This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/ImTLWt2g0cY7V35wRVv87mBniEg.roa File: ImTLWt2g0cY7V35wRVv87mBniEg.roa (raw, json) Hash identifier: VJYLeV7M13GLWx8pAqlJxHBxVDnSY7dG5v0w8WshUfs= Subject key identifier: 22:64:CB:5A:DD:A0:D1:C6:3B:57:7E:70:45:5B:FC:EE:60:67:88:48 Certificate issuer: /CN=20cd574284a6018e5b03635e9a5d658fdf5734f0 Certificate serial: 019B7EA50525DC739BD1B2223722ECE875F7 Authority key identifier: 20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/ImTLWt2g0cY7V35wRVv87mBniEg.roa Signing time: Fri 02 Jan 2026 12:18:22 +0000 ROA not before: Fri 02 Jan 2026 12:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47796 IP address blocks: 195.245.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.mft rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:05:25:dc:73:9b:d1:b2:22:37:22:ec:e8:75:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20cd574284a6018e5b03635e9a5d658fdf5734f0 Validity Not Before: Jan 2 12:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2264cb5adda0d1c63b577e70455bfcee60678848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:91:43:58:02:03:9a:13:3a:96:49:8c:e1: 2d:39:94:ab:65:4c:24:ba:4e:82:3b:5a:58:2b:df: fb:5d:60:40:24:f1:52:fa:da:a0:96:2b:30:6c:56: 5c:a7:87:ee:1d:4f:db:b7:23:69:b0:b8:fa:2e:27: a1:93:16:20:ec:2c:a3:da:40:c7:51:c8:35:bc:ed: 7c:9b:b1:af:e8:fc:02:28:64:97:1f:7d:fe:47:0c: 2f:73:b7:4b:23:ce:19:cb:3e:3e:a9:23:2f:30:78: 71:0d:bf:75:e7:cf:7a:f5:9a:e7:1d:2b:c6:39:ce: 72:1e:17:31:2e:7a:4c:07:e3:0a:c9:af:78:5a:7a: db:36:06:4c:00:5b:76:14:37:73:e2:75:b6:8d:ea: 99:a7:bb:2e:56:17:29:5f:d4:42:8a:e7:14:a9:76: 72:1a:66:99:b8:0b:47:90:8d:82:52:31:bc:f9:c4: a8:0a:73:1e:fb:21:c6:bc:2d:0d:7f:e8:d5:e1:79: 7d:ea:ed:dc:52:f7:74:8c:2f:20:f5:01:35:37:08: 29:91:3c:0f:37:47:3f:cd:b3:b7:70:76:3c:a2:00: f0:5d:e8:b8:14:71:83:57:64:92:f9:a6:63:57:98: af:29:f8:af:cd:26:c1:28:11:84:b5:f4:b1:67:93: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:64:CB:5A:DD:A0:D1:C6:3B:57:7E:70:45:5B:FC:EE:60:67:88:48 X509v3 Authority Key Identifier: keyid:20:CD:57:42:84:A6:01:8E:5B:03:63:5E:9A:5D:65:8F:DF:57:34:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IM1XQoSmAY5bA2Neml1lj99XNPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/ImTLWt2g0cY7V35wRVv87mBniEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c216ca-aa9d-4d21-841e-49b5687fee6d/1/IM1XQoSmAY5bA2Neml1lj99XNPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.245.70.