This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/IH423EjGhjGEYUhA9Vkl_n9zB8E.roa File: IH423EjGhjGEYUhA9Vkl_n9zB8E.roa (raw, json) Hash identifier: JSP/u1wkfocZw2cQtJFX46pxKJk7V7jUMeaOiY9+bXo= Subject key identifier: 20:7E:36:DC:48:C6:86:31:84:61:48:40:F5:59:25:FE:7F:73:07:C1 Certificate issuer: /CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6 Certificate serial: 019B7B354439B9D67865D7AD2B8D6D5CB9A9 Authority key identifier: 3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/IH423EjGhjGEYUhA9Vkl_n9zB8E.roa Signing time: Thu 01 Jan 2026 20:17:27 +0000 ROA not before: Thu 01 Jan 2026 20:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199296 IP address blocks: 91.233.136.0/22 maxlen: 22 95.141.243.0/24 maxlen: 24 2a13:60c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:44:39:b9:d6:78:65:d7:ad:2b:8d:6d:5c:b9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bf468d1515ad6f14ca69cf9c772e5cb57d277d6 Validity Not Before: Jan 1 20:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=207e36dc48c6863184614840f55925fe7f7307c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:99:3f:d1:2a:85:14:42:a3:fc:f4:0b:25: b5:30:1c:2c:de:0d:19:a0:ee:c9:f1:67:2e:92:65: 82:79:8c:7d:07:6f:b8:9f:56:3a:04:43:e8:1c:45: e0:c5:7d:ed:53:05:73:a0:b8:12:3e:ee:2a:23:d3: 32:8d:66:c9:46:de:76:0c:5e:95:a4:fb:3d:9b:e4: 9c:40:b3:3a:78:75:1d:8d:fa:af:e0:e3:2d:4f:98: f7:93:5f:31:20:cf:b9:04:2a:5c:bb:e0:7e:89:34: 53:10:89:53:fb:56:3b:f2:55:46:d8:a4:21:77:20: ad:22:e5:de:ee:32:a4:2a:70:31:48:bc:e4:17:2f: c5:31:73:3e:73:2b:62:da:e9:e3:56:23:b7:59:e2: 60:6f:f5:53:f3:dc:c1:52:c0:58:e1:1a:c6:ff:1d: 9b:bd:05:9f:1d:0d:08:19:1e:83:bf:11:8b:25:77: ea:67:f9:46:ab:81:dc:e2:d1:ca:d1:a0:ab:a0:5c: 93:ce:d4:19:04:6c:d8:41:18:ca:bb:ea:58:50:7e: 39:5e:5e:e5:1b:f5:a9:84:0d:40:d1:5d:73:f7:a8: d2:63:1e:fa:39:a9:8f:37:e7:c1:22:c6:2b:8c:ae: 76:1b:72:af:25:b4:74:4f:fe:bd:c9:c6:a2:14:ad: 26:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7E:36:DC:48:C6:86:31:84:61:48:40:F5:59:25:FE:7F:73:07:C1 X509v3 Authority Key Identifier: keyid:3B:F4:68:D1:51:5A:D6:F1:4C:A6:9C:F9:C7:72:E5:CB:57:D2:77:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/IH423EjGhjGEYUhA9Vkl_n9zB8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/821f35-a880-4d64-adc0-4611046f1a4e/1/O_Ro0VFa1vFMppz5x3Lly1fSd9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.233.136.0/22 95.141.243.0/24 IPv6: 2a13:60c0::/32 Signature Algorithm: