This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa File: IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa (raw, json) Hash identifier: cDrqltz5JUNSKHmEVA8KR/liv1EQj+DHA9UlbgBwDnc= Subject key identifier: 22:BA:C2:BB:54:99:D8:0B:8E:21:79:DD:A8:35:0C:6A:44:C7:4B:74 Certificate issuer: /CN=7ba77362e314586d0d21884d01a85adb77665b74 Certificate serial: 019B7B35770493C9753CC99FAA476D19F8D5 Authority key identifier: 7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206837 IP address blocks: 157.97.84.0/22 maxlen: 24 157.97.84.0/24 maxlen: 24 157.97.85.0/24 maxlen: 24 157.97.86.0/24 maxlen: 24 157.97.87.0/24 maxlen: 24 176.98.208.0/22 maxlen: 24 176.98.208.0/23 maxlen: 23 176.98.208.0/24 maxlen: 24 176.98.209.0/24 maxlen: 24 176.98.210.0/23 maxlen: 23 176.98.210.0/24 maxlen: 24 176.98.211.0/24 maxlen: 24 185.127.52.0/22 maxlen: 22 185.127.52.0/23 maxlen: 23 185.127.52.0/24 maxlen: 24 185.127.53.0/24 maxlen: 24 185.127.54.0/23 maxlen: 23 185.127.54.0/24 maxlen: 24 185.127.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:77:04:93:c9:75:3c:c9:9f:aa:47:6d:19:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ba77362e314586d0d21884d01a85adb77665b74 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22bac2bb5499d80b8e2179dda8350c6a44c74b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:f8:62:52:09:dc:dd:63:e1:26:6f:33:40: a4:ee:0a:be:cd:fe:bb:f3:60:0e:8f:ce:29:f2:5c: d0:94:9d:38:5f:d8:96:cb:23:ea:81:3c:f0:aa:9a: 4a:9f:81:55:01:eb:27:47:5c:5c:21:99:27:c3:d9: ca:d4:94:56:40:6c:e6:0e:30:95:c8:78:0e:c2:56: 92:7b:37:80:6f:10:9a:07:b4:26:ea:98:8a:d5:e8: d5:13:5e:50:df:1b:59:e4:3a:35:ce:cd:20:d5:bc: 28:df:77:a2:da:6c:74:18:81:d3:ff:0b:a3:93:11: 25:39:69:99:cd:a4:af:79:dc:16:98:5f:04:a6:a2: c9:d1:ad:37:57:b9:2d:3d:41:c9:3a:62:ba:7a:2a: 2f:5a:66:a0:eb:3a:54:c3:d5:fd:7e:47:27:27:b8: 4f:60:0e:36:1d:83:0a:2f:f7:8c:23:02:f8:74:a1: e4:6e:f4:00:a0:fe:e6:87:2d:5e:fb:1a:17:83:6b: bf:82:bf:e0:4f:66:97:fe:d5:8b:0d:ba:35:11:82: 3b:db:d2:cc:8f:61:e0:ac:c3:1b:6a:4c:98:86:18: ca:2f:f8:15:6e:98:39:88:3a:e1:8f:de:07:0a:43: f6:91:8d:41:31:ce:3e:92:46:d5:46:34:b2:c0:41: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BA:C2:BB:54:99:D8:0B:8E:21:79:DD:A8:35:0C:6A:44:C7:4B:74 X509v3 Authority Key Identifier: keyid:7B:A7:73:62:E3:14:58:6D:0D:21:88:4D:01:A8:5A:DB:77:66:5B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6dzYuMUWG0NIYhNAaha23dmW3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/IrrCu1SZ2AuOIXndqDUMakTHS3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ca698e-e6a8-41f4-869c-961f437135c6/1/e6dzYuMUWG0NIYhNAaha23dmW3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.84.0/22 176.98.208.0/22 185.127.52.