This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Iso7UtudzqybI9P-u3N4xN3OFFA.roa File: Iso7UtudzqybI9P-u3N4xN3OFFA.roa (raw, json) Hash identifier: 0IZeZas6NGaEqB4YndDnq080rW0AwifZGEDKnTQjRRg= Subject key identifier: 22:CA:3B:52:DB:9D:CE:AC:9B:23:D3:FE:BB:73:78:C4:DD:CE:14:50 Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019B7E38EFEEFE010CBC58BF24311658FF88 Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Iso7UtudzqybI9P-u3N4xN3OFFA.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 185.236.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ef:ee:fe:01:0c:bc:58:bf:24:31:16:58:ff:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ca3b52db9dceac9b23d3febb7378c4ddce1450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:28:b4:ad:dc:c9:25:0e:ff:40:21:62:cb: 7c:cc:61:24:b5:7f:10:a9:48:32:cc:e6:f1:d3:87: d2:bf:cc:90:69:be:f5:7c:02:c1:f2:4d:a4:f5:67: b3:86:14:cc:9a:56:c1:d0:9d:15:7d:c3:ac:f2:28: 5b:88:86:e4:10:79:b5:da:08:7b:93:d6:25:d8:05: 6a:6f:0c:31:22:3a:f4:e2:45:63:fd:32:f8:99:3a: bc:c3:42:ba:b9:48:d8:ac:c9:f4:c1:58:aa:a2:35: ce:b7:ec:d9:e4:c2:3a:7f:a7:be:0f:3e:2e:d0:b0: 56:6c:73:3f:e9:3a:f1:c9:2a:8e:74:10:13:24:f0: 47:31:b8:1a:64:81:bb:89:cd:22:35:cc:ae:42:9c: 7b:a1:b5:74:86:f2:ad:57:7f:46:f4:23:48:6b:d5: c4:fa:80:cb:6a:95:1a:c9:44:76:a1:a7:7e:6e:d0: 75:79:78:e5:20:e3:0a:81:15:05:3e:b3:1b:26:f0: ed:54:e1:57:b8:c9:02:54:50:a7:ae:33:8b:db:35: 08:70:11:b8:4f:0d:5b:42:80:ba:42:8d:c8:12:4e: 00:74:03:22:76:38:ab:f0:f6:fc:8e:8a:82:17:fa: ca:10:75:d9:46:3e:30:1b:90:60:25:5a:0e:d3:fb: 61:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CA:3B:52:DB:9D:CE:AC:9B:23:D3:FE:BB:73:78:C4:DD:CE:14:50 X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/Iso7UtudzqybI9P-u3N4xN3OFFA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.16.0/22 Signature Algorithm: sha256WithRSAEncryption 33:5a:d7:0d:8e:7c:37:e6:68:0b:7f:28:69:f6:87:2d:13:50: 2b:a1:c7:22:ff:24:2e:85:49:07:0e:8c:9e:2c:fa:7c:56:71: 46:98:33:65:f4:24:d5:2a:b8:6e:f1:7c:c7:81:aa:14:63:80: 60:f2:62:bf:bd:45:dc:27:8f:b2:c0:d9:74:ff:37:92:ee:c7: b5:e9:7b:d0:90:91:b0:36:7e:07:70:f4:eb:52:73:18:fc:fb: ba:b7:0d:d2:32:7b:5f:83:be:d3:ae:52:fb:2b:dc:dd:7d:e9: 8e:53:59:7c:22:be:f9:67:1c:26:ca:71:f5:b2:3f:72:68:6d: 68:24:b3:5f:23:be:6b:0c:95:86:e3:b0:90:0a:8e:e9:e0:91: 37:ea:19:48:e4:dc:2a:c6:3a:5b:e4:4d:e4:72:44:d4:ef:65: 1c:c3:91:b1:81:ac:7f:74:20:2d:6a:3b:40:9f:f0:f7:92:4f: 91:c3:43:55:ad:4f:23:07:5f:9d:6b:09:04:3b:1b:b1:63:16: 84:c9:f0:0d:f6:fc:59:dd:aa:7a:e0:b9:7b:0b:c4:81:78:23: 50:d4:a5:dc:b1:ea:6c:b8:6f:e3:95:b4:68:07:03:28:13:74: 94:f1:0b:e6:19:54:33:a1:7f:6f:52:83:c6:32:a5:5a:44:6b: 5c:e9:29:cd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO/u/gEMvFi/JDEWWP+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmNhM2I1MmRiOWRjZWFjOWIyM2QzZmViYjczNzhjNGRkY2UxNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TUotK3cySUO/0AhYst8zGEktX8Q qUgyzObx04fSv8yQab71fALB8k2k9WezhhTMmlbB0J0VfcOs8ihbiIbkEHm12gh7 k9Yl2AVqbwwxIjr04kVj/TL4mTq8w0K6uUjYrMn0wViqojXOt+zZ5MI6f6e+Dz4u 0LBWbHM/6TrxySqOdBATJPBHMbgaZIG7ic0iNcyuQpx7obV0hvKtV39G9CNIa9XE +oDLapUayUR2oad+btB1eXjlIOMKgRUFPrMbJvDtVOFXuMkCVFCnrjOL2zUIcBG4 Tw1bQoC6Qo3IEk4AdAMidjir8Pb8joqCF/rKEHXZRj4wG5BgJVoO0/thlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLKO1Lbnc6smyPT/rtzeMTdzhRQMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvSXNvN1V0dWR6cXliSTlQLXUzTjR4TjNPRkZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuewQMA0G CSqGSIb3DQEBCwUAA4IBAQAzWtcNjnw35mgLfyhp9octE1Arocci/yQuhUkHDoye LPp8VnFGmDNl9CTVKrhu8XzHgaoUY4Bg8mK/vUXcJ4+ywNl0/zeS7se16XvQkJGw Nn4HcPTrUnMY/Pu6tw3SMntfg77TrlL7K9zdfemOU1l8Ir75ZxwmynH1sj9yaG1o JLNfI75rDJWG47CQCo7p4JE36hlI5Nwqxjpb5E3kckTU72Ucw5Gxgax/dCAtajtA n/D3kk+Rw0NVrU8jB1+dawkEOxuxYxaEyfAN9vxZ3ap64Ll7C8SBeCNQ1KXcseps uG/jlbRoBwMoE3SU8QvmGVQzoX9vUoPGMqVaRGtc6SnN -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:32 2026 by rpki-client