This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/IPEVX9NburliCOkL_8My8KZEvxc.roa File: IPEVX9NburliCOkL_8My8KZEvxc.roa (raw, json) Hash identifier: vKtzd4qXyz9EWKAKarv5HXYhJ7hA2jvu9rmJAemDTXw= Subject key identifier: 20:F1:15:5F:D3:5B:BA:B9:62:08:E9:0B:FF:C3:32:F0:A6:44:BF:17 Certificate issuer: /CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076 Certificate serial: 019B76EAEB8A782811B824BEA1C27357422E Authority key identifier: 60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/IPEVX9NburliCOkL_8My8KZEvxc.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34612 IP address blocks: 91.215.148.0/22 maxlen: 22 141.138.216.0/21 maxlen: 21 178.20.56.0/21 maxlen: 21 185.50.208.0/22 maxlen: 22 2a03:5380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.mft rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:eb:8a:78:28:11:b8:24:be:a1:c2:73:57:42:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=609ea7abafc52c7ffa20a7a6aae4ae2d26252076 Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20f1155fd35bbab96208e90bffc332f0a644bf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:1d:b4:ef:04:f3:95:31:97:7d:2a:70:6f: 50:9b:37:37:26:34:87:e1:cf:28:e8:46:33:e7:be: 09:8e:a0:07:07:25:df:01:1c:72:73:b8:36:4a:94: 9b:48:81:e3:7b:9e:c5:ef:86:d0:0c:3b:c9:3b:2c: de:bb:58:cc:d4:2a:2e:02:3b:0c:d3:bb:84:55:0d: 0e:fe:5f:c0:41:44:bf:4d:60:81:6a:d5:09:a2:74: 80:88:f4:7b:7b:49:6e:44:98:30:41:60:5f:8f:cf: 70:62:15:06:16:b6:63:99:93:7f:ce:f0:80:bb:e2: 2c:38:c0:fa:77:1b:16:25:98:69:5d:e8:6d:b6:cd: fd:00:35:d7:09:b8:26:23:17:a6:62:60:c1:4c:dd: 29:23:a0:ad:f2:48:cc:53:71:cb:20:dd:33:18:0a: 7d:14:d5:9d:a2:22:a2:15:31:c3:61:7a:92:59:d2: 3a:e1:1e:d7:99:52:28:44:39:2f:d8:bf:9b:b5:ee: 21:5a:7c:6c:77:b8:12:01:9d:e3:59:40:a0:09:51: de:7a:0c:ec:96:e0:39:a4:b1:30:56:68:80:2a:6d: e2:6f:be:6a:da:ea:21:8d:43:35:e5:5b:95:84:84: f9:f1:f1:b1:3b:80:c0:1b:a3:54:8e:33:1d:fc:b4: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:15:5F:D3:5B:BA:B9:62:08:E9:0B:FF:C3:32:F0:A6:44:BF:17 X509v3 Authority Key Identifier: keyid:60:9E:A7:AB:AF:C5:2C:7F:FA:20:A7:A6:AA:E4:AE:2D:26:25:20:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJ6nq6_FLH_6IKemquSuLSYlIHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/IPEVX9NburliCOkL_8My8KZEvxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/d4565d-c884-4e2b-9d9a-4170b82adf5d/1/YJ6nq6_FLH_6IKemquSuLSYlIHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.215.148.0/22 141.138.216.0/21 178.20.56.0/21 