This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/IqpfOsuAGj3yA5hgOgLfHH1ZGzI.roa File: IqpfOsuAGj3yA5hgOgLfHH1ZGzI.roa (raw, json) Hash identifier: dY6OCD3q/2fSqcJ5EH9CmoPLY3CEuWLK3m8aQTfrRdI= Subject key identifier: 22:AA:5F:3A:CB:80:1A:3D:F2:03:98:60:3A:02:DF:1C:7D:59:1B:32 Certificate issuer: /CN=335e725cacf83c97f457a56762cf846d643117cd Certificate serial: 019B7A5A9A477FD213BF9D11D4B0B26D4241 Authority key identifier: 33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/IqpfOsuAGj3yA5hgOgLfHH1ZGzI.roa Signing time: Thu 01 Jan 2026 16:18:36 +0000 ROA not before: Thu 01 Jan 2026 16:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 46.231.120.0/24 maxlen: 24 46.231.121.0/24 maxlen: 24 185.192.220.0/24 maxlen: 24 185.192.221.0/24 maxlen: 24 185.192.222.0/24 maxlen: 24 185.192.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.mft rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9a:47:7f:d2:13:bf:9d:11:d4:b0:b2:6d:42:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=335e725cacf83c97f457a56762cf846d643117cd Validity Not Before: Jan 1 16:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22aa5f3acb801a3df20398603a02df1c7d591b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:25:f8:33:6a:e1:9b:13:fa:49:62:26:73: 23:5e:06:a9:51:27:85:29:76:b0:89:5a:c5:f2:0e: fc:bb:63:a0:ba:74:9a:e1:c9:de:73:11:81:78:e2: c4:d2:e2:cc:9a:1d:9e:c3:78:c6:66:11:ec:b5:d6: 3f:74:f0:3b:d8:41:34:97:6c:06:9a:99:c3:e7:8b: d3:d9:8a:4e:24:a1:2b:a3:9d:91:ab:d5:73:32:2f: 67:92:41:38:ae:eb:9d:b4:92:d6:26:3e:e4:d2:e2: 0a:35:de:21:c8:4d:99:af:52:f4:ba:1b:74:c9:b8: 1f:fa:ea:88:cd:66:ce:a8:cf:9f:41:70:f6:0e:c5: d4:98:1e:4a:ab:06:56:db:11:ed:b4:19:ed:be:fe: d5:b8:b5:f2:a7:3a:b8:c3:f9:7e:cd:c1:e9:8e:74: a2:9b:96:df:81:24:1b:55:9f:48:4e:62:46:41:67: 3f:e4:81:2c:e3:33:31:db:51:28:58:bd:82:46:fa: 25:99:ab:3e:59:90:7e:f8:a1:27:88:36:09:c7:de: 6f:8b:e0:3c:46:81:c5:4c:0d:9a:ac:4a:47:99:cd: 4c:fd:cb:80:9f:92:f4:83:34:85:f1:6c:c4:cb:16: 6f:d5:4f:c9:7c:10:b8:8e:43:f4:c1:b2:08:70:90: a8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:5F:3A:CB:80:1A:3D:F2:03:98:60:3A:02:DF:1C:7D:59:1B:32 X509v3 Authority Key Identifier: keyid:33:5E:72:5C:AC:F8:3C:97:F4:57:A5:67:62:CF:84:6D:64:31:17:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M15yXKz4PJf0V6VnYs-EbWQxF80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/IqpfOsuAGj3yA5hgOgLfHH1ZGzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/026548-5012-4ad0-a5bb-82c0560595cd/1/M15yXKz4PJf0V6VnYs-EbWQxF80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.120.0/23 