This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa File: IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa (raw, json) Hash identifier: HyILMqlsRAkiSlovY1KbO4nirms1nXEWPqExv/4Zspw= Subject key identifier: 22:BC:29:CF:03:5B:0F:B8:B1:7A:A8:37:BD:B0:93:8A:4F:93:FC:B7 Certificate issuer: /CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Certificate serial: 019B7BA387CD7C37F5F551BC6A7C8692BE5A Authority key identifier: 5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa Signing time: Thu 01 Jan 2026 22:17:53 +0000 ROA not before: Thu 01 Jan 2026 22:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206487 IP address blocks: 185.176.180.0/23 maxlen: 23 185.176.183.0/24 maxlen: 24 2a0b:3780::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:87:cd:7c:37:f5:f5:51:bc:6a:7c:86:92:be:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c68a279769d193df3f9781d2ba4c1d9277b4fd6 Validity Not Before: Jan 1 22:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22bc29cf035b0fb8b17aa837bdb0938a4f93fcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:60:3d:b3:31:e2:02:b4:e1:b5:ef:cd:f5:a1: 5b:a3:45:92:b4:b4:27:3c:6f:55:53:1a:54:25:2a: 8f:ad:f9:fb:00:13:bb:bd:69:2a:df:34:99:3c:cd: ba:c4:b8:de:ca:fb:9b:a9:9e:f6:45:cb:90:32:3e: db:de:60:d4:1d:c1:7c:b8:21:eb:d7:a2:98:72:75: 19:de:60:56:48:16:78:5e:30:a6:2b:af:b6:e4:d3: 50:51:93:e0:8b:5d:4d:09:48:a2:8c:07:11:2b:b0: cf:ab:9e:52:2f:11:73:3e:57:e9:a9:3d:2c:4d:43: b9:08:28:8d:b5:7f:f3:1c:e4:d8:40:0e:3b:ee:5d: 67:63:a8:71:60:d0:d8:c8:c5:d8:89:de:5d:36:78: 95:a0:c0:c0:f3:e6:08:d0:3e:bd:10:13:b8:2c:ad: 16:9d:89:39:7c:77:ce:c1:a5:02:9b:ad:a7:4a:d6: 3f:ee:f6:31:a3:2f:3f:eb:39:89:84:75:7e:d7:aa: 75:c1:94:70:0a:05:f0:41:f2:f9:4a:8d:68:32:e6: 99:f5:95:a3:d3:b7:e6:ee:92:53:66:e7:25:43:46: 14:5a:21:8f:c1:e8:f2:7f:c0:49:02:7a:da:a9:95: 74:6b:05:68:67:d6:c5:50:5c:0d:31:1d:0a:aa:06: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BC:29:CF:03:5B:0F:B8:B1:7A:A8:37:BD:B0:93:8A:4F:93:FC:B7 X509v3 Authority Key Identifier: keyid:5C:68:A2:79:76:9D:19:3D:F3:F9:78:1D:2B:A4:C1:D9:27:7B:4F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGiieXadGT3z-XgdK6TB2Sd7T9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/IrwpzwNbD7ixeqg3vbCTik-T_Lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f5c96a-b70f-419e-826f-15398ba5b0e7/1/XGiieXadGT3z-XgdK6TB2Sd7T9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.180.0/23 185.176.183.0/24 IPv6: 