This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa File: Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa (raw, json) Hash identifier: U7q18MGaToAHycayT/bTwS2UUHwaN8gc3zIyXx5SQn4= Subject key identifier: 23:3F:35:61:E1:78:61:AA:29:AA:7E:2D:D0:B2:F7:38:0D:48:B9:0B Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Certificate serial: 019B7EA459B83765B6BFFFADBDBDA6A0B272 Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa Signing time: Fri 02 Jan 2026 12:17:38 +0000 ROA not before: Fri 02 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50611 IP address blocks: 185.119.136.0/22 maxlen: 24 195.253.64.0/24 maxlen: 24 195.253.65.0/24 maxlen: 24 195.253.66.0/24 maxlen: 24 195.253.88.0/23 maxlen: 23 195.253.90.0/23 maxlen: 23 195.253.92.0/22 maxlen: 24 195.253.96.0/19 maxlen: 24 195.253.126.0/24 maxlen: 24 2a01:5b0:4::/48 maxlen: 48 2a01:5b0:5::/48 maxlen: 48 2a01:5b0:6::/48 maxlen: 48 2a01:5b0:8::/46 maxlen: 48 2a01:5b0:10::/45 maxlen: 48 2a01:5b0:12::/47 maxlen: 47 2a01:5b0:20::/43 maxlen: 48 2a01:5b0:2a::/48 maxlen: 48 2a01:5b0:2b::/48 maxlen: 48 2a01:5b0:2e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.mft rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:59:b8:37:65:b6:bf:ff:ad:bd:bd:a6:a0:b2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30 Validity Not Before: Jan 2 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=233f3561e17861aa29aa7e2dd0b2f7380d48b90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8d:12:de:0e:6f:3f:65:7c:da:0c:61:52:c0: 43:5f:32:61:b4:8c:df:f2:d7:83:63:23:a6:d5:83: 4b:e6:b8:51:2c:e9:a6:bb:00:96:1c:8d:bf:8d:17: 91:66:fb:6e:93:7b:15:34:a6:34:65:d1:83:05:99: 7e:e8:89:bf:d5:3d:a0:a5:b5:8c:13:2f:b1:dc:eb: c8:36:ac:0c:4e:74:e3:72:ed:df:42:c1:d5:4e:9b: e0:80:c9:1d:05:66:d5:a0:98:ae:09:c0:c7:d3:f1: 5c:f9:7d:94:eb:96:6b:0c:c6:06:0d:b5:6d:4e:d4: 49:eb:f1:a6:f9:45:59:8d:06:72:1b:28:0a:a0:78: 8f:1f:c0:8b:0b:90:5f:24:0e:13:17:cc:b7:96:df: 6c:35:5e:be:0a:10:ae:6d:99:1c:c7:d5:e0:bf:ba: 8f:99:37:0b:39:58:04:20:44:e0:ed:5c:51:3b:ff: 8f:c8:80:cf:8a:74:d6:26:32:1b:a7:93:26:57:74: 85:f2:9d:1b:b3:d2:83:12:46:fa:7c:d6:bf:cd:e7: 1b:ac:36:52:87:92:b3:cb:42:63:ff:e0:4a:1b:af: 91:a3:82:cf:86:06:8a:67:15:8b:42:4a:a6:0f:f8: a9:52:71:95:ec:a5:84:de:4e:bb:dd:69:25:ad:7d: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3F:35:61:E1:78:61:AA:29:AA:7E:2D:D0:B2:F7:38:0D:48:B9:0B X509v3 Authority Key Identifier: keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/Iz81YeF4Yaopqn4t0LL3OA1IuQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.136.0/22 195.253.64.0-195.253.66.255 195.253.88.0-195.253.127.255 IPv6: 