc+hB PbjaZdyUp7tYH2eHhP88bjWTZr7VEBQtLZq0ROoGXP5xyOgVpmmS3RkYa/vgHErE mOt+cjx/cN+OrJJJ8jLiiz7BoMWwjEx85/vT8SlSgm2scQ0= -----END CERTIFICATE-----Generated at Tue Jan 13 09:38:04 2026 by rpki-client