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ad:b0:60:cf:85:a9:2a:70:f8:10:f5:e3:e9:c0:a6:32:f0: 3c:21:25:56:fc:6e:01:dd:7b:89:9f:41:cc:9b:55:e6:b6:8d: 8c:28:23:75:dc:54:72:42:5c:d9:fa:9c:0f:f5:c5:7c:d5:cf: f2:c7:f4:37:30:d9:0d:29:49:74:8f:13:5d:cd:8b:f9:e9:81: 53:fe:42:87:82:14:4f:d1:00:74:39:13:20:f6:16:fa:10:34: 4b:83:f4:e3:7c:69:67:1e:74:c3:fc:1c:a5:f3:ee:c8:ec:2f: 2f:d1:65:94:3c:b6:af:45:e1:18:a0:66:ac:3b:3e:02:3d:f4: 6c:c5:64:e3:e4:fd:3d:ef:1b:a6:04:dc:a2:4d:ad:2f:52:98: 2f:68:e7:b7:0f:04:ce:5a:cc:aa:87:d0:2a:3e:3d:ea:fa:b7: 7b:4c:fe:90:d8:98:ec:9f:f3:ec:56:e1:52:46:e7:f9:2a:0a: 60:02:0e:c0:39:8e:0c:dd:6b:aa:07:09:03:2f:8c:c7:fb:77: ff:42:87:59:f3:56:75:00:f5:aa:31:d5:6c:9a:23:1a:f3:d2: 97:f1:76:82:ef:a0:f8:ef:ec:35:be:c0:1f:a0:f8:93:a4:b1: 18:08:94:39:b8:6a:56:99:6f:28:0d:7b:1d:be:c9:c8:b1:c6: 20:84:ff:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pQUl3HOb0bIiNyLs6HX3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwY2Q1NzQyODRhNjAxOGU1YjAzNjM1ZTlhNWQ2NThmZGY1 NzM0ZjAwHhcNMjYwMTAyMTIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjY0Y2I1YWRkYTBkMWM2M2I1NzdlNzA0NTViZmNlZTYwNjc4ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T2RQ1gCA5oTOpZJjOEtOZSrZUwk uk6CO1pYK9/7XWBAJPFS+tqgliswbFZcp4fuHU/btyNpsLj6LiehkxYg7Cyj2kDH Ucg1vO18m7Gv6PwCKGSXH33+Rwwvc7dLI84Zyz4+qSMvMHhxDb9158969ZrnHSvG Oc5yHhcxLnpMB+MKya94WnrbNgZMAFt2FDdz4nW2jeqZp7suVhcpX9RCiucUqXZy GmaZuAtHkI2CUjG8+cSoCnMe+yHGvC0Nf+jV4Xl96u3cUvd0jC8g9QE1NwgpkTwP N0c/zbO3cHY8ogDwXei4FHGDV2SS+aZjV5ivKfivzSbBKBGEtfSxZ5NB0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCJky1rdoNHGO1d+cEVb/O5gZ4hIMB8GA1UdIwQY MBaAFCDNV0KEpgGOWwNjXppdZY/fVzTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU0xWFFvU21BWTViQTJOZW1sMWxqOTlYTlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9jMjE2Y2EtYWE5ZC00ZDIxLTg0MWUt NDliNTY4N2ZlZTZkLzEvSW1UTFd0MmcwY1k3VjM1d1JWdjg3bUJuaUVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9jMjE2Y2EtYWE5ZC00ZDIxLTg0MWUtNDliNTY4N2ZlZTZk LzEvSU0xWFFvU21BWTViQTJOZW1sMWxqOTlYTlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/VGMA0G CSqGSIb3DQEBCwUAA4IBAQAMrbBgz4WpKnD4EPXj6cCmMvA8ISVW/G4B3XuJn0HM m1Xmto2MKCN13FRyQlzZ+pwP9cV81c/yx/Q3MNkNKUl0jxNdzYv56YFT/kKHghRP 0QB0ORMg9hb6EDRLg/TjfGlnHnTD/Byl8+7I7C8v0WWUPLavReEYoGasOz4CPfRs xWTj5P097xumBNyiTa0vUpgvaOe3DwTOWsyqh9AqPj3q+rd7TP6Q2Jjsn/PsVuFS Ruf5KgpgAg7AOY4M3WuqBwkDL4zH+3f/QodZ81Z1APWqMdVsmiMa89KX8XaC76D4 7+w1vsAfoPiTpLEYCJQ5uGpWmW8oDXsdvsnIscYghP/L -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:12 2026 by rpki-client