This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/iliXSfFW9CmHSeqMey9o5nQh8YE.roa File: iliXSfFW9CmHSeqMey9o5nQh8YE.roa (raw, json) Hash identifier: Fb6bIsCY/5XAoXMXg9zGQmjVCnZpfmN1KdROzLuLLmM= Subject key identifier: 8A:58:97:49:F1:56:F4:29:87:49:EA:8C:7B:2F:68:E6:74:21:F1:81 Certificate issuer: /CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Certificate serial: 019B7C1301716159376E54AB372D12250D03 Authority key identifier: 60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/iliXSfFW9CmHSeqMey9o5nQh8YE.roa Signing time: Fri 02 Jan 2026 00:19:38 +0000 ROA not before: Fri 02 Jan 2026 00:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49788 IP address blocks: 84.243.128.0/18 maxlen: 24 185.57.252.0/22 maxlen: 22 2a02:6060::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:01:71:61:59:37:6e:54:ab:37:2d:12:25:0d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60635e04c34c2f781ee980a1651ff66e5132bc44 Validity Not Before: Jan 2 00:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a589749f156f4298749ea8c7b2f68e67421f181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:5b:b6:29:2f:b9:f8:c6:f7:6a:84:75:1c: 4d:04:7d:83:19:ea:0f:3f:18:9c:a8:b2:f5:d0:1c: 1f:64:7e:df:12:bb:72:ea:1f:ee:6f:a4:7d:33:6d: 5e:c1:44:47:a5:2f:f8:38:20:38:4f:de:f1:b5:ae: c9:c0:01:12:7d:d7:9e:46:b8:f6:c2:2b:4e:b8:e0: 09:d3:a6:77:64:96:51:ed:c1:ad:2c:b4:d7:04:e2: 64:59:fd:c4:22:12:61:2b:31:72:9f:7b:ac:81:2d: 8f:c3:2c:68:9b:8d:b3:47:93:8e:23:b5:d4:a1:e7: 62:d9:55:4e:0a:8c:dd:b1:ad:1e:93:6d:6b:66:72: 4f:e9:e2:4f:c8:0a:18:b6:e9:18:30:0f:05:54:e1: a2:a4:b2:51:e1:58:0f:19:c0:54:b7:8c:a6:e1:80: 7a:58:8c:9b:09:a2:62:09:de:d3:dd:5c:d7:e2:fb: 5d:62:2c:58:ae:68:0e:c4:c8:2c:49:e2:e0:68:8b: 6a:c0:bf:85:30:bb:42:40:d8:45:eb:9b:03:3d:ad: b6:d8:fd:8f:5c:02:2a:56:a5:14:04:b6:d2:28:33: 2b:c7:fd:93:45:99:16:d1:98:e3:14:06:b2:a2:d8: 0b:79:60:8c:aa:fa:98:6a:be:40:d7:f2:72:1b:29: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:58:97:49:F1:56:F4:29:87:49:EA:8C:7B:2F:68:E6:74:21:F1:81 X509v3 Authority Key Identifier: keyid:60:63:5E:04:C3:4C:2F:78:1E:E9:80:A1:65:1F:F6:6E:51:32:BC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGNeBMNML3ge6YChZR_2blEyvEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/iliXSfFW9CmHSeqMey9o5nQh8YE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/99286a-45b3-4cee-8db5-937081a9cefa/1/YGNeBMNML3ge6YChZR_2blEyvEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.243.128.0/18 185.57.252.0/22 