This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/izRvQQlPGVxobxW7N8dbS1HcfRs.roa File: izRvQQlPGVxobxW7N8dbS1HcfRs.roa (raw, json) Hash identifier: LR/hcEqxbUbJjEBVmgfXvSsCg3lY/EzNe0dfdUd+zM0= Subject key identifier: 8B:34:6F:41:09:4F:19:5C:68:6F:15:BB:37:C7:5B:4B:51:DC:7D:1B Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABAB67055305A90A8C5A76DE706D1 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/izRvQQlPGVxobxW7N8dbS1HcfRs.roa Signing time: Fri 02 Jan 2026 08:19:56 +0000 ROA not before: Fri 02 Jan 2026 08:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39200 IP address blocks: 193.189.123.0/24 maxlen: 24 2001:678:b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ba:b6:70:55:30:5a:90:a8:c5:a7:6d:e7:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b346f41094f195c686f15bb37c75b4b51dc7d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:22:08:56:c3:7f:41:74:b8:92:68:d8:ef:55: bb:5e:c8:8e:36:ff:7f:f3:06:ec:16:ee:6b:25:db: da:10:07:cc:36:91:b9:f2:c9:46:06:3c:09:e6:af: 56:ec:d0:ae:79:31:ff:04:45:1c:5f:df:1b:32:36: b7:6c:39:e4:a3:17:d0:bd:18:17:6e:8e:ec:6c:1f: 82:dd:57:92:ad:75:fa:87:72:29:21:3c:26:eb:57: 4b:78:e0:aa:10:f5:68:30:f1:50:e9:5f:e8:1b:3f: 32:7f:75:1b:22:3e:56:29:cc:44:22:ed:3c:89:1c: f0:40:93:c8:71:04:86:1a:6e:11:75:3c:53:0f:46: d7:c2:26:fe:05:0e:d8:1d:36:02:45:d9:cc:68:e2: 28:d1:b3:62:d3:f0:eb:48:98:ed:6f:d5:55:a2:9b: fd:1d:28:e9:1e:35:bf:d2:32:9d:70:c7:95:76:8c: c3:24:f3:8b:bd:97:d3:fc:68:64:71:d4:00:b7:61: 17:64:e6:19:4c:ca:77:2f:0b:f6:e5:b1:cb:36:d7: 0e:ae:11:93:61:8d:43:e8:a5:ba:83:0f:54:d2:7a: 94:a8:91:b1:61:cb:9e:95:91:7d:7a:85:ad:a0:ad: 5f:4d:8d:d7:8b:19:32:d0:8d:cf:b8:1e:3c:33:61: 77:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:34:6F:41:09:4F:19:5C:68:6F:15:BB:37:C7:5B:4B:51:DC:7D:1B X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/izRvQQlPGVxobxW7N8dbS1HcfRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.189.123.0/24 IPv6: 2001:678:b0::/48 Signature Algorithm: sha256WithRSAEncryption 99:c7:e4:82:1b:66:c5:05:ea:65:35:d7:1c:58:03:0c:01:a4: 0d:79:1e:f9:22:28:cb:c6:6d:6b:c6:76:7a:57:dc:ee:a2:4e: 7f:c3:9f:04:ef:36:b7:20:44:b5:81:54:d4:d9:1d:d3:0b:1b: 32:da:07:38:f3:53:5d:b3:26:b0:6f:a4:98:80:a3:e7:f8:ba: 42:7b:36:0e:da:af:2f:77:6f:71:05:8d:c3:42:68:2c:b1:4b: d6:50:60:9a:5a:37:47:9f:fb:88:19:27:3a:a7:3a:97:ea:f7: 6c:44:02:f9:f8:fe:1e:19:67:d0:10:24:54:ac:88:20:bc:17: 07:5d:5a:2b:68:9e:42:64:07:1b:08:ef:e2:11:00:29:cd:4b: 6c:0a:d8:86:aa:39:2a:3b:d8:8f:44:2f:82:61:51:63:14:6c: 1f:26:23:91:52:de:0e:c8:13:2a:73:bd:9c:a6:ec:47:ff:66: 9d:28:b8:1b:b2:22:af:e9:2d:d8:64:e3:7b:d5:c3:40:d1:2a: e9:95:34:0a:0e:ed:2c:b4:de:5b:a5:90:80:20:6f:73:94:5c: 47:52:15:a7:17:d6:79:fe:ea:28:66:65:55:2c:56:d3:ec:a3: ff:b9:50:4d:ce:e7:19:a3:29:5d:cb:69:3e:99:ac:c5:2a:6f: 93:7d:88:84 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9yrq2cFUwWpCoxadt5wbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjM0NmY0MTA5NGYxOTVjNjg2ZjE1YmIzN2M3NWI0YjUxZGM3ZDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCIIVsN/QXS4kmjY71W7XsiONv9/ 8wbsFu5rJdvaEAfMNpG58slGBjwJ5q9W7NCueTH/BEUcX98bMja3bDnkoxfQvRgX bo7sbB+C3VeSrXX6h3IpITwm61dLeOCqEPVoMPFQ6V/oGz8yf3UbIj5WKcxEIu08 iRzwQJPIcQSGGm4RdTxTD0bXwib+BQ7YHTYCRdnMaOIo0bNi0/DrSJjtb9VVopv9 HSjpHjW/0jKdcMeVdozDJPOLvZfT/GhkcdQAt2EXZOYZTMp3Lwv25bHLNtcOrhGT YY1D6KW6gw9U0nqUqJGxYcuelZF9eoWtoK1fTY3Xixky0I3PuB48M2F3LwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIs0b0EJTxlcaG8VuzfHW0tR3H0bMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvaXpSdlFRbFBHVnhvYnhXN044ZGJTMUhjZlJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwb17MA8E AgACMAkDBwAgAQZ4ALAwDQYJKoZIhvcNAQELBQADggEBAJnH5IIbZsUF6mU11xxY AwwBpA15HvkiKMvGbWvGdnpX3O6iTn/DnwTvNrcgRLWBVNTZHdMLGzLaBzjzU12z JrBvpJiAo+f4ukJ7Ng7ary93b3EFjcNCaCyxS9ZQYJpaN0ef+4gZJzqnOpfq92xE Avn4/h4ZZ9AQJFSsiCC8FwddWitonkJkBxsI7+IRACnNS2wK2IaqOSo72I9EL4Jh UWMUbB8mI5FS3g7IEypzvZym7Ef/Zp0ouBuyIq/pLdhk43vVw0DRKumVNAoO7Sy0 3lulkIAgb3OUXEdSFacX1nn+6ihmZVUsVtPso/+5UE3O5xmjKV3LaT6ZrMUqb5N9 iIQ= -----END CERTIFICATE-----Generated at Mon Jan 26 04:43:18 2026 by rpki-client