This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/iYRjHQAbJIp2oowSGAKJD6LLKmw.roa File: iYRjHQAbJIp2oowSGAKJD6LLKmw.roa (raw, json) Hash identifier: OcorZbUCquJDtFh4AjtJAw2ooEcP9az5ezvyYCaccyU= Subject key identifier: 89:84:63:1D:00:1B:24:8A:76:A2:8C:12:18:02:89:0F:A2:CB:2A:6C Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Certificate serial: 019B7E38E5ED713689DF6EDC549472D36A37 Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/iYRjHQAbJIp2oowSGAKJD6LLKmw.roa Signing time: Fri 02 Jan 2026 10:20:16 +0000 ROA not before: Fri 02 Jan 2026 10:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 185.251.140.0/22 maxlen: 22 2a0c:22c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e5:ed:71:36:89:df:6e:dc:54:94:72:d3:6a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d Validity Not Before: Jan 2 10:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8984631d001b248a76a28c121802890fa2cb2a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:41:34:67:7e:dd:8e:94:77:a6:15:96:0a:f9: 0e:3f:e4:ed:e5:e7:76:a0:46:75:10:85:0a:88:e0: 0a:be:8f:eb:da:24:60:77:a0:a5:8f:61:f1:60:6f: 4b:fe:c5:ef:76:8a:60:dc:b1:35:70:62:73:02:81: fb:79:85:36:4e:a8:16:ee:28:5e:66:27:1a:37:16: 2c:dd:ef:e2:0f:d4:4a:3e:17:86:05:e0:df:af:6c: eb:ef:04:50:75:a6:34:79:ef:ee:0a:f0:09:99:ee: 53:f8:84:70:3b:11:ef:4d:e8:7f:24:cc:ba:8f:be: 4f:dd:8b:54:33:01:28:2a:dd:db:a1:74:b5:51:a4: ed:d4:8a:11:89:43:c5:b7:a8:55:87:b4:43:4b:9e: 5a:99:49:91:c0:8d:89:80:12:20:54:e2:a4:7a:c2: c1:15:81:bc:8a:2b:01:3c:b6:27:66:0b:57:d2:ef: 98:71:05:f0:5a:81:4d:9e:b5:db:f2:42:03:b7:8a: 24:93:a9:64:b1:6a:34:95:89:9d:37:db:54:20:53: 76:fb:76:a7:1c:e4:d6:cf:95:65:3b:f5:0c:86:ce: fd:1b:7a:7c:03:7b:d8:c9:83:90:e6:5c:f1:5e:c9: 15:87:ae:a6:d7:c3:67:96:60:09:e6:0e:41:5a:1d: de:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:63:1D:00:1B:24:8A:76:A2:8C:12:18:02:89:0F:A2:CB:2A:6C X509v3 Authority Key Identifier: keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/iYRjHQAbJIp2oowSGAKJD6LLKmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.140.0/22 IPv6: 2a0c:22c0::/29 Signature Algorithm: sha256WithRSAEncryption 2e:3c:b6:63:40:a3:1f:95:fa:45:a4:4c:27:31:65:79:20:16: 74:d2:17:65:60:b7:72:31:2b:f6:00:f9:a4:9e:17:33:17:62: f4:37:e3:83:b8:86:ac:b3:93:0b:17:81:8d:c9:64:ba:5c:16: c5:67:ce:32:f5:f2:47:46:f3:dd:57:44:58:39:8e:2a:a2:4e: ae:ce:fa:dc:54:e6:4e:64:02:be:fd:7e:0f:e6:44:89:8c:67: fb:8b:38:c9:b3:f1:75:54:cb:53:8f:c3:d0:de:61:e5:e7:18: 9a:26:06:c1:92:05:18:5a:c3:d6:8c:61:22:a6:91:8e:93:fb: c8:0a:30:fc:ac:53:fd:3e:ff:47:df:1d:28:e3:f1:4b:1f:fc: 0c:bb:b8:98:8f:16:25:a5:09:b9:97:46:27:ed:6f:f6:e0:ca: a2:e9:a6:26:3e:d2:d4:ac:a7:5a:27:9e:99:2e:4c:0c:2c:97: b2:d0:a1:65:b1:68:5c:21:04:4d:05:55:67:15:c1:cf:e4:fe: 76:84:04:d3:56:30:70:d3:e7:0d:e2:9c:81:cb:61:06:d3:da: 5e:4f:2b:9a:42:a3:21:98:13:a6:b4:5a:0b:fa:a2:55:8d:d4: b7:88:6e:f8:a3:5f:3e:d9:7e:5c:15:86:f4:1a:ef:33:44:bd: 39:0e:fa:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OOXtcTaJ327cVJRy02o3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkY2Q3ZDM5OGZjNDY2ZTEyMWJjNDVmYWY1MGRkODdjMzZi YmM5NmQwHhcNMjYwMTAyMTAyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTg0NjMxZDAwMWIyNDhhNzZhMjhjMTIxODAyODkwZmEyY2IyYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kE0Z37djpR3phWWCvkOP+Tt5ed2 oEZ1EIUKiOAKvo/r2iRgd6Clj2HxYG9L/sXvdopg3LE1cGJzAoH7eYU2TqgW7ihe ZicaNxYs3e/iD9RKPheGBeDfr2zr7wRQdaY0ee/uCvAJme5T+IRwOxHvTeh/JMy6 j75P3YtUMwEoKt3boXS1UaTt1IoRiUPFt6hVh7RDS55amUmRwI2JgBIgVOKkesLB FYG8iisBPLYnZgtX0u+YcQXwWoFNnrXb8kIDt4okk6lksWo0lYmdN9tUIFN2+3an HOTWz5VlO/UMhs79G3p8A3vYyYOQ5lzxXskVh66m18NnlmAJ5g5BWh3esQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFImEYx0AGySKdqKMEhgCiQ+iyypsMB8GA1UdIwQY MBaAFI3NfTmPxGbhIbxF+vUN2Hw2u8ltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMt MTIxNjQ1ZDk4ZTk0LzEvaVlSakhRQWJKSXAyb293U0dBS0pENkxMS213LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8xNThkYTUtYjNkZi00MTIyLWIzNWMtMTIxNjQ1ZDk4ZTk0 LzEvamMxOU9ZX0VadUVodkVYNjlRM1lmRGE3eVcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufuMMA0E AgACMAcDBQMqDCLAMA0GCSqGSIb3DQEBCwUAA4IBAQAuPLZjQKMflfpFpEwnMWV5 IBZ00hdlYLdyMSv2APmknhczF2L0N+ODuIass5MLF4GNyWS6XBbFZ84y9fJHRvPd V0RYOY4qok6uzvrcVOZOZAK+/X4P5kSJjGf7izjJs/F1VMtTj8PQ3mHl5xiaJgbB kgUYWsPWjGEippGOk/vICjD8rFP9Pv9H3x0o4/FLH/wMu7iYjxYlpQm5l0Yn7W/2 4Mqi6aYmPtLUrKdaJ56ZLkwMLJey0KFlsWhcIQRNBVVnFcHP5P52hATTVjBw0+cN 4pyBy2EG09peTyuaQqMhmBOmtFoL+qJVjdS3iG74o18+2X5cFYb0Gu8zRL05Dvob -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:42 2026 by rpki-client