185.50.208.0/22 IPv6: 2a03:5380::/32 Signature Algorithm: sha256WithRSAEncryption 8e:92:7b:e6:98:5c:e9:62:73:1e:7e:33:88:d1:62:0e:f5:f4: f7:be:24:b2:0c:af:76:67:9d:31:60:bf:dc:b9:4f:70:c5:09: 8d:97:25:a9:c5:b1:a2:95:3e:98:ad:db:35:52:3b:99:31:d6: 36:82:d2:c0:cd:42:93:19:32:65:31:e0:b2:4e:d7:52:12:1c: ce:c3:eb:14:1d:2d:f0:90:00:48:70:28:05:2f:d9:4e:85:7c: 86:1c:31:26:09:3c:e6:fb:a3:37:a4:30:ab:00:a3:41:a0:33: f9:d4:72:ed:da:29:06:05:9d:c7:39:35:ad:9a:ee:1d:39:9c: 67:2f:cb:da:f7:08:4c:1a:1c:e0:2c:31:ec:08:ee:ee:67:e9: db:ef:4d:81:b2:37:f4:47:c3:d5:73:cb:80:d3:73:15:96:c4: 22:de:bf:e8:b2:b2:05:e3:47:a4:60:f8:7d:cd:36:d6:99:e0: c5:cf:ba:f3:3a:d2:80:df:9f:14:41:80:f1:75:13:35:cf:93: fb:87:47:cc:5e:ca:f1:91:4d:06:dd:e3:9a:b1:5a:7a:c1:59: f1:4e:37:ef:b7:1a:3b:de:96:1d:e5:29:6f:35:43:aa:79:e6: c0:7c:1e:f6:94:91:5a:0e:40:eb:51:4a:b7:b8:20:04:a5:fd: 0c:ed:09:ff -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt26uuKeCgRuCS+ocJzV0IuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOWVhN2FiYWZjNTJjN2ZmYTIwYTdhNmFhZTRhZTJkMjYy NTIwNzYwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGYxMTU1ZmQzNWJiYWI5NjIwOGU5MGJmZmMzMzJmMGE2NDRiZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+UdtO8E85Uxl30qcG9Qmzc3JjSH 4c8o6EYz574JjqAHByXfARxyc7g2SpSbSIHje57F74bQDDvJOyzeu1jM1CouAjsM 07uEVQ0O/l/AQUS/TWCBatUJonSAiPR7e0luRJgwQWBfj89wYhUGFrZjmZN/zvCA u+IsOMD6dxsWJZhpXehtts39ADXXCbgmIxemYmDBTN0pI6Ct8kjMU3HLIN0zGAp9 FNWdoiKiFTHDYXqSWdI64R7XmVIoRDkv2L+bte4hWnxsd7gSAZ3jWUCgCVHeegzs luA5pLEwVmiAKm3ib75q2uohjUM15VuVhIT58fGxO4DAG6NUjjMd/LRK+wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCDxFV/TW7q5YgjpC//DMvCmRL8XMB8GA1UdIwQY MBaAFGCep6uvxSx/+iCnpqrkri0mJSB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEt NDE3MGI4MmFkZjVkLzEvSVBFVlg5TmJ1cmxpQ09rTF84TXk4S1pFdnhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9kNDU2NWQtYzg4NC00ZTJiLTlkOWEtNDE3MGI4MmFkZjVk LzEvWUo2bnE2X0ZMSF82SUtlbXF1U3VMU1lsSUhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCW9eUAwQD jYrYAwQDshQ4AwQCuTLQMA0EAgACMAcDBQAqA1OAMA0GCSqGSIb3DQEBCwUAA4IB AQCOknvmmFzpYnMefjOI0WIO9fT3viSyDK92Z50xYL/cuU9wxQmNlyWpxbGilT6Y rds1UjuZMdY2gtLAzUKTGTJlMeCyTtdSEhzOw+sUHS3wkABIcCgFL9lOhXyGHDEm CTzm+6M3pDCrAKNBoDP51HLt2ikGBZ3HOTWtmu4dOZxnL8va9whMGhzgLDHsCO7u Z+nb702Bsjf0R8PVc8uA03MVlsQi3r/osrIF40ekYPh9zTbWmeDFz7rzOtKA358U QYDxdRM1z5P7h0fMXsrxkU0G3eOasVp6wVnxTjfvtxo73pYd5SlvNUOqeebAfB72 lJFaDkDrUUq3uCAEpf0M7Qn/ -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:51 2026 by rpki-client