This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa File: IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa (raw, json) Hash identifier: 9Z9gCW1kabV4H10WypJ+CcaUnOFek5gLKpjj5o/RjC0= Subject key identifier: 22:35:50:5B:06:6F:F4:42:60:FF:38:4B:D9:D6:2B:B3:70:E5:91:1E Certificate issuer: /CN=19f1a9dd126f37237ce200fb8616ff937bca966c Certificate serial: 019B7C11C19A89D5737AABC4DB3EA4C0F737 Authority key identifier: 19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa Signing time: Fri 02 Jan 2026 00:18:17 +0000 ROA not before: Fri 02 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 85.95.237.0/24 maxlen: 24 85.95.238.0/24 maxlen: 24 85.95.239.0/24 maxlen: 24 85.95.240.0/24 maxlen: 24 85.95.241.0/24 maxlen: 24 85.95.242.0/24 maxlen: 24 85.95.243.0/24 maxlen: 24 85.95.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.mft rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c1:9a:89:d5:73:7a:ab:c4:db:3e:a4:c0:f7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19f1a9dd126f37237ce200fb8616ff937bca966c Validity Not Before: Jan 2 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2235505b066ff44260ff384bd9d62bb370e5911e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:52:c5:82:53:f1:07:37:cf:78:28:2f:b6: 7e:39:e7:7d:d8:6d:78:d4:12:14:6b:8d:65:fa:9c: 23:fc:18:b4:84:34:39:a0:59:37:ea:c8:e2:36:c3: ec:88:79:82:a6:2e:72:ae:91:f7:69:27:03:f8:64: 47:00:08:10:a5:ac:73:e0:cb:6b:1b:c6:4a:8a:18: 67:67:af:59:19:8f:99:aa:9d:9e:f9:bc:fa:bd:9d: 58:39:26:bc:7d:11:17:97:b3:31:68:49:ef:ff:10: 71:e0:0f:73:aa:48:3c:04:9f:db:66:88:08:a3:d3: f5:0b:3d:55:57:1b:df:5a:94:18:9d:e3:0b:a8:d3: a2:bd:72:41:70:1c:70:96:a6:1b:7a:a6:95:a2:f1: e8:87:d8:af:10:29:02:8c:52:21:d0:89:86:fe:9b: b8:db:16:18:fc:05:d4:8b:2b:1f:77:44:ac:c1:0e: a8:db:a9:2d:3a:df:e5:bf:0c:59:74:b2:bf:73:a4: 41:95:02:bd:a8:b1:54:3a:f5:21:a9:cf:ca:60:a0: d8:d7:d0:fa:0b:77:6c:44:9a:09:37:8c:c5:e3:17: 08:8c:43:cb:76:ec:ef:9b:7b:12:86:a9:df:9a:b6: 32:43:46:0a:4d:21:13:5b:c9:85:d7:3e:f4:35:3f: 69:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:50:5B:06:6F:F4:42:60:FF:38:4B:D9:D6:2B:B3:70:E5:91:1E X509v3 Authority Key Identifier: keyid:19:F1:A9:DD:12:6F:37:23:7C:E2:00:FB:86:16:FF:93:7B:CA:96:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfGp3RJvNyN84gD7hhb_k3vKlmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/IjVQWwZv9EJg_zhL2dYrs3DlkR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a63d-1730-4d88-ab38-3fd30988f677/1/GfGp3RJvNyN84gD7hhb_k3vKlmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.95.237.0-85.95.244.255 