This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa File: iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa (raw, json) Hash identifier: It8YvfViWyNErBB7Zv+bZEVw/M7ptWvSo9mhIgQMuss= Subject key identifier: 88:70:58:38:92:06:07:56:0F:9B:81:EB:F9:B3:91:08:80:7E:E4:DC Certificate issuer: /CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Certificate serial: 019B7DCA53755FD500D1A19864852EDB6B04 Authority key identifier: CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa Signing time: Fri 02 Jan 2026 08:19:30 +0000 ROA not before: Fri 02 Jan 2026 08:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34828 IP address blocks: 45.15.22.0/24 maxlen: 24 93.95.26.0/24 maxlen: 24 185.210.92.0/24 maxlen: 24 185.210.93.0/24 maxlen: 24 185.210.94.0/24 maxlen: 24 185.210.95.0/24 maxlen: 24 2a0b:5540::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.mft rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:53:75:5f:d5:00:d1:a1:98:64:85:2e:db:6b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc01833c7ee5f343ff093b6c4e6151d0e3645768 Validity Not Before: Jan 2 08:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88705838920607560f9b81ebf9b39108807ee4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:ff:67:7b:aa:93:18:7b:ec:66:07:07:33: ec:bc:6c:a8:45:4c:1a:01:76:5a:ad:55:96:34:48: ce:8b:64:ee:35:6f:58:8f:a2:0d:33:58:e1:76:96: 9f:6c:f0:69:76:b8:af:f0:7d:c4:f3:fb:d3:2e:5c: 1c:73:93:4e:17:84:11:2e:85:4f:ed:7a:aa:19:f3: 43:fd:2a:49:f0:88:88:f8:9e:1a:5d:85:dd:38:25: 72:97:f9:5e:86:64:73:dc:61:97:6f:43:fb:7a:55: fa:e4:bf:ae:3d:bc:0f:e3:06:66:c5:b5:f5:d0:7c: 4e:a0:03:76:99:98:b9:a7:fa:08:4c:1f:15:40:8b: 9a:42:bc:eb:a7:db:e2:76:70:e8:16:26:47:f0:39: 75:58:75:3c:03:88:cd:fe:16:26:79:51:09:7a:75: 24:2e:bb:b5:d5:dc:4f:05:48:8b:86:da:05:b9:8d: 01:de:bf:c8:ea:0d:ce:3e:38:6e:d7:d3:2a:2e:71: 2b:11:72:62:88:57:af:75:8f:01:55:0c:2b:72:c0: 94:d0:68:9d:83:ec:9f:16:20:d3:b4:7b:08:f9:43: 8c:37:d5:94:30:01:fa:e9:a3:6a:43:89:ca:20:d9: 53:9f:84:6e:7d:94:67:82:74:13:f6:b8:a8:7c:51: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:70:58:38:92:06:07:56:0F:9B:81:EB:F9:B3:91:08:80:7E:E4:DC X509v3 Authority Key Identifier: keyid:CC:01:83:3C:7E:E5:F3:43:FF:09:3B:6C:4E:61:51:D0:E3:64:57:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zAGDPH7l80P_CTtsTmFR0ONkV2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/iHBYOJIGB1YPm4Hr-bORCIB-5Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d40773-cf2d-4198-8b3f-727ab6d07ff2/1/zAGDPH7l80P_CTtsTmFR0ONkV2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.22.0/24 