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:77:1b:9e:b6:2a:ed:f2:8a:a0:3a:58:26:35:a5:23:75:a6: 02:6d:fe:bd:cd:80:03:a8:8c:a2:0e:35:95:c4:4b:05:4d:30: 96:91:9b:5c:17:7f:5e:c3:1d:87:d1:06:1b:5c:f3:ca:f5:a0: 67:71:80:16:da:29:e4:eb:e3:de:d9:9a:f8:12:5f:83:55:26: e1:64:51:5d:98:f6:88:33:c5:64:fc:a3:08:cb:97:51:5f:bb: ea:7c:2b:05:69:e2:5b:30:2a:86:cf:cb:03:a2:45:f0:ba:2f: 6b:5f:cf:3b:78:c3:9a:01:99:da:5b:8c:56:62:0b:f5:d1:57: ef:06:d8:a5:e1:54:2d:af:75:f3:78:e5:d7:e1:22:7a:48:3d: df:62:f4:b2:f7:66:ab:97:72:01:ce:8a:77:45:45:6e:b2:6e: 56:d4:30:a9:76:28:72:aa:03:ff:f7:9b:16:d9:1d:00:f6:f1: 2c:b1:49:2a:bb:ff:c5:9b:1a:40:d3:d3:f5:23:87:23:ee:31: 8e:c8:df:9f:5c:44:8c:0d:c8:ab:7f:e8:66:ae:22:d5:19:3b: c0:db:b3:8c:20:94:f7:ca:92:31:b2:4f:bb:e3:34:71:ee:a7: 85:d8:8d:18:6e:7f:13:62:d2:d8:d0:73:ff:9d:d4:49:c4:e2: 2e:2d:32:ab -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NXcEk8l1PMmfqkdtGfjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiYTc3MzYyZTMxNDU4NmQwZDIxODg0ZDAxYTg1YWRiNzc2 NjViNzQwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJhYzJiYjU0OTlkODBiOGUyMTc5ZGRhODM1MGM2YTQ0Yzc0Yjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bH4YlIJ3N1j4SZvM0Ck7gq+zf67 82AOj84p8lzQlJ04X9iWyyPqgTzwqppKn4FVAesnR1xcIZknw9nK1JRWQGzmDjCV yHgOwlaSezeAbxCaB7Qm6piK1ejVE15Q3xtZ5Do1zs0g1bwo33ei2mx0GIHT/wuj kxElOWmZzaSvedwWmF8EpqLJ0a03V7ktPUHJOmK6eiovWmag6zpUw9X9fkcnJ7hP YA42HYMKL/eMIwL4dKHkbvQAoP7mhy1e+xoXg2u/gr/gT2aX/tWLDbo1EYI729LM j2HgrMMbakyYhhjKL/gVbpg5iDrhj94HCkP2kY1BMc4+kkbVRjSywEGs2QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCK6wrtUmdgLjiF53ag1DGpEx0t0MB8GA1UdIwQY MBaAFHunc2LjFFhtDSGITQGoWtt3Zlt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMt OTYxZjQzNzEzNWM2LzEvSXJyQ3UxU1oyQXVPSVhuZHFEVU1ha1RIUzNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jYTY5OGUtZTZhOC00MWY0LTg2OWMtOTYxZjQzNzEzNWM2 LzEvZTZkell1TVVXRzBOSVloTkFhaGEyM2RtVzNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCnWFUAwQC sGLQAwQCuX80MA0GCSqGSIb3DQEBCwUAA4IBAQA7dxuetirt8oqgOlgmNaUjdaYC bf69zYADqIyiDjWVxEsFTTCWkZtcF39ewx2H0QYbXPPK9aBncYAW2ink6+Pe2Zr4 El+DVSbhZFFdmPaIM8Vk/KMIy5dRX7vqfCsFaeJbMCqGz8sDokXwui9rX887eMOa AZnaW4xWYgv10VfvBtil4VQtr3XzeOXX4SJ6SD3fYvSy92arl3IBzop3RUVusm5W 1DCpdihyqgP/95sW2R0A9vEssUkqu//FmxpA09P1I4cj7jGOyN+fXESMDcirf+hm riLVGTvA27OMIJT3ypIxsk+74zRx7qeF2I0Ybn8TYtLY0HP/ndRJxOIuLTKr -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:48 2026 by rpki-client