This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa File: izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa (raw, json) Hash identifier: IS6iJGB8DvxnqW49lmgjGOpqUU7oBgMo/SUW8Kywe3Q= Subject key identifier: 8B:32:F6:09:AE:53:3B:76:5A:4E:26:DF:00:7D:FD:84:C4:00:30:14 Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba Certificate serial: 019B7EA6695160E7E10EFDC7EEBC0589C2DB Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa Signing time: Fri 02 Jan 2026 12:19:53 +0000 ROA not before: Fri 02 Jan 2026 12:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200055 IP address blocks: 85.248.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.mft rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:69:51:60:e7:e1:0e:fd:c7:ee:bc:05:89:c2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba Validity Not Before: Jan 2 12:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b32f609ae533b765a4e26df007dfd84c4003014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:65:0a:22:ad:47:70:15:b0:ac:36:c0:47: d7:68:61:61:34:81:05:83:68:cb:4a:3c:63:c6:da: e9:53:b0:e6:f6:dd:ef:17:dc:dc:d1:23:13:6a:d5: 5e:5a:21:c6:f9:c9:93:b5:81:73:02:d5:29:41:27: 4c:03:4e:0a:f8:bf:e5:a3:50:d4:65:c5:00:f8:9a: a5:1e:99:83:65:c3:6a:88:aa:71:2e:37:ff:30:2f: b2:66:dd:11:69:94:bf:f9:cf:c4:f5:d8:5c:af:4e: 79:32:4b:ae:cf:8f:44:d3:95:d8:a3:12:3c:4f:a0: 3d:59:69:ce:aa:ac:f4:6e:62:c0:37:be:3b:7e:26: f1:70:01:86:87:a2:1d:d7:b5:9a:d1:3e:9c:6d:d2: 18:fb:4c:26:0f:79:13:90:71:d3:ba:e8:f0:cb:f7: f4:95:b4:57:4d:f7:b0:a8:9f:5f:53:cc:d2:34:42: 1d:ef:bb:72:10:fb:7b:2c:d1:23:3a:f3:c2:d6:f7: 07:27:41:5d:bd:85:16:09:36:65:36:ed:23:1e:02: a3:63:c4:78:d5:9d:7f:ae:3b:b1:2f:e5:b3:f2:99: 76:51:58:e1:39:26:05:d4:ab:65:d7:f1:33:9c:3e: da:da:e1:92:66:61:f8:fd:49:de:47:9a:79:f1:76: e9:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:32:F6:09:AE:53:3B:76:5A:4E:26:DF:00:7D:FD:84:C4:00:30:14 X509v3 Authority Key Identifier: keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/izL2Ca5TO3ZaTibfAH39hMQAMBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.248.249.0/24 Signature Algorithm: sha256WithRSAEncryption b1:28:e0:f7:0b:29:84:8c:a2:a8:81:83:67:fc:e9:69:13:a4: 29:ea:5b:6b:bd:e9:45:c9:0b:0d:10:22:c4:0f:df:ae:0c:dc: ff:4c:7c:1f:0e:07:56:6a:a8:97:f4:6b:9c:cf:1b:0e:89:c4: c5:e2:4a:0b:9b:63:a9:7d:1c:a7:50:43:98:ef:17:99:c4:11: 0b:53:de:0b:63:c6:9a:c0:ea:bd:26:15:22:1a:74:20:9f:31: dc:5a:90:cf:a0:db:9c:ea:60:10:21:5a:13:0b:f3:f0:bf:6a: 43:29:61:30:f7:f0:2f:51:c0:bb:c3:37:32:85:31:1d:71:1e: a9:57:f6:52:0b:ea:83:37:f9:c7:f8:b0:ab:9c:70:ac:c8:47: d7:15:f1:8f:f9:99:d5:23:13:6c:88:85:5d:96:74:89:88:eb: a5:dc:85:e3:78:ac:9b:13:e6:4f:06:6d:7a:24:7a:30:c3:68: a0:b0:2b:3b:54:08:53:2d:3b:b2:54:47:ac:1a:c8:9d:d4:37: 50:1c:d6:05:91:1a:7c:70:c3:6f:5d:20:d1:ce:b7:20:41:ac: b5:89:3f:4d:55:74:98:80:3b:1a:84:5c:69:8d:8d:51:28:7f: a3:2e:b8:75:11:78:32:f5:2c:5b:89:ab:ce:a1:72:01:75:19: be:57:a3:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pmlRYOfhDv3H7rwFicLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Zjg4MTQwMWFiYWNjODhjOTQxZmRmNzQwZjFhYjE1MzZm MDVkYmEwHhcNMjYwMTAyMTIxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjMyZjYwOWFlNTMzYjc2NWE0ZTI2ZGYwMDdkZmQ4NGM0MDAzMDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgplCiKtR3AVsKw2wEfXaGFhNIEF g2jLSjxjxtrpU7Dm9t3vF9zc0SMTatVeWiHG+cmTtYFzAtUpQSdMA04K+L/lo1DU ZcUA+JqlHpmDZcNqiKpxLjf/MC+yZt0RaZS/+c/E9dhcr055Mkuuz49E05XYoxI8 T6A9WWnOqqz0bmLAN747fibxcAGGh6Id17Wa0T6cbdIY+0wmD3kTkHHTuujwy/f0 lbRXTfewqJ9fU8zSNEId77tyEPt7LNEjOvPC1vcHJ0FdvYUWCTZlNu0jHgKjY8R4 1Z1/rjuxL+Wz8pl2UVjhOSYF1Ktl1/EznD7a2uGSZmH4/UneR5p58XbpJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsy9gmuUzt2Wk4m3wB9/YTEADAUMB8GA1UdIwQY MBaAFOf4gUAausyIyUH990DxqxU28F26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmIt ZTJmYmMzYTY4ODAwLzEvaXpMMkNhNVRPM1phVGliZkFIMzloTVFBTUJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9mNTUzNGEtYTYxMy00N2JlLWI0MmItZTJmYmMzYTY4ODAw LzEvNV9pQlFCcTZ6SWpKUWYzM1FQR3JGVGJ3WGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVfj5MA0G CSqGSIb3DQEBCwUAA4IBAQCxKOD3CymEjKKogYNn/OlpE6Qp6ltrvelFyQsNECLE D9+uDNz/THwfDgdWaqiX9GuczxsOicTF4koLm2OpfRynUEOY7xeZxBELU94LY8aa wOq9JhUiGnQgnzHcWpDPoNuc6mAQIVoTC/Pwv2pDKWEw9/AvUcC7wzcyhTEdcR6p V/ZSC+qDN/nH+LCrnHCsyEfXFfGP+ZnVIxNsiIVdlnSJiOul3IXjeKybE+ZPBm16 JHoww2igsCs7VAhTLTuyVEesGsid1DdQHNYFkRp8cMNvXSDRzrcgQay1iT9NVXSY gDsahFxpjY1RKH+jLrh1EXgy9SxbiavOoXIBdRm+V6Mr -----END CERTIFICATE-----Generated at Mon Jan 26 12:15:44 2026 by rpki-client