This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/iS9uo2CVpXEBFYokkCE8nbhbEMM.roa File: iS9uo2CVpXEBFYokkCE8nbhbEMM.roa (raw, json) Hash identifier: QeKvl9dlg12hw8xWR+4vV6LFMdl1MpdXqQH0ouyz7Vk= Subject key identifier: 89:2F:6E:A3:60:95:A5:71:01:15:8A:24:90:21:3C:9D:B8:5B:10:C3 Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a Certificate serial: 019B77C6DA1363A9FBFA7930B30AF25ECDE4 Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/iS9uo2CVpXEBFYokkCE8nbhbEMM.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213541 IP address blocks: 85.28.32.0/20 maxlen: 24 85.28.32.0/24 maxlen: 24 85.28.33.0/24 maxlen: 24 85.28.34.0/24 maxlen: 24 85.28.43.0/24 maxlen: 24 85.28.44.0/23 maxlen: 23 85.28.46.0/24 maxlen: 24 85.28.48.0/20 maxlen: 24 85.28.57.0/24 maxlen: 24 85.28.59.0/24 maxlen: 24 85.28.60.0/24 maxlen: 24 85.28.62.0/24 maxlen: 24 109.238.192.0/20 maxlen: 24 109.238.192.0/22 maxlen: 24 109.238.200.0/24 maxlen: 24 109.238.201.0/24 maxlen: 24 109.238.203.0/24 maxlen: 24 109.238.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:da:13:63:a9:fb:fa:79:30:b3:0a:f2:5e:cd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=892f6ea36095a57101158a2490213c9db85b10c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:ed:05:90:aa:8e:7a:37:fb:94:2a:d9:3f: 8f:2b:dc:75:dc:fc:0f:ce:30:77:db:98:95:f8:0c: cc:65:c0:45:cf:71:bb:5b:3f:f0:d5:6f:b6:fc:25: 54:a7:71:bc:b8:32:49:f5:9b:00:e8:7c:5a:2a:f5: ca:fe:85:8f:6f:ca:7d:2a:46:e8:24:35:e3:0f:7e: bd:1e:0c:0f:aa:f5:93:da:82:c3:3e:6f:d7:d0:37: 40:cd:1b:0c:17:c2:1d:3f:3c:a2:1a:a9:82:c1:b4: 3f:6b:8f:63:90:2d:d4:f8:10:5c:3b:de:d1:2e:03: a2:00:52:d3:91:ee:10:dd:24:83:76:89:3e:d2:68: cb:6d:08:be:31:fa:50:e6:f1:65:5c:71:ba:e7:13: 9a:84:54:06:32:d6:43:4a:b7:f5:ad:33:65:f2:6f: 93:03:51:5f:ad:a3:47:40:6c:97:d3:8c:38:dc:0a: 13:e0:a5:01:b5:4a:02:91:ab:6a:a9:b9:a2:ab:c1: 54:41:35:69:02:7a:46:9b:9e:04:30:a6:d7:90:f4: 51:90:f7:2b:8c:6c:37:71:95:8b:d0:e9:d6:22:92: 32:69:10:39:06:48:d3:b1:57:bc:0f:3a:9e:f5:82: a7:8c:3f:81:ed:84:3c:38:b2:3d:6d:4a:40:62:b8: 78:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2F:6E:A3:60:95:A5:71:01:15:8A:24:90:21:3C:9D:B8:5B:10:C3 X509v3 Authority Key Identifier: keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/iS9uo2CVpXEBFYokkCE8nbhbEMM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.28.32.0/19 109.238.192.0/20 Signature Algorithm: sha256WithRSAEncryption 22:32:9c:40:a6:e6:7b:45:cf:9d:cd:18:db:01:fc:73:00:e3: d9:e9:ea:dc:17:1d:e7:c6:6b:81:6f:73:a6:43:0f:76:db:2d: 69:e1:b6:ed:d8:3a:cc:af:fa:e3:df:3e:0a:c4:d1:9d:ac:ed: 96:74:7c:d3:80:3f:b9:bb:a6:61:6d:f5:46:fa:1b:67:5d:ee: d7:81:27:63:b6:0b:2d:d6:67:66:9f:17:7b:46:e6:72:03:a1: 1f:c0:0a:e4:64:42:d6:20:c7:25:cd:95:f6:bb:55:7f:27:51: 9b:1e:86:aa:d7:97:78:26:a6:8e:d9:4b:33:20:bb:6e:b1:a6: df:b6:75:df:ed:2a:7e:a3:ab:ce:b1:82:8d:a2:b7:d6:56:d9: 0c:9f:aa:3e:1c:46:46:91:31:51:bb:4d:38:0a