This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/irsMyG4o80ZN9Sk8EByejJziQYw.roa File: irsMyG4o80ZN9Sk8EByejJziQYw.roa (raw, json) Hash identifier: cS1Kvn4FUa0h5mXwTGEtWyys4EftbAer1bNA+Fs3gvg= Subject key identifier: 8A:BB:0C:C8:6E:28:F3:46:4D:F5:29:3C:10:1C:9E:8C:9C:E2:41:8C Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Certificate serial: 019B79ED1C8E79B9EC9DF8F77A73F43EFB90 Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/irsMyG4o80ZN9Sk8EByejJziQYw.roa Signing time: Thu 01 Jan 2026 14:19:01 +0000 ROA not before: Thu 01 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48851 IP address blocks: 92.61.228.0/24 maxlen: 24 92.61.230.0/24 maxlen: 24 92.61.231.0/24 maxlen: 24 92.61.232.0/24 maxlen: 24 92.61.236.0/24 maxlen: 24 92.61.237.0/24 maxlen: 24 92.61.238.0/24 maxlen: 24 94.188.137.0/24 maxlen: 24 94.188.194.0/24 maxlen: 24 94.188.201.0/24 maxlen: 24 94.188.202.0/24 maxlen: 24 94.188.203.0/24 maxlen: 24 94.188.205.0/24 maxlen: 24 94.188.206.0/24 maxlen: 24 94.188.207.0/24 maxlen: 24 94.188.208.0/24 maxlen: 24 94.188.209.0/24 maxlen: 24 94.188.210.0/24 maxlen: 24 94.188.211.0/24 maxlen: 24 94.188.212.0/24 maxlen: 24 94.188.214.0/24 maxlen: 24 94.188.215.0/24 maxlen: 24 94.188.216.0/24 maxlen: 24 94.188.222.0/24 maxlen: 24 94.188.223.0/24 maxlen: 24 94.188.224.0/24 maxlen: 24 94.188.225.0/24 maxlen: 24 94.188.226.0/24 maxlen: 24 94.188.227.0/24 maxlen: 24 94.188.228.0/24 maxlen: 24 94.188.229.0/24 maxlen: 24 94.188.230.0/24 maxlen: 24 94.188.231.0/24 maxlen: 24 94.188.232.0/24 maxlen: 24 94.188.233.0/24 maxlen: 24 94.188.234.0/24 maxlen: 24 94.188.235.0/24 maxlen: 24 94.188.236.0/24 maxlen: 24 94.188.237.0/24 maxlen: 24 94.188.239.0/24 maxlen: 24 94.188.240.0/24 maxlen: 24 94.188.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.mft rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:1c:8e:79:b9:ec:9d:f8:f7:7a:73:f4:3e:fb:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86 Validity Not Before: Jan 1 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8abb0cc86e28f3464df5293c101c9e8c9ce2418c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:ce:b0:80:b0:bf:4b:44:8e:cc:aa:4f:ad: 3d:4f:36:e7:03:92:46:7b:e9:31:5d:0e:e1:6e:9d: 11:bc:d1:25:88:26:60:70:13:e6:27:3b:4b:e5:7b: 40:25:bf:9c:3f:df:23:93:9f:a5:df:58:10:2b:81: 06:44:18:2f:fb:6d:33:55:59:44:b9:1b:df:3a:44: 6d:07:53:aa:be:09:3c:ee:71:7b:8a:5b:2d:a0:5d: 32:8b:d3:0f:02:17:50:ab:2c:91:d6:c4:7c:de:bb: 2d:e1:f6:62:48:a2:53:7b:e1:92:79:09:52:02:47: 69:2a:2d:bb:6d:b0:03:d2:21:16:cf:3c:fb:4d:f7: 0a:11:a2:0d:e9:ea:8b:11:e4:81:0a:5f:29:af:69: 1f:96:fc:2f:fe:e4:d2:84:c1:be:dd:46:a2:9c:9a: ed:c3:70:7e:d9:2b:6a:53:df:8b:3e:fb:2a:b5:d8: 57:27:89:fd:89:0f:57:49:6d:34:b8:f6:8b:b2:b0: f3:5a:a3:85:23:2c:e8:ae:d1:2d:1e:29:ac:c0:ab: 0e:07:fe:a4:be:7b:71:9a:15:d5:da:04:e0:8a:b2: 2f:c8:a7:57:1c:42:b8:16:95:97:ee:57:ce:03:e4: c5:ae:04:05:34:02:b9:11:06:24:09:a5:bf:ef:ff: 3c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BB:0C:C8:6E:28:F3:46:4D:F5:29:3C:10:1C:9E:8C:9C:E2:41:8C