This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Irxt6wWPyKzv5xvcOXLZ9gN-qNI.roa File: Irxt6wWPyKzv5xvcOXLZ9gN-qNI.roa (raw, json) Hash identifier: KZlGUxJlbxysYFV7NjzMUhVYkkl5nLuXor/mBw3vAzg= Subject key identifier: 22:BC:6D:EB:05:8F:C8:AC:EF:E7:1B:DC:39:72:D9:F6:03:7E:A8:D2 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12FC6D31D4A740E6E212292A6D2038 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Irxt6wWPyKzv5xvcOXLZ9gN-qNI.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60633 IP address blocks: 193.5.38.0/24 maxlen: 24 193.246.32.0/21 maxlen: 21 193.246.40.0/21 maxlen: 21 193.246.208.0/20 maxlen: 20 2a02:a90:c405::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fc:6d:31:d4:a7:40:e6:e2:12:29:2a:6d:20:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22bc6deb058fc8acefe71bdc3972d9f6037ea8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:9c:b7:ee:42:a4:f7:cd:e9:c5:9e:d6:a9: ef:f2:f4:8b:be:18:bb:ed:44:3c:15:5c:0e:ea:c2: 83:16:f1:a1:1f:00:ca:c9:80:fb:63:c4:b9:56:47: da:cc:04:87:0e:8a:ee:7a:7d:06:e0:a7:33:70:a5: 1c:4a:80:37:9d:6e:0b:c1:e0:ea:84:15:f5:81:2c: b4:3e:aa:fc:9d:af:1b:20:df:cf:c1:ff:c7:83:1b: 19:ac:0d:54:7a:7c:12:3f:3c:a4:cc:f8:5f:3f:5e: 9c:55:81:b0:e6:e3:59:d5:36:f6:d2:82:8f:cf:17: 83:89:12:3a:37:7f:54:1e:30:72:5a:b4:c7:1e:4d: 8f:9d:c4:61:82:a9:d6:85:63:39:38:3a:8b:d5:28: 9e:98:60:37:a8:c3:68:c6:8f:dc:40:eb:f4:d3:da: a4:2d:9c:0e:a1:54:ed:10:15:35:a7:9a:54:04:10: 67:b3:19:4a:8b:7a:92:1c:5b:01:78:22:ed:5f:e7: 1d:45:93:cd:e5:47:70:11:8d:34:dc:1b:20:e4:e0: 47:c5:5d:bc:15:3e:e3:91:22:10:7c:05:f9:2f:aa: fe:b0:94:51:70:59:90:51:31:9f:73:e9:7a:6f:87: a2:8a:b6:e0:1f:40:2c:c9:6a:75:4f:48:10:d2:39: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BC:6D:EB:05:8F:C8:AC:EF:E7:1B:DC:39:72:D9:F6:03:7E:A8:D2 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Irxt6wWPyKzv5xvcOXLZ9gN-qNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.38.0/24 193.246.32.0/20 193.246.208.0/20 IPv6: 2a02:a90:c405::/48 Signature Algorithm: sha256WithRSAEncryption 69:53:5f:9f:36:2f:fe:45:be:ed:37:6d:ea:2c:0e:b1:76:d9: 96:9d:66:64:f7:85:83:b1:5a:23:3b:f2:e6:87:6e:5d:86:af: a6:a7:81:9a:26:31:66:4d:28:c4:fa:f5:88:88:1a:4a:77:fa: ce:1d:0d:5b:6f:46:25:c8:1e:c2:3d:9c:1e:58:be:0e:45:1f: bf:3a:d3:8b:c6:4d:09:bf:84:34:76:5c:66:74:89:47:3e:a4: f6:2f:67:56:3c:12:eb:43:03:c3:73:4f:30:30:16:d0:7b:7b: cc:b1:f8:e9:2b:bd:05:3f:89:11:02:b0:10:fe:5a:26:a1:34: 01:8d:f4:fa:fd:e4:51:56:74:1d:62:75:5b:7e:d9:21:08:2d: fe:06:b1:8e:33:39:b2:dc:77:b1:2a:e3:72:77:fc:93:f9:72: 57:91:a5:a8:75:2d:38:3a:86:61:d6:d1:66:61:46:92:29:2b: 67:1b:06:50:7a:c2:ec:e2:e9:9c:bc:b1:a5:39:02:8f:3b:25: f7:6d:35:57:1e:05:78:81:af:b4:b5:d7:dd:55:6b:01:0c:53: 17:e4:79:89:75:17:1d:1c:62:17:3d:e8:76:4c:b3:1e:8b:a6: 3b:17:af:51:3c:bb:22:53:eb:17:6f:bb:25:ba:a9:ac:fe:57: 19:ab:9a:fb -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8EvxtMdSnQObiEikqbSA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJjNmRlYjA1OGZjOGFjZWZlNzFiZGMzOTcyZDlmNjAzN2VhOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Cct+5CpPfN6cWe1qnv8vSLvhi7 7UQ8FVwO6sKDFvGhHwDKyYD7Y8S5VkfazASHDoruen0G4KczcKUcSoA3nW4LweDq hBX1gSy0Pqr8na8bIN/Pwf/HgxsZrA1UenwSPzykzPhfP16cVYGw5uNZ1Tb20oKP zxeDiRI6N39UHjByWrTHHk2PncRhgqnWhWM5ODqL1SiemGA3qMNoxo/cQOv009qk LZwOoVTtEBU1p5pUBBBnsxlKi3qSHFsBeCLtX+cdRZPN5UdwEY003Bsg5OBHxV28 FT7jkSIQfAX5L6r+sJRRcFmQUTGfc+l6b4eiirbgH0AsyWp1T0gQ0jnhtQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFCK8besFj8is7+cb3Dly2fYDfqjSMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvSXJ4dDZ3V1B5S3p2NXh2Y09YTFo5Z04tcU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwQUmAwQE wfYgAwQEwfbQMA8EAgACMAkDBwAqAgqQxAUwDQYJKoZIhvcNAQELBQADggEBAGlT X582L/5Fvu03beosDrF22ZadZmT3hYOxWiM78uaHbl2Gr6angZomMWZNKMT69YiI Gkp3+s4dDVtvRiXIHsI9nB5Yvg5FH78604vGTQm/hDR2XGZ0iUc+pPYvZ1Y8EutD A8NzTzAwFtB7e8yx+OkrvQU/iRECsBD+WiahNAGN9Pr95FFWdB1idVt+2SEILf4G sY4zObLcd7Eq43J3/JP5cleRpah1LTg6hmHW0WZhRpIpK2cbBlB6wuzi6Zy8saU5 Ao87JfdtNVceBXiBr7S1191VawEMUxfkeYl1Fx0cYhc96HZMsx6LpjsXr1E8uyJT 6xdvuyW6qaz+Vxmrmvs= -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:51 2026 by rpki-client