93.95.26.0/24 185.210.92.0/22 IPv6: 2a0b:5540::/33 Signature Algorithm: sha256WithRSAEncryption c4:c3:50:e5:ff:94:58:3e:f3:4f:15:ff:48:47:85:5b:46:ab: 2b:ed:43:3b:ef:f9:f9:1c:85:d3:75:e8:ee:82:ad:82:56:e5: 44:6d:3a:3f:b2:64:c2:b0:32:19:5c:e1:15:de:d1:8a:0b:ae: 0f:b1:77:de:17:a4:34:34:ce:bf:e2:69:bb:47:b5:40:92:bd: 9a:aa:2d:22:e0:2d:51:df:74:83:cc:53:49:f1:c3:5d:c9:6c: 8d:67:78:9e:85:83:de:79:9e:18:e9:af:de:b8:64:5e:66:60: 3c:1a:2e:bd:d5:41:ce:a5:ac:61:1a:53:57:48:57:82:65:01: c5:33:d0:cd:d3:c6:d7:14:02:09:d7:0c:4c:4e:14:d1:fe:7d: c1:25:b6:37:94:72:8f:9a:7a:9c:67:17:c8:7f:90:19:7e:d9: 20:2e:ce:ac:5f:87:8f:64:ea:73:d9:7b:cb:7d:ff:df:a6:a8: 21:2b:d6:06:08:f2:72:e5:32:cd:0a:5d:d5:67:49:53:d0:2f: cc:7b:ba:78:9f:43:df:11:66:cf:a9:66:fe:7c:c5:69:03:87: 51:11:90:49:e3:34:f1:b1:23:2a:ec:00:83:71:43:c3:b1:c6: 7f:a6:b6:98:24:71:94:6e:ba:0f:17:33:1a:b3:90:08:46:58: 36:68:3e:67 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt9ylN1X9UA0aGYZIUu22sEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMDE4MzNjN2VlNWYzNDNmZjA5M2I2YzRlNjE1MWQwZTM2 NDU3NjgwHhcNMjYwMTAyMDgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODcwNTgzODkyMDYwNzU2MGY5YjgxZWJmOWIzOTEwODgwN2VlNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0r/Z3uqkxh77GYHBzPsvGyoRUwa AXZarVWWNEjOi2TuNW9Yj6INM1jhdpafbPBpdriv8H3E8/vTLlwcc5NOF4QRLoVP 7XqqGfND/SpJ8IiI+J4aXYXdOCVyl/lehmRz3GGXb0P7elX65L+uPbwP4wZmxbX1 0HxOoAN2mZi5p/oITB8VQIuaQrzrp9vidnDoFiZH8Dl1WHU8A4jN/hYmeVEJenUk Lru11dxPBUiLhtoFuY0B3r/I6g3OPjhu19MqLnErEXJiiFevdY8BVQwrcsCU0Gid g+yfFiDTtHsI+UOMN9WUMAH66aNqQ4nKINlTn4RufZRngnQT9riofFF6FQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIhwWDiSBgdWD5uB6/mzkQiAfuTcMB8GA1UdIwQY MBaAFMwBgzx+5fND/wk7bE5hUdDjZFdoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2Yt NzI3YWI2ZDA3ZmYyLzEvaUhCWU9KSUdCMVlQbTRIci1iT1JDSUItNU53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kNDA3NzMtY2YyZC00MTk4LThiM2YtNzI3YWI2ZDA3ZmYy LzEvekFHRFBIN2w4MFBfQ1R0c1RtRlIwT05rVjJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQALQ8WAwQA XV8aAwQCudJcMA4EAgACMAgDBgcqC1VAADANBgkqhkiG9w0BAQsFAAOCAQEAxMNQ 5f+UWD7zTxX/SEeFW0arK+1DO+/5+RyF03Xo7oKtglblRG06P7JkwrAyGVzhFd7R iguuD7F33hekNDTOv+Jpu0e1QJK9mqotIuAtUd90g8xTSfHDXclsjWd4noWD3nme GOmv3rhkXmZgPBouvdVBzqWsYRpTV0hXgmUBxTPQzdPG1xQCCdcMTE4U0f59wSW2 N5Ryj5p6nGcXyH+QGX7ZIC7OrF+Hj2Tqc9l7y33/36aoISvWBgjycuUyzQpd1WdJ U9AvzHu6eJ9D3xFmz6lm/nzFaQOHURGQSeM08bEjKuwAg3FDw7HGf6a2mCRxlG66 DxczGrOQCEZYNmg+Zw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:43 2026 by rpki-client