This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa File: Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa (raw, json) Hash identifier: E6NdR2fVzdULD14RMMCq1nu2I2iubEiAOLLdM23/Ci0= Subject key identifier: 22:4A:B6:98:65:25:B2:5A:A4:0F:56:5E:A8:65:02:B0:1A:82:AD:FA Certificate issuer: /CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Certificate serial: 019B7F83C17B87DD43CEAEFAB541ECBD2395 Authority key identifier: 88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa Signing time: Fri 02 Jan 2026 16:21:39 +0000 ROA not before: Fri 02 Jan 2026 16:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12479 IP address blocks: 62.32.128.0/17 maxlen: 24 62.32.128.0/19 maxlen: 24 62.32.160.0/19 maxlen: 24 62.32.192.0/19 maxlen: 24 62.32.192.0/20 maxlen: 24 62.32.208.0/20 maxlen: 24 62.32.224.0/19 maxlen: 24 83.231.0.0/17 maxlen: 24 83.231.0.0/19 maxlen: 24 83.231.32.0/23 maxlen: 24 83.231.40.0/24 maxlen: 24 83.231.41.0/24 maxlen: 24 83.231.42.0/24 maxlen: 24 83.231.43.0/24 maxlen: 24 83.231.48.0/21 maxlen: 24 83.231.56.0/21 maxlen: 24 83.231.64.0/18 maxlen: 24 185.124.28.0/22 maxlen: 24 212.169.128.0/17 maxlen: 24 213.143.32.0/19 maxlen: 19 213.143.32.0/24 maxlen: 24 213.143.36.0/22 maxlen: 24 213.143.44.0/22 maxlen: 24 213.143.48.0/22 maxlen: 24 213.143.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.mft rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:c1:7b:87:dd:43:ce:ae:fa:b5:41:ec:bd:23:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88678ca34c3c6365fb616a66077160a494a6e9d6 Validity Not Before: Jan 2 16:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=224ab6986525b25aa40f565ea86502b01a82adfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:e0:88:59:70:22:35:61:32:8e:ff:f7:7c: 84:ed:01:ed:08:a6:7a:11:a2:ba:5d:53:67:1e:ca: e5:e3:16:e8:49:4f:8a:90:c4:d1:82:d5:db:3a:96: 3f:3e:42:8e:34:42:85:14:3e:83:c2:6d:d6:57:b0: c4:a8:f1:4a:d3:1b:bf:d9:96:60:d8:32:51:61:85: 2c:1a:6f:29:8c:57:0a:b8:91:f3:6c:a3:3f:19:3c: 23:e3:05:b0:43:55:a6:36:02:04:52:6f:49:4c:e8: 1f:d2:4f:95:f8:b9:b2:fd:c4:af:ff:ce:88:45:80: 67:82:fa:a9:90:c0:a2:2b:f3:82:67:99:c4:ad:77: 4b:fd:cd:ce:88:39:32:35:56:62:93:ce:69:d3:57: f0:69:91:6a:9e:70:0b:59:07:d4:cc:c9:fc:9c:e9: ee:51:a8:00:9e:be:fb:4e:0c:e2:f8:12:36:10:6c: e8:f9:4d:0a:9a:39:fc:c2:7a:83:b7:ba:90:66:0e: d0:6e:5b:3f:11:1c:f3:40:17:f1:05:c4:81:8f:ce: 63:30:c6:51:1f:01:c4:08:4b:54:d2:b1:ed:3d:1e: 6d:2c:a5:e5:69:9a:aa:79:6b:5a:88:df:24:dd:69: 0c:c5:9d:fa:71:ae:37:a2:3f:5c:51:87:e0:9d:dd: 91:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4A:B6:98:65:25:B2:5A:A4:0F:56:5E:A8:65:02:B0:1A:82:AD:FA X509v3 Authority Key Identifier: