This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/iNHmZBm96p22r1v1NNf0vUA5CNU.roa File: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (raw, json) Hash identifier: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ= Subject key identifier: 88:D1:E6:64:19:BD:EA:9D:B6:AF:5B:F5:34:D7:F4:BD:40:39:08:D5 Certificate issuer: /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Certificate serial: 019B7834C933A01E29F5DCBC4E1B97EB2273 Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/iNHmZBm96p22r1v1NNf0vUA5CNU.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 45.152.251.0/24 maxlen: 24 91.247.184.0/24 maxlen: 24 161.51.101.0/24 maxlen: 24 188.241.247.0/24 maxlen: 24 193.160.154.0/24 maxlen: 24 2a14:5bc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c9:33:a0:1e:29:f5:dc:bc:4e:1b:97:eb:22:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88d1e66419bdea9db6af5bf534d7f4bd403908d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:df:b7:2a:c7:c7:a9:2b:a7:b6:09:99:9e: a9:38:57:eb:eb:3e:83:d2:b2:3d:59:5f:91:39:b1: 43:aa:bb:70:e2:9f:39:ed:41:ba:6e:b9:9f:a8:8b: 05:f5:9b:e2:a3:4f:fb:03:d5:f6:a6:88:ba:75:98: 60:20:a8:aa:29:03:73:b5:f7:1d:96:a2:ae:b0:c0: 93:86:63:4d:71:9a:b9:bd:63:1b:57:6f:32:72:c6: c8:b5:74:8f:23:de:c5:5c:e4:75:5a:e8:c9:37:2b: 54:66:23:27:eb:63:5a:e5:d3:ee:03:53:ba:d6:ce: ab:5c:fb:00:e7:81:a4:40:cd:c4:8d:02:26:ee:eb: 52:5e:a8:a1:e3:27:a3:80:e4:aa:47:9c:c9:ff:61: 31:8b:9e:40:6d:1a:42:3c:14:55:9d:d5:82:da:50: dd:f2:a3:c6:a0:fb:7a:99:4f:64:e4:52:35:3c:9a: ef:7b:b4:b4:8b:44:87:90:d2:c6:69:1f:9b:6c:0e: 9f:29:7e:a9:8d:15:56:ca:da:fa:e9:9d:95:02:98: c5:c7:a2:51:e1:5d:96:d6:7c:25:0d:3a:94:cd:07: 88:09:d7:95:b2:e9:5b:28:e7:86:27:e9:81:e0:72: cb:d7:8b:77:b4:f7:12:f9:e6:32:ed:72:82:f9:e7: 78:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D1:E6:64:19:BD:EA:9D:B6:AF:5B:F5:34:D7:F4:BD:40:39:08:D5 X509v3 Authority Key Identifier: keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/iNHmZBm96p22r1v1NNf0vUA5CNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.152.251.0/24 91.247.184.0/24 161.51.101.0/24 188.241.247.0/24 193.160.154.0/24 IPv6: 2a14:5bc0::/29 Signature Algorithm: sha256WithRSAEncryption 78:56:0e:eb:31:e3:bd:41:77:27:cb:e7:bb:6a:0d:40:5d:1a: aa:48:00:4a:98:bc:a7:0c:7f:d0:f1:34:bd:e6:26:99:ef:38: 0f:4b:a7:88:9d:50:40:0b:e3:18:0e:26:7e:12:be:ab:56:6e: 12:d2:7a:41:01:bc:40:5c:5a:bb:28:8b:41:dd:0f:58:11:dc: 1d:36:fe:90:29:0c:f8:ca:95:67:8f:50:78:34:8a:e2:cd:6b: c5:89:6f:d7:e5:ec:c2:9b:db:7d:ff:e9:60:93:27:23:d2:d1: 17:18:c8:06:03:61:97:bf:ee:35:0e:8e:02:3f:24:a5:0a:2c: d2:d5:dd:48:26:09:42:eb:f7:57:12:3d:aa:18:7e:58:5a:d4: 6f:2e:e3:6e:5e:a3:85:e6:22:cb:31:b8:11:b2:25:ef:f7:b4: c4:8d:05:5d:95:34:3a:48:94:b6:56:6b:30:e6:6a:e3:60:ff: 57:27:62:7f:38:4b:5e:47:03:46:a8:47:ff:39:d6:07:de:82: 47:e7:17:a5:fd:b4:68:30:01:09:ca:30:a1:75:9b:1b:dd:43: c6:dd:66:e4:52:24:4d:2d:da:ae:46:a2:61:7a:08:99:9d:00: ad:60:38:07:ee:f8:ea:b9:5c:7c:96:ba:bf:9a:72:89:c5:93: 03:aa:5c:a7 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4NMkzoB4p9dy8ThuX6yJzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz NmUyNmQwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGQxZTY2NDE5YmRlYTlkYjZhZjViZjUzNGQ3ZjRiZDQwMzkwOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZrftyrHx6krp7YJmZ6pOFfr6z6D 0rI9WV+RObFDqrtw4p857UG6brmfqIsF9Zvio0/7A9X2poi6dZhgIKiqKQNztfcd lqKusMCThmNNcZq5vWMbV28ycsbItXSPI97FXOR1WujJNytUZiMn62Na5dPuA1O6 1s6rXPsA54GkQM3EjQIm7utSXqih4yejgOSqR5zJ/2Exi55AbRpCPBRVndWC2lDd 8qPGoPt6mU9k5FI1PJrve7S0i0SHkNLGaR+bbA6fKX6pjRVWytr66Z2VApjFx6JR 4V2W1nwlDTqUzQeICdeVsulbKOeGJ+mB4HLL14t3tPcS+eYy7XKC+ed47wIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIjR5mQZveqdtq9b9TTX9L1AOQjVMB8GA1UdIwQY MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt NzFjMjk2ZDQ5NjlmLzEvaU5IbVpCbTk2cDIycjF2MU5OZjB2VUE1Q05VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALZj7AwQA W/e4AwQAoTNlAwQAvPH3AwQAwaCaMA0EAgACMAcDBQMqFFvAMA0GCSqGSIb3DQEB CwUAA4IBAQB4Vg7rMeO9QXcny+e7ag1AXRqqSABKmLynDH/Q8TS95iaZ7zgPS6eI nVBAC+MYDiZ+Er6rVm4S0npBAbxAXFq7KItB3Q9YEdwdNv6QKQz4ypVnj1B4NIri zWvFiW/X5ezCm9t9/+lgkycj0tEXGMgGA2GXv+41Do4CPySlCizS1d1IJglC6/dX Ej2qGH5YWtRvLuNuXqOF5iLLMbgRsiXv97TEjQVdlTQ6SJS2Vmsw5mrjYP9XJ2J/ OEteRwNGqEf/OdYH3oJH5xel/bRoMAEJyjChdZsb3UPG3WbkUiRNLdquRqJhegiZ nQCtYDgH7vjquVx8lrq/mnKJxZMDqlyn -----END CERTIFICATE-----Generated at Sun Jan 25 16:41:28 2026 by rpki-client