This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/ILxA1XEGj58DPvCJ70R3V0QUW0o.roa File: ILxA1XEGj58DPvCJ70R3V0QUW0o.roa (raw, json) Hash identifier: 2pgTad0+RDSMUqb1cSCzcPHq0QPOVvclokToC+rjLTI= Subject key identifier: 20:BC:40:D5:71:06:8F:9F:03:3E:F0:89:EF:44:77:57:44:14:5B:4A Certificate issuer: /CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Certificate serial: 019B7CED177334A3C22B9858C2AC098357B8 Authority key identifier: CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/ILxA1XEGj58DPvCJ70R3V0QUW0o.roa Signing time: Fri 02 Jan 2026 04:17:51 +0000 ROA not before: Fri 02 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214794 IP address blocks: 185.193.20.0/23 maxlen: 23 185.193.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:17:73:34:a3:c2:2b:98:58:c2:ac:09:83:57:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbd7fc13e1836c396cca21789704ab39fd9e5b64 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20bc40d571068f9f033ef089ef44775744145b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0a:61:d1:78:34:5b:7c:75:fc:fa:9d:48:7f: c1:23:0f:18:2f:ea:c5:d7:65:b7:87:4b:c5:2d:9e: ee:16:bd:68:e5:05:7b:62:16:c4:57:62:98:80:f1: 3e:e5:7e:1c:1d:74:b1:36:87:fd:ba:d5:d8:6d:79: f5:78:58:51:fc:94:94:04:94:da:f6:5b:2d:d2:11: 96:16:72:21:07:83:c6:b9:b1:3c:5b:dc:3b:6e:86: e5:1d:50:92:25:03:a9:62:ed:fa:cb:06:48:09:f3: 6b:d5:cc:67:76:8a:d0:b0:dc:0f:65:71:8f:13:f0: d2:2f:22:69:9b:53:85:34:1b:07:66:aa:2a:b9:f1: c3:70:d1:a5:62:24:17:f7:9f:6f:a1:5c:b5:0a:d1: 5f:c7:7c:f2:05:be:2b:71:9d:77:98:05:38:fb:80: 9b:cc:f7:2d:d5:68:20:20:0b:e8:12:32:d9:d0:60: bc:44:e5:cc:ab:80:d5:58:02:40:e7:12:5a:c9:78: 23:0d:2f:61:c5:72:3c:60:c3:73:05:6e:d6:0b:3d: 34:58:8c:85:d2:87:91:71:fc:00:15:5b:e2:3a:da: 9e:c9:38:8f:a4:59:99:fe:93:3b:76:8c:c1:86:1d: 58:1d:27:03:af:ca:fc:60:ef:39:29:e6:40:d9:0b: 96:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BC:40:D5:71:06:8F:9F:03:3E:F0:89:EF:44:77:57:44:14:5B:4A X509v3 Authority Key Identifier: keyid:CB:D7:FC:13:E1:83:6C:39:6C:CA:21:78:97:04:AB:39:FD:9E:5B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/ILxA1XEGj58DPvCJ70R3V0QUW0o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/214c9a-0950-40d9-a586-e35db52567f0/1/y9f8E-GDbDlsyiF4lwSrOf2eW2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.193.20.0/22 Signature Algorithm: sha256WithRSAEncryption 28:00:ec:03:df:06:e0:e5:32:06:66:2c:59:92:04:0e:7c:ae: 4f:0b:bc:c7:a6:56:26:77:97:ef:4a:88:2c:79:d2:be:65:2f: b4:d2:e1:d7:13:bb:75:79:5a:64:0d:05:c3:89:fe:2f:cf:ae: 3e:39:ae:48:ee:d0:13:97:e6:15:03:c5:7c:43:6c:a9:bb:e3: 53:fa:15:f6:fa:0c:cb:59:13:ea:20:5e:6a:b5:d8:35:9b:1e: 67:1e:2f:ae:05:40:37:d6:ee:c8:af:60:97:41:98:15:30:f6: 2f:09:f2:0d:d4:d0:93:90:af:40:a1:19:c7:ef:de:c5:3d:1a: 10:cc:f3:7f:3c:3b:cb:e4:41:3d:3a:a9:1a:3d:3a:b7:79:33: 0f:1f:48:77:e1:f8:2a:e5:09:e3:70:8f:dd:c5:01:f3:28:fb: ef:b4:d1:20:4e:ac:c8:91:4b:ae:cc:7d:3d:12:90:8a:a5:9f: 8c:7d:e8:e4:8c:fd:7f:54:03:12:fb:13:c2:b4:6d:ab:68:1d: 8e:62:ad:3a:2c:69:c1:bc:1a:81:f7:9f:e2:3c:17:76:c6:2f: a6:9e:24:f3:75:90:e3:ec:a9:0f:7d:b0:6a:e3:1c:db:52:23: 59:af:4a:eb:15:b4:38:57:14:50:30:b9:ce:fc:37:d9:d7:0e: 31:36:b8:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87RdzNKPCK5hYwqwJg1e4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZDdmYzEzZTE4MzZjMzk2Y2NhMjE3ODk3MDRhYjM5ZmQ5 ZTViNjQwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGJjNDBkNTcxMDY4ZjlmMDMzZWYwODllZjQ0Nzc1NzQ0MTQ1YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgph0Xg0W3x1/PqdSH/BIw8YL+rF 12W3h0vFLZ7uFr1o5QV7YhbEV2KYgPE+5X4cHXSxNof9utXYbXn1eFhR/JSUBJTa 9lst0hGWFnIhB4PGubE8W9w7boblHVCSJQOpYu36ywZICfNr1cxndorQsNwPZXGP E/DSLyJpm1OFNBsHZqoqufHDcNGlYiQX959voVy1CtFfx3zyBb4rcZ13mAU4+4Cb zPct1WggIAvoEjLZ0GC8ROXMq4DVWAJA5xJayXgjDS9hxXI8YMNzBW7WCz00WIyF 0oeRcfwAFVviOtqeyTiPpFmZ/pM7dozBhh1YHScDr8r8YO85KeZA2QuWaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCC8QNVxBo+fAz7wie9Ed1dEFFtKMB8GA1UdIwQY MBaAFMvX/BPhg2w5bMoheJcEqzn9nltkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYt ZTM1ZGI1MjU2N2YwLzEvSUx4QTFYRUdqNThEUHZDSjcwUjNWMFFVVzBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yMTRjOWEtMDk1MC00MGQ5LWE1ODYtZTM1ZGI1MjU2N2Yw LzEveTlmOEUtR0RiRGxzeWlGNGx3U3JPZjJlVzJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucEUMA0G CSqGSIb3DQEBCwUAA4IBAQAoAOwD3wbg5TIGZixZkgQOfK5PC7zHplYmd5fvSogs edK+ZS+00uHXE7t1eVpkDQXDif4vz64+Oa5I7tATl+YVA8V8Q2ypu+NT+hX2+gzL WRPqIF5qtdg1mx5nHi+uBUA31u7Ir2CXQZgVMPYvCfIN1NCTkK9AoRnH797FPRoQ zPN/PDvL5EE9OqkaPTq3eTMPH0h34fgq5QnjcI/dxQHzKPvvtNEgTqzIkUuuzH09 EpCKpZ+MfejkjP1/VAMS+xPCtG2raB2OYq06LGnBvBqB95/iPBd2xi+mniTzdZDj 7KkPfbBq4xzbUiNZr0rrFbQ4VxRQMLnO/DfZ1w4xNrhT -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:55 2026 by rpki-client