keyid:88:67:8C:A3:4C:3C:63:65:FB:61:6A:66:07:71:60:A4:94:A6:E9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/Ikq2mGUlslqkD1ZeqGUCsBqCrfo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3baacc-4201-4951-8354-f85f721fb1b8/1/iGeMo0w8Y2X7YWpmB3FgpJSm6dY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.32.128.0/17 83.231.0.0/17 185.124.28.0/22 212.169.128.0/17 213.143.32.0/19 Signature Algorithm: sha256WithRSAEncryption 90:6e:8d:17:1d:e0:41:aa:8b:1e:7e:8c:73:f3:7c:8a:22:4c: 11:79:f3:c3:60:67:16:1f:8e:b1:05:5d:0f:78:51:c8:ef:cc: d1:f0:40:75:ba:7e:09:ee:8a:17:c9:29:74:cf:89:1c:5d:f5: 7c:bf:dd:75:63:d2:d9:82:94:e3:61:8c:63:86:77:e1:b4:8b: 86:ed:68:6f:55:6d:d4:40:e8:e5:07:93:65:d3:a4:95:30:68: b6:c1:3b:2d:de:c6:2f:3f:d3:c6:22:70:10:db:c9:e6:c3:17: d5:8a:8a:24:f0:b1:72:47:cd:34:b2:1c:36:4c:05:26:fa:a2: 2a:15:08:ed:a5:60:9a:ce:9b:dd:07:5c:65:16:20:3e:c4:1d: 6d:5a:46:f2:9a:24:47:50:7a:4b:43:6d:87:01:5f:73:47:ca: a1:ee:86:57:96:37:83:bc:2d:31:ae:c4:2d:d0:9b:09:95:91: b1:a3:57:37:50:bd:e7:50:d6:f8:84:83:b8:ed:38:10:a2:6a: d5:34:51:19:ef:c1:b0:1e:36:5a:fa:c6:5e:d8:80:db:d5:76: 5e:e7:6c:bd:e2:6a:50:51:04:50:48:2f:94:11:b9:b6:3d:98: df:e6:a4:57:9e:f2:88:2c:1c:e2:65:c2:52:e3:8d:72:26:ed: 3b:4c:d2:43 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/g8F7h91Dzq76tUHsvSOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Njc4Y2EzNGMzYzYzNjVmYjYxNmE2NjA3NzE2MGE0OTRh NmU5ZDYwHhcNMjYwMTAyMTYyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjRhYjY5ODY1MjViMjVhYTQwZjU2NWVhODY1MDJiMDFhODJhZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHXgiFlwIjVhMo7/93yE7QHtCKZ6 EaK6XVNnHsrl4xboSU+KkMTRgtXbOpY/PkKONEKFFD6Dwm3WV7DEqPFK0xu/2ZZg 2DJRYYUsGm8pjFcKuJHzbKM/GTwj4wWwQ1WmNgIEUm9JTOgf0k+V+Lmy/cSv/86I RYBngvqpkMCiK/OCZ5nErXdL/c3OiDkyNVZik85p01fwaZFqnnALWQfUzMn8nOnu UagAnr77Tgzi+BI2EGzo+U0Kmjn8wnqDt7qQZg7Qbls/ERzzQBfxBcSBj85jMMZR HwHECEtU0rHtPR5tLKXlaZqqeWtaiN8k3WkMxZ36ca43oj9cUYfgnd2RGQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCJKtphlJbJapA9WXqhlArAagq36MB8GA1UdIwQY MBaAFIhnjKNMPGNl+2FqZgdxYKSUpunWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQt Zjg1ZjcyMWZiMWI4LzEvSWtxMm1HVWxzbHFrRDFaZXFHVUNzQnFDcmZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zYmFhY2MtNDIwMS00OTUxLTgzNTQtZjg1ZjcyMWZiMWI4 LzEvaUdlTW8wdzhZMlg3WVdwbUIzRmdwSlNtNmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHPiCAAwQH U+cAAwQCuXwcAwQH1KmAAwQF1Y8gMA0GCSqGSIb3DQEBCwUAA4IBAQCQbo0XHeBB qosefoxz83yKIkwRefPDYGcWH46xBV0PeFHI78zR8EB1un4J7ooXySl0z4kcXfV8 v911Y9LZgpTjYYxjhnfhtIuG7WhvVW3UQOjlB5Nl06SVMGi2wTst3sYvP9PGInAQ 28nmwxfViook8LFyR800shw2TAUm+qIqFQjtpWCazpvdB1xlFiA+xB1tWkbymiRH UHpLQ22HAV9zR8qh7oZXljeDvC0xrsQt0JsJlZGxo1c3UL3nUNb4hIO47TgQomrV NFEZ78GwHjZa+sZe2IDb1XZe52y94mpQUQRQSC+UEbm2PZjf5qRXnvKILBziZcJS 441yJu07TNJD -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:58 2026 by rpki-client