This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/JIk4GJqmgSwzYSk0JGPNI21QRnM.roa File: JIk4GJqmgSwzYSk0JGPNI21QRnM.roa (raw, json) Hash identifier: 45ZLZSPO108JAO0yb1j8MEBiHT4QdE4zU9XBhQbVqtg= Subject key identifier: 24:89:38:18:9A:A6:81:2C:33:61:29:34:24:63:CD:23:6D:50:46:73 Certificate issuer: /CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Certificate serial: 019B7AC8073658BEC4BC92229B7F09309F57 Authority key identifier: 87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/JIk4GJqmgSwzYSk0JGPNI21QRnM.roa Signing time: Thu 01 Jan 2026 18:18:07 +0000 ROA not before: Thu 01 Jan 2026 18:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210666 IP address blocks: 185.133.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.mft rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:07:36:58:be:c4:bc:92:22:9b:7f:09:30:9f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87d990131467b77d11162b79fbe3b06ca8ab2d39 Validity Not Before: Jan 1 18:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=248938189aa6812c336129342463cd236d504673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:50:27:aa:42:55:b4:51:02:6a:6c:a9:98:19: eb:90:6e:e4:59:bb:f5:5a:36:d9:a9:b5:94:a6:56: ea:00:f6:aa:6e:93:00:bd:fb:67:c2:23:2e:cd:48: 19:d7:05:4f:e6:33:8e:6e:d5:c1:dd:d3:88:15:5b: fc:0b:b0:84:86:1e:4d:81:ff:ef:ed:b8:c6:51:ff: 8f:24:31:42:7b:b0:1e:8e:6e:f1:41:a5:40:b2:dc: d5:e6:0f:b4:6d:03:17:5c:a7:2d:d7:94:1d:aa:bf: 8a:fc:97:f0:52:ce:92:0a:62:a3:6a:fa:18:ea:f0: 68:3d:99:0a:04:16:7d:b0:38:a8:6c:ad:20:bb:2f: 87:44:8f:6a:d1:3c:96:19:af:31:27:1e:d3:b3:26: c5:53:a7:c5:b7:8c:ac:d9:e9:fc:8e:c1:a3:93:71: 42:3d:b5:bb:2b:d9:0d:0b:ae:10:d2:7e:2d:08:e9: 31:2a:88:e0:e0:35:75:85:86:f1:35:e8:f5:e4:3b: 23:33:1f:e7:5c:c8:dd:f4:8b:7e:99:4e:ee:ed:27: 30:32:67:f1:03:c2:57:2a:9c:ae:22:48:e6:01:29: 78:39:87:c3:01:d8:59:53:e0:b0:88:9a:1d:26:34: 53:87:d6:df:e9:63:9a:bc:99:35:4f:98:41:d0:1b: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:89:38:18:9A:A6:81:2C:33:61:29:34:24:63:CD:23:6D:50:46:73 X509v3 Authority Key Identifier: keyid:87:D9:90:13:14:67:B7:7D:11:16:2B:79:FB:E3:B0:6C:A8:AB:2D:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9mQExRnt30RFit5--OwbKirLTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/JIk4GJqmgSwzYSk0JGPNI21QRnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5dea97-7ef7-4db0-94bc-b8e8b34db290/1/h9mQExRnt30RFit5--OwbKirLTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.83.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a7:1f:24:b4:f7:de:97:d3:9f:c4:da:6b:1d:8c:30:6e:cd: 8a:51:7c:80:c9:1f:16:18:70:5d:a0:ad:d8:31:e8:4e:bc:2a: 15:0f:a7:72:02:8f:d7:52:7c:b4:ed:01:2d:5a:73:75:5b:4e: 8e:ae:14:56:f9:b9:47:b4:6a:25:47:ca:2e:1b:81:0b:3f:86: 1c:5d:87:e7:da:10:dc:db:ef:1d:66:9e:e6:cd:f9:ce:ad:d4: 39:bc:39:37:1d:ad:4f:6a:33:c2:85:30:5e:15:a9:76:40:7e: a0:6b:1e:29:44:ea:dc:90:90:0c:1a:af:f9:dd:4f:b3:0d:6f: 55:b1:ff:d2:8d:31:6a:ae:2d:77:f1:5a:c8:e4:00:64:fa:7f: 9d:ad:16:fa:28:95:5c:12:0d:75:bf:69:ec:8f:6f:ae:d2:93: 49:a6:ab:81:ef:2a:7e:59:4f:7b:07:6a:4f:52:30:4e:45:31: 8e:4d:80:a2:58:4e:21:2d:c2:34:98:6a:70:6a:54:a2:54:63: 2b:c6:29:1f:a3:91:8e:9e:d7:74:d6:a7:6b:3c:e7:13:d0:df: f7:70:10:24:e6:d7:c3:73:93:4e:ce:91:13:cb:eb:9c:3d:1d: 2b:c5:95:b9:d4:c0:2f:3e:e4:b1:78:10:f5:a3:e5:c4:8b:27: c3:0c:d9:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yAc2WL7EvJIim38JMJ9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZDk5MDEzMTQ2N2I3N2QxMTE2MmI3OWZiZTNiMDZjYThh YjJkMzkwHhcNMjYwMTAxMTgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDg5MzgxODlhYTY4MTJjMzM2MTI5MzQyNDYzY2QyMzZkNTA0NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVAnqkJVtFECamypmBnrkG7kWbv1 WjbZqbWUplbqAPaqbpMAvftnwiMuzUgZ1wVP5jOObtXB3dOIFVv8C7CEhh5Ngf/v 7bjGUf+PJDFCe7Aejm7xQaVAstzV5g+0bQMXXKct15Qdqr+K/JfwUs6SCmKjavoY 6vBoPZkKBBZ9sDiobK0guy+HRI9q0TyWGa8xJx7TsybFU6fFt4ys2en8jsGjk3FC PbW7K9kNC64Q0n4tCOkxKojg4DV1hYbxNej15DsjMx/nXMjd9It+mU7u7ScwMmfx A8JXKpyuIkjmASl4OYfDAdhZU+CwiJodJjRTh9bf6WOavJk1T5hB0BtKzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCSJOBiapoEsM2EpNCRjzSNtUEZzMB8GA1UdIwQY MBaAFIfZkBMUZ7d9ERYrefvjsGyoqy05MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMt YjhlOGIzNGRiMjkwLzEvSklrNEdKcW1nU3d6WVNrMEpHUE5JMjFRUm5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81ZGVhOTctN2VmNy00ZGIwLTk0YmMtYjhlOGIzNGRiMjkw LzEvaDltUUV4Um50MzBSRml0NS0tT3diS2lyTFRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYVTMA0G CSqGSIb3DQEBCwUAA4IBAQBxpx8ktPfel9OfxNprHYwwbs2KUXyAyR8WGHBdoK3Y MehOvCoVD6dyAo/XUny07QEtWnN1W06OrhRW+blHtGolR8ouG4ELP4YcXYfn2hDc 2+8dZp7mzfnOrdQ5vDk3Ha1PajPChTBeFal2QH6gax4pROrckJAMGq/53U+zDW9V sf/SjTFqri138VrI5ABk+n+drRb6KJVcEg11v2nsj2+u0pNJpquB7yp+WU97B2pP UjBORTGOTYCiWE4hLcI0mGpwalSiVGMrxikfo5GOntd01qdrPOcT0N/3cBAk5tfD c5NOzpETy+ucPR0rxZW51MAvPuSxeBD1o+XEiyfDDNlp -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:20 2026 by rpki-client