2a01:5b0:4::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff 2a01:5b0:8::/46 2a01:5b0:10::/45 2a01:5b0:20::/43 Signature Algorithm: sha256WithRSAEncryption 8e:04:05:ba:48:46:f3:2a:3f:3b:9c:47:65:10:87:5f:14:50: fc:35:ff:e9:02:30:bd:54:d6:f3:8b:cd:8e:0d:2a:fe:c4:94: 6f:e5:43:a5:26:a8:5d:0b:52:d5:13:98:19:a4:10:e9:9f:d6: 0c:2f:bf:25:45:81:33:ee:87:68:f6:15:a5:83:de:88:68:0f: 30:b7:9e:63:b1:3c:1c:d8:c1:52:c6:9e:cc:80:2e:d9:16:9b: 8a:69:da:8c:11:82:ad:6c:e4:6d:ac:3d:9d:eb:4b:0b:28:2b: c5:87:3a:9d:84:86:d2:4e:7a:1a:bb:7c:77:4b:38:6a:bb:4a: a6:be:1f:66:95:aa:3f:28:f3:bc:56:f9:57:bb:74:60:d5:b6: d4:4a:2e:fc:e8:0d:14:3b:64:4e:1f:fc:cd:46:94:40:7f:e1: 2a:f2:46:23:b0:dd:de:7f:82:8b:8c:9f:26:fb:63:40:83:57: 07:2c:6f:97:a0:25:a8:40:55:20:af:28:7c:45:a4:3f:8a:97: b7:04:23:0a:72:2c:15:31:53:7e:71:d1:5a:f8:1e:4d:78:81: 4c:d2:97:4c:41:15:01:2f:e7:7b:15:49:9c:82:60:96:3c:c1: a5:86:0e:38:12:54:bf:5a:24:52:e4:c3:d7:ac:6c:3f:de:ed: c2:22:1c:00 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt+pFm4N2W2v/+tvb2moLJyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwYzFlNDI2ZjU4ZTQyYWUzMGU1NmNkYjdmZjRkOGY5ZGRk ODViMzAwHhcNMjYwMTAyMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzNmMzU2MWUxNzg2MWFhMjlhYTdlMmRkMGIyZjczODBkNDhiOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI0S3g5vP2V82gxhUsBDXzJhtIzf 8teDYyOm1YNL5rhRLOmmuwCWHI2/jReRZvtuk3sVNKY0ZdGDBZl+6Im/1T2gpbWM Ey+x3OvINqwMTnTjcu3fQsHVTpvggMkdBWbVoJiuCcDH0/Fc+X2U65ZrDMYGDbVt TtRJ6/Gm+UVZjQZyGygKoHiPH8CLC5BfJA4TF8y3lt9sNV6+ChCubZkcx9Xgv7qP mTcLOVgEIETg7VxRO/+PyIDPinTWJjIbp5MmV3SF8p0bs9KDEkb6fNa/zecbrDZS h5Kzy0Jj/+BKG6+Ro4LPhgaKZxWLQkqmD/ipUnGV7KWE3k673WklrX0ZtQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFCM/NWHheGGqKap+LdCy9zgNSLkLMB8GA1UdIwQY MBaAFFDB5Cb1jkKuMOVs23/02Pnd2FswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMt MDYzY2U2Y2Y0NjBkLzEvSXo4MVllRjRZYW9wcW40dDBMTDNPQTFJdVFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85YzZkYWQtMzc3YS00NDRlLWIwZGMtMDYzY2U2Y2Y0NjBk LzEvVU1Ia0p2V09RcTR3NVd6YmZfVFktZDNZV3pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAoBAIAATAiAwQCuXeIMAwD BAbD/UADBADD/UIwDAMEA8P9WAMEB8P9ADA1BAIAAjAvMBIDBwIqAQWwAAQDBwAq AQWwAAYDBwIqAQWwAAgDBwMqAQWwABADBwUqAQWwACAwDQYJKoZIhvcNAQELBQAD ggEBAI4EBbpIRvMqPzucR2UQh18UUPw1/+kCML1U1vOLzY4NKv7ElG/lQ6UmqF0L UtUTmBmkEOmf1gwvvyVFgTPuh2j2FaWD3ohoDzC3nmOxPBzYwVLGnsyALtkWm4pp 2owRgq1s5G2sPZ3rSwsoK8WHOp2EhtJOehq7fHdLOGq7Sqa+H2aVqj8o87xW+Ve7 dGDVttRKLvzoDRQ7ZE4f/M1GlEB/4SryRiOw3d5/gouMnyb7Y0CDVwcsb5egJahA VSCvKHxFpD+Kl7cEIwpyLBUxU35x0Vr4Hk14gUzSl0xBFQEv53sVSZyCYJY8waWG DjgSVL9aJFLkw9esbD/e7cIiHAA= -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:10 2026 by rpki-client