This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/_IvJfFzGHlNib8r-PrbygGaf9ME.roa File: _IvJfFzGHlNib8r-PrbygGaf9ME.roa (raw, json) Hash identifier: ujiDP9ug2z8JoHMVWVWd8NY4OblKHkwk6gW1+3Pknes= Subject key identifier: FC:8B:C9:7C:5C:C6:1E:53:62:6F:CA:FE:3E:B6:F2:80:66:9F:F4:C1 Certificate issuer: /CN=b155daddb871b9d6a53cd6b47f776250837f7774 Certificate serial: 019B7F84572A45B72E13DF380F32BF86330A Authority key identifier: B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/_IvJfFzGHlNib8r-PrbygGaf9ME.roa Signing time: Fri 02 Jan 2026 16:22:18 +0000 ROA not before: Fri 02 Jan 2026 16:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9066 IP address blocks: 62.89.160.0/19 maxlen: 24 212.68.64.0/19 maxlen: 24 213.252.128.0/18 maxlen: 24 2a01:ac00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:57:2a:45:b7:2e:13:df:38:0f:32:bf:86:33:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155daddb871b9d6a53cd6b47f776250837f7774 Validity Not Before: Jan 2 16:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc8bc97c5cc61e53626fcafe3eb6f280669ff4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9c:66:02:93:fd:92:88:9d:f1:5b:a1:34:27: 20:48:6f:1d:31:14:13:16:b7:7c:62:f3:8a:d3:4d: cb:44:8b:1b:f7:11:76:9d:6d:7f:c7:04:41:1b:9a: 1a:53:0b:61:eb:6b:18:50:a9:5d:51:88:bb:26:f6: 60:15:66:be:34:d8:70:3e:ad:39:29:53:ce:02:31: 74:aa:e8:88:e4:ef:87:81:23:59:08:87:7f:41:c4: 5c:ba:2c:21:81:b8:0e:17:13:c9:98:2f:dc:5a:0f: 9a:09:38:75:65:cb:74:96:97:d4:4c:b4:10:f4:83: 7b:14:f8:33:01:18:58:84:6b:b0:07:71:29:30:01: 95:a8:20:61:56:b4:2d:98:ba:c3:90:d7:5f:95:0e: 72:de:ea:20:5a:75:25:37:93:35:1e:46:19:92:c0: 9d:33:ce:a8:d8:79:7d:e8:af:a2:09:59:4f:fc:3b: e6:5a:2d:d7:48:2d:c8:6e:52:c5:2a:21:f7:3a:92: f5:9c:0a:fa:b3:14:5e:d1:69:0b:e0:22:46:39:e3: 43:da:a2:49:b6:55:2b:3a:dc:79:aa:91:ea:02:a8: 8d:21:6c:08:13:dd:e1:e0:49:8d:4f:6b:a0:7f:69: 63:0a:32:15:cf:18:e9:bc:f4:dd:72:21:bb:ae:ee: 01:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8B:C9:7C:5C:C6:1E:53:62:6F:CA:FE:3E:B6:F2:80:66:9F:F4:C1 X509v3 Authority Key Identifier: keyid:B1:55:DA:DD:B8:71:B9:D6:A5:3C:D6:B4:7F:77:62:50:83:7F:77:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVXa3bhxudalPNa0f3diUIN_d3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/_IvJfFzGHlNib8r-PrbygGaf9ME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8fd6e7-496f-47cf-80fb-5468b2cf0a77/1/sVXa3bhxudalPNa0f3diUIN_d3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.89.160.0/19 212.68.64.0/19 213.252.128.0/18 