This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/ixwpJztfYUlUnPQNZhnkMR7K_yU.roa File: ixwpJztfYUlUnPQNZhnkMR7K_yU.roa (raw, json) Hash identifier: McdR8UEnDJLQe/Y5De9k6/QzPqtdNiKRIqwLfpPLq6I= Subject key identifier: 8B:1C:29:27:3B:5F:61:49:54:9C:F4:0D:66:19:E4:31:1E:CA:FF:25 Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de Certificate serial: 019B7910B388DC9EDDA7E7E58C5C54731C47 Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/ixwpJztfYUlUnPQNZhnkMR7K_yU.roa Signing time: Thu 01 Jan 2026 10:18:16 +0000 ROA not before: Thu 01 Jan 2026 10:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12638 IP address blocks: 5.1.128.0/17 maxlen: 17 176.0.0.0/13 maxlen: 13 176.1.0.0/16 maxlen: 16 193.7.128.0/19 maxlen: 19 212.23.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.mft rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b3:88:dc:9e:dd:a7:e7:e5:8c:5c:54:73:1c:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de Validity Not Before: Jan 1 10:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b1c29273b5f6149549cf40d6619e4311ecaff25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:09:5c:4c:de:12:bf:28:d4:9d:d5:4e:01: 44:e9:2d:7e:fd:4f:57:7d:36:66:d2:2c:22:ba:a5: 94:ec:12:2e:9b:ba:9d:bb:29:14:a6:7f:5d:09:1e: cf:04:08:a3:ab:a7:09:f6:0a:6d:94:aa:47:15:4a: 23:e4:4a:bf:70:bd:d9:62:86:2a:31:3c:2d:2c:1d: 1b:86:8b:5e:4d:be:e3:c0:cb:80:3f:38:fe:87:f4: 64:fb:78:b0:33:b8:35:bd:82:b8:4f:81:10:eb:9c: 73:ca:1f:d0:c4:cc:5a:27:8f:2f:45:bb:25:4f:74: 2d:71:bb:78:07:3e:02:ae:78:d1:63:f1:6c:d8:b9: 73:c3:47:b6:34:67:c0:20:09:07:2d:1b:62:07:98: fe:66:13:33:93:ac:57:c1:c3:6b:4f:ba:b4:79:51: 46:7b:e2:33:ee:a2:c6:c0:05:44:fa:74:48:a1:bc: d3:fa:4f:48:80:71:8a:34:11:8d:75:c1:49:fa:dd: a5:34:20:d2:8f:10:ec:53:d7:f9:c8:25:9c:66:e9: 09:31:6a:95:2a:74:36:de:dc:a3:0e:65:dd:e7:ac: 3e:86:b2:ee:84:8d:ee:ac:95:6a:a3:20:7b:a8:39: 0f:e8:5f:fe:56:32:3e:58:53:b9:93:e8:bb:ad:8b: b2:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1C:29:27:3B:5F:61:49:54:9C:F4:0D:66:19:E4:31:1E:CA:FF:25 X509v3 Authority Key Identifier: keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/ixwpJztfYUlUnPQNZhnkMR7K_yU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.128.0/17 176.0.0.0/13 193.7.128.0/19 212.23.96.0/19 Signature Algorithm: sha256WithRSAEncryption 01:d8:97:93:f4:b6:49:49:fa:6f:47:38:84:16:dd:d5:ec:44: b4:99:e1:ea:f5:37:47:62:70:c2:cb:9a:72:ba:04:9e:8d:0b: 0a:ef:6a:89:c9:d6:3c:b8:b8:4a:8b:2d:4e:e3:83:9b:14:83: 90:c8:ca:4f:1e:af:67:f9:a2:d7:73:6a:46:fd:10:a2:e6:6a: 65:1e:80:00:7e:8a:ff:fa:4c:6f:35:92:2d:8e:90:d5:33:31: 32:21:15:f5:b1:6b:78:60:33:e0:47:19:36:fc:e8:7b:33:10: 02:f8:04:e6:41:23:25:72:40:4a:f5:74:4a:47:46:f6:43:54: 5f:19:38:90:e1:38:a0:32:fd:45:c1:3e:b9:93:3e:56:3c:07: be:33:c0:69:c4:7b:ef:bb:25:30:88:e8:92:35:d6:73:49:f0: fd:b6:65:0c:42:7c:a7:8c:e8:78:8b:a7:4d:fd:7b:a0:c7:5d: 15:0d:56:24:48:f8:4f:51:94:a6:07:0f:04:1a:ad:3a:75:a3: 6e:e5:0b:93:10:b8:b6:b1:5b:dd:da:18:42:d9:6b:60:d4:2c: f8:c4:27:f4:02:81:85:f3:2b:34:46:e6:4d:d9:4f:c7:8d:d0: 45:5a:8b:e2:07:dd:29:2d:1b:e6:a0:4a:13:69:04:da:6f:4d: b1:bd:03:6f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ELOI3J7dp+fljFxUcxxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYWE2MGNiMDAyNDMzMmEyZGI2ODk5M2YzMzU3MTU4YWY2 MGM4ZGUwHhcNMjYwMTAxMTAxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFjMjkyNzNiNWY2MTQ5NTQ5Y2Y0MGQ2NjE5ZTQzMTFlY2FmZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpEJXEzeEr8o1J3VTgFE6S1+/U9X fTZm0iwiuqWU7BIum7qduykUpn9dCR7PBAijq6cJ9gptlKpHFUoj5Eq/cL3ZYoYq MTwtLB0bhoteTb7jwMuAPzj+h/Rk+3iwM7g1vYK4T4EQ65xzyh/QxMxaJ48vRbsl T3Qtcbt4Bz4CrnjRY/Fs2Llzw0e2NGfAIAkHLRtiB5j+ZhMzk6xXwcNrT7q0eVFG e+Iz7qLGwAVE+nRIobzT+k9IgHGKNBGNdcFJ+t2lNCDSjxDsU9f5yCWcZukJMWqV KnQ23tyjDmXd56w+hrLuhI3urJVqoyB7qDkP6F/+VjI+WFO5k+i7rYuy6QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIscKSc7X2FJVJz0DWYZ5DEeyv8lMB8GA1UdIwQY MBaAFCCqYMsAJDMqLbaJk/M1cVivYMjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYt NzNmN2QxMTBiODJhLzEvaXh3cEp6dGZZVWxVblBRTlpobmtNUjdLX3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8zNTI0MzEtZTY5NC00NDEyLWE3NjYtNzNmN2QxMTBiODJh LzEvSUtwZ3l3QWtNeW90dG9tVDh6VnhXSzlneU40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwQHBQGAAwMD sAADBAXBB4ADBAXUF2AwDQYJKoZIhvcNAQELBQADggEBAAHYl5P0tklJ+m9HOIQW 3dXsRLSZ4er1N0dicMLLmnK6BJ6NCwrvaonJ1jy4uEqLLU7jg5sUg5DIyk8er2f5 otdzakb9EKLmamUegAB+iv/6TG81ki2OkNUzMTIhFfWxa3hgM+BHGTb86HszEAL4 BOZBIyVyQEr1dEpHRvZDVF8ZOJDhOKAy/UXBPrmTPlY8B74zwGnEe++7JTCI6JI1 1nNJ8P22ZQxCfKeM6HiLp039e6DHXRUNViRI+E9RlKYHDwQarTp1o27lC5MQuLax W93aGELZa2DULPjEJ/QCgYXzKzRG5k3ZT8eN0EVai+IH3SktG+agShNpBNpvTbG9 A28= -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:33 2026 by rpki-client