This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/IzioJZxghFwgMTnVeVHHpMj-swI.roa File: IzioJZxghFwgMTnVeVHHpMj-swI.roa (raw, json) Hash identifier: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI= Subject key identifier: 23:38:A8:25:9C:60:84:5C:20:31:39:D5:79:51:C7:A4:C8:FE:B3:02 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 019BBB3915CEDC4A6E42B12CDC9D1A7B839D Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/IzioJZxghFwgMTnVeVHHpMj-swI.roa Signing time: Wed 14 Jan 2026 06:37:19 +0000 ROA not before: Wed 14 Jan 2026 06:37:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 91.230.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:39:15:ce:dc:4a:6e:42:b1:2c:dc:9d:1a:7b:83:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Jan 14 06:37:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2338a8259c60845c203139d57951c7a4c8feb302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:76:24:18:a2:6e:6f:57:3b:80:90:a4:12:9b: 34:61:89:04:3b:f8:0b:b1:69:32:3f:9f:04:db:4a: d4:ca:33:2e:9e:51:a1:f2:19:0e:00:9f:7e:fa:04: ab:6c:65:00:b3:7d:d8:ce:0a:88:96:cd:79:61:4b: 78:ce:cc:65:9e:d2:9e:c1:c8:c2:0c:f3:7a:e2:68: 93:4f:a8:fc:6b:36:a8:d1:2d:a7:4a:5f:ec:6c:75: cf:6a:c2:c2:f3:d4:58:49:01:88:2e:1a:bd:f0:a0: a6:64:97:da:64:3e:9e:57:17:a2:16:a1:da:b2:a4: 73:44:31:f4:bd:36:b3:9d:9d:1d:f6:90:61:02:c6: 48:21:98:2f:15:04:06:58:16:fd:2d:17:15:29:8b: 99:7a:af:39:1c:f6:9c:72:b5:0f:41:89:ae:14:70: 7c:bf:27:9c:eb:63:18:65:bd:dd:42:e3:47:51:73: f9:05:06:1c:47:8e:3b:d5:c5:37:30:2f:52:3b:0f: c6:d7:14:45:7a:72:dd:60:11:14:ec:eb:3a:3b:0a: c3:7b:ad:5c:a5:49:09:25:af:45:66:81:73:5c:07: 0e:d8:f7:e1:5a:1f:88:48:f5:a8:19:3e:06:97:1a: 5f:2b:21:a7:6e:7b:ba:b2:61:89:35:be:e5:01:93: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:38:A8:25:9C:60:84:5C:20:31:39:D5:79:51:C7:A4:C8:FE:B3:02 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/IzioJZxghFwgMTnVeVHHpMj-swI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.230.47.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d1:ac:8b:c5:3b:a0:5a:e2:03:af:ec:57:aa:36:49:7b:30: 9a:15:b4:a7:80:92:70:67:65:f2:aa:c6:b6:79:4e:55:bc:60: 5b:26:ae:63:5d:6a:ff:09:c7:1f:3d:54:01:2e:76:07:e1:19: d0:94:55:8d:3c:f6:9f:dd:d7:45:ec:89:05:b2:62:e6:69:f2: 93:a2:a6:93:d7:3e:56:82:af:61:36:0b:13:6e:33:9e:46:bf: 3c:99:c0:01:bc:73:0c:be:89:7f:4f:47:24:2b:e2:f4:9e:de: d5:96:13:5b:13:4a:be:f0:6b:dc:db:a8:1b:8d:3e:c5:82:de: c3:a4:59:f3:ad:88:af:1c:63:72:8b:38:de:a9:69:83:db:c8: 7a:bd:af:c4:9a:79:d8:e7:49:9c:c9:22:95:05:f5:d8:83:fd: 39:e6:88:68:1c:81:ce:a7:f1:06:bf:d0:bb:09:bc:b2:d1:51: 42:0e:5f:0e:51:fc:f4:60:71:5f:0f:01:25:86:2a:de:d6:14: 12:11:66:4c:b4:f1:78:c1:ad:b8:21:c7:01:50:14:cc:4a:56: fa:f6:0d:93:d0:bb:4b:6c:97:9c:2e:39:e2:79:fd:34:39:e9: 90:7a:4a:15:03:8b:ac:67:b5:e3:fe:56:85:b8:c9:74:93:06: d5:fe:97:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu7ORXO3EpuQrEs3J0ae4OdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwMTE0MDYzNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzM4YTgyNTljNjA4NDVjMjAzMTM5ZDU3OTUxYzdhNGM4ZmViMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXYkGKJub1c7gJCkEps0YYkEO/gL sWkyP58E20rUyjMunlGh8hkOAJ9++gSrbGUAs33YzgqIls15YUt4zsxlntKewcjC DPN64miTT6j8azao0S2nSl/sbHXPasLC89RYSQGILhq98KCmZJfaZD6eVxeiFqHa sqRzRDH0vTaznZ0d9pBhAsZIIZgvFQQGWBb9LRcVKYuZeq85HPaccrUPQYmuFHB8 vyec62MYZb3dQuNHUXP5BQYcR4471cU3MC9SOw/G1xRFenLdYBEU7Os6OwrDe61c pUkJJa9FZoFzXAcO2PfhWh+ISPWoGT4GlxpfKyGnbnu6smGJNb7lAZPHQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCM4qCWcYIRcIDE51XlRx6TI/rMCMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvSXppb0paeGdoRndnTVRuVmVWSEhwTWotc3dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+YvMA0G CSqGSIb3DQEBCwUAA4IBAQAd0ayLxTugWuIDr+xXqjZJezCaFbSngJJwZ2Xyqsa2 eU5VvGBbJq5jXWr/CccfPVQBLnYH4RnQlFWNPPaf3ddF7IkFsmLmafKToqaT1z5W gq9hNgsTbjOeRr88mcABvHMMvol/T0ckK+L0nt7VlhNbE0q+8Gvc26gbjT7Fgt7D pFnzrYivHGNyizjeqWmD28h6va/EmnnY50mcySKVBfXYg/055ohoHIHOp/EGv9C7 Cbyy0VFCDl8OUfz0YHFfDwElhire1hQSEWZMtPF4wa24IccBUBTMSlb69g2T0LtL bJecLjnief00OemQekoVA4usZ7Xj/laFuMl0kwbV/pfP -----END CERTIFICATE-----Generated at Sun Jan 25 11:43:25 2026 by rpki-client