This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/I2xmBFd3fJduSyv2aTrXMOwMqYE.roa File: I2xmBFd3fJduSyv2aTrXMOwMqYE.roa (raw, json) Hash identifier: sd1O4Xb3glEpbiY/ZlepWAzhJWblfKmiK+EgSX/OOlI= Subject key identifier: 23:6C:66:04:57:77:7C:97:6E:4B:2B:F6:69:3A:D7:30:EC:0C:A9:81 Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e Certificate serial: 019BD5F06C2027EE228DDFCCB93793839E61 Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/I2xmBFd3fJduSyv2aTrXMOwMqYE.roa Signing time: Mon 19 Jan 2026 11:07:41 +0000 ROA not before: Mon 19 Jan 2026 11:07:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 45.142.24.0/24 maxlen: 24 91.217.72.0/23 maxlen: 32 103.93.40.0/24 maxlen: 32 103.93.41.0/24 maxlen: 32 103.93.42.0/24 maxlen: 32 103.93.43.0/24 maxlen: 32 103.111.0.0/22 maxlen: 32 103.124.164.0/24 maxlen: 32 103.124.166.0/24 maxlen: 32 103.204.120.0/24 maxlen: 32 103.204.122.0/24 maxlen: 32 103.204.123.0/24 maxlen: 32 109.104.132.0/24 maxlen: 32 109.104.133.0/24 maxlen: 32 109.104.142.0/24 maxlen: 32 109.104.143.0/24 maxlen: 32 109.104.156.0/24 maxlen: 32 109.104.157.0/24 maxlen: 32 109.104.158.0/24 maxlen: 32 109.104.159.0/24 maxlen: 32 185.153.124.0/22 maxlen: 32 185.233.124.0/22 maxlen: 32 194.113.94.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:f0:6c:20:27:ee:22:8d:df:cc:b9:37:93:83:9e:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e Validity Not Before: Jan 19 11:07:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=236c660457777c976e4b2bf6693ad730ec0ca981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:40:b5:1c:87:c3:08:3e:2e:f6:36:77:7b:3b: e2:d2:45:8d:f2:ae:50:80:43:e4:f7:35:67:54:37: 33:5a:da:66:92:8f:e3:b3:72:a1:28:44:ad:50:59: b9:c8:54:12:40:ef:d0:fa:e9:58:20:e9:fb:77:e5: 74:42:df:e8:2d:d3:9c:06:43:d3:d1:a1:04:06:cb: 2c:ce:16:fa:82:59:c7:a3:71:92:1e:43:63:47:bb: 30:c6:d1:80:7b:d0:c9:ee:b8:e0:e0:52:57:8d:22: 62:15:66:96:66:a1:9b:0b:3f:2c:ed:31:79:3f:72: 8c:51:02:2a:75:de:07:e7:b2:f6:ad:f9:37:7c:33: 36:5e:dc:c9:14:27:9a:3e:c4:43:f2:f4:07:68:43: 21:d1:0f:2b:42:f7:1a:a8:9c:81:a4:af:66:04:d1: 57:2f:b8:a5:34:e1:8d:46:fa:9a:86:b7:7c:43:40: 79:33:a5:30:a0:08:bd:2e:ba:40:12:f9:da:c2:8d: 80:ba:26:75:0c:69:68:ee:44:ea:0a:de:8b:55:bd: 25:ed:55:fb:c0:30:7e:f1:d8:54:32:9c:64:2c:96: 42:19:b1:da:49:b5:58:0a:55:c4:18:1e:2f:b8:53: 6d:ee:9b:34:8e:76:08:74:ef:87:a8:0e:2e:b5:38: e3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6C:66:04:57:77:7C:97:6E:4B:2B:F6:69:3A:D7:30:EC:0C:A9:81 X509v3 Authority Key Identifier: keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/I2xmBFd3fJduSyv2aTrXMOwMqYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.24.0/24 91.217.72.0/23 103.93.40.0/22 103.111.0.0/22 103.124.164.0/24 103.124.166.0/24 103.204.120.0/24 103.204.122.0/23 109.104.132.0/23 109.104.142.0/23 109.104.156.0/22 185.153.124.0/22 185.233.124.0/22 194.113.94.