This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/Ix_qVuS5vPiiPF93gvMNbq2J73k.roa File: Ix_qVuS5vPiiPF93gvMNbq2J73k.roa (raw, json) Hash identifier: LJd1ZKlLcuXv6QgRvZXhodlipF4k/ei6rSQJhFNJAKI= Subject key identifier: 23:1F:EA:56:E4:B9:BC:F8:A2:3C:5F:77:82:F3:0D:6E:AD:89:EF:79 Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Certificate serial: 019B7BA4BD297053857A412D27F668BB444A Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/Ix_qVuS5vPiiPF93gvMNbq2J73k.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8456 IP address blocks: 161.9.144.0/21 maxlen: 24 161.9.147.0/24 maxlen: 24 161.9.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.mft rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bd:29:70:53:85:7a:41:2d:27:f6:68:bb:44:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=231fea56e4b9bcf8a23c5f7782f30d6ead89ef79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:a8:97:86:54:16:2e:ab:62:a5:b6:9c:1a: 4e:58:39:34:85:f9:da:6d:71:72:2c:8c:da:ee:8e: 34:68:b2:7e:39:b8:44:d9:97:e6:63:ce:7c:2c:24: 90:c8:ab:c6:55:ee:b1:6f:18:59:cb:16:20:0f:bc: 4c:46:11:77:2c:26:32:25:66:ce:1a:9f:5f:dc:fd: 79:d3:c5:aa:b6:ed:e9:46:0d:83:a3:b8:dc:ea:e9: e6:b1:42:c2:a2:00:03:b8:91:6a:de:15:5a:3f:d3: 9c:91:9a:90:60:57:e8:75:ff:c9:a5:20:01:b1:25: 36:a0:e9:23:ce:01:c6:19:ea:18:25:41:db:40:f4: 54:b7:8d:7d:c4:8a:49:ad:e7:b8:39:8a:5b:2c:d5: bd:fe:c9:74:61:c6:35:36:66:32:d7:84:9f:ad:b3: 20:7a:8a:89:c0:68:ae:cf:2e:5b:b1:cb:bb:86:3d: a6:ac:76:df:95:4d:8e:59:72:e7:79:f0:30:c2:d9: 33:41:b4:ab:f7:85:81:c2:e4:b5:e9:f3:4b:f3:2b: 92:3f:90:da:40:26:7c:08:8c:81:43:4a:21:1c:54: 64:83:a8:f7:91:45:5c:fa:00:ee:14:03:3f:4f:a6: 40:03:33:c5:27:79:03:32:8a:9d:5a:e7:bc:72:88: ff:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1F:EA:56:E4:B9:BC:F8:A2:3C:5F:77:82:F3:0D:6E:AD:89:EF:79 X509v3 Authority Key Identifier: keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/Ix_qVuS5vPiiPF93gvMNbq2J73k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.9.144.0/21 161.9.154.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:65:d9:84:62:a2:92:06:e3:7b:73:c3:b4:2b:a6:60:35:6f: 96:5d:cc:8e:7c:3e:27:26:a9:24:f3:28:52:64:c0:09:78:9f: 4c:b4:5e:63:10:f4:b9:37:f6:3d:d2:ff:c3:05:bb:0a:53:6b: 35:50:69:b6:08:71:5d:a4:07:e4:52:f7:d3:55:5e:ee:9c:17: bc:ba:d0:ba:f6:33:18:dd:95:b1:74:ff:39:0b:f4:80:74:de: fa:50:fd:db:b8:71:7a:52:5c:b2:bd:ec:54:f6:a8:37:d1:63: 26:39:db:ef:c6:e8:25:ce:8b:60:c6:e9:c2:bd:b0:81:22:09: 6a:e4:65:9c:81:50:78:89:0d:38:95:42:10:9c:9b:9b:8c:55: 50:01:88:42:5e:dc:ec:83:51:04:ad:b0:3d:b7:3d:7f:48:53: ab:d2:e1:16:a2:54:e9:dd:86:ab:7a:a0:0f:59:54:51:2b:7f: 43:40:78:0c:e1:a3:ed:05:6e:00:b1:f2:37:87:7a:4a:bd:9d: 39:e3:de:1d:fc:5f:27:8e:0f:80:67:95:6e:5e:37:0a:d1:00: dc:a8:18:3f:45:d8:1d:10:23:ab:eb:ce:a1:76:e3:8b:b6:04: 9a:1a:7b:28:9a:28:f2:2a:f6:48:bd:97:48:39:68:14:58:79: 59:7d:30:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pL0pcFOFekEtJ/Zou0RKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWE3OGIyOGYwNTRmNzJmNTIyNmFlM2VjNDU0OTgwZWQy YTEwYzkwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzFmZWE1NmU0YjliY2Y4YTIzYzVmNzc4MmYzMGQ2ZWFkODllZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkmol4ZUFi6rYqW2nBpOWDk0hfna bXFyLIza7o40aLJ+ObhE2ZfmY858LCSQyKvGVe6xbxhZyxYgD7xMRhF3LCYyJWbO Gp9f3P1508Wqtu3pRg2Do7jc6unmsULCogADuJFq3hVaP9OckZqQYFfodf/JpSAB sSU2oOkjzgHGGeoYJUHbQPRUt419xIpJree4OYpbLNW9/sl0YcY1NmYy14SfrbMg eoqJwGiuzy5bscu7hj2mrHbflU2OWXLnefAwwtkzQbSr94WBwuS16fNL8yuSP5Da QCZ8CIyBQ0ohHFRkg6j3kUVc+gDuFAM/T6ZAAzPFJ3kDMoqdWue8coj/4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCMf6lbkubz4ojxfd4LzDW6tie95MB8GA1UdIwQY MBaAFBPqeLKPBU9y9SJq4+xFSYDtKhDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUt MTA5OGQ2ZDg4ZGU4LzEvSXhfcVZ1UzV2UGlpUEY5M2d2TU5icTJKNzNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUtMTA5OGQ2ZDg4ZGU4 LzEvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDoQmQAwQA oQmaMA0GCSqGSIb3DQEBCwUAA4IBAQCKZdmEYqKSBuN7c8O0K6ZgNW+WXcyOfD4n Jqkk8yhSZMAJeJ9MtF5jEPS5N/Y90v/DBbsKU2s1UGm2CHFdpAfkUvfTVV7unBe8 utC69jMY3ZWxdP85C/SAdN76UP3buHF6UlyyvexU9qg30WMmOdvvxuglzotgxunC vbCBIglq5GWcgVB4iQ04lUIQnJubjFVQAYhCXtzsg1EErbA9tz1/SFOr0uEWolTp 3YareqAPWVRRK39DQHgM4aPtBW4AsfI3h3pKvZ05494d/F8njg+AZ5VuXjcK0QDc qBg/RdgdECOr686hduOLtgSaGnsomijyKvZIvZdIOWgUWHlZfTB9 -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:26 2026 by rpki-client