This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/IVsntpINLVptcAxi9F9OffThDww.roa File: IVsntpINLVptcAxi9F9OffThDww.roa (raw, json) Hash identifier: lHhfp2KRoCfz9OytgUFCH4dMCm+ma5lnnpotEWvlFIE= Subject key identifier: 21:5B:27:B6:92:0D:2D:5A:6D:70:0C:62:F4:5F:4E:7D:F4:E1:0F:0C Certificate issuer: /CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Certificate serial: 019B797F2B49860EAB0BDD8556D7EC203BD8 Authority key identifier: F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/IVsntpINLVptcAxi9F9OffThDww.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 155.105.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.mft rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2b:49:86:0e:ab:0b:dd:85:56:d7:ec:20:3b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f23258aa6b83ec9fb7be966c626a9166781c7f3b Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=215b27b6920d2d5a6d700c62f45f4e7df4e10f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:c2:6a:b1:a9:ed:61:77:73:c6:93:f0:33: cb:5f:ca:c6:f9:88:be:5b:9c:0c:59:8f:a0:62:ef: a7:95:55:45:46:94:64:8f:70:79:18:db:2a:c1:f6: 70:99:fb:05:26:dd:96:3a:7c:0f:e9:58:57:86:01: e2:db:61:66:32:40:76:9d:e8:91:3f:bb:65:50:74: b5:37:25:a1:39:bd:a0:ca:f8:e8:cc:5a:52:d3:54: 36:54:ce:28:64:e1:06:00:06:f8:ee:2a:4e:96:f0: 89:ef:2b:c6:50:21:96:c4:d1:8f:93:3b:50:d6:4c: 8f:e6:ae:10:da:cf:86:2a:25:a6:93:ea:0a:a6:02: 53:35:ce:e5:e4:6d:7f:fa:b1:78:53:6c:68:23:dd: d7:d9:04:06:47:21:e6:4e:69:64:5b:c8:92:81:72: 6a:1e:53:7b:d9:cd:5c:9c:81:ef:d9:42:31:b6:9b: 04:8a:7b:0b:e2:97:80:6f:97:05:fe:e8:c8:5e:15: ba:de:af:f9:a1:6d:cc:34:e1:29:1e:1b:d3:19:ca: 4b:e5:4b:d2:b7:f2:40:5a:34:8e:4f:ca:44:8f:cf: 6c:dd:fc:d4:48:df:26:f9:32:e6:ec:66:45:45:fa: 81:07:74:29:ff:f3:9a:aa:58:88:0a:85:6e:22:44: 8e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5B:27:B6:92:0D:2D:5A:6D:70:0C:62:F4:5F:4E:7D:F4:E1:0F:0C X509v3 Authority Key Identifier: keyid:F2:32:58:AA:6B:83:EC:9F:B7:BE:96:6C:62:6A:91:66:78:1C:7F:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jJYqmuD7J-3vpZsYmqRZngcfzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/IVsntpINLVptcAxi9F9OffThDww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/48c3a8-b954-41c9-bd23-712fcfa441e4/1/8jJYqmuD7J-3vpZsYmqRZngcfzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 155.105.0.0/16 Signature Algorithm: sha256WithRSAEncryption 57:a7:83:2f:7c:6b:70:fd:2e:0b:a9:e0:38:c7:ec:0a:09:e3: d5:5a:7a:3b:06:86:47:14:c1:8b:1f:3d:5b:44:97:0d:cf:c8: e4:47:f3:76:96:77:25:e0:f3:00:ac:c0:0f:b1:29:9e:36:37: cc:b2:d9:ca:32:a2:35:cc:8c:01:8d:be:56:ab:d7:e3:ac:45: 72:ed:c5:ae:0b:36:8d:67:93:3b:22:52:5e:34:6f:4f:03:db: 83:5f:ca:f8:21:b6:f8:4e:fa:ef:5a:6e:38:d9:10:99:c9:3f: 50:d9:3c:41:38:4c:a1:db:ee:cf:83:59:ff:8f:e8:96:ba:c4: c0:9b:48:39:c2:70:8d:65:fd:08:8e:ff:02:d3:8f:76:43:b3: bb:ab:b5:8d:b3:38:5f:9b:8b:4d:bb:fa:88:28:99:fb:14:14: b4:b4:d6:d3:4c:24:e7:e5:37:b4:48:8c:df:2d:5e:b1:c7:b8: 66:bd:37:8b:82:6d:43:52:47:20:31:66:56:db:d9:87:b4:ea: 0d:11:c5:a5:4f:d7:68:5f:58:54:a6:02:a1:8f:63:ea:77:9b: 11:52:10:82:76:fc:66:2e:e4:7b:b6:49:13:5e:51:51:85:87: 3b:d6:a5:a5:2a:1a:3c:d2:ad:25:b1:6c:40:c9:54:31:6d:a7: 26:ad:c1:ec -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt5fytJhg6rC92FVtfsIDvYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMzI1OGFhNmI4M2VjOWZiN2JlOTY2YzYyNmE5MTY2Nzgx YzdmM2IwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTViMjdiNjkyMGQyZDVhNmQ3MDBjNjJmNDVmNGU3ZGY0ZTEwZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAzCarGp7WF3c8aT8DPLX8rG+Yi+ W5wMWY+gYu+nlVVFRpRkj3B5GNsqwfZwmfsFJt2WOnwP6VhXhgHi22FmMkB2neiR P7tlUHS1NyWhOb2gyvjozFpS01Q2VM4oZOEGAAb47ipOlvCJ7yvGUCGWxNGPkztQ 1kyP5q4Q2s+GKiWmk+oKpgJTNc7l5G1/+rF4U2xoI93X2QQGRyHmTmlkW8iSgXJq HlN72c1cnIHv2UIxtpsEinsL4peAb5cF/ujIXhW63q/5oW3MNOEpHhvTGcpL5UvS t/JAWjSOT8pEj89s3fzUSN8m+TLm7GZFRfqBB3Qp//OaqliICoVuIkSO7QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFCFbJ7aSDS1abXAMYvRfTn304Q8MMB8GA1UdIwQY MBaAFPIyWKprg+yft76WbGJqkWZ4HH87MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMt NzEyZmNmYTQ0MWU0LzEvSVZzbnRwSU5MVnB0Y0F4aTlGOU9mZlRoRHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC80OGMzYTgtYjk1NC00MWM5LWJkMjMtNzEyZmNmYTQ0MWU0 LzEvOGpKWXFtdUQ3Si0zdnBac1ltcVJabmdjZnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAm2kwDQYJ KoZIhvcNAQELBQADggEBAFengy98a3D9Lgup4DjH7AoJ49VaejsGhkcUwYsfPVtE lw3PyORH83aWdyXg8wCswA+xKZ42N8yy2coyojXMjAGNvlar1+OsRXLtxa4LNo1n kzsiUl40b08D24NfyvghtvhO+u9abjjZEJnJP1DZPEE4TKHb7s+DWf+P6Ja6xMCb SDnCcI1l/QiO/wLTj3ZDs7urtY2zOF+bi027+ogomfsUFLS01tNMJOflN7RIjN8t XrHHuGa9N4uCbUNSRyAxZlbb2Ye06g0RxaVP12hfWFSmAqGPY+p3mxFSEIJ2/GYu 5Hu2SRNeUVGFhzvWpaUqGjzSrSWxbEDJVDFtpyatwew= -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:31 2026 by rpki-client