This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/IyFwnbWnoKfZVMOw4siaFLOw0dM.roa File: IyFwnbWnoKfZVMOw4siaFLOw0dM.roa (raw, json) Hash identifier: I/fImPBHiDykSEzgNGq+cfAayabaV17LU6Onzjp6x+A= Subject key identifier: 23:21:70:9D:B5:A7:A0:A7:D9:54:C3:B0:E2:C8:9A:14:B3:B0:D1:D3 Certificate issuer: /CN=a50f21c3dc93757fc03282a835600d659f961e8e Certificate serial: 019B7C117DCB1B6FDC16734899766B78C606 Authority key identifier: A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/IyFwnbWnoKfZVMOw4siaFLOw0dM.roa Signing time: Fri 02 Jan 2026 00:17:59 +0000 ROA not before: Fri 02 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13000 IP address blocks: 91.207.64.0/23 maxlen: 23 91.208.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.mft rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7d:cb:1b:6f:dc:16:73:48:99:76:6b:78:c6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a50f21c3dc93757fc03282a835600d659f961e8e Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2321709db5a7a0a7d954c3b0e2c89a14b3b0d1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:7a:8f:d9:ca:7e:10:8b:73:3b:42:9c:63:6b: 97:92:be:f3:e5:32:47:1a:46:84:7c:c0:9c:b6:df: 42:55:1c:40:01:a7:ad:06:23:51:27:b1:e5:cf:d7: 72:e2:20:8b:07:41:b8:de:5b:d4:4e:9e:67:11:a7: 28:1f:01:be:5f:61:df:74:9f:c5:f0:b4:9d:6b:41: d7:10:92:e0:65:56:9f:2c:19:82:40:bb:ab:d2:b2: 94:34:75:7b:7a:69:df:b7:1e:e5:ef:a0:32:e7:f3: b4:41:f0:f4:eb:99:fb:0a:25:33:8d:89:e8:32:8f: 02:1f:f7:a5:02:7c:4a:10:3d:b4:58:59:52:ab:76: 0e:ea:a2:2a:ca:d4:c8:e9:19:2c:35:ef:2a:cc:6b: 8d:2f:13:72:b4:6e:24:3b:2f:88:91:72:f4:02:bd: b9:95:ae:58:7e:f7:3b:d5:10:7c:48:93:82:54:a8: c3:8e:b2:38:4e:2f:19:c8:2c:30:9c:16:50:bb:e6: 5f:2f:1a:73:9c:cf:4d:db:be:e7:cf:5b:1b:ee:fd: 3a:38:4c:c7:a0:28:9f:2c:20:19:52:75:d1:47:cb: ce:2a:ea:b5:a5:11:15:ab:79:d3:50:c7:55:38:71: b0:d4:5e:a7:c0:f1:84:b7:d0:7d:d1:d4:ea:57:38: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:21:70:9D:B5:A7:A0:A7:D9:54:C3:B0:E2:C8:9A:14:B3:B0:D1:D3 X509v3 Authority Key Identifier: keyid:A5:0F:21:C3:DC:93:75:7F:C0:32:82:A8:35:60:0D:65:9F:96:1E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/IyFwnbWnoKfZVMOw4siaFLOw0dM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea1df7-808a-47c3-ae51-b0843ec38823/1/pQ8hw9yTdX_AMoKoNWANZZ-WHo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.64.0/23 91.208.247.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:71:19:f0:59:26:e9:34:b6:1b:25:62:7b:bd:1b:12:e5:04: fd:53:d3:3f:63:ad:de:c5:40:23:98:a4:7f:74:1e:7f:05:25: 18:a0:23:a9:a1:e0:06:ec:87:fd:47:f5:35:26:7d:f8:12:40: 70:9c:ee:26:12:4e:21:3e:9b:7c:65:03:bc:ca:bc:9e:e7:01: 55:7b:b6:d3:33:b2:2a:96:bd:ce:80:da:46:74:ce:0f:48:1b: 88:44:83:86:37:c7:8c:01:3a:11:10:e4:42:b2:6f:12:d5:58: 2c:2c:5c:ef:8c:48:84:4c:7e:bd:ab:00:8e:ef:a9:cd:0b:e6: a5:58:78:9a:7a:17:7e:20:a0:0f:40:5b:f1:65:d5:43:ab:52: 90:57:be:58:94:53:b0:fb:37:81:94:90:84:d3:e3:cf:33:cf: e3:8e:d7:be:9b:85:a5:aa:5d:7c:3a:2b:3e:ca:13:8e:1e:f2: 70:aa:c4:d1:c5:d0:1c:d3:c2:21:ec:0b:53:aa:16:87:68:1e: fe:e9:6b:16:4a:e8:cd:5f:20:93:d8:5a:4c:7e:65:10:e4:20: 1c:b6:63:81:5f:3b:9a:95:e0:5f:29:19:ce:e9:df:82:f0:fe: 38:2c:31:9a:73:c4:2a:56:16:7d:f5:31:8e:ca:ce:39:ff:26: ea:67:b6:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EX3LG2/cFnNImXZreMYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MGYyMWMzZGM5Mzc1N2ZjMDMyODJhODM1NjAwZDY1OWY5 NjFlOGUwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzIxNzA5ZGI1YTdhMGE3ZDk1NGMzYjBlMmM4OWExNGIzYjBkMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nqP2cp+EItzO0KcY2uXkr7z5TJH GkaEfMCctt9CVRxAAaetBiNRJ7Hlz9dy4iCLB0G43lvUTp5nEacoHwG+X2HfdJ/F 8LSda0HXEJLgZVafLBmCQLur0rKUNHV7emnftx7l76Ay5/O0QfD065n7CiUzjYno Mo8CH/elAnxKED20WFlSq3YO6qIqytTI6RksNe8qzGuNLxNytG4kOy+IkXL0Ar25 la5Yfvc71RB8SJOCVKjDjrI4Ti8ZyCwwnBZQu+ZfLxpznM9N277nz1sb7v06OEzH oCifLCAZUnXRR8vOKuq1pREVq3nTUMdVOHGw1F6nwPGEt9B90dTqVzjGTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCMhcJ21p6Cn2VTDsOLImhSzsNHTMB8GA1UdIwQY MBaAFKUPIcPck3V/wDKCqDVgDWWflh6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEt YjA4NDNlYzM4ODIzLzEvSXlGd25iV25vS2ZaVk1PdzRzaWFGTE93MGRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lYTFkZjctODA4YS00N2MzLWFlNTEtYjA4NDNlYzM4ODIz LzEvcFE4aHc5eVRkWF9BTW9Lb05XQU5aWi1XSG80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW89AAwQA W9D3MA0GCSqGSIb3DQEBCwUAA4IBAQCLcRnwWSbpNLYbJWJ7vRsS5QT9U9M/Y63e xUAjmKR/dB5/BSUYoCOpoeAG7If9R/U1Jn34EkBwnO4mEk4hPpt8ZQO8yrye5wFV e7bTM7Iqlr3OgNpGdM4PSBuIRIOGN8eMAToREORCsm8S1VgsLFzvjEiETH69qwCO 76nNC+alWHiaehd+IKAPQFvxZdVDq1KQV75YlFOw+zeBlJCE0+PPM8/jjte+m4Wl ql18Ois+yhOOHvJwqsTRxdAc08Ih7AtTqhaHaB7+6WsWSujNXyCT2FpMfmUQ5CAc tmOBXzualeBfKRnO6d+C8P44LDGac8QqVhZ99TGOys45/ybqZ7bu -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:27 2026 by rpki-client