This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa File: iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa (raw, json) Hash identifier: sekPzygHUOkEd1ly9r7LBo/JOh0iiRtcIXhoK8Xl8WU= Subject key identifier: 89:78:2F:08:55:58:2D:8B:96:36:0F:E5:63:9E:7F:D4:95:1D:BF:56 Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Certificate serial: 019B7C8006CC0CB0FA0F58040BCCE881B0B5 Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206747 IP address blocks: 25.25.25.0/24 maxlen: 24 25.26.27.0/24 maxlen: 24 25.129.196.0/23 maxlen: 23 25.129.198.0/23 maxlen: 23 195.130.28.0/24 maxlen: 24 195.130.29.0/24 maxlen: 24 195.130.30.0/24 maxlen: 24 195.130.31.0/24 maxlen: 24 2a08:600::/48 maxlen: 48 2a08:600:1::/48 maxlen: 48 2a08:600:2::/48 maxlen: 48 2a08:600:3::/48 maxlen: 48 2a08:600:4::/48 maxlen: 48 2a08:600:99::/48 maxlen: 48 2a08:600:e0::/47 maxlen: 47 2a08:600:ee::/47 maxlen: 47 2a08:600:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:06:cc:0c:b0:fa:0f:58:04:0b:cc:e8:81:b0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89782f0855582d8b96360fe5639e7fd4951dbf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:c7:7a:b4:01:fe:7d:a1:4b:44:7b:34:35: 7f:f7:b5:4e:09:6f:dd:e3:c9:0c:cf:2a:50:0f:10: 8c:d7:58:0a:cc:63:04:9a:14:ba:1b:f3:0e:55:2f: d3:fd:b8:2a:9d:be:98:6a:d6:31:68:57:33:e5:62: 55:c2:fc:50:0c:81:59:19:fa:36:85:f1:ac:cf:af: 16:f8:cf:e5:d2:fc:03:9e:09:62:a0:a5:3c:f9:34: f4:4c:93:67:dd:0b:6d:63:64:13:90:f1:63:82:51: 5e:c3:a6:02:28:8e:f6:8c:6a:11:6f:1f:38:97:18: 05:a5:8c:cc:8b:86:2e:d8:4e:3e:de:57:91:ca:30: 60:a1:e8:51:db:d1:4c:8c:80:1c:5c:16:c6:33:70: e0:04:1f:43:c7:78:b8:19:27:cb:f1:a5:f9:24:a4: 63:e4:12:ff:ea:44:59:45:92:41:4d:10:23:aa:8a: f5:04:5d:e1:e4:b9:19:5a:97:c6:18:55:5f:62:e3: 39:2c:dc:df:20:72:96:07:dd:ea:c4:f3:a0:56:fa: 28:9c:c7:68:bb:68:31:9e:ea:bd:6a:a7:e0:f3:c2: f5:ab:7e:52:63:64:d5:08:00:07:ff:f6:86:1c:44: 73:78:7b:ba:7a:42:83:56:57:67:5a:7d:0a:77:88: 8e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:78:2F:08:55:58:2D:8B:96:36:0F:E5:63:9E:7F:D4:95:1D:BF:56 X509v3 Authority Key Identifier: keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 25.25.25.0/24 25.26.27.0/24 25.129.196.0/22 195.130.28.0/22 IPv6: 2a08:600::-2a08:600:4:ffff:ffff:ffff:ffff:ffff 2a08:600:99::/48 2a08:600:e0::/47 2a08:600:ee::/47 2a08:600:ff::/48 Signature Algorithm: sha256WithRSAEncryption 4d:83:2f:7b:a5:b4:c4:af:c7:49:d2:35:17:a9:5c:09:3d:13: 