This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/igP_j0gqdj6VYQfMBatyuvEtzjE.roa File: igP_j0gqdj6VYQfMBatyuvEtzjE.roa (raw, json) Hash identifier: Cvo1yExlPO8Dsib93UiD0RmAn7lporXrd5tMSD8Uf7s= Subject key identifier: 8A:03:FF:8F:48:2A:76:3E:95:61:07:CC:05:AB:72:BA:F1:2D:CE:31 Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Certificate serial: 019B7C7F4665D86364177E3094AAF0E2785D Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/igP_j0gqdj6VYQfMBatyuvEtzjE.roa Signing time: Fri 02 Jan 2026 02:17:54 +0000 ROA not before: Fri 02 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30286 IP address blocks: 91.235.132.0/22 maxlen: 24 91.235.132.0/24 maxlen: 24 91.235.133.0/24 maxlen: 24 91.235.134.0/24 maxlen: 24 91.235.135.0/24 maxlen: 24 185.32.240.0/22 maxlen: 24 185.32.240.0/23 maxlen: 24 185.32.241.0/24 maxlen: 24 185.32.242.0/23 maxlen: 24 185.32.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:46:65:d8:63:64:17:7e:30:94:aa:f0:e2:78:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6 Validity Not Before: Jan 2 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a03ff8f482a763e956107cc05ab72baf12dce31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8c:fc:d9:db:29:09:93:88:0a:e0:a8:ee:a5: 3f:32:ff:72:ef:c0:e5:59:3c:60:b5:dd:46:dc:85: e6:35:b0:b1:70:1c:d2:a4:6d:65:ef:f3:b6:fa:7d: 06:91:15:6c:5c:a8:9c:06:e6:d7:df:00:df:4d:b3: 4b:8e:7d:71:b3:65:ab:3c:f5:1e:0a:9b:22:0e:8d: 12:45:a2:e9:6f:13:d8:ee:0d:bc:b1:2b:99:af:4f: ca:ce:c2:1f:36:2a:4f:0a:3a:db:c5:a8:93:ec:b8: 55:c0:9e:7a:ef:71:fd:5c:73:9d:33:61:aa:36:97: d4:75:9b:2e:e2:1d:51:ff:12:02:cb:b5:fc:f0:32: d5:f4:9e:f3:2a:17:1f:41:4b:d9:f7:f0:83:57:a3: b6:16:2c:e1:02:89:a9:cf:9c:74:cb:ad:e4:f5:67: 06:65:84:b5:15:26:f4:fc:5a:d4:ae:a5:64:9c:a1: 8f:45:65:fa:73:61:a2:37:0d:17:5e:4e:6e:ae:61: 44:ab:08:ec:80:c2:95:05:ed:fa:df:61:92:1c:51: 25:86:b2:59:d0:87:23:63:c4:e8:3e:fe:16:1f:19: 66:9a:7a:fe:88:1c:ed:e2:ff:f0:32:5e:f8:68:a7: 88:92:4e:dd:6d:a8:f0:d6:77:3a:01:d7:43:19:4d: 6b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:FF:8F:48:2A:76:3E:95:61:07:CC:05:AB:72:BA:F1:2D:CE:31 X509v3 Authority Key Identifier: keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/igP_j0gqdj6VYQfMBatyuvEtzjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.132.0/22 185.32.240.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:cb:2a:41:e7:29:58:ce:a5:45:d4:8e:97:d8:e9:0d:17:1b: 31:46:7f:4c:d7:ab:3f:1e:22:12:98:b5:93:a1:9f:c4:29:dc: e1:e0:49:5c:79:ad:33:92:63:de:5f:e9:38:4f:67:4c:44:9b: 11:60:f5:8b:3b:0e:97:27:2a:7b:4c:04:ca:49:8f:f5:45:fa: ac:11:f6:4e:b7:96:8e:42:74:b4:d0:53:48:ca:73:06:0b:2a: da:e0:0d:e5:42:f4:89:45:9a:ee:0c:b6:bf:73:ca:98:a9:d0: 6b:b3:5e:c2:bc:2f:79:10:9c:21:5c:d0:d2:8c:11:34:9d:4e: 1e:05:c2:60:24:82:72:55:e5:82:58:06:49:1e:98:be:a3:d6: 6b:a1:9c:33:b1:e9:e1:cb:70:25:3a:26:58:d9:55:ac:30:d9: 84:89:92:79:d0:08:87:dc:b8:ba:7d:f6:80:ac:2d:4b:3e:f4: 2a:b6:0b:e2:ef:bf:d6:5c:1c:46:fb:5f:e0:17:2f:f3:5c:22: 0d:c8:81:de:a0:d2:16:c9:68:bb:bb:d6:62:1b:e2:ba:07:f2: b9:d8:91:9e:ab:0c:4f:90:e8:83:a7:3e:77:5f:69:8a:8d:68: 4d:31:a3:2d:b5:b5:3b:74:78:53:9d:83:73:e3:cc:e2:a6:f4: c8:24:1d:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f0Zl2GNkF34wlKrw4nhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz ZTFhYTYwHhcNMjYwMTAyMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTAzZmY4ZjQ4MmE3NjNlOTU2MTA3Y2MwNWFiNzJiYWYxMmRjZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14z82dspCZOICuCo7qU/Mv9y78Dl WTxgtd1G3IXmNbCxcBzSpG1l7/O2+n0GkRVsXKicBubX3wDfTbNLjn1xs2WrPPUe CpsiDo0SRaLpbxPY7g28sSuZr0/KzsIfNipPCjrbxaiT7LhVwJ5673H9XHOdM2Gq NpfUdZsu4h1R/xICy7X88DLV9J7zKhcfQUvZ9/CDV6O2FizhAompz5x0y63k9WcG ZYS1FSb0/FrUrqVknKGPRWX6c2GiNw0XXk5urmFEqwjsgMKVBe3632GSHFElhrJZ 0IcjY8ToPv4WHxlmmnr+iBzt4v/wMl74aKeIkk7dbajw1nc6AddDGU1rQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIoD/49IKnY+lWEHzAWrcrrxLc4xMB8GA1UdIwQY MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt ZTQ4MTc1MWQ2ODRmLzEvaWdQX2owZ3FkajZWWVFmTUJhdHl1dkV0empFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+uEAwQC uSDwMA0GCSqGSIb3DQEBCwUAA4IBAQBKyypB5ylYzqVF1I6X2OkNFxsxRn9M16s/ HiISmLWToZ/EKdzh4Elcea0zkmPeX+k4T2dMRJsRYPWLOw6XJyp7TATKSY/1Rfqs EfZOt5aOQnS00FNIynMGCyra4A3lQvSJRZruDLa/c8qYqdBrs17CvC95EJwhXNDS jBE0nU4eBcJgJIJyVeWCWAZJHpi+o9ZroZwzsenhy3AlOiZY2VWsMNmEiZJ50AiH 3Li6ffaArC1LPvQqtgvi77/WXBxG+1/gFy/zXCINyIHeoNIWyWi7u9ZiG+K6B/K5 2JGeqwxPkOiDpz53X2mKjWhNMaMttbU7dHhTnYNz48zipvTIJB0j -----END CERTIFICATE-----Generated at Sun Jan 25 23:33:26 2026 by rpki-client