This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/IDuIILf-M7RgIDs4AJSYtPxrGic.roa File: IDuIILf-M7RgIDs4AJSYtPxrGic.roa (raw, json) Hash identifier: Nv2s82WUeiBOVGtaFJF3rHfW4CDw9k2CQ7WS0TmM93s= Subject key identifier: 20:3B:88:20:B7:FE:33:B4:60:20:3B:38:00:94:98:B4:FC:6B:1A:27 Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB83E37779EE0BED1C066388858DFB Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/IDuIILf-M7RgIDs4AJSYtPxrGic.roa Signing time: Thu 01 Jan 2026 00:18:24 +0000 ROA not before: Thu 01 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48313 IP address blocks: 92.45.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:83:e3:77:79:ee:0b:ed:1c:06:63:88:85:8d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=203b8820b7fe33b460203b38009498b4fc6b1a27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:c3:77:db:62:f2:57:6c:da:67:67:5e:ee: 30:0b:94:5c:a8:59:0b:7c:9b:4f:17:1e:03:e9:98: 02:39:ad:26:68:0a:92:3b:f5:c2:93:2b:f6:79:1b: 15:c2:f1:e0:6a:bf:45:bf:8f:fc:d4:8f:47:4a:ad: a3:d4:43:f2:d2:82:ff:9e:ee:2f:6a:37:06:3e:c0: c3:6c:cb:19:bd:7e:df:23:a3:b3:fb:63:bc:41:80: e2:3b:b6:80:5d:14:fc:d7:36:df:80:2d:38:d1:98: 73:0a:4d:b0:97:e7:6f:b4:0b:de:ab:19:6b:74:08: 4d:42:67:1e:04:80:f4:03:4c:d9:43:ad:a4:cf:d0: c6:d3:78:69:3f:49:e3:f4:b3:1a:54:73:e4:3e:9f: a6:f0:4e:c5:ac:f8:d4:48:5b:e7:7c:6f:d7:25:83: 73:3f:fb:f3:e9:ce:43:b5:49:6a:ec:8d:19:e0:2e: 90:11:e1:6a:d6:20:6d:ce:6f:1a:20:03:99:b9:14: f7:e0:76:6b:1e:8e:1a:5d:e0:ba:b0:ca:10:4d:ad: 01:50:57:7e:d7:fb:87:92:5d:4e:a0:d6:cf:c3:f1: cb:9b:90:5f:06:e8:27:23:09:60:7d:69:dd:63:83: 80:09:31:12:90:70:3f:58:06:3e:05:d1:11:08:f3: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3B:88:20:B7:FE:33:B4:60:20:3B:38:00:94:98:B4:FC:6B:1A:27 X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/IDuIILf-M7RgIDs4AJSYtPxrGic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.45.64.0/24 Signature Algorithm: sha256WithRSAEncryption 52:d5:e9:0e:18:57:9b:fb:19:c1:92:04:c9:64:bb:79:94:1e: 46:52:55:96:ba:7d:8a:a9:a3:7e:1e:10:45:b1:64:be:f6:40: 2c:40:7b:30:cf:46:25:9d:ae:22:3c:bb:7e:00:57:00:89:f5: 49:91:03:97:9d:ae:36:ca:e2:da:bf:7c:0d:df:3b:25:d6:be: 0a:62:a9:fa:06:71:e4:52:14:67:28:73:bd:d1:4d:b3:3e:51: a2:2c:57:00:5e:a7:76:74:bb:10:89:88:e0:cb:68:45:a8:2c: 0f:ed:d2:4e:75:54:c7:67:fa:a5:88:49:47:b1:15:96:5b:c8: 34:62:25:c3:9c:52:96:73:0b:28:c4:e1:84:bc:07:ad:a9:ee: ec:79:6f:72:68:4a:37:6f:a7:68:83:a7:30:96:af:63:06:db: bb:4e:44:a3:0f:a4:1b:6d:6a:e3:43:03:c4:31:a4:13:9b:5b: 1e:06:de:9c:8e:51:c2:13:97:14:a2:e3:be:90:e9:ec:d9:87: 70:22:e9:86:4d:9d:bc:e9:f9:cc:b6:a0:8d:cd:bf:64:47:87: 55:de:8a:87:b5:cb:b1:b7:ad:3f:8b:7b:2e:70:cf:b2:dd:45: 16:1e:6b:2f:5b:5f:38:99:ab:5a:84:97:b3:5c:a8:83:8f:ac: 42:75:23:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264Pjd3nuC+0cBmOIhY37MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDNiODgyMGI3ZmUzM2I0NjAyMDNiMzgwMDk0OThiNGZjNmIxYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXDDd9ti8lds2mdnXu4wC5RcqFkL fJtPFx4D6ZgCOa0maAqSO/XCkyv2eRsVwvHgar9Fv4/81I9HSq2j1EPy0oL/nu4v ajcGPsDDbMsZvX7fI6Oz+2O8QYDiO7aAXRT81zbfgC040ZhzCk2wl+dvtAveqxlr dAhNQmceBID0A0zZQ62kz9DG03hpP0nj9LMaVHPkPp+m8E7FrPjUSFvnfG/XJYNz P/vz6c5DtUlq7I0Z4C6QEeFq1iBtzm8aIAOZuRT34HZrHo4aXeC6sMoQTa0BUFd+ 1/uHkl1OoNbPw/HLm5BfBugnIwlgfWndY4OACTESkHA/WAY+BdERCPMPowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCA7iCC3/jO0YCA7OACUmLT8axonMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvSUR1SUlMZi1NN1JnSURzNEFKU1l0UHhyR2ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXC1AMA0G CSqGSIb3DQEBCwUAA4IBAQBS1ekOGFeb+xnBkgTJZLt5lB5GUlWWun2KqaN+HhBF sWS+9kAsQHswz0Ylna4iPLt+AFcAifVJkQOXna42yuLav3wN3zsl1r4KYqn6BnHk UhRnKHO90U2zPlGiLFcAXqd2dLsQiYjgy2hFqCwP7dJOdVTHZ/qliElHsRWWW8g0 YiXDnFKWcwsoxOGEvAetqe7seW9yaEo3b6dog6cwlq9jBtu7TkSjD6QbbWrjQwPE MaQTm1seBt6cjlHCE5cUouO+kOns2YdwIumGTZ286fnMtqCNzb9kR4dV3oqHtcux t60/i3sucM+y3UUWHmsvW184matahJezXKiDj6xCdSMO -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:44 2026 by rpki-client