This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/ijX1HmjARZz9tG3rzkcFqhcprs4.roa File: ijX1HmjARZz9tG3rzkcFqhcprs4.roa (raw, json) Hash identifier: d9IhBeRKiXtePacBcQYhWw784ZjdmncJc5xGdrlI4lM= Subject key identifier: 8A:35:F5:1E:68:C0:45:9C:FD:B4:6D:EB:CE:47:05:AA:17:29:AE:CE Certificate issuer: /CN=62117a1e6f699c322b6b983494f42c2209127553 Certificate serial: 019B79ED50AB6B9638EBBB50AE22142AD0AA Authority key identifier: 62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/ijX1HmjARZz9tG3rzkcFqhcprs4.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60277 IP address blocks: 185.124.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.mft rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:ab:6b:96:38:eb:bb:50:ae:22:14:2a:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62117a1e6f699c322b6b983494f42c2209127553 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a35f51e68c0459cfdb46debce4705aa1729aece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c0:31:4d:f3:86:28:1c:1f:56:9c:fa:b3:38: 71:0d:0c:a3:f8:c9:b2:cd:09:7e:1f:47:86:d7:bc: fd:bc:c0:0d:e7:16:d0:4d:f9:99:89:1e:60:c8:3e: e0:90:a9:88:d3:8d:bf:70:c5:ec:9a:ee:74:66:aa: d4:86:74:01:c2:40:a1:a4:89:23:f5:6e:e1:1b:d1: 90:27:e1:d7:0e:61:47:88:9a:37:a8:4f:bb:35:eb: 49:37:0a:97:5d:56:43:3a:e2:05:ff:27:89:59:6f: 65:aa:a4:b4:40:ee:1d:b6:83:79:78:09:40:a7:40: d9:ba:21:1f:6e:17:58:04:70:ef:0a:b3:8b:9d:3c: c8:8a:4a:c8:74:db:43:24:a5:d7:a3:71:e5:92:2c: 66:fb:08:ea:ea:c9:50:2c:35:0d:e7:29:90:27:18: 57:b4:ce:f4:2f:aa:34:08:94:6a:82:9e:7a:67:dd: 9f:0d:48:9c:87:58:fd:5c:71:57:86:cd:02:c5:3e: 19:0b:85:75:33:9c:7c:30:86:11:59:d5:7c:63:a1: 01:1b:81:0a:0d:0d:7d:f5:aa:ce:aa:85:42:78:e8: 6b:38:6e:5b:d2:17:3a:c4:d0:d7:d4:a4:da:64:a7: 26:bc:73:14:82:1a:b6:5f:c3:07:a6:1c:50:87:c7: a0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:F5:1E:68:C0:45:9C:FD:B4:6D:EB:CE:47:05:AA:17:29:AE:CE X509v3 Authority Key Identifier: keyid:62:11:7A:1E:6F:69:9C:32:2B:6B:98:34:94:F4:2C:22:09:12:75:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhF6Hm9pnDIra5g0lPQsIgkSdVM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/ijX1HmjARZz9tG3rzkcFqhcprs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/70ee21-d93f-4a71-8474-5bcc8458aa2c/1/YhF6Hm9pnDIra5g0lPQsIgkSdVM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.204.0/22 Signature Algorithm: sha256WithRSAEncryption 45:f3:02:7e:2c:7b:22:71:60:d5:98:66:af:91:a8:ed:b1:2a: 6e:e0:a7:60:6e:df:47:4b:a0:3e:44:4b:79:21:64:99:0b:81: 72:cf:f8:73:04:3b:dd:09:f7:a3:95:57:8c:a0:f8:d8:e0:39: 3c:e0:6b:d7:79:aa:34:19:24:b7:71:fc:c2:cb:db:b7:bd:3d: f1:bb:45:92:64:76:f0:96:dc:d9:bd:ef:f5:84:97:55:76:6c: 85:a6:4f:51:1a:77:f1:75:b8:48:f8:24:75:6d:e1:f8:74:e4: 9c:b1:07:54:a0:95:9b:55:76:98:4d:1d:c2:a7:21:61:35:5b: 11:e9:f2:2a:7f:bc:8c:d0:91:eb:f6:d7:61:88:7c:15:60:c7: 25:73:34:b6:20:72:bb:1a:54:3b:c2:36:96:98:63:ce:66:68: 75:6c:8e:06:b3:d7:d2:1c:f5:85:de:81:83:66:1a:41:b9:b9: 08:83:ec:cd:32:c7:0f:cc:32:3f:2b:08:07:21:2c:73:ff:cf: b9:48:3a:bf:1d:90:3c:34:71:8f:05:27:f8:6f:a7:f7:25:15: ee:8e:46:a8:d4:ed:07:8e:79:21:cf:92:1d:01:78:f2:fb:e0: 06:65:9c:d9:e7:8a:a8:d1:db:cb:8b:7e:ce:c2:42:97:9f:d1: 52:aa:d2:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VCra5Y467tQriIUKtCqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMTE3YTFlNmY2OTljMzIyYjZiOTgzNDk0ZjQyYzIyMDkx Mjc1NTMwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTM1ZjUxZTY4YzA0NTljZmRiNDZkZWJjZTQ3MDVhYTE3MjlhZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssAxTfOGKBwfVpz6szhxDQyj+Mmy zQl+H0eG17z9vMAN5xbQTfmZiR5gyD7gkKmI042/cMXsmu50ZqrUhnQBwkChpIkj 9W7hG9GQJ+HXDmFHiJo3qE+7NetJNwqXXVZDOuIF/yeJWW9lqqS0QO4dtoN5eAlA p0DZuiEfbhdYBHDvCrOLnTzIikrIdNtDJKXXo3Hlkixm+wjq6slQLDUN5ymQJxhX tM70L6o0CJRqgp56Z92fDUich1j9XHFXhs0CxT4ZC4V1M5x8MIYRWdV8Y6EBG4EK DQ199arOqoVCeOhrOG5b0hc6xNDX1KTaZKcmvHMUghq2X8MHphxQh8egIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIo19R5owEWc/bRt685HBaoXKa7OMB8GA1UdIwQY MBaAFGIReh5vaZwyK2uYNJT0LCIJEnVTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQt NWJjYzg0NThhYTJjLzEvaWpYMUhtakFSWno5dEczcnprY0ZxaGNwcnM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83MGVlMjEtZDkzZi00YTcxLTg0NzQtNWJjYzg0NThhYTJj LzEvWWhGNkhtOXBuRElyYTVnMGxQUXNJZ2tTZFZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXzMMA0G CSqGSIb3DQEBCwUAA4IBAQBF8wJ+LHsicWDVmGavkajtsSpu4Kdgbt9HS6A+REt5 IWSZC4Fyz/hzBDvdCfejlVeMoPjY4Dk84GvXeao0GSS3cfzCy9u3vT3xu0WSZHbw ltzZve/1hJdVdmyFpk9RGnfxdbhI+CR1beH4dOScsQdUoJWbVXaYTR3CpyFhNVsR 6fIqf7yM0JHr9tdhiHwVYMclczS2IHK7GlQ7wjaWmGPOZmh1bI4Gs9fSHPWF3oGD ZhpBubkIg+zNMscPzDI/KwgHISxz/8+5SDq/HZA8NHGPBSf4b6f3JRXujkao1O0H jnkhz5IdAXjy++AGZZzZ54qo0dvLi37OwkKXn9FSqtLF -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:50 2026 by rpki-client