6a:09:3c:9c:c8:9b:33:d1:c0:89:ab:12:3d:fe:dd:c6:17:18: e5:fd:24:13:e3:ac:fe:9d:a8:e0:eb:be:3b:0a:4e:43:d6:26: 2a:4a:22:1c:13:62:02:c3:05:f7:11:61:4d:93:a8:b6:7b:7c: f8:ee:45:53:01:cb:c8:d7:c8:36:44:26:c1:e4:a9:de:08:73: a5:d8:56:58:2f:56:d8:54:48:ea:17:47:7f:17:07:79:a7:8c: 43:77:0f:a9:f8:ba:e5:0f:23:72:7b:08:69:89:7d:8f:09:95: 6a:ab:70:48:6f:fc:a1:70:b7:c4:63:cc:18:cf:bf:23:bc:6b: 0d:65:04:87:b2:7c:91:8f:ff:f5:8d:74:a0:c7:b3:68:a4:d6: 48:d0:c8:a4:9e:b9:ab:ba:20:c8:7b:1c:ce:87:6f:1c:8c:af: 61:9b:1a:3f:b4:d9:56:98:e4:6c:44:bb:5f:99:d9:0e:8f:97: 46:da:e5:a4:b4:ab:fe:0d:36:0f:90:5e:5c:5e:e9:c2:ae:df: d4:5e:3e:4e:fb:3d:ab:f7:d9:57:94:aa:03:fa:1b:f7:e8:57: a1:1e:22:9e:4f:02:03:2e:1c:76:6f:e5:91:ef:67:a1:db:3c: 79:2e:b2:05 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt8gAbMDLD6D1gEC8zogbC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjNDRlMTllMmJiNGU3MDIzY2MxYmExMGQ0OWI3NGVkZTRi Zjg2NWMwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTc4MmYwODU1NTgyZDhiOTYzNjBmZTU2MzllN2ZkNDk1MWRiZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqjHerQB/n2hS0R7NDV/97VOCW/d 48kMzypQDxCM11gKzGMEmhS6G/MOVS/T/bgqnb6YatYxaFcz5WJVwvxQDIFZGfo2 hfGsz68W+M/l0vwDnglioKU8+TT0TJNn3QttY2QTkPFjglFew6YCKI72jGoRbx84 lxgFpYzMi4Yu2E4+3leRyjBgoehR29FMjIAcXBbGM3DgBB9Dx3i4GSfL8aX5JKRj 5BL/6kRZRZJBTRAjqor1BF3h5LkZWpfGGFVfYuM5LNzfIHKWB93qxPOgVvoonMdo u2gxnuq9aqfg88L1q35SY2TVCAAH//aGHERzeHu6ekKDVldnWn0Kd4iOzwIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFIl4LwhVWC2LljYP5WOef9SVHb9WMB8GA1UdIwQY MBaAFNxE4Z4rtOcCPMG6ENSbdO3kv4ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjIt NGM4MmFjZTcyYzg1LzEvaVhndkNGVllMWXVXTmdfbFk1NV8xSlVkdjFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS80NmY1YjktNjAwMC00MDcyLTg5ZjItNGM4MmFjZTcyYzg1 LzEvM0VUaG5pdTA1d0k4d2JvUTFKdDA3ZVNfaGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTAeBAIAATAYAwQAGRkZAwQA GRobAwQCGYHEAwQCw4IcMDsEAgACMDUwDwMEASoIBgMHACoIBgAABAMHACoIBgAA mQMHASoIBgAA4AMHASoIBgAA7gMHACoIBgAA/zANBgkqhkiG9w0BAQsFAAOCAQEA TYMve6W0xK/HSdI1F6lcCT0Tagk8nMibM9HAiasSPf7dxhcY5f0kE+Os/p2o4Ou+ OwpOQ9YmKkoiHBNiAsMF9xFhTZOotnt8+O5FUwHLyNfINkQmweSp3ghzpdhWWC9W 2FRI6hdHfxcHeaeMQ3cPqfi65Q8jcnsIaYl9jwmVaqtwSG/8oXC3xGPMGM+/I7xr DWUEh7J8kY//9Y10oMezaKTWSNDIpJ65q7ogyHsczodvHIyvYZsaP7TZVpjkbES7 X5nZDo+XRtrlpLSr/g02D5BeXF7pwq7f1F4+Tvs9q/fZV5SqA/ob9+hXoR4ink8C Ay4cdm/lke9nods8eS6yBQ== -----END CERTIFICATE-----Generated at Sun Jan 25 15:35:54 2026 by rpki-client