This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IqDlVXxMN_LzY0jHFpJ7QwUakCg.roa File: IqDlVXxMN_LzY0jHFpJ7QwUakCg.roa (raw, json) Hash identifier: vWb5ivK2pYmwBe9b/pGFfK94R578xkax11CFeWYvaqQ= Subject key identifier: 22:A0:E5:55:7C:4C:37:F2:F3:63:48:C7:16:92:7B:43:05:1A:90:28 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B46DA61B66D4A0D6C5AE8EE196B0 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IqDlVXxMN_LzY0jHFpJ7QwUakCg.roa Signing time: Fri 02 Jan 2026 16:21:36 +0000 ROA not before: Fri 02 Jan 2026 16:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204720 IP address blocks: 37.18.14.0/24 maxlen: 24 37.18.15.0/24 maxlen: 24 46.243.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b4:6d:a6:1b:66:d4:a0:d6:c5:ae:8e:e1:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22a0e5557c4c37f2f36348c716927b43051a9028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:ed:5a:1b:87:55:db:7e:e6:d7:a7:4b:74: fb:d3:38:7b:e8:64:e8:46:aa:c3:48:4a:cc:ec:70: 32:c4:37:4a:6b:f3:40:c6:03:45:25:b2:53:22:c1: b3:3d:bf:c7:14:92:18:8c:15:0f:9a:a1:88:38:97: 82:9c:61:ad:46:7f:d8:f0:d8:b9:d5:fa:90:d8:4b: 0a:da:60:a3:ff:b1:be:60:79:64:54:75:4e:7b:4b: 45:ee:44:a4:f5:5a:65:42:04:0e:17:3a:0f:8a:bd: 9a:65:81:48:ca:f4:fe:8b:7b:ff:ac:fe:4e:0b:7a: d3:af:6b:48:5e:2d:2e:24:57:ef:7d:a7:bb:d3:c0: 02:63:64:cf:c9:5c:ba:ca:8e:90:0e:fc:71:64:1d: 97:ce:13:43:c3:97:39:67:26:12:55:16:ef:68:0d: d6:c0:d6:16:04:74:27:c6:f1:2b:84:94:c8:a1:29: 4e:a5:12:3b:7f:da:79:18:76:e3:7a:d2:fb:b2:68: 37:76:2a:af:c8:21:70:9a:d0:7f:37:7e:fb:b8:5e: 9f:76:b8:b2:0c:aa:e0:b8:c9:6b:8a:ae:92:c1:fd: 71:8f:2f:3a:75:ae:54:00:a1:78:8b:f1:7c:81:a2: dd:dd:74:a9:ce:ec:5c:df:3f:52:ea:9d:8f:60:48: 77:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A0:E5:55:7C:4C:37:F2:F3:63:48:C7:16:92:7B:43:05:1A:90:28 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IqDlVXxMN_LzY0jHFpJ7QwUakCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.18.14.0/23 46.243.232.0/22 Signature Algorithm: sha256WithRSAEncryption b0:3a:f2:65:66:08:3d:c8:08:a3:ac:e9:04:89:f4:bd:2c:fa: 74:85:76:cc:13:6a:9b:eb:7c:39:45:bb:0c:05:2e:83:d8:26: d4:6a:29:e7:ce:67:69:ec:6c:8a:72:d7:6b:0e:99:2e:6d:af: e2:3d:58:a4:61:0e:2d:62:4d:78:d9:c7:24:b3:17:19:6c:aa: 3f:5c:e9:3a:c2:73:c6:b2:de:18:3f:66:19:df:d8:1e:1f:15: df:32:88:72:19:8d:d2:5d:62:8f:e9:f3:95:02:5c:3d:f6:47: c2:4c:c4:bf:86:53:b3:be:d3:89:c0:f9:ea:27:6e:d7:55:54: 42:1c:c4:7d:2c:e6:2a:6f:de:1c:6c:7b:ee:b2:20:f6:8f:85: 66:9c:79:25:9a:14:6b:1b:47:7c:c6:fe:8c:3a:38:4a:04:93: 2e:44:37:56:27:a5:67:7d:e1:81:c7:61:80:a2:f7:e5:1f:fd: d8:ec:5d:96:e5:69:0d:8c:61:c8:16:49:fe:e9:a2:19:cb:c4: 3d:91:24:32:2d:52:fe:f0:c0:b0:5c:37:60:59:71:53:04:a8: 29:46:e6:1b:09:9a:bf:69:04:1c:16:31:85:ec:3c:71:b1:bf: de:c4:9c:50:59:ae:9e:bc:28:4c:94:64:cd:2f:7f:4d:dc:e7: 3a:ab:4f:55 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g7Rtphtm1KDWxa6O4ZawMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmEwZTU1NTdjNGMzN2YyZjM2MzQ4YzcxNjkyN2I0MzA1MWE5MDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QrtWhuHVdt+5tenS3T70zh76GTo RqrDSErM7HAyxDdKa/NAxgNFJbJTIsGzPb/HFJIYjBUPmqGIOJeCnGGtRn/Y8Ni5 1fqQ2EsK2mCj/7G+YHlkVHVOe0tF7kSk9VplQgQOFzoPir2aZYFIyvT+i3v/rP5O C3rTr2tIXi0uJFfvfae708ACY2TPyVy6yo6QDvxxZB2XzhNDw5c5ZyYSVRbvaA3W wNYWBHQnxvErhJTIoSlOpRI7f9p5GHbjetL7smg3diqvyCFwmtB/N377uF6fdriy DKrguMlriq6Swf1xjy86da5UAKF4i/F8gaLd3XSpzuxc3z9S6p2PYEh3jQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCKg5VV8TDfy82NIxxaSe0MFGpAoMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvSXFEbFZYeE1OX0x6WTBqSEZwSjdRd1Vha0NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBJRIOAwQC LvPoMA0GCSqGSIb3DQEBCwUAA4IBAQCwOvJlZgg9yAijrOkEifS9LPp0hXbME2qb 63w5RbsMBS6D2CbUainnzmdp7GyKctdrDpkuba/iPVikYQ4tYk142ccksxcZbKo/ XOk6wnPGst4YP2YZ39geHxXfMohyGY3SXWKP6fOVAlw99kfCTMS/hlOzvtOJwPnq J27XVVRCHMR9LOYqb94cbHvusiD2j4VmnHklmhRrG0d8xv6MOjhKBJMuRDdWJ6Vn feGBx2GAovflH/3Y7F2W5WkNjGHIFkn+6aIZy8Q9kSQyLVL+8MCwXDdgWXFTBKgp RuYbCZq/aQQcFjGF7Dxxsb/exJxQWa6evChMlGTNL39N3Oc6q09V -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:26 2026 by rpki-client