185.192.220.0/22 Signature Algorithm: sha256WithRSAEncryption 89:bd:fe:5a:91:67:a2:e8:19:49:10:56:1a:5f:80:d5:84:6b: 3d:e8:1c:50:29:53:5f:84:03:63:a3:0e:e5:0d:d6:f0:6c:9b: 4d:76:b4:a9:65:17:d2:9e:fc:c0:dd:71:0d:e2:43:7c:82:cf: 40:26:06:3b:a3:71:fd:19:ae:a2:2f:25:7c:3a:39:81:0b:03: 20:ed:df:d2:11:8d:94:b6:4a:91:e9:fa:a7:b2:c1:46:9e:05: b7:f5:a7:7b:06:88:bc:06:5c:b4:db:98:29:c3:ac:37:5a:21: 78:c2:1c:14:ba:a9:af:a8:c0:e4:f0:55:e1:27:2a:f1:a5:ae: 28:65:09:42:c3:e7:bd:d9:2b:7e:a9:0a:b9:0e:9e:f4:35:f9: 78:ca:7a:c1:b8:f4:fc:78:12:65:56:db:68:f8:79:68:a5:d3: f2:1b:ae:60:a3:f6:6f:97:e5:c1:2a:4f:ac:a4:a8:2c:9f:0a: 1c:c3:fc:f8:2f:b4:14:08:89:19:78:d2:1d:c7:b9:91:ac:fb: 47:af:9c:f9:e8:96:47:38:ee:06:c8:f7:60:ca:33:ad:be:b7: 1c:99:67:cd:4b:29:49:bf:2e:a6:bc:42:f6:ac:e9:6a:b1:30: dd:5e:9c:e9:43:7d:ae:5c:5f:c9:58:ec:30:7c:3a:83:86:eb: 5e:71:57:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WppHf9ITv50R1LCybUJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzNWU3MjVjYWNmODNjOTdmNDU3YTU2NzYyY2Y4NDZkNjQz MTE3Y2QwHhcNMjYwMTAxMTYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmFhNWYzYWNiODAxYTNkZjIwMzk4NjAzYTAyZGYxYzdkNTkxYjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjMl+DNq4ZsT+kliJnMjXgapUSeF KXawiVrF8g78u2OgunSa4cnecxGBeOLE0uLMmh2ew3jGZhHstdY/dPA72EE0l2wG mpnD54vT2YpOJKEro52Rq9VzMi9nkkE4ruudtJLWJj7k0uIKNd4hyE2Zr1L0uht0 ybgf+uqIzWbOqM+fQXD2DsXUmB5KqwZW2xHttBntvv7VuLXypzq4w/l+zcHpjnSi m5bfgSQbVZ9ITmJGQWc/5IEs4zMx21EoWL2CRvolmas+WZB++KEniDYJx95vi+A8 RoHFTA2arEpHmc1M/cuAn5L0gzSF8WzEyxZv1U/JfBC4jkP0wbIIcJCoNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCKqXzrLgBo98gOYYDoC3xx9WRsyMB8GA1UdIwQY MBaAFDNeclys+DyX9FelZ2LPhG1kMRfNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmIt ODJjMDU2MDU5NWNkLzEvSXFwZk9zdUFHajN5QTVoZ09nTGZISDFaR3pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wMjY1NDgtNTAxMi00YWQwLWE1YmItODJjMDU2MDU5NWNk LzEvTTE1eVhLejRQSmYwVjZWbllzLUViV1F4RjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLud4AwQC ucDcMA0GCSqGSIb3DQEBCwUAA4IBAQCJvf5akWei6BlJEFYaX4DVhGs96BxQKVNf hANjow7lDdbwbJtNdrSpZRfSnvzA3XEN4kN8gs9AJgY7o3H9Ga6iLyV8OjmBCwMg 7d/SEY2UtkqR6fqnssFGngW39ad7Boi8Bly025gpw6w3WiF4whwUuqmvqMDk8FXh Jyrxpa4oZQlCw+e92St+qQq5Dp70Nfl4ynrBuPT8eBJlVtto+HlopdPyG65go/Zv l+XBKk+spKgsnwocw/z4L7QUCIkZeNIdx7mRrPtHr5z56JZHOO4GyPdgyjOtvrcc mWfNSylJvy6mvEL2rOlqsTDdXpzpQ32uXF/JWOwwfDqDhutecVdR -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:33 2026 by rpki-client