This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa File: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (raw, json) Hash identifier: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE= Subject key identifier: 21:44:0B:E1:A9:9F:40:EF:5D:FB:F9:A0:2E:D6:7B:0D:01:47:E6:56 Certificate issuer: /CN=edb04a943332768017266f4e5f56c006d98ebbb4 Certificate serial: 019B7D5CF34A233A639D885D52ACFC7F3AA4 Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202276 IP address blocks: 185.251.8.0/23 maxlen: 23 185.251.10.0/23 maxlen: 23 2a03:b8c0::/48 maxlen: 48 2a03:b8c0:1::/48 maxlen: 48 2a03:b8c0:2::/48 maxlen: 48 2a03:b8c0:3::/48 maxlen: 48 2a03:b8c0:4::/48 maxlen: 48 2a03:b8c0:5::/48 maxlen: 48 2a03:b8c0:6::/48 maxlen: 48 2a03:b8c0:7::/48 maxlen: 48 2a03:b8c0:8::/48 maxlen: 48 2a03:b8c0:9::/48 maxlen: 48 2a03:b8c0:10::/48 maxlen: 48 2a03:b8c0:12::/48 maxlen: 48 2a03:b8c0:13::/48 maxlen: 48 2a03:b8c0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f3:4a:23:3a:63:9d:88:5d:52:ac:fc:7f:3a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21440be1a99f40ef5dfbf9a02ed67b0d0147e656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a2:fa:87:8a:3c:cd:9f:7f:8c:35:d7:bd:f2: 08:c5:56:76:27:cf:1c:d1:69:30:d3:44:5a:0d:6b: 4d:58:af:0e:be:f4:79:62:63:77:c7:49:45:69:0b: 44:b0:4b:c5:d4:69:25:9c:97:e4:f5:7d:dc:d2:fb: c2:83:63:4e:72:b5:60:e5:0a:71:cc:0e:59:e1:ca: 62:b6:a9:5a:9a:8c:4f:be:80:f6:bb:7d:37:9a:1b: a7:75:22:b2:b7:e6:b1:d4:45:a3:5e:45:0e:1a:ea: 4d:21:2d:da:d3:20:8f:6c:1d:5c:ee:f9:b1:52:b3: b0:54:b7:3e:bc:ac:25:f0:4a:42:d2:69:32:4f:34: f4:56:82:2d:0e:be:20:a5:c7:3d:2c:83:f5:62:73: 51:04:15:d6:f0:4d:40:02:8e:e7:e9:5c:c0:8f:ce: a5:b1:6d:0a:73:e7:62:e9:4f:d7:43:ab:b7:1c:03: 79:e2:85:cb:56:1b:8b:79:61:dd:0d:9e:dc:fb:f6: 83:e1:74:6d:8e:73:ef:18:69:96:39:bf:84:12:67: 3d:85:2e:bf:d9:39:63:2b:48:3f:a3:93:4c:e8:d3: 3c:1d:fd:9c:64:58:06:11:47:99:9d:8a:15:3f:e8: 1d:af:ba:ec:88:64:b6:ee:f9:56:20:99:4f:d7:c5: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:44:0B:E1:A9:9F:40:EF:5D:FB:F9:A0:2E:D6:7B:0D:01:47:E6:56 X509v3 Authority Key Identifier: keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.8.0/22 IPv6: 2a03:b8c0::-2a03:b8c0:9:ffff:ffff:ffff:ffff:ffff 2a03:b8c0:10::/48 2a03:b8c0:12::-2a03:b8c0:14:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 35:bb:d8:dd:6e:8b:a8:69:ab:34:cc:89:01:58:6c:92:d6:3d: