This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/IKsaSv5WbGQp-IZQdBzI2DlILNc.roa File: IKsaSv5WbGQp-IZQdBzI2DlILNc.roa (raw, json) Hash identifier: gbpIt6mebnTkZL27KKmJpAj3jmjIS87m4pvl+MU+r/0= Subject key identifier: 20:AB:1A:4A:FE:56:6C:64:29:F8:86:50:74:1C:C8:D8:39:48:2C:D7 Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b Certificate serial: 019B78A325B4B39076CD8EDB380A9C99EDAC Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/IKsaSv5WbGQp-IZQdBzI2DlILNc.roa Signing time: Thu 01 Jan 2026 08:18:36 +0000 ROA not before: Thu 01 Jan 2026 08:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207211 IP address blocks: 185.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.mft rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:25:b4:b3:90:76:cd:8e:db:38:0a:9c:99:ed:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b Validity Not Before: Jan 1 08:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20ab1a4afe566c6429f88650741cc8d839482cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:95:24:e9:d8:e4:60:bb:03:5a:15:ba:be: 68:3c:9d:0c:e6:d6:96:9e:03:7a:9f:72:51:69:b3: 40:b3:49:9b:f1:db:99:11:dc:1d:24:f1:aa:21:02: 1a:2a:53:57:3c:8e:95:88:9c:41:96:2c:ed:ee:b3: 81:61:c3:e3:79:e5:d0:80:24:c0:ef:ca:3a:d5:ad: d7:fe:5d:df:68:60:b2:ed:21:63:94:ac:ec:2b:e6: b9:1f:7b:48:27:c7:73:9b:2f:7b:31:8a:f1:fa:41: 70:e0:73:d2:91:0c:52:ad:27:c1:8a:23:e2:51:cf: 2d:ba:58:75:a1:99:3e:f2:54:3f:4c:18:59:54:39: da:ab:b6:65:3b:14:8b:2f:e4:f1:df:ea:af:b7:f3: 9b:6c:c0:e0:6b:f9:b6:97:ee:9c:cd:5d:0e:1d:dc: 9c:1f:9f:d5:fb:0c:c2:f0:75:02:59:03:92:07:8e: 93:05:fc:26:12:93:a0:ca:a2:d1:21:0a:09:1b:65: f8:a4:eb:ba:3e:3e:c4:9e:4e:fd:d3:fb:d1:24:6f: 02:66:1d:b1:84:fb:eb:fa:bc:02:a2:0f:08:b6:38: e3:6c:80:fe:c4:ea:0c:54:b3:f2:f1:85:3f:48:10: 43:16:6f:07:51:d4:a5:08:2d:fa:90:61:71:ed:14: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AB:1A:4A:FE:56:6C:64:29:F8:86:50:74:1C:C8:D8:39:48:2C:D7 X509v3 Authority Key Identifier: keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/IKsaSv5WbGQp-IZQdBzI2DlILNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.204.0/24 Signature Algorithm: sha256WithRSAEncryption c1:29:ec:3e:06:98:c5:a2:84:19:56:87:83:c7:b9:31:9d:d4: 1f:4e:e6:e1:29:5a:e0:91:55:47:a1:03:9d:0f:48:76:05:2b: 94:12:52:4c:42:32:7e:67:c7:9a:20:be:86:8c:d5:a6:c1:51: bf:5b:8e:af:9a:7d:dc:7e:44:1d:d2:ad:5e:d5:f1:12:5f:8b: cd:3a:97:ed:76:44:50:71:9f:83:5d:48:51:b7:14:c9:5e:a6: c9:43:4b:2d:c5:11:e4:59:94:7b:ba:91:db:82:2d:3c:9a:f2: b5:0d:f0:9c:d0:16:cf:1a:fe:28:71:90:16:f3:3b:f4:0c:cf: 6c:7e:a5:c3:fa:b7:93:57:f9:c7:d5:9e:65:08:5b:66:f5:11: 73:31:2c:c4:7d:4a:a3:a5:60:65:04:a5:6f:cb:6c:e6:64:14: 74:d7:6a:cd:5d:9e:a9:cd:bb:e6:a8:01:07:cb:21:9e:7c:bb: 69:2a:12:f4:18:6c:c2:23:34:3d:da:5c:2c:c0:64:75:46:73: f3:b3:44:cf:58:06:76:ea:db:ac:cb:6c:25:f7:f3:2c:ec:30: bc:a8:99:9e:0d:eb:61:f7:97:f8:c7:a6:86:48:8d:e2:d9:29: 80:72:3a:25:b2:db:4d:f0:55:95:b1:61:f1:25:76:00:83:53: 8d:5d:ee:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oyW0s5B2zY7bOAqcme2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYTZmOWUzZTI2MjJhNzgxNWEyNTllNThkNTUyNDM5YzI1 NWEzMWIwHhcNMjYwMTAxMDgxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGFiMWE0YWZlNTY2YzY0MjlmODg2NTA3NDFjYzhkODM5NDgyY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt+VJOnY5GC7A1oVur5oPJ0M5taW ngN6n3JRabNAs0mb8duZEdwdJPGqIQIaKlNXPI6ViJxBlizt7rOBYcPjeeXQgCTA 78o61a3X/l3faGCy7SFjlKzsK+a5H3tIJ8dzmy97MYrx+kFw4HPSkQxSrSfBiiPi Uc8tulh1oZk+8lQ/TBhZVDnaq7ZlOxSLL+Tx3+qvt/ObbMDga/m2l+6czV0OHdyc H5/V+wzC8HUCWQOSB46TBfwmEpOgyqLRIQoJG2X4pOu6Pj7Enk790/vRJG8CZh2x hPvr+rwCog8ItjjjbID+xOoMVLPy8YU/SBBDFm8HUdSlCC36kGFx7RSkoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCrGkr+VmxkKfiGUHQcyNg5SCzXMB8GA1UdIwQY MBaAFGqm+ePiYip4FaJZ5Y1VJDnCVaMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4Mzct YzUwNzM0ZDAyMGYwLzEvSUtzYVN2NVdiR1FwLUlaUWRCekkyRGxJTE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4MzctYzUwNzM0ZDAyMGYw LzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ3MMA0G CSqGSIb3DQEBCwUAA4IBAQDBKew+BpjFooQZVoeDx7kxndQfTubhKVrgkVVHoQOd D0h2BSuUElJMQjJ+Z8eaIL6GjNWmwVG/W46vmn3cfkQd0q1e1fESX4vNOpftdkRQ cZ+DXUhRtxTJXqbJQ0stxRHkWZR7upHbgi08mvK1DfCc0BbPGv4ocZAW8zv0DM9s fqXD+reTV/nH1Z5lCFtm9RFzMSzEfUqjpWBlBKVvy2zmZBR012rNXZ6pzbvmqAEH yyGefLtpKhL0GGzCIzQ92lwswGR1RnPzs0TPWAZ26tusy2wl9/Ms7DC8qJmeDeth 95f4x6aGSI3i2SmAcjolsttN8FWVsWHxJXYAg1ONXe45 -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:42 2026 by rpki-client