This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/ILMdvMW_ucbbRxIWVM1lnkFSdus.roa File: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (raw, json) Hash identifier: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ= Subject key identifier: 20:B3:1D:BC:C5:BF:B9:C6:DB:47:12:16:54:CD:65:9E:41:52:76:EB Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C803DB16EE2CECF0CC9E9D36BAA91E5 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/ILMdvMW_ucbbRxIWVM1lnkFSdus.roa Signing time: Fri 02 Jan 2026 02:18:57 +0000 ROA not before: Fri 02 Jan 2026 02:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29314 IP address blocks: 109.232.24.0/22 maxlen: 22 185.13.168.0/22 maxlen: 22 213.92.128.0/17 maxlen: 17 213.92.128.0/18 maxlen: 18 213.92.160.0/19 maxlen: 19 213.92.192.0/18 maxlen: 18 213.156.96.0/22 maxlen: 22 213.156.104.0/22 maxlen: 22 213.156.108.0/22 maxlen: 22 213.156.112.0/22 maxlen: 22 213.156.116.0/22 maxlen: 22 213.156.120.0/22 maxlen: 22 213.156.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3d:b1:6e:e2:ce:cf:0c:c9:e9:d3:6b:aa:91:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20b31dbcc5bfb9c6db47121654cd659e415276eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:a8:67:91:12:24:2e:96:6a:d2:99:0e:e4: 7f:1e:b0:91:1d:0a:84:40:12:2e:74:0f:55:c2:50: 94:05:1b:09:84:8d:7b:d6:2f:8f:70:51:bb:ce:fc: 10:bc:28:f8:f2:55:b0:8f:14:0f:0c:6d:a6:80:06: 4b:7e:90:64:01:d3:be:a8:9d:9b:cb:b8:f0:d0:44: 41:2f:9f:8f:78:31:34:c7:01:7e:a3:e0:11:fc:de: 4e:5b:a0:8f:ca:4c:81:bb:87:1b:53:6f:c7:98:90: d8:43:d0:3f:ad:2b:9e:cf:63:d5:0a:4a:d7:8e:b4: a5:31:a4:ff:12:27:73:ce:a2:0f:7a:4a:8f:d0:bf: 1c:1c:f5:37:52:02:7b:9b:1a:c2:05:3d:ea:ca:09: 8b:b3:6a:74:68:f1:bc:8b:5b:51:fc:ec:49:38:7c: c8:a1:71:b1:95:f7:62:d8:7c:2f:0a:81:e5:ca:e6: 0d:45:9a:b0:25:01:d2:c0:f6:cd:12:8b:8e:e6:ca: e1:30:6e:dd:38:2d:fc:52:bb:8d:ca:28:f2:85:bd: 6c:d2:38:1b:2d:f0:64:85:81:aa:98:08:72:16:9a: 24:59:84:d3:a0:29:20:18:34:58:97:ef:5d:6b:88: 40:77:5c:ae:a1:76:44:f0:c2:96:76:3a:5e:60:dd: cd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B3:1D:BC:C5:BF:B9:C6:DB:47:12:16:54:CD:65:9E:41:52:76:EB X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/ILMdvMW_ucbbRxIWVM1lnkFSdus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.232.24.0/22 185.13.168.0/22 213.92.128.0/17 213.156.96.0/22 213.156.104.0-213.156.127.255 Signature Algorithm: sha256WithRSAEncryption 81:23:a3:ab:fa:da:b2:d1:81:ea:44:53:b5:b1:4d:b2:52:a3: f1:c3:90:de:52:d8:df:69:68:46:26:2f:36:8b:d8:07:f4:24: 2f:3b:a2:ee:a4:e5:89:50:c1:85:bc:93:6c:01:1d:9b:02:ef: 7f:03:3f:75:2e:46:56:db:1c:81:3c:ab:f0:ca:41:6f:16:72: f3:e8:67:a8:2a:04:82:ca:df:13:b1:32:18:a5:17:1f:47:a9: 14:e5:01:db:ba:23:bb:ba:f8:7c:46:0e:55:92:48:89:c6:94: 8d:cc:4e:73:b7:24:f7:4c:72:6d:84:51:b0:46:36:2e:17:b1: c2:9b:7c:47:20:70:5d:f6:2c:60:1b:4a:b4:b0:d4:8c:66:57: 31:b4:c3:d0:e8:ed:75:df:45:d8:6b:3c:2c:a3:9f:34:c8:3d: a6:8e:ac:04:60:ad:17:c6:51:55:40:17:82:9a:60:50:08:a9: 19:08:e9:13:19:48:ac:e6:fa:b4:42:ff:39:35:d3:1d:c3:2c: 8c:50:37:70:d9:b3:d4:25:d8:8c:27:89:0e:f6:e5:7a:74:91: f8:40:62:de:19:66:27:5c:ac:84:bd:44:eb:0c:d3:d6:d1:16: 88:58:21:bc:96:33:62:6f:28:03:4a:5d:c2:10:dd:37:dc:ae: b6:63:af:0b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt8gD2xbuLOzwzJ6dNrqpHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGIzMWRiY2M1YmZiOWM2ZGI0NzEyMTY1NGNkNjU5ZTQxNTI3NmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRaoZ5ESJC6WatKZDuR/HrCRHQqE QBIudA9VwlCUBRsJhI171i+PcFG7zvwQvCj48lWwjxQPDG2mgAZLfpBkAdO+qJ2b y7jw0ERBL5+PeDE0xwF+o+AR/N5OW6CPykyBu4cbU2/HmJDYQ9A/rSuez2PVCkrX jrSlMaT/EidzzqIPekqP0L8cHPU3UgJ7mxrCBT3qygmLs2p0aPG8i1tR/OxJOHzI oXGxlfdi2HwvCoHlyuYNRZqwJQHSwPbNEouO5srhMG7dOC38UruNyijyhb1s0jgb LfBkhYGqmAhyFpokWYTToCkgGDRYl+9da4hAd1yuoXZE8MKWdjpeYN3NmQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFCCzHbzFv7nG20cSFlTNZZ5BUnbrMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvSUxNZHZNV191Y2JiUnhJV1ZNMWxua0ZTZHVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCbegYAwQC uQ2oAwQH1VyAAwQC1ZxgMAwDBAPVnGgDBAfVnAAwDQYJKoZIhvcNAQELBQADggEB AIEjo6v62rLRgepEU7WxTbJSo/HDkN5S2N9paEYmLzaL2Af0JC87ou6k5YlQwYW8 k2wBHZsC738DP3UuRlbbHIE8q/DKQW8WcvPoZ6gqBILK3xOxMhilFx9HqRTlAdu6 I7u6+HxGDlWSSInGlI3MTnO3JPdMcm2EUbBGNi4XscKbfEcgcF32LGAbSrSw1Ixm VzG0w9Do7XXfRdhrPCyjnzTIPaaOrARgrRfGUVVAF4KaYFAIqRkI6RMZSKzm+rRC /zk10x3DLIxQN3DZs9Ql2IwniQ725Xp0kfhAYt4ZZidcrIS9ROsM09bRFohYIbyW M2JvKANKXcIQ3TfcrrZjrws= -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:54 2026 by rpki-client