IPv6: 2a01:ac00::/32 Signature Algorithm: sha256WithRSAEncryption 60:b5:ff:0e:c6:76:ab:c0:69:c8:09:f2:2b:1c:f9:11:95:54: a5:a0:6a:91:8b:a1:9f:1c:34:12:96:e2:07:4b:8e:3d:d6:d6: c7:cd:e4:8f:12:eb:3d:88:e1:d3:da:bf:fc:61:2e:18:d8:6c: 89:9b:47:87:f8:77:24:9b:b0:93:72:9d:32:d9:6a:80:36:f7: bc:0e:7e:7f:3a:39:af:ee:89:59:4f:f0:43:44:d4:8d:17:85: 7b:a9:85:a2:ca:9a:80:db:4b:d1:0f:7c:93:d6:f6:f8:1a:49: 23:6a:fe:1f:15:58:9b:f6:f2:42:a8:4f:9e:d6:d5:67:8d:47: 10:3c:f9:d7:f3:ca:ba:c4:55:0b:9c:3e:ca:23:81:33:15:c0: a1:f0:54:a6:a9:a1:68:2a:b5:af:fa:90:8c:54:05:e0:cf:59: 81:41:ca:81:c8:9e:05:18:d5:55:1b:a8:dc:5c:c3:e4:c1:95: fd:1a:b3:9e:ac:99:a4:5b:8d:99:52:79:2a:cf:75:9c:d1:a9: bc:e9:d4:52:93:44:a7:87:92:98:f9:b1:25:34:7f:9c:7e:0f: ff:88:8f:64:ae:45:83:01:dc:b2:38:13:2e:fd:97:20:fd:fe: 34:ce:6f:c6:13:16:0a:38:25:ad:c7:ad:17:6e:5a:78:9a:a8: d5:4c:3b:cf -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/hFcqRbcuE984DzK/hjMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTVkYWRkYjg3MWI5ZDZhNTNjZDZiNDdmNzc2MjUwODM3 Zjc3NzQwHhcNMjYwMTAyMTYyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzhiYzk3YzVjYzYxZTUzNjI2ZmNhZmUzZWI2ZjI4MDY2OWZmNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZxmApP9koid8VuhNCcgSG8dMRQT Frd8YvOK003LRIsb9xF2nW1/xwRBG5oaUwth62sYUKldUYi7JvZgFWa+NNhwPq05 KVPOAjF0quiI5O+HgSNZCId/QcRcuiwhgbgOFxPJmC/cWg+aCTh1Zct0lpfUTLQQ 9IN7FPgzARhYhGuwB3EpMAGVqCBhVrQtmLrDkNdflQ5y3uogWnUlN5M1HkYZksCd M86o2Hl96K+iCVlP/DvmWi3XSC3IblLFKiH3OpL1nAr6sxRe0WkL4CJGOeND2qJJ tlUrOtx5qpHqAqiNIWwIE93h4EmNT2ugf2ljCjIVzxjpvPTdciG7ru4B7QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPyLyXxcxh5TYm/K/j628oBmn/TBMB8GA1UdIwQY MBaAFLFV2t24cbnWpTzWtH93YlCDf3d0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmIt NTQ2OGIyY2YwYTc3LzEvX0l2SmZGekdIbE5pYjhyLVByYnlnR2FmOU1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS84ZmQ2ZTctNDk2Zi00N2NmLTgwZmItNTQ2OGIyY2YwYTc3 LzEvc1ZYYTNiaHh1ZGFsUE5hMGYzZGlVSU5fZDNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQFPlmgAwQF 1ERAAwQG1fyAMA0EAgACMAcDBQAqAawAMA0GCSqGSIb3DQEBCwUAA4IBAQBgtf8O xnarwGnICfIrHPkRlVSloGqRi6GfHDQSluIHS4491tbHzeSPEus9iOHT2r/8YS4Y 2GyJm0eH+Hckm7CTcp0y2WqANve8Dn5/Ojmv7olZT/BDRNSNF4V7qYWiypqA20vR D3yT1vb4Gkkjav4fFVib9vJCqE+e1tVnjUcQPPnX88q6xFULnD7KI4EzFcCh8FSm qaFoKrWv+pCMVAXgz1mBQcqByJ4FGNVVG6jcXMPkwZX9GrOerJmkW42ZUnkqz3Wc 0am86dRSk0Snh5KY+bElNH+cfg//iI9krkWDAdyyOBMu/Zcg/f40zm/GExYKOCWt x60Xblp4mqjVTDvP -----END CERTIFICATE-----Generated at Mon Jan 26 22:24:52 2026 by rpki-client