This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/I_YkIIbROaBHikP_X2q88QJJL04.roa File: I_YkIIbROaBHikP_X2q88QJJL04.roa (raw, json) Hash identifier: i+Ynuk2mjQ1KZXlivUmIRXIts9g1U/IQ+uGbqumlnv0= Subject key identifier: 23:F6:24:20:86:D1:39:A0:47:8A:43:FF:5F:6A:BC:F1:02:49:2F:4E Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Certificate serial: 019B78A363004204DF324CD01F42B193D103 Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/I_YkIIbROaBHikP_X2q88QJJL04.roa Signing time: Thu 01 Jan 2026 08:18:51 +0000 ROA not before: Thu 01 Jan 2026 08:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198440 IP address blocks: 206.245.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:63:00:42:04:df:32:4c:d0:1f:42:b1:93:d1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7 Validity Not Before: Jan 1 08:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23f6242086d139a0478a43ff5f6abcf102492f4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b8:c8:ec:d2:26:d7:dd:e0:21:bf:c7:f6:de: 35:74:03:bb:5b:7c:2d:93:8e:b5:79:0d:51:f2:b6: 4b:22:12:37:e9:f3:a7:36:05:ef:e3:ab:92:7c:45: ea:0f:7b:05:fb:2d:9e:b2:e7:58:78:90:77:16:3c: 85:3d:04:a9:7a:d0:ad:69:f0:4f:88:79:81:aa:ca: 13:a4:67:8e:94:c2:b7:92:da:33:ae:3b:cf:3b:86: f5:45:7c:31:a4:d3:f3:2c:1f:d7:f7:dc:e9:12:40: 13:1a:dd:40:e4:28:9b:51:48:41:08:2e:e5:da:ec: 46:fa:f0:93:51:9b:6d:f8:79:b3:55:9a:e5:9a:1c: 50:a4:91:d9:5c:70:81:88:91:01:01:2c:89:21:08: c5:9e:b0:50:b9:34:b4:8d:6c:4b:ea:34:37:4f:39: ca:75:80:f7:9a:d8:e7:df:af:f5:03:aa:ca:84:26: 0b:d8:09:7b:78:86:50:1b:27:e3:81:b6:a8:04:e0: 28:ad:3b:5b:88:41:2e:6a:a9:f7:bd:a5:08:8d:4e: 35:d8:72:ee:7d:c2:fc:f1:5d:07:1f:cc:13:f1:2b: 75:94:8c:57:08:4b:49:3c:eb:af:c4:c6:0b:78:0f: ec:c0:bd:f3:7a:07:cb:6f:1e:a7:40:e5:b1:4d:9a: ee:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F6:24:20:86:D1:39:A0:47:8A:43:FF:5F:6A:BC:F1:02:49:2F:4E X509v3 Authority Key Identifier: keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/I_YkIIbROaBHikP_X2q88QJJL04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.245.192.0/20 Signature Algorithm: sha256WithRSAEncryption 04:cb:08:73:43:03:8a:58:5c:b7:dd:49:db:b9:81:58:6d:18: 3a:e0:0e:24:9b:f6:8d:d2:e7:58:95:6f:45:46:bb:97:af:01: 9f:82:e4:0f:8a:0e:4c:3d:7b:ea:a1:2d:18:b4:13:be:10:1e: 85:93:03:6d:bc:88:15:cd:90:d4:f3:1d:2b:81:ba:8b:d6:76: 6d:86:9b:0c:67:6a:07:4a:4e:ee:c9:d0:54:32:ae:1b:c3:ed: 56:c3:74:df:f2:c4:44:e8:20:d2:ef:1f:9f:5e:27:97:a2:04: 39:b7:77:1f:2c:c9:84:05:80:69:f6:1e:07:aa:bf:5c:53:4d: 0b:88:a9:e6:1c:0f:89:19:a6:92:05:84:80:c8:7a:87:33:34: 36:a8:a6:50:04:40:6a:8f:91:57:07:7c:fa:5d:62:9d:32:3d: 08:fb:9e:ba:9b:18:25:33:b0:02:62:f5:ff:a9:9c:ae:f6:10: 08:4f:50:34:bc:d1:33:18:8d:e0:03:92:98:2d:c8:05:46:a5: 00:69:1d:00:9e:9d:25:35:9b:7b:33:a5:45:55:94:08:50:4a: f9:ea:3e:af:88:42:95:2a:5d:62:94:7f:7c:34:31:86:3c:8d: 8a:5d:32:75:73:8a:9f:96:4f:0b:c9:09:ec:18:58:6e:1a:5f: c1:20:92:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o2MAQgTfMkzQH0Kxk9EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTg0M2E4NWRkNjY0ZTlkYzAzMTA4OTJiZDdkZDljZTUy NTkxYzcwHhcNMjYwMTAxMDgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2Y2MjQyMDg2ZDEzOWEwNDc4YTQzZmY1ZjZhYmNmMTAyNDkyZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLjI7NIm193gIb/H9t41dAO7W3wt k461eQ1R8rZLIhI36fOnNgXv46uSfEXqD3sF+y2esudYeJB3FjyFPQSpetCtafBP iHmBqsoTpGeOlMK3ktozrjvPO4b1RXwxpNPzLB/X99zpEkATGt1A5CibUUhBCC7l 2uxG+vCTUZtt+HmzVZrlmhxQpJHZXHCBiJEBASyJIQjFnrBQuTS0jWxL6jQ3TznK dYD3mtjn36/1A6rKhCYL2Al7eIZQGyfjgbaoBOAorTtbiEEuaqn3vaUIjU412HLu fcL88V0HH8wT8St1lIxXCEtJPOuvxMYLeA/swL3zegfLbx6nQOWxTZru4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCP2JCCG0TmgR4pD/19qvPECSS9OMB8GA1UdIwQY MBaAFE7oQ6hd1mTp3AMQiSvX3ZzlJZHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjct NDhjZjQxMmIzODdiLzEvSV9Za0lJYlJPYUJIaWtQX1gycTg4UUpKTDA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9hZGFkMjAtYzUxMi00ZmIwLWExMjctNDhjZjQxMmIzODdi LzEvVHVoRHFGM1daT25jQXhDSks5ZmRuT1Vsa2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzvXAMA0G CSqGSIb3DQEBCwUAA4IBAQAEywhzQwOKWFy33UnbuYFYbRg64A4km/aN0udYlW9F RruXrwGfguQPig5MPXvqoS0YtBO+EB6FkwNtvIgVzZDU8x0rgbqL1nZthpsMZ2oH Sk7uydBUMq4bw+1Ww3Tf8sRE6CDS7x+fXieXogQ5t3cfLMmEBYBp9h4Hqr9cU00L iKnmHA+JGaaSBYSAyHqHMzQ2qKZQBEBqj5FXB3z6XWKdMj0I+566mxglM7ACYvX/ qZyu9hAIT1A0vNEzGI3gA5KYLcgFRqUAaR0Anp0lNZt7M6VFVZQIUEr56j6viEKV Kl1ilH98NDGGPI2KXTJ1c4qflk8LyQnsGFhuGl/BIJIU -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:33 2026 by rpki-client