a3:eb:63:6e:75:a9:d6:7c:a1:09:fc:83:7d:40:1a:da:f7:07: c4:ab:ad:41:7f:6f:1d:5f:ec:e2:4d:81:78:ca:09:34:6d:a1: a1:6d:c4:78:31:f9:0a:45:75:6f:38:76:db:d7:83:17:f0:c9: b6:15:b9:dc:46:02:51:da:b2:63:1c:85:cb:96:9b:c7:bb:9e: d9:f5:29:57:f0:db:13:66:de:3e:cc:f7:a5:a2:84:09:c2:5a: be:80:2a:96:b9:59:a4:29:48:6a:56:6b:fe:52:85:d6:df:e2: 2d:af:79:c1:0b:77:5f:49:bd:02:ef:10:f1:9f:87:70:62:23: 66:c1:b0:95:3c:6d:0b:b7:3e:30:aa:3d:2f:f4:92:69:bb:c1: 07:f4:b8:56:1b:bd:b9:33:fd:78:72:fa:b6:67:65:f1:ae:58: 8e:dc:fc:8f:ff:bf:3a:c9:8d:63:8d:ce:d1:65:05:e1:01:cd: 1a:82:79:65:3a:31:36:9d:24:a8:d1:51:87:d4:2f:ba:e8:b6: 9d:0f:df:62:70:f5:4e:50:1c:1d:e0:30:a7:70:33:02:de:90: db:54:85:52:bb:84:cb:d8:8d:35:f7:70:0a:c2:cf:02:8d:a2: e1:9f:8e:f3 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt9XPNKIzpjnYhdUqz8fzqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkYjA0YTk0MzMzMjc2ODAxNzI2NmY0ZTVmNTZjMDA2ZDk4 ZWJiYjQwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTQ0MGJlMWE5OWY0MGVmNWRmYmY5YTAyZWQ2N2IwZDAxNDdlNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqL6h4o8zZ9/jDXXvfIIxVZ2J88c 0Wkw00RaDWtNWK8OvvR5YmN3x0lFaQtEsEvF1GklnJfk9X3c0vvCg2NOcrVg5Qpx zA5Z4cpitqlamoxPvoD2u303mhundSKyt+ax1EWjXkUOGupNIS3a0yCPbB1c7vmx UrOwVLc+vKwl8EpC0mkyTzT0VoItDr4gpcc9LIP1YnNRBBXW8E1AAo7n6VzAj86l sW0Kc+di6U/XQ6u3HAN54oXLVhuLeWHdDZ7c+/aD4XRtjnPvGGmWOb+EEmc9hS6/ 2TljK0g/o5NM6NM8Hf2cZFgGEUeZnYoVP+gdr7rsiGS27vlWIJlP18VCvQIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFCFEC+Gpn0DvXfv5oC7Wew0BR+ZWMB8GA1UdIwQY MBaAFO2wSpQzMnaAFyZvTl9WwAbZjru0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2It ZTQ1ZmE2NGQ0ZDJkLzEvSVVRTDRhbWZRTzlkLV9tZ0x0WjdEUUZINWxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81MGE0YzQtOTFkMS00MzExLWI2N2ItZTQ1ZmE2NGQ0ZDJk LzEvN2JCS2xETXlkb0FYSm05T1gxYkFCdG1PdTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTAMBAIAATAGAwQCufsIMDUE AgACMC8wEAMFBioDuMADBwEqA7jAAAgDBwAqA7jAABAwEgMHASoDuMAAEgMHACoD uMAAFDANBgkqhkiG9w0BAQsFAAOCAQEANbvY3W6LqGmrNMyJAVhsktY9o+tjbnWp 1nyhCfyDfUAa2vcHxKutQX9vHV/s4k2BeMoJNG2hoW3EeDH5CkV1bzh229eDF/DJ thW53EYCUdqyYxyFy5abx7ue2fUpV/DbE2bePsz3paKECcJavoAqlrlZpClIalZr /lKF1t/iLa95wQt3X0m9Au8Q8Z+HcGIjZsGwlTxtC7c+MKo9L/SSabvBB/S4Vhu9 uTP9eHL6tmdl8a5Yjtz8j/+/OsmNY43O0WUF4QHNGoJ5ZToxNp0kqNFRh9Qvuui2 nQ/fYnD1TlAcHeAwp3AzAt6Q21SFUruEy9iNNfdwCsLPAo2i4Z+O8w== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:54 2026 by rpki-client