This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/IwISPZAq_lfMVYJDL-7wMWue3aU.roa File: IwISPZAq_lfMVYJDL-7wMWue3aU.roa (raw, json) Hash identifier: z6+EXeevPDa78xk3kdWEbfuhp5KcLTsL2G6IDYHQCnA= Subject key identifier: 23:02:12:3D:90:2A:FE:57:CC:55:82:43:2F:EE:F0:31:6B:9E:DD:A5 Certificate issuer: /CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Certificate serial: 019B78A2DB6B4251089A9D130E29473F1D8A Authority key identifier: FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/IwISPZAq_lfMVYJDL-7wMWue3aU.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31433 IP address blocks: 185.100.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:db:6b:42:51:08:9a:9d:13:0e:29:47:3f:1d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa70b42d7af6ad78222b30f05f2b7913f8063570 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2302123d902afe57cc5582432feef0316b9edda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:59:37:cd:7a:9e:a7:14:ca:50:2c:6e:25:62: 18:52:3e:5b:0a:06:16:a2:7d:46:ad:b2:91:90:68: 79:6d:fe:5a:b7:c2:27:ac:16:c2:ee:8c:c6:90:7d: c8:a7:cc:a2:87:68:28:c0:c0:03:17:11:ce:77:8e: c3:6b:4f:7f:fb:dc:e7:bb:66:f5:2f:00:76:7e:86: d0:9b:f1:03:0b:0f:00:ff:30:09:2d:10:74:bf:b9: e9:b0:86:89:b6:39:d5:b2:51:3e:8e:2b:85:18:e2: 0c:39:d4:5e:0c:fc:89:56:61:93:97:93:c6:eb:a3: e7:98:8b:d3:d8:fa:14:69:fc:d6:db:9e:40:6d:54: d0:7c:8f:2f:35:03:ca:d5:a8:8f:e9:4b:3b:51:50: e6:69:34:d6:ab:26:c2:a7:e7:c6:e5:17:b5:03:7e: a1:84:bc:17:8c:bd:b1:5e:c8:cc:20:eb:8f:58:5d: 5c:14:d2:4e:b3:bd:1f:c1:99:fc:25:5a:99:74:51: 52:db:b0:b7:bc:cc:f7:78:10:70:31:05:4b:ff:d0: 09:c4:14:84:79:c4:f6:05:05:d2:e4:61:d0:2d:a5: ab:1b:d3:0a:65:a5:76:7c:0a:34:fa:a0:d4:96:51: 85:fa:ce:3a:7e:9e:58:a5:b6:04:23:9d:e4:fd:64: bc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:02:12:3D:90:2A:FE:57:CC:55:82:43:2F:EE:F0:31:6B:9E:DD:A5 X509v3 Authority Key Identifier: keyid:FA:70:B4:2D:7A:F6:AD:78:22:2B:30:F0:5F:2B:79:13:F8:06:35:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/IwISPZAq_lfMVYJDL-7wMWue3aU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d3bfe6-78b5-437b-98e9-b914159ba8ad/1/1-nC0LXr2rXgiKzDwXyt5E_gGNXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.192.0/22 Signature Algorithm: sha256WithRSAEncryption ad:52:cd:8f:22:95:cb:24:86:d1:ba:7b:a1:66:cf:24:4c:46: 58:9c:c6:95:6d:49:1d:36:9d:b7:a6:28:f3:dd:e7:4d:9c:3b: 1f:d6:d5:32:10:a3:9a:86:41:2d:7a:df:99:9a:97:24:10:8a: ce:ba:15:b8:cc:b6:f1:04:df:b2:b6:e5:36:3e:2c:91:5d:40: 61:6a:7b:4b:06:cb:68:9d:4c:29:a4:69:14:8d:11:e8:27:6c: f7:08:2e:fc:35:a2:57:80:0d:c6:50:fd:11:17:ec:bc:13:35: c4:54:42:81:f8:b3:7b:d1:94:59:ee:7e:95:ee:a4:5d:1c:24: 92:3e:2b:9e:ef:a0:0d:7c:ed:1d:0b:74:f0:ba:dd:80:d0:cc: 42:53:91:97:4b:80:bf:4f:c5:86:bb:01:6d:8d:0a:4a:d0:13: 95:da:eb:23:c8:ae:21:90:73:9f:be:26:b7:b7:2c:2c:2f:bb: 36:87:46:ef:31:1d:3c:30:2f:0c:c5:05:d8:3e:95:d5:65:91: 12:10:91:80:32:b7:f9:7c:81:27:02:7f:d3:dd:e2:94:c1:49: 39:40:f6:7d:63:5d:41:e3:94:5d:f2:a0:a3:2d:5b:c9:81:3d: 98:ed:9d:80:8e:71:92:6c:ac:a3:e3:61:7d:5e:d6:a3:ad:24: 53:db:e3:1c -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4ottrQlEImp0TDilHPx2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzBiNDJkN2FmNmFkNzgyMjJiMzBmMDVmMmI3OTEzZjgw NjM1NzAwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzAyMTIzZDkwMmFmZTU3Y2M1NTgyNDMyZmVlZjAzMTZiOWVkZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylk3zXqepxTKUCxuJWIYUj5bCgYW on1GrbKRkGh5bf5at8InrBbC7ozGkH3Ip8yih2gowMADFxHOd47Da09/+9znu2b1 LwB2fobQm/EDCw8A/zAJLRB0v7npsIaJtjnVslE+jiuFGOIMOdReDPyJVmGTl5PG 66PnmIvT2PoUafzW255AbVTQfI8vNQPK1aiP6Us7UVDmaTTWqybCp+fG5Re1A36h hLwXjL2xXsjMIOuPWF1cFNJOs70fwZn8JVqZdFFS27C3vMz3eBBwMQVL/9AJxBSE ecT2BQXS5GHQLaWrG9MKZaV2fAo0+qDUllGF+s46fp5YpbYEI53k/WS8rQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCMCEj2QKv5XzFWCQy/u8DFrnt2lMB8GA1UdIwQY MBaAFPpwtC169q14Iisw8F8reRP4BjVwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uQzBMWHIyclhnaUt6RHdYeXQ1RV9nR05YQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5 LWI5MTQxNTliYThhZC8xL0l3SVNQWkFxX2xmTVZZSkRMLTd3TVd1ZTNhVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmEvZDNiZmU2LTc4YjUtNDM3Yi05OGU5LWI5MTQxNTliYThh ZC8xLzEtbkMwTFhyMnJYZ2lLekR3WHl0NUVfZ0dOWEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK5ZMAw DQYJKoZIhvcNAQELBQADggEBAK1SzY8ilcskhtG6e6FmzyRMRlicxpVtSR02nbem KPPd502cOx/W1TIQo5qGQS1635malyQQis66FbjMtvEE37K25TY+LJFdQGFqe0sG y2idTCmkaRSNEegnbPcILvw1oleADcZQ/REX7LwTNcRUQoH4s3vRlFnufpXupF0c JJI+K57voA187R0LdPC63YDQzEJTkZdLgL9PxYa7AW2NCkrQE5Xa6yPIriGQc5++ Jre3LCwvuzaHRu8xHTwwLwzFBdg+ldVlkRIQkYAyt/l8gScCf9Pd4pTBSTlA9n1j XUHjlF3yoKMtW8mBPZjtnYCOcZJsrKPjYX1e1qOtJFPb4xw= -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:41 2026 by rpki-client