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:fd:d2:09:e8:50:e3:8f:bb:8b:c1:40:6e:af:b7:54:2a:40: 47:c5:e9:c6:e5:f4:fa:fd:53:d2:54:e1:e5:a0:7b:d7:cc:1b: db:ea:57:90:31:9c:ff:a3:c6:7a:96:b1:b1:d7:25:aa:f9:ee: 98:8b:e4:6c:26:27:a6:c0:9b:68:7f:d5:21:80:99:a8:4e:56: 66:38:1c:63:50:a9:ec:a4:0e:d1:69:b9:32:be:20:79:1f:8a: d7:b6:e1:1b:4f:42:d5:ff:f1:ff:98:c5:de:4b:fb:b8:87:b6: 59:46:a1:31:0c:f8:d7:d8:8d:0e:58:52:0b:17:fc:ee:22:36: 46:6f:5e:ee:73:3d:2f:cc:dd:a5:47:9a:ec:db:a3:e7:41:da: 5e:63:7b:bc:1c:6e:e4:45:e8:bf:19:25:78:40:bc:66:04:4b: a4:ab:f9:ab:f9:c0:a7:e6:76:8c:34:dd:54:48:c1:15:1d:10: 98:4f:b2:e8:79:8e:10:91:fb:2e:79:80:bd:05:35:4e:83:48: 49:04:b0:d1:73:be:4f:16:fc:ed:4a:2e:a6:1f:5e:37:90:bc: e5:a1:fa:f6:7d:e3:7e:87:e5:2d:41:53:9f:ea:6f:3f:e7:d1: 8c:94:ef:44:15:8c:33:44:6d:26:c1:a0:be:b2:c1:23:a2:a6: fc:62:0f:0b -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZvV8GwgJ+4ijd/MuTeTg55hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh ZmU0NGUwHhcNMjYwMTE5MTEwNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzZjNjYwNDU3Nzc3Yzk3NmU0YjJiZjY2OTNhZDczMGVjMGNhOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0C1HIfDCD4u9jZ3ezvi0kWN8q5Q gEPk9zVnVDczWtpmko/js3KhKEStUFm5yFQSQO/Q+ulYIOn7d+V0Qt/oLdOcBkPT 0aEEBssszhb6glnHo3GSHkNjR7swxtGAe9DJ7rjg4FJXjSJiFWaWZqGbCz8s7TF5 P3KMUQIqdd4H57L2rfk3fDM2XtzJFCeaPsRD8vQHaEMh0Q8rQvcaqJyBpK9mBNFX L7ilNOGNRvqahrd8Q0B5M6UwoAi9LrpAEvnawo2AuiZ1DGlo7kTqCt6LVb0l7VX7 wDB+8dhUMpxkLJZCGbHaSbVYClXEGB4vuFNt7ps0jnYIdO+HqA4utTjjTQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFCNsZgRXd3yXbksr9mk61zDsDKmBMB8GA1UdIwQY MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct ZmI1OTQ5ODA4ZGRjLzEvSTJ4bUJGZDNmSmR1U3l2MmFUclhNT3dNcVlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQALY4YAwQB W9lIAwQCZ10oAwQCZ28AAwQAZ3ykAwQAZ3ymAwQAZ8x4AwQBZ8x6AwQBbWiEAwQB bWiOAwQCbWicAwQCuZl8AwQCuel8AwQBwnFeMA0GCSqGSIb3DQEBCwUAA4IBAQB/ /dIJ6FDjj7uLwUBur7dUKkBHxenG5fT6/VPSVOHloHvXzBvb6leQMZz/o8Z6lrGx 1yWq+e6Yi+RsJiemwJtof9UhgJmoTlZmOBxjUKnspA7RabkyviB5H4rXtuEbT0LV //H/mMXeS/u4h7ZZRqExDPjX2I0OWFILF/zuIjZGb17ucz0vzN2lR5rs26PnQdpe Y3u8HG7kRei/GSV4QLxmBEukq/mr+cCn5naMNN1USMEVHRCYT7LoeY4QkfsueYC9 BTVOg0hJBLDRc75PFvztSi6mH143kLzlofr2feN+h+UtQVOf6m8/59GMlO9EFYwz RG0mwaC+ssEjoqb8Yg8L -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:41 2026 by rpki-client