IPv6: 2a02:6060::/32 Signature Algorithm: sha256WithRSAEncryption 4f:e2:e4:bf:4f:4c:dd:71:a3:a4:5a:d1:94:e0:c4:2b:a3:d1: 14:26:fb:6f:44:95:29:18:e1:b3:d1:5c:36:ed:27:98:73:e6: 65:c5:f6:db:db:ec:3c:c9:61:f6:f6:fa:dc:d5:be:b1:38:ad: 8c:96:34:b3:f3:2b:06:4c:bd:83:b4:e6:90:51:d8:03:e6:cc: aa:e9:6a:f5:01:87:4d:8e:34:38:ea:1a:fd:99:aa:83:27:93: 41:9f:aa:d9:69:e8:db:23:75:34:14:88:5f:0f:5c:bb:06:5c: aa:a6:05:7a:2a:85:87:76:81:fc:0d:f0:8d:01:6e:42:3b:99: 7a:a1:40:0f:8c:10:2a:2b:cb:0d:a7:04:d8:c6:28:fe:62:2b: 6c:e3:6a:73:0e:b7:9a:bd:43:fc:15:44:20:fb:96:75:70:43: 99:6f:c1:90:68:9f:00:fd:0c:25:ae:12:3a:64:b1:62:3d:db: f5:44:58:7e:8a:5f:84:58:e6:3a:05:13:d6:30:fb:6c:42:cd: 69:c0:6e:ab:96:00:79:8d:29:db:64:09:21:6a:69:bd:99:c2: 27:cd:29:4e:8a:8a:23:9d:be:14:10:6e:c6:37:bf:af:60:e9: 0e:b6:74:52:22:4b:1e:04:1d:59:69:b1:e7:93:26:17:1e:dc: 41:a0:6c:e3 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EwFxYVk3blSrNy0SJQ0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjM1ZTA0YzM0YzJmNzgxZWU5ODBhMTY1MWZmNjZlNTEz MmJjNDQwHhcNMjYwMTAyMDAxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTU4OTc0OWYxNTZmNDI5ODc0OWVhOGM3YjJmNjhlNjc0MjFmMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFJbtikvufjG92qEdRxNBH2DGeoP PxicqLL10BwfZH7fErty6h/ub6R9M21ewURHpS/4OCA4T97xta7JwAESfdeeRrj2 witOuOAJ06Z3ZJZR7cGtLLTXBOJkWf3EIhJhKzFyn3usgS2Pwyxom42zR5OOI7XU oedi2VVOCozdsa0ek21rZnJP6eJPyAoYtukYMA8FVOGipLJR4VgPGcBUt4ym4YB6 WIybCaJiCd7T3VzX4vtdYixYrmgOxMgsSeLgaItqwL+FMLtCQNhF65sDPa222P2P XAIqVqUUBLbSKDMrx/2TRZkW0ZjjFAayotgLeWCMqvqYar5A1/JyGymrRwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIpYl0nxVvQph0nqjHsvaOZ0IfGBMB8GA1UdIwQY MBaAFGBjXgTDTC94HumAoWUf9m5RMrxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUt OTM3MDgxYTljZWZhLzEvaWxpWFNmRlc5Q21IU2VxTWV5OW81blFoOFlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS85OTI4NmEtNDViMy00Y2VlLThkYjUtOTM3MDgxYTljZWZh LzEvWUdOZUJNTk1MM2dlNllDaFpSXzJibEV5dkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGVPOAAwQC uTn8MA0EAgACMAcDBQAqAmBgMA0GCSqGSIb3DQEBCwUAA4IBAQBP4uS/T0zdcaOk WtGU4MQro9EUJvtvRJUpGOGz0Vw27SeYc+Zlxfbb2+w8yWH29vrc1b6xOK2MljSz 8ysGTL2DtOaQUdgD5syq6Wr1AYdNjjQ46hr9maqDJ5NBn6rZaejbI3U0FIhfD1y7 BlyqpgV6KoWHdoH8DfCNAW5CO5l6oUAPjBAqK8sNpwTYxij+Yits42pzDreavUP8 FUQg+5Z1cEOZb8GQaJ8A/QwlrhI6ZLFiPdv1RFh+il+EWOY6BRPWMPtsQs1pwG6r lgB5jSnbZAkhamm9mcInzSlOioojnb4UEG7GN7+vYOkOtnRSIkseBB1ZabHnkyYX HtxBoGzj -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:17 2026 by rpki-client