This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ICdi3Xclm2LMQx68Q6etVXL0KFc.roa File: ICdi3Xclm2LMQx68Q6etVXL0KFc.roa (raw, json) Hash identifier: vjU1GcA1cFFndt3wwSI4VfmzP+VMXEKnzNIVU0wZIsQ= Subject key identifier: 20:27:62:DD:77:25:9B:62:CC:43:1E:BC:43:A7:AD:55:72:F4:28:57 Certificate issuer: /CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Certificate serial: 019B797EA22501465FA82744C461588A5E0E Authority key identifier: 0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ICdi3Xclm2LMQx68Q6etVXL0KFc.roa Signing time: Thu 01 Jan 2026 12:18:20 +0000 ROA not before: Thu 01 Jan 2026 12:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9583 IP address blocks: 159.151.196.0/24 maxlen: 24 192.109.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.mft rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a2:25:01:46:5f:a8:27:44:c4:61:58:8a:5e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a37d807d4f7cdd3e0afe4abc8ee5a880c6090f1 Validity Not Before: Jan 1 12:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=202762dd77259b62cc431ebc43a7ad5572f42857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:88:ac:54:35:70:f2:7b:24:bc:ae:fa:62: 5a:ec:e4:a6:63:36:65:61:b1:d4:9b:33:42:82:ea: b7:a9:99:c8:7a:00:23:f1:c4:b4:10:98:7e:31:e8: 73:77:77:a9:7e:5b:72:8c:57:0f:9d:5f:09:a5:32: 9f:e0:91:d0:9d:1c:06:a1:32:95:bc:01:03:83:58: 6b:23:a5:5c:aa:6f:1d:d8:15:88:35:88:a4:12:5d: 95:42:92:3f:b7:b6:d5:b7:c3:6e:a9:d1:4b:5f:4d: d6:73:39:26:2f:45:7b:a1:9f:34:a6:46:e8:d3:42: b4:e0:3e:93:45:f6:d0:a9:85:47:65:db:3d:e3:a4: b9:cb:92:37:ed:55:66:86:c3:cd:b4:13:22:bf:a3: 01:0a:d3:bd:1f:1e:2e:6d:fd:04:f8:17:65:75:8a: 6a:30:d9:b9:67:7e:d4:09:20:98:b2:48:f2:97:d6: ff:7c:63:ba:d8:fe:6d:3e:48:a5:63:33:5d:44:0b: a7:6f:14:8b:f0:4e:08:36:91:52:12:b8:de:8c:b8: fe:9f:92:df:d1:56:b8:46:18:3a:f2:59:0a:c8:b3: 9f:a6:49:2b:65:ad:0f:97:67:6d:91:37:52:b8:29: b9:11:a6:31:2c:71:87:01:96:c4:fe:76:3e:18:ae: f0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:27:62:DD:77:25:9B:62:CC:43:1E:BC:43:A7:AD:55:72:F4:28:57 X509v3 Authority Key Identifier: keyid:0A:37:D8:07:D4:F7:CD:D3:E0:AF:E4:AB:C8:EE:5A:88:0C:60:90:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjfYB9T3zdPgr-SryO5aiAxgkPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/ICdi3Xclm2LMQx68Q6etVXL0KFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/bc268d-61f0-471f-aab9-800eda2cfb36/1/CjfYB9T3zdPgr-SryO5aiAxgkPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.151.196.0/24 192.109.146.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:9e:81:77:03:d3:1c:f5:3b:c8:38:2f:93:e9:e6:3c:d0:dd: 61:17:84:a8:fd:44:98:2b:54:b5:f6:9d:0c:a4:6c:58:58:7b: 28:3f:a2:be:e0:23:5d:77:77:a5:2c:1c:2c:8e:f6:0e:84:3f: f6:dd:58:68:17:c2:41:76:cd:aa:31:4b:fb:ad:5e:a8:b2:a1: 26:8b:59:3e:d7:47:43:3e:54:0e:0a:9b:75:e4:1a:56:af:3e: 56:16:43:8d:90:09:52:1e:5f:84:51:7c:08:75:aa:0a:14:98: e4:d5:13:79:73:38:9e:8b:66:6e:88:f3:37:f0:f3:41:f7:0c: 19:80:69:3b:69:39:32:b5:55:45:91:39:82:58:be:41:e9:2f: bb:da:de:f1:1f:48:5d:31:d1:94:ba:89:5a:5c:0b:12:93:cb: 67:a5:cc:7a:6e:23:c5:f0:90:83:4f:cc:f2:96:ea:91:e5:1c: 66:04:00:90:a4:3c:c5:81:d2:81:36:ad:09:6a:c8:d6:d5:87: bf:9f:ae:c4:9a:5d:f0:ea:4a:12:af:ea:86:35:60:c3:89:31: 5c:f0:3b:aa:73:fd:6d:ee:d2:ab:7a:40:d8:d8:8b:fc:bb:05: 1b:ca:31:7a:29:1c:51:41:66:ec:b1:60:63:ac:dc:cb:1d:84: fa:ee:dd:98 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fqIlAUZfqCdExGFYil4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzdkODA3ZDRmN2NkZDNlMGFmZTRhYmM4ZWU1YTg4MGM2 MDkwZjEwHhcNMjYwMTAxMTIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDI3NjJkZDc3MjU5YjYyY2M0MzFlYmM0M2E3YWQ1NTcyZjQyODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJmIrFQ1cPJ7JLyu+mJa7OSmYzZl YbHUmzNCguq3qZnIegAj8cS0EJh+Mehzd3epfltyjFcPnV8JpTKf4JHQnRwGoTKV vAEDg1hrI6Vcqm8d2BWINYikEl2VQpI/t7bVt8NuqdFLX03WczkmL0V7oZ80pkbo 00K04D6TRfbQqYVHZds946S5y5I37VVmhsPNtBMiv6MBCtO9Hx4ubf0E+BdldYpq MNm5Z37UCSCYskjyl9b/fGO62P5tPkilYzNdRAunbxSL8E4INpFSErjejLj+n5Lf 0Va4Rhg68lkKyLOfpkkrZa0Pl2dtkTdSuCm5EaYxLHGHAZbE/nY+GK7wjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCAnYt13JZtizEMevEOnrVVy9ChXMB8GA1UdIwQY MBaAFAo32AfU983T4K/kq8juWogMYJDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjkt ODAwZWRhMmNmYjM2LzEvSUNkaTNYY2xtMkxNUXg2OFE2ZXRWWEwwS0ZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iYzI2OGQtNjFmMC00NzFmLWFhYjktODAwZWRhMmNmYjM2 LzEvQ2pmWUI5VDN6ZFBnci1TcnlPNWFpQXhna1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn5fEAwQA wG2SMA0GCSqGSIb3DQEBCwUAA4IBAQBunoF3A9Mc9TvIOC+T6eY80N1hF4So/USY K1S19p0MpGxYWHsoP6K+4CNdd3elLBwsjvYOhD/23VhoF8JBds2qMUv7rV6osqEm i1k+10dDPlQOCpt15BpWrz5WFkONkAlSHl+EUXwIdaoKFJjk1RN5cziei2ZuiPM3 8PNB9wwZgGk7aTkytVVFkTmCWL5B6S+72t7xH0hdMdGUuolaXAsSk8tnpcx6biPF 8JCDT8zyluqR5RxmBACQpDzFgdKBNq0JasjW1Ye/n67Eml3w6koSr+qGNWDDiTFc 8Duqc/1t7tKrekDY2Iv8uwUbyjF6KRxRQWbssWBjrNzLHYT67t2Y -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:47 2026 by rpki-client