This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ITKErq6hul380zQefCl7nGu5iiw.roa File: ITKErq6hul380zQefCl7nGu5iiw.roa (raw, json) Hash identifier: ThIKSMsSMV9/7c4Wu+9DRro9qpNPtMCBXl8IA6+T3z0= Subject key identifier: 21:32:84:AE:AE:A1:BA:5D:FC:D3:34:1E:7C:29:7B:9C:6B:B9:8A:2C Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB85C4E93A883658501CA048E2C461 Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ITKErq6hul380zQefCl7nGu5iiw.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51540 IP address blocks: 176.43.128.0/24 maxlen: 24 176.43.129.0/24 maxlen: 24 176.43.130.0/24 maxlen: 24 176.43.131.0/24 maxlen: 24 176.43.132.0/24 maxlen: 24 176.43.133.0/24 maxlen: 24 176.43.134.0/24 maxlen: 24 176.43.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:85:c4:e9:3a:88:36:58:50:1c:a0:48:e2:c4:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=213284aeaea1ba5dfcd3341e7c297b9c6bb98a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:db:0e:90:68:60:c4:0f:58:b8:75:7d:47: 59:c3:c2:a3:13:44:ed:a2:f3:78:10:67:96:bd:d6: b2:b5:37:90:e3:6c:b8:93:00:79:f3:da:33:f7:d1: 01:6c:64:c3:46:41:60:59:98:dc:82:47:11:04:00: e9:13:a6:ce:61:56:25:54:76:d4:39:2b:3d:1e:be: 77:46:09:27:f0:e3:2f:b4:5e:7d:a0:c8:49:32:97: 9a:62:a7:ec:a4:72:38:d3:93:49:04:e4:67:ac:d0: 93:f3:63:f0:a5:fd:11:33:57:2f:1b:33:d2:4a:06: e9:14:5e:a5:f8:f1:d3:d6:b4:18:2b:11:df:d3:75: ea:ab:38:4b:03:ca:36:f4:9a:31:a1:e7:ca:d1:8e: 21:b5:3c:75:2b:7e:46:06:5c:cf:4c:9a:16:40:bd: cb:fd:26:2e:f0:f9:bc:27:d9:c9:7a:4b:98:01:3e: 70:16:11:92:bf:e6:c6:00:71:b1:65:26:82:02:70: 0d:0a:15:cd:2a:74:0c:73:e4:d6:ec:71:ca:13:6c: a6:88:45:c1:43:7d:10:8e:9e:80:66:7a:4d:a7:60: 7d:92:3a:e8:b1:a9:fe:af:30:af:5d:b2:e8:82:4a: fd:34:25:43:14:14:6a:4d:8a:d4:b9:51:50:60:e6: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:32:84:AE:AE:A1:BA:5D:FC:D3:34:1E:7C:29:7B:9C:6B:B9:8A:2C X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/ITKErq6hul380zQefCl7nGu5iiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.43.128.0/21 Signature Algorithm: sha256WithRSAEncryption 42:88:45:60:04:fb:12:e0:28:fa:2f:37:bc:0d:28:a0:20:1b: 80:0c:00:7d:e5:f1:34:e7:65:4d:98:84:9b:98:01:6e:f5:6e: e3:9a:d8:f3:31:46:06:a6:60:84:7d:5b:3e:97:94:f5:91:e6: 59:b9:b7:f2:d8:32:bc:51:b8:57:67:25:12:4c:fe:30:b4:73: 06:84:4b:37:a0:68:ff:83:f2:95:d1:ae:b3:72:de:22:ce:f4: ff:39:e5:88:c8:49:54:6b:15:71:8a:5b:94:0b:70:93:fe:40: aa:30:0e:6c:ff:ba:9b:c2:f5:8c:aa:a5:c3:d0:9e:a6:af:f6: d8:ed:94:66:4b:bc:87:75:59:95:71:62:15:f1:47:6e:c2:55: ca:85:31:16:28:88:f7:55:5a:ca:ca:52:ad:14:f5:0d:43:6a: d8:f5:e7:f4:40:a1:2b:a0:c3:64:fa:e9:84:37:47:c5:28:b3: 08:b5:9c:7d:7c:b6:5f:01:49:a9:8e:82:10:47:25:8a:00:cd: 07:e2:ce:2c:89:fb:af:28:43:3a:43:73:76:a2:bc:79:19:cc: 76:fb:bf:0c:83:cd:89:89:5d:03:3c:41:23:37:02:46:62:17: 5c:0f:98:59:00:16:69:63:9c:bf:05:dc:2f:56:36:89:b7:ed: 11:8c:df:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264XE6TqINlhQHKBI4sRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTMyODRhZWFlYTFiYTVkZmNkMzM0MWU3YzI5N2I5YzZiYjk4YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tnbDpBoYMQPWLh1fUdZw8KjE0Tt ovN4EGeWvdaytTeQ42y4kwB589oz99EBbGTDRkFgWZjcgkcRBADpE6bOYVYlVHbU OSs9Hr53Rgkn8OMvtF59oMhJMpeaYqfspHI405NJBORnrNCT82Pwpf0RM1cvGzPS SgbpFF6l+PHT1rQYKxHf03XqqzhLA8o29JoxoefK0Y4htTx1K35GBlzPTJoWQL3L /SYu8Pm8J9nJekuYAT5wFhGSv+bGAHGxZSaCAnANChXNKnQMc+TW7HHKE2ymiEXB Q30Qjp6AZnpNp2B9kjrosan+rzCvXbLogkr9NCVDFBRqTYrUuVFQYOZP4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEyhK6uobpd/NM0Hnwpe5xruYosMB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvSVRLRXJxNmh1bDM4MHpRZWZDbDduR3U1aWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsCuAMA0G CSqGSIb3DQEBCwUAA4IBAQBCiEVgBPsS4Cj6Lze8DSigIBuADAB95fE052VNmISb mAFu9W7jmtjzMUYGpmCEfVs+l5T1keZZubfy2DK8UbhXZyUSTP4wtHMGhEs3oGj/ g/KV0a6zct4izvT/OeWIyElUaxVxiluUC3CT/kCqMA5s/7qbwvWMqqXD0J6mr/bY 7ZRmS7yHdVmVcWIV8UduwlXKhTEWKIj3VVrKylKtFPUNQ2rY9ef0QKEroMNk+umE N0fFKLMItZx9fLZfAUmpjoIQRyWKAM0H4s4sifuvKEM6Q3N2orx5Gcx2+78Mg82J iV0DPEEjNwJGYhdcD5hZABZpY5y/BdwvVjaJt+0RjN9h -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:55 2026 by rpki-client