This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa File: ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa (raw, json) Hash identifier: BDKxCeeuSykbUbxzQ/ZPnLJUCKHXvds6WrwRPz6ZbCc= Subject key identifier: 8B:1B:D3:02:9C:09:D0:B3:85:B9:1E:49:E7:E3:46:48:82:8C:A8:D9 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7E23F50F3C5D639F71A283D6BBF9 Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa Signing time: Thu 01 Jan 2026 16:19:35 +0000 ROA not before: Thu 01 Jan 2026 16:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212830 IP address blocks: 193.57.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7e:23:f5:0f:3c:5d:63:9f:71:a2:83:d6:bb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b1bd3029c09d0b385b91e49e7e34648828ca8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:31:51:6f:2b:51:4f:61:eb:52:1c:62:00: be:21:56:59:1e:97:6f:de:9f:97:cc:ef:66:d0:a4: 5a:a7:8f:4a:d9:10:da:8e:0c:48:2e:bd:47:52:96: fd:77:79:62:bd:e5:ab:d7:74:6a:b0:33:0d:a6:59: 44:c5:78:00:85:67:a3:85:57:f4:d1:02:b3:03:fc: f3:09:82:0a:b5:29:83:3c:ae:be:7b:c3:42:49:30: a0:0e:e6:0b:54:16:62:22:db:68:2b:6e:47:d4:a8: c6:65:1f:e8:4d:bc:4e:a4:54:d7:2b:f6:72:52:c8: c8:c3:b5:0e:47:07:8c:d9:3f:a9:bc:44:e9:ac:a1: 75:21:71:0b:5d:c7:35:ab:d4:b9:2f:da:b0:ae:73: 19:d3:1d:78:37:36:77:fc:97:4f:32:31:22:d2:c2: e1:be:c7:18:26:26:5a:4d:4f:cc:4d:e7:94:cb:96: c8:15:97:4e:65:5b:e3:1c:f2:1f:5e:4f:68:43:ce: dd:8f:b1:ce:ea:18:09:87:da:03:8f:f0:8f:52:56: 34:61:4b:09:2f:da:1e:29:b7:8c:ec:46:81:b7:b0: 0c:ed:21:6a:d6:62:9d:ff:39:38:17:b8:a6:a5:b1: db:48:ba:4f:d4:59:46:30:2e:5d:f5:81:6a:0f:42: d6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:1B:D3:02:9C:09:D0:B3:85:B9:1E:49:E7:E3:46:48:82:8C:A8:D9 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/ixvTApwJ0LOFuR5J5-NGSIKMqNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.146.0/23 Signature Algorithm: sha256WithRSAEncryption 76:58:06:61:70:7a:86:e9:ca:01:57:02:c9:bc:dc:10:de:d2: e9:ed:fc:d2:c8:42:0a:13:a7:e7:4a:dd:e6:de:4b:37:cd:0b: c7:f5:15:e3:28:5a:6e:86:fc:8f:85:4c:b9:41:69:9a:4f:e1: 69:d6:fe:ca:54:e5:bd:38:2e:a2:4e:47:d6:b9:70:cf:ae:bd: bd:27:81:bc:5c:a2:16:e2:33:ae:a4:6d:7a:51:2c:8f:6e:cd: 8d:c7:da:e6:e2:b2:44:69:24:99:42:f9:06:0b:cc:1b:64:44: a8:5f:c0:83:5a:48:4d:f4:41:18:f6:a8:f1:1c:9a:b6:52:5b: 6e:97:19:ad:33:7a:00:d9:b8:25:eb:85:31:d6:99:d6:3e:3e: b0:4f:98:d7:d2:b4:96:67:c8:0d:c9:4c:26:f9:f0:6c:1c:85: a9:0f:41:1c:15:5b:be:d2:2c:56:78:0e:b0:25:9a:d9:16:f1: 61:d9:4c:59:74:5b:cb:08:44:8e:0d:c1:fa:29:1b:3f:76:f5: 1e:c1:f6:f1:91:56:be:30:51:57:8c:76:16:08:cd:71:ba:6a: 2d:cf:3d:44:f8:1f:05:f5:b8:ec:f3:88:13:c9:11:0b:95:86: 60:6b:a9:d5:20:bc:6b:ed:14:45:e9:1e:49:c2:44:ec:ae:42: 8d:24:b5:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W34j9Q88XWOfcaKD1rv5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjFiZDMwMjljMDlkMGIzODViOTFlNDllN2UzNDY0ODgyOGNhOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFYxUW8rUU9h61IcYgC+IVZZHpdv 3p+XzO9m0KRap49K2RDajgxILr1HUpb9d3liveWr13RqsDMNpllExXgAhWejhVf0 0QKzA/zzCYIKtSmDPK6+e8NCSTCgDuYLVBZiIttoK25H1KjGZR/oTbxOpFTXK/Zy UsjIw7UORweM2T+pvETprKF1IXELXcc1q9S5L9qwrnMZ0x14NzZ3/JdPMjEi0sLh vscYJiZaTU/MTeeUy5bIFZdOZVvjHPIfXk9oQ87dj7HO6hgJh9oDj/CPUlY0YUsJ L9oeKbeM7EaBt7AM7SFq1mKd/zk4F7impbHbSLpP1FlGMC5d9YFqD0LWaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsb0wKcCdCzhbkeSefjRkiCjKjZMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvaXh2VEFwd0owTE9GdVI1SjUtTkdTSUtNcU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTmSMA0G CSqGSIb3DQEBCwUAA4IBAQB2WAZhcHqG6coBVwLJvNwQ3tLp7fzSyEIKE6fnSt3m 3ks3zQvH9RXjKFpuhvyPhUy5QWmaT+Fp1v7KVOW9OC6iTkfWuXDPrr29J4G8XKIW 4jOupG16USyPbs2Nx9rm4rJEaSSZQvkGC8wbZESoX8CDWkhN9EEY9qjxHJq2Ultu lxmtM3oA2bgl64Ux1pnWPj6wT5jX0rSWZ8gNyUwm+fBsHIWpD0EcFVu+0ixWeA6w JZrZFvFh2UxZdFvLCESODcH6KRs/dvUewfbxkVa+MFFXjHYWCM1xumotzz1E+B8F 9bjs84gTyRELlYZga6nVILxr7RRF6R5JwkTsrkKNJLU5 -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:11 2026 by rpki-client