X509v3 Authority Key Identifier: keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/irsMyG4o80ZN9Sk8EByejJziQYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.61.228.0/24 92.61.230.0-92.61.232.255 92.61.236.0-92.61.238.255 94.188.137.0/24 94.188.194.0/24 94.188.201.0-94.188.203.255 94.188.205.0-94.188.212.255 94.188.214.0-94.188.216.255 94.188.222.0-94.188.237.255 94.188.239.0-94.188.241.255 Signature Algorithm: sha256WithRSAEncryption 4f:80:f9:66:01:1f:ce:1c:51:d1:58:12:fb:4c:5d:d1:74:03: c6:49:43:3e:3d:e1:f4:4c:26:7e:4f:ce:3a:17:84:ba:2f:10: 76:51:c8:86:1d:e0:a6:b9:bb:80:8a:a5:07:bd:f5:9f:32:8c: 18:2b:7c:66:98:27:ca:fc:67:18:39:5c:55:fb:5d:4c:0c:6f: cf:40:a9:dd:20:a9:e1:2a:02:8b:ab:5e:60:8c:2c:c2:0a:17: 36:7f:95:c4:e5:92:7e:c9:dd:f0:6b:34:e5:c9:13:db:49:a5: f2:dd:23:47:27:4c:99:d7:99:01:d6:79:e6:a5:2c:1e:1d:e9: 64:3f:28:6d:ed:fc:ca:ca:28:9b:c6:7d:6a:38:05:30:c1:6f: cb:6f:5a:82:7d:8f:ef:5a:5e:3e:3c:df:50:42:1f:a3:d8:31: f0:e4:79:45:74:7d:0a:6f:3a:bf:d1:65:de:32:ce:02:5d:a8: 16:26:bb:24:83:ea:4a:ef:42:4a:10:18:cc:02:8d:78:c0:57: 01:30:96:ca:0b:38:93:28:55:c8:65:f6:86:d5:e0:ff:c4:b1: 8a:43:43:96:f9:9d:dd:7d:df:59:b1:01:2a:58:3a:19:29:e5: 5f:72:dd:94:42:66:d8:09:ca:74:7e:02:a5:a1:4a:1a:e1:ab: 6d:9a:d1:30 -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgISAZt57RyOebnsnfj3enP0PvuQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDViYjQwMTE4MGU1NWY1YzE2NWQ0NzkwOGRmZjRmZTI5 YTBkODYwHhcNMjYwMTAxMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWJiMGNjODZlMjhmMzQ2NGRmNTI5M2MxMDFjOWU4YzljZTI0MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywHOsICwv0tEjsyqT609TzbnA5JG e+kxXQ7hbp0RvNEliCZgcBPmJztL5XtAJb+cP98jk5+l31gQK4EGRBgv+20zVVlE uRvfOkRtB1Oqvgk87nF7ilstoF0yi9MPAhdQqyyR1sR83rst4fZiSKJTe+GSeQlS AkdpKi27bbAD0iEWzzz7TfcKEaIN6eqLEeSBCl8pr2kflvwv/uTShMG+3UainJrt w3B+2StqU9+LPvsqtdhXJ4n9iQ9XSW00uPaLsrDzWqOFIyzortEtHimswKsOB/6k vntxmhXV2gTgirIvyKdXHEK4FpWX7lfOA+TFrgQFNAK5EQYkCaW/7/88ywIDAQAB o4ICeDCCAnQwHQYDVR0OBBYEFIq7DMhuKPNGTfUpPBAcnoyc4kGMMB8GA1UdIwQY MBaAFOLVu0ARgOVfXBZdR5CN/0/img2GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEt NDIxZTZiYzdlMmU4LzEvaXJzTXlHNG84MFpOOVNrOEVCeWVqSnppUVl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84NjI5N2EtZDIxOS00NTY3LTkxNzEtNDIxZTZiYzdlMmU4 LzEvNHRXN1FCR0E1VjljRmwxSGtJM19ULUthRFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAFw95DAM AwQBXD3mAwQAXD3oMAwDBAJcPewDBABcPe4DBABevIkDBABevMIwDAMEAF68yQME Al68yDAMAwQAXrzNAwQAXrzUMAwDBAFevNYDBABevNgwDAMEAV683gMEAV687DAM AwQAXrzvAwQBXrzwMA0GCSqGSIb3DQEBCwUAA4IBAQBPgPlmAR/OHFHRWBL7TF3R dAPGSUM+PeH0TCZ+T846F4S6LxB2UciGHeCmubuAiqUHvfWfMowYK3xmmCfK/GcY OVxV+11MDG/PQKndIKnhKgKLq15gjCzCChc2f5XE5ZJ+yd3wazTlyRPbSaXy3SNH J0yZ15kB1nnmpSweHelkPyht7fzKyiibxn1qOAUwwW/Lb1qCfY/vWl4+PN9QQh+j 2DHw5HlFdH0Kbzq/0WXeMs4CXagWJrskg+pK70JKEBjMAo14wFcBMJbKCziTKFXI ZfaG1eD/xLGKQ0OW+Z3dfd9ZsQEqWDoZKeVfct2UQmbYCcp0fgKloUoa4attmtEw -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:58 2026 by rpki-client