This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/itLsdW_-j_q-ZjN-UEVDVg0YhFQ.roa File: itLsdW_-j_q-ZjN-UEVDVg0YhFQ.roa (raw, json) Hash identifier: baXCqjNUGROh0FgSlBBxH6UtRTF7kdIBr7+ioAvGDu4= Subject key identifier: 8A:D2:EC:75:6F:FE:8F:FA:BE:66:33:7E:50:45:43:56:0D:18:84:54 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019BB20D4C6C45629ED42A15C6088C94B68F Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/itLsdW_-j_q-ZjN-UEVDVg0YhFQ.roa Signing time: Mon 12 Jan 2026 11:52:54 +0000 ROA not before: Mon 12 Jan 2026 11:52:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47690 IP address blocks: 89.43.87.0/24 maxlen: 24 94.76.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:0d:4c:6c:45:62:9e:d4:2a:15:c6:08:8c:94:b6:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 12 11:52:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ad2ec756ffe8ffabe66337e504543560d188454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:99:94:77:42:82:7c:16:ad:43:5d:ad:57: a0:03:a1:d0:42:36:b9:42:37:a4:9a:17:71:fa:31: 3e:f8:b7:ab:2e:33:bb:0d:04:95:2c:7f:d3:3d:30: 87:12:da:ca:a6:de:e4:e3:1b:9d:f3:9a:94:9b:62: d1:f2:dd:be:d7:c5:a3:d8:15:4f:e1:48:aa:93:f4: 7e:e2:a0:35:52:e6:67:a9:f6:5d:a0:60:bb:62:9c: 78:b5:f9:80:67:f8:1f:e7:6e:33:05:e8:cb:a9:d0: b6:0b:43:bb:df:30:52:f2:2b:05:7e:61:ea:08:cb: 5a:26:6c:a5:48:7d:87:41:3d:9b:b3:47:ff:b1:7f: e3:a8:8d:1a:c0:99:aa:dc:df:53:70:75:b7:53:a2: 55:d4:23:fa:cb:36:2a:a3:d0:08:01:1f:4e:c8:ef: 4e:0d:43:d3:41:60:0e:37:6e:7f:ff:a2:d0:25:f8: f7:8b:44:1b:be:8e:7c:7d:a9:b3:32:1b:21:f1:70: ee:dd:62:38:44:5c:69:81:70:e6:86:50:57:bd:40: 6d:c3:04:ff:1e:3b:8b:1f:a6:99:7e:21:49:85:6b: 2d:9f:b7:e8:e8:21:41:74:c9:a2:8b:b5:19:d2:bb: 86:44:20:e2:6d:a1:f7:5e:55:f4:aa:88:5d:c6:f2: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:EC:75:6F:FE:8F:FA:BE:66:33:7E:50:45:43:56:0D:18:84:54 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/itLsdW_-j_q-ZjN-UEVDVg0YhFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.87.0/24 94.76.182.0/24 Signature Algorithm: sha256WithRSAEncryption 43:ce:e4:e1:4c:3e:e5:ce:15:58:87:3a:50:33:c1:65:f6:00: a3:76:c5:f2:53:7d:df:2a:4a:f1:93:96:a4:86:c8:17:09:88: 53:f6:1a:c9:24:b8:47:58:59:6e:69:1e:49:b9:3c:f3:57:45: b4:b4:25:28:43:08:b5:d8:28:8c:7a:f8:67:81:3f:9c:c8:e6: af:4a:c0:13:9d:22:de:c7:79:f9:fe:22:cc:c5:b9:0e:6f:ae: b9:7c:76:8a:e2:9f:3a:50:03:be:e4:1e:03:89:bc:ae:5d:9a: 54:0d:33:b1:6a:dc:91:9d:45:9b:d1:54:f8:18:2a:48:15:8b: 7b:90:75:07:6d:17:1b:fd:63:b5:7b:e6:a4:a2:4f:fe:e6:5b: 5e:f9:ec:ce:f4:1f:c0:69:5a:f4:a2:c1:22:16:f4:af:15:5e: 30:ae:39:2c:51:52:29:cf:9a:92:05:9e:28:08:97:ef:f3:26: ee:61:5d:c8:55:b0:f6:5c:15:9f:67:e6:94:18:3d:8a:5c:df: ff:c8:54:c0:35:b3:2b:ad:f1:e2:7c:6f:42:f4:f0:10:ac:c8: 83:44:b4:51:d9:82:bd:fa:b8:13:2d:0b:2f:09:2e:09:c7:97: 80:e6:91:04:2e:82:e5:7a:87:56:2e:35:ed:09:f6:a9:05:aa: 04:27:da:8d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuyDUxsRWKe1CoVxgiMlLaPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTEyMTE1MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWQyZWM3NTZmZmU4ZmZhYmU2NjMzN2U1MDQ1NDM1NjBkMTg4NDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6aZlHdCgnwWrUNdrVegA6HQQja5 Qjekmhdx+jE++LerLjO7DQSVLH/TPTCHEtrKpt7k4xud85qUm2LR8t2+18Wj2BVP 4Uiqk/R+4qA1UuZnqfZdoGC7Ypx4tfmAZ/gf524zBejLqdC2C0O73zBS8isFfmHq CMtaJmylSH2HQT2bs0f/sX/jqI0awJmq3N9TcHW3U6JV1CP6yzYqo9AIAR9OyO9O DUPTQWAON25//6LQJfj3i0Qbvo58famzMhsh8XDu3WI4RFxpgXDmhlBXvUBtwwT/ HjuLH6aZfiFJhWstn7fo6CFBdMmii7UZ0ruGRCDibaH3XlX0qohdxvIPvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIrS7HVv/o/6vmYzflBFQ1YNGIRUMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvaXRMc2RXXy1qX3EtWmpOLVVFVkRWZzBZaEZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWStXAwQA Xky2MA0GCSqGSIb3DQEBCwUAA4IBAQBDzuThTD7lzhVYhzpQM8Fl9gCjdsXyU33f Kkrxk5akhsgXCYhT9hrJJLhHWFluaR5JuTzzV0W0tCUoQwi12CiMevhngT+cyOav SsATnSLex3n5/iLMxbkOb665fHaK4p86UAO+5B4DibyuXZpUDTOxatyRnUWb0VT4 GCpIFYt7kHUHbRcb/WO1e+akok/+5lte+ezO9B/AaVr0osEiFvSvFV4wrjksUVIp z5qSBZ4oCJfv8ybuYV3IVbD2XBWfZ+aUGD2KXN//yFTANbMrrfHifG9C9PAQrMiD RLRR2YK9+rgTLQsvCS4Jx5eA5pEELoLleodWLjXtCfapBaoEJ9qN -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:37 2026 by rpki-client