2a0b:3780::/32 Signature Algorithm: sha256WithRSAEncryption 5a:cb:7a:1c:a4:1f:29:2d:18:71:23:a8:b5:da:14:a2:73:3a: 23:0e:5a:05:73:76:c6:d8:83:37:73:2c:1d:36:d2:75:a6:e1: c9:e1:c1:c1:20:78:1d:f1:b2:62:26:75:8e:c7:c0:af:9d:ae: bf:25:f0:bb:ff:08:46:4d:9d:1c:97:ca:63:38:74:d6:5f:a8: 88:f2:2a:38:27:5d:13:fd:12:2f:2b:42:f8:99:d2:8e:ba:ad: d3:f6:b9:0a:f1:da:df:57:c2:05:c5:d3:aa:17:b8:5c:3e:bd: bb:d7:48:01:fb:a4:1d:0a:0b:3a:a3:f5:fc:d6:3a:0a:00:7d: 46:e9:f6:8c:0a:2f:32:2f:ef:5f:d6:be:19:d9:82:73:fc:97: 14:fc:2d:9e:23:66:6d:9c:6a:15:3d:9a:58:f8:7a:15:39:2c: f6:38:18:72:44:b1:8d:2c:d9:94:73:d1:24:c3:87:ee:fc:17: 0f:f0:30:a1:16:c1:41:fa:be:ec:bf:80:be:cb:8f:31:5f:34: ac:d9:25:a6:fc:70:43:86:f7:24:f1:d4:69:48:96:bd:a0:d3: 7a:ec:7e:1f:b3:c7:ec:21:29:7c:7b:36:62:49:2e:8a:5c:2a: 9d:c0:95:18:cf:ee:89:77:10:4d:0c:bc:96:d2:35:11:89:0e: 36:7b:bb:71 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7o4fNfDf19VG8anyGkr5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjNjhhMjc5NzY5ZDE5M2RmM2Y5NzgxZDJiYTRjMWQ5Mjc3 YjRmZDYwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJjMjljZjAzNWIwZmI4YjE3YWE4MzdiZGIwOTM4YTRmOTNmY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWA9szHiArThte/N9aFbo0WStLQn PG9VUxpUJSqPrfn7ABO7vWkq3zSZPM26xLjeyvubqZ72RcuQMj7b3mDUHcF8uCHr 16KYcnUZ3mBWSBZ4XjCmK6+25NNQUZPgi11NCUiijAcRK7DPq55SLxFzPlfpqT0s TUO5CCiNtX/zHOTYQA477l1nY6hxYNDYyMXYid5dNniVoMDA8+YI0D69EBO4LK0W nYk5fHfOwaUCm62nStY/7vYxoy8/6zmJhHV+16p1wZRwCgXwQfL5So1oMuaZ9ZWj 07fm7pJTZuclQ0YUWiGPwejyf8BJAnraqZV0awVoZ9bFUFwNMR0KqgZYNwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCK8Kc8DWw+4sXqoN72wk4pPk/y3MB8GA1UdIwQY MBaAFFxoonl2nRk98/l4HSukwdkne0/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYt MTUzOThiYTViMGU3LzEvSXJ3cHp3TmJEN2l4ZXFnM3ZiQ1Rpay1UX0xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9mNWM5NmEtYjcwZi00MTllLTgyNmYtMTUzOThiYTViMGU3 LzEvWEdpaWVYYWRHVDN6LVhnZEs2VEIyU2Q3VDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBubC0AwQA ubC3MA0EAgACMAcDBQAqCzeAMA0GCSqGSIb3DQEBCwUAA4IBAQBay3ocpB8pLRhx I6i12hSiczojDloFc3bG2IM3cywdNtJ1puHJ4cHBIHgd8bJiJnWOx8Cvna6/JfC7 /whGTZ0cl8pjOHTWX6iI8io4J10T/RIvK0L4mdKOuq3T9rkK8drfV8IFxdOqF7hc Pr2710gB+6QdCgs6o/X81joKAH1G6faMCi8yL+9f1r4Z2YJz/JcU/C2eI2ZtnGoV PZpY+HoVOSz2OBhyRLGNLNmUc9Ekw4fu/BcP8DChFsFB+r7sv4C+y48xXzSs2SWm /HBDhvck8dRpSJa9oNN67H4fs8fsISl8ezZiSS6KXCqdwJUYz+6JdxBNDLyW0jUR iQ42e7tx -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:45 2026 by rpki-client