Signature Algorithm: sha256WithRSAEncryption 5f:74:69:e9:3e:3c:fc:64:1a:e1:9f:0f:7b:c6:3c:ef:ca:8c: fd:bc:0d:56:6d:5f:8f:e3:b2:00:aa:2e:6f:7c:4d:49:14:06: 26:96:40:e5:d1:4e:5c:de:14:d9:23:8c:dc:1d:6a:5a:98:22: 4e:41:15:b4:83:6a:5a:49:c9:a4:fd:57:cd:17:41:a3:c2:8f: 31:b5:62:47:dc:46:cf:8d:18:c4:2d:72:21:7c:39:a6:e2:2d: cc:eb:02:a3:cc:f9:59:ca:37:7e:2c:f4:d4:18:f9:e0:06:94: 10:e7:e2:bf:37:bf:ea:79:4f:2e:e9:29:03:20:54:87:33:f4: 14:82:6e:55:57:04:61:ec:af:c9:88:23:47:73:07:87:9a:a1: 70:79:c1:0a:34:d5:35:49:d0:80:82:4e:30:dd:b7:82:71:e4: c8:d7:c5:38:5d:94:72:03:61:65:88:27:42:ee:00:fc:5c:f0: 99:58:84:bc:7c:91:62:e1:4a:eb:e9:25:52:ef:9b:2e:a4:50: 86:a9:a8:95:22:99:b8:2a:90:a4:38:81:ca:bb:cb:88:80:f4: 88:c1:ec:80:66:19:47:b5:24:c0:e1:82:5f:b7:94:22:8f:6b: 77:21:cc:35:de:77:f2:9d:63:3e:43:ef:7b:4e:97:bc:d0:6b: 6a:a0:c9:f7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EcGaidVzeqvE2z6kwPc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZjFhOWRkMTI2ZjM3MjM3Y2UyMDBmYjg2MTZmZjkzN2Jj YTk2NmMwHhcNMjYwMTAyMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjM1NTA1YjA2NmZmNDQyNjBmZjM4NGJkOWQ2MmJiMzcwZTU5MTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2dSxYJT8Qc3z3goL7Z+Oed92G14 1BIUa41l+pwj/Bi0hDQ5oFk36sjiNsPsiHmCpi5yrpH3aScD+GRHAAgQpaxz4Mtr G8ZKihhnZ69ZGY+Zqp2e+bz6vZ1YOSa8fREXl7MxaEnv/xBx4A9zqkg8BJ/bZogI o9P1Cz1VVxvfWpQYneMLqNOivXJBcBxwlqYbeqaVovHoh9ivECkCjFIh0ImG/pu4 2xYY/AXUiysfd0SswQ6o26ktOt/lvwxZdLK/c6RBlQK9qLFUOvUhqc/KYKDY19D6 C3dsRJoJN4zF4xcIjEPLduzvm3sShqnfmrYyQ0YKTSETW8mF1z70NT9p3QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCI1UFsGb/RCYP84S9nWK7Nw5ZEeMB8GA1UdIwQY MBaAFBnxqd0SbzcjfOIA+4YW/5N7ypZsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgt M2ZkMzA5ODhmNjc3LzEvSWpWUVd3WnY5RUpnX3poTDJkWXJzM0Rsa1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mOGE2M2QtMTczMC00ZDg4LWFiMzgtM2ZkMzA5ODhmNjc3 LzEvR2ZHcDNSSnZOeU44NGdEN2hoYl9rM3ZLbG13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABVX+0D BABVX/QwDQYJKoZIhvcNAQELBQADggEBAF90aek+PPxkGuGfD3vGPO/KjP28DVZt X4/jsgCqLm98TUkUBiaWQOXRTlzeFNkjjNwdalqYIk5BFbSDalpJyaT9V80XQaPC jzG1YkfcRs+NGMQtciF8OabiLczrAqPM+VnKN34s9NQY+eAGlBDn4r83v+p5Ty7p KQMgVIcz9BSCblVXBGHsr8mII0dzB4eaoXB5wQo01TVJ0ICCTjDdt4Jx5MjXxThd lHIDYWWIJ0LuAPxc8JlYhLx8kWLhSuvpJVLvmy6kUIapqJUimbgqkKQ4gcq7y4iA 9IjB7IBmGUe1JMDhgl+3lCKPa3chzDXed/KdYz5D73tOl7zQa2qgyfc= -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:13 2026 by rpki-client