This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa File: iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa (raw, json) Hash identifier: f7hSU9eQL9QO+9vWgF04GRMwKj8b5Zh3CLrT+16gfVU= Subject key identifier: 88:B9:B0:32:08:2A:8C:40:67:43:5B:79:A9:30:88:93:4F:8E:A6:CD Certificate issuer: /CN=c34094e3236dcd1c835113791a3824da2973df9b Certificate serial: 019B78A37932915293B728E8416CDE3F8925 Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41165 IP address blocks: 80.64.80.0/20 maxlen: 20 94.100.208.0/20 maxlen: 20 185.35.8.0/22 maxlen: 22 195.216.204.0/23 maxlen: 23 195.238.176.0/22 maxlen: 22 2a00:7d00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:79:32:91:52:93:b7:28:e8:41:6c:de:3f:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b9b032082a8c4067435b79a93088934f8ea6cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:4d:33:62:11:81:ad:84:d2:95:a6:7d:3b: 41:66:83:b0:ce:f4:2f:ae:9c:2b:50:ea:0e:40:ee: b7:46:aa:4b:f4:50:ba:56:75:5e:1d:90:32:ea:1d: 30:c7:12:45:61:f5:9a:a3:64:c1:23:88:e4:35:04: bb:78:ac:fb:c1:03:9f:2b:b7:a4:3a:8d:6c:2b:1c: 9a:4b:9f:fc:e5:f6:57:3a:8a:e9:c0:0e:48:66:7b: 15:cd:62:5d:e4:e3:a0:ba:6c:b4:16:c2:dd:67:aa: 6e:71:0d:26:c5:26:30:73:86:5e:6a:15:8e:9c:7e: ce:8f:41:a1:21:a1:0c:1f:2b:e8:6a:c3:67:51:27: f3:3b:75:ac:33:85:81:ff:4b:db:eb:5a:a0:5b:c7: 6d:10:e9:3a:8c:c1:5d:ac:3d:59:10:6b:da:33:ca: 34:4b:cb:4f:21:02:e4:b4:c6:be:0f:64:6c:b3:a7: 20:93:43:6b:a2:e3:e7:87:dc:2e:ea:05:de:b5:a0: df:ae:27:8f:f0:24:1c:8f:8a:00:e2:e8:02:96:ea: cf:f3:fa:02:ea:df:91:08:34:44:98:e2:fd:22:8b: 7d:99:1e:ba:87:b1:32:1a:bd:9d:fc:63:da:7c:a2: bd:13:87:03:25:d5:4d:a9:71:22:73:d2:cc:0d:33: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B9:B0:32:08:2A:8C:40:67:43:5B:79:A9:30:88:93:4F:8E:A6:CD X509v3 Authority Key Identifier: keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.64.80.0/20 94.100.208.0/20 185.35.8.0/22 195.216.204.0/23 195.238.176.0/22 IPv6: 2a00:7d00::/32 Signature Algorithm: sha256WithRSAEncryption 65:58:22:c7:3d:16:dc:1e:c2:75:8f:37:47:9f:b4:2f:f4:e3: f9:ba:33:12:4b:2d:3a:0e:63:77:fb:ac:36:8a:4e:1d:1e:ed: 10:54:31:30:3e:d9:9c:41:e7:8e:5c:6e:ac:1f:2a:eb:36:0d: f4:9f:84:ec:f3:c8:a8:d3:08:d6:b2:e5:e7:33:87:1d:75:14: fd:a8:3a:78:56:54:c1:5e:12:b5:83:ac:82:4f:df:ce:fc:c4: 2f:9b:3c:1a:21:75:46:ca:fe:33:31:52:49:4f:52:8b:0d:3e: de:6e:e6:6b:e6:8a:d0:44:77:5b:99:4b:09:c7:1e:8f:54:45: 82:7d:c3:e9:de:65:9a:8a:27:cb:a5:cf:58:40:4a:8c:5b:30: 7b:ca:92:2c:9e:20:7f:94:81:a1:77:bb:7b:8e:1f:00:18:fc: 5e:c4:36:ee:21:04:90:fa:6a:ea:08:c5:9e:e9:0b:d4:f1:fb: 15:38:dc:72:f7:44:da:6a:63:20:0a:29:6b:85:85:21:bc:ff: 40:9b:c3:9a:28:04:6f:3b:23:cb:57:d1:69:8d:97:9f:d4:9c: f1:34:e0:40:52:91:7a:30:e8:9a:32:37:f9:5e:04:dc:89:00: 47:51:30:39:0a:df:5b:67:8f:d3:49:0c:34:33:62:5c:98:3e: f1:7e:8a:ab -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt4o3kykVKTtyjoQWzeP4klMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNDA5NGUzMjM2ZGNkMWM4MzUxMTM3OTFhMzgyNGRhMjk3 M2RmOWIwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGI5YjAzMjA4MmE4YzQwNjc0MzViNzlhOTMwODg5MzRmOGVhNmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZNM2IRga2E0pWmfTtBZoOwzvQv rpwrUOoOQO63RqpL9FC6VnVeHZAy6h0wxxJFYfWao2TBI4jkNQS7eKz7wQOfK7ek Oo1sKxyaS5/85fZXOorpwA5IZnsVzWJd5OOgumy0FsLdZ6pucQ0mxSYwc4ZeahWO nH7Oj0GhIaEMHyvoasNnUSfzO3WsM4WB/0vb61qgW8dtEOk6jMFdrD1ZEGvaM8o0 S8tPIQLktMa+D2Rss6cgk0NrouPnh9wu6gXetaDfrieP8CQcj4oA4ugClurP8/oC 6t+RCDREmOL9Iot9mR66h7EyGr2d/GPafKK9E4cDJdVNqXEic9LMDTNCJwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIi5sDIIKoxAZ0NbeakwiJNPjqbNMB8GA1UdIwQY MBaAFMNAlOMjbc0cg1ETeRo4JNopc9+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzIt ZThhMzlkZDYwODY0LzEvaUxtd01nZ3FqRUJuUTF0NXFUQ0lrMC1PcHMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9jZmIyNTEtOTIzZi00MGMxLTk4MzItZThhMzlkZDYwODY0 LzEvdzBDVTR5TnR6UnlEVVJONUdqZ2syaWx6MzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEUEBQAwQE XmTQAwQCuSMIAwQBw9jMAwQCw+6wMA0EAgACMAcDBQAqAH0AMA0GCSqGSIb3DQEB CwUAA4IBAQBlWCLHPRbcHsJ1jzdHn7Qv9OP5ujMSSy06DmN3+6w2ik4dHu0QVDEw PtmcQeeOXG6sHyrrNg30n4Ts88io0wjWsuXnM4cddRT9qDp4VlTBXhK1g6yCT9/O /MQvmzwaIXVGyv4zMVJJT1KLDT7ebuZr5orQRHdbmUsJxx6PVEWCfcPp3mWaiifL pc9YQEqMWzB7ypIsniB/lIGhd7t7jh8AGPxexDbuIQSQ+mrqCMWe6QvU8fsVONxy 90TaamMgCilrhYUhvP9Am8OaKARvOyPLV9FpjZef1JzxNOBAUpF6MOiaMjf5XgTc iQBHUTA5Ct9bZ4/TSQw0M2JcmD7xfoqr -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:37 2026 by rpki-client