This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ilAJiyKbsAqFOQ_JKqGlXPXfCf8.roa File: ilAJiyKbsAqFOQ_JKqGlXPXfCf8.roa (raw, json) Hash identifier: xwlf3yj66pEBtvP5TAwZQdxxK7t2w8JC8Li0eh0CjRU= Subject key identifier: 8A:50:09:8B:22:9B:B0:0A:85:39:0F:C9:2A:A1:A5:5C:F5:DF:09:FF Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Certificate serial: 019B7FF1878B23C7E0E26B5CDDC05CBB102D Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ilAJiyKbsAqFOQ_JKqGlXPXfCf8.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62243 IP address blocks: 185.29.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:87:8b:23:c7:e0:e2:6b:5c:dd:c0:5c:bb:10:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a50098b229bb00a85390fc92aa1a55cf5df09ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d6:d1:49:b1:82:d2:2f:e0:67:4b:e7:6e:7a: ce:b7:8e:3c:bd:3b:e9:62:3e:82:a4:6b:66:e3:c3: ab:3a:56:22:0e:91:a6:03:3d:aa:c3:5c:b8:a0:0e: 8c:7f:fb:6a:19:a0:78:35:56:33:d9:ca:3f:1e:1a: 4b:70:04:bd:a9:97:6b:81:ff:b4:9b:48:97:4d:a9: 83:42:2f:10:cf:e9:a1:65:7d:ed:e5:99:a0:aa:bb: 7f:b1:a0:ac:dd:69:8c:72:54:75:b5:92:2b:c7:a7: 3a:e1:c3:c0:cc:b4:b6:51:b3:89:11:e8:6b:98:de: 8d:d1:e6:7f:19:d0:9d:74:55:43:25:61:53:8a:45: 3b:2f:f0:a8:c2:79:5a:29:6e:f4:4b:7a:a1:65:c3: 08:02:de:b1:25:3c:51:3d:18:5a:fb:e2:43:ef:3f: 3b:59:8e:7b:65:1a:e6:25:3e:45:f1:4e:d4:30:3d: 5f:4e:e3:f4:50:36:73:d0:49:9f:e5:28:3a:cf:aa: 72:69:23:73:5d:f0:10:25:05:42:c1:31:dd:71:15: c3:05:39:3b:4a:de:36:a7:0b:4e:a0:ff:f3:bf:2e: 43:66:89:a1:03:e5:07:b1:bf:7b:26:25:8a:9a:45: 22:bc:b3:36:21:42:38:51:c9:6d:b1:35:c5:58:8f: 1e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:09:8B:22:9B:B0:0A:85:39:0F:C9:2A:A1:A5:5C:F5:DF:09:FF X509v3 Authority Key Identifier: keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ilAJiyKbsAqFOQ_JKqGlXPXfCf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.29.130.0/24 Signature Algorithm: sha256WithRSAEncryption 46:a7:7f:28:46:97:f1:13:c8:06:96:8c:2b:9e:2e:7c:ab:c0: 93:e4:6f:3e:85:05:eb:37:c4:e5:9b:dc:e5:29:56:66:c4:e7: c1:89:bf:ea:7f:42:2d:72:9e:39:9e:ad:71:0f:60:83:97:33: f4:8a:4c:10:7d:10:bd:7a:a1:6e:63:d0:31:0c:11:e6:9b:63: fc:52:eb:c9:01:ee:58:5c:2b:53:6a:11:12:55:aa:65:1a:87: 63:7d:b9:48:2c:76:79:07:5a:b3:08:68:df:d8:97:87:99:c6: 95:62:ab:c6:7e:84:bc:c2:8f:ca:6f:70:39:b5:5b:f5:8a:7a: fe:ef:10:f7:ef:b7:29:ed:58:6f:8b:ba:ec:14:3a:a2:98:0f: 0e:ac:40:40:f0:5f:b1:5b:2d:06:e0:bb:45:ee:af:5a:75:f9: 76:54:33:d4:3c:b2:4a:c3:de:95:a1:ba:a1:a0:6c:46:71:a4: 57:58:6b:10:3c:43:d6:a7:ea:93:7b:a5:59:15:c0:c6:44:19: 72:8d:da:24:01:33:a0:b4:88:64:f1:f3:1f:ec:fe:a0:24:ee: c9:eb:29:c2:2e:9e:3c:4e:6f:c9:f3:44:f7:d4:fb:c1:c8:92: 19:2f:03:7d:fa:53:a2:1f:90:99:28:fb:8f:6f:87:58:3c:57: a4:9f:88:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8YeLI8fg4mtc3cBcuxAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy ZDQ1YjcwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTUwMDk4YjIyOWJiMDBhODUzOTBmYzkyYWExYTU1Y2Y1ZGYwOWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dbRSbGC0i/gZ0vnbnrOt448vTvp Yj6CpGtm48OrOlYiDpGmAz2qw1y4oA6Mf/tqGaB4NVYz2co/HhpLcAS9qZdrgf+0 m0iXTamDQi8Qz+mhZX3t5Zmgqrt/saCs3WmMclR1tZIrx6c64cPAzLS2UbOJEehr mN6N0eZ/GdCddFVDJWFTikU7L/CownlaKW70S3qhZcMIAt6xJTxRPRha++JD7z87 WY57ZRrmJT5F8U7UMD1fTuP0UDZz0Emf5Sg6z6pyaSNzXfAQJQVCwTHdcRXDBTk7 St42pwtOoP/zvy5DZomhA+UHsb97JiWKmkUivLM2IUI4UcltsTXFWI8eEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpQCYsim7AKhTkPySqhpVz13wn/MB8GA1UdIwQY MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt ZjA5M2UxN2IyN2VmLzEvaWxBSml5S2JzQXFGT1FfSktxR2xYUFhmQ2Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuR2CMA0G CSqGSIb3DQEBCwUAA4IBAQBGp38oRpfxE8gGlowrni58q8CT5G8+hQXrN8Tlm9zl KVZmxOfBib/qf0Itcp45nq1xD2CDlzP0ikwQfRC9eqFuY9AxDBHmm2P8UuvJAe5Y XCtTahESVaplGodjfblILHZ5B1qzCGjf2JeHmcaVYqvGfoS8wo/Kb3A5tVv1inr+ 7xD377cp7Vhvi7rsFDqimA8OrEBA8F+xWy0G4LtF7q9adfl2VDPUPLJKw96Vobqh oGxGcaRXWGsQPEPWp+qTe6VZFcDGRBlyjdokATOgtIhk8fMf7P6gJO7J6ynCLp48 Tm/J80T31PvByJIZLwN9+lOiH5CZKPuPb4dYPFekn4hb -----END CERTIFICATE-----Generated at Mon Jan 26 18:43:31 2026 by rpki-client