sha256WithRSAEncryption 77:08:58:83:d4:f7:af:91:04:20:c1:7c:52:53:ba:db:43:09: c8:72:c4:81:7f:bd:7e:83:5a:02:56:cb:0e:b6:b8:39:2c:08: 26:e6:93:1c:30:84:5d:66:0a:03:f9:b9:fb:26:2d:91:a7:40: 52:33:0b:0d:41:07:1d:c4:35:8b:10:67:9b:32:f2:9f:f1:3f: a5:ef:e4:b5:c8:a2:62:bd:36:06:36:dd:0a:48:10:b8:12:c7: 32:f9:c7:b6:e8:7a:ba:9e:56:5a:4e:15:9a:ab:01:20:e3:77: 6d:a8:7f:63:7b:3a:aa:92:37:09:c4:8a:73:a2:cc:34:50:c6: 4b:71:e5:43:fb:88:7d:b8:19:91:13:2d:16:25:42:60:a5:a3: 9f:84:b2:c7:65:5b:a3:f4:33:7e:36:cf:a1:79:2c:3d:b8:b3: a5:a8:da:a2:02:de:b1:24:a3:67:16:0a:ba:91:d8:0b:3f:4b: db:8f:18:53:6f:85:70:09:6c:0a:a6:82:f0:0c:6c:ba:c4:9e: 2e:6b:9d:d6:82:70:37:9b:47:55:d4:f5:20:b9:4a:ed:63:f2: 42:57:77:6c:04:ba:df:6f:13:f9:3c:6f:15:ce:5d:46:f4:49: ab:67:08:20:c5:6b:d3:ec:8b:f5:68:ef:75:b7:77:63:a6:29: a2:be:a7:47 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NUQ5udZ4ZdetK41tXLmpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZjQ2OGQxNTE1YWQ2ZjE0Y2E2OWNmOWM3NzJlNWNiNTdk Mjc3ZDYwHhcNMjYwMTAxMjAxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDdlMzZkYzQ4YzY4NjMxODQ2MTQ4NDBmNTU5MjVmZTdmNzMwN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnqZP9EqhRRCo/z0CyW1MBws3g0Z oO7J8WcukmWCeYx9B2+4n1Y6BEPoHEXgxX3tUwVzoLgSPu4qI9MyjWbJRt52DF6V pPs9m+ScQLM6eHUdjfqv4OMtT5j3k18xIM+5BCpcu+B+iTRTEIlT+1Y78lVG2KQh dyCtIuXe7jKkKnAxSLzkFy/FMXM+cyti2unjViO3WeJgb/VT89zBUsBY4RrG/x2b vQWfHQ0IGR6DvxGLJXfqZ/lGq4Hc4tHK0aCroFyTztQZBGzYQRjKu+pYUH45Xl7l G/WphA1A0V1z96jSYx76OamPN+fBIsYrjK52G3KvJbR0T/69ycaiFK0mBwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCB+NtxIxoYxhGFIQPVZJf5/cwfBMB8GA1UdIwQY MBaAFDv0aNFRWtbxTKac+cdy5ctX0nfWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC84MjFmMzUtYTg4MC00ZDY0LWFkYzAt NDYxMTA0NmYxYTRlLzEvSUg0MjNFakdoakdFWVVoQTlWa2xfbjl6QjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC84MjFmMzUtYTg4MC00ZDY0LWFkYzAtNDYxMTA0NmYxYTRl LzEvT19SbzBWRmExdkZNcHB6NXgzTGx5MWZTZDlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW+mIAwQA X43zMA0EAgACMAcDBQAqE2DAMA0GCSqGSIb3DQEBCwUAA4IBAQB3CFiD1PevkQQg wXxSU7rbQwnIcsSBf71+g1oCVssOtrg5LAgm5pMcMIRdZgoD+bn7Ji2Rp0BSMwsN QQcdxDWLEGebMvKf8T+l7+S1yKJivTYGNt0KSBC4Escy+ce26Hq6nlZaThWaqwEg 43dtqH9jezqqkjcJxIpzosw0UMZLceVD+4h9uBmREy0WJUJgpaOfhLLHZVuj9DN+ Ns+heSw9uLOlqNqiAt6xJKNnFgq6kdgLP0vbjxhTb4VwCWwKpoLwDGy6xJ4ua53W gnA3m0dV1PUguUrtY/JCV3dsBLrfbxP5PG8Vzl1G9EmrZwggxWvT7Iv1aO91t3dj pimivqdH -----END CERTIFICATE-----Generated at Mon Jan 26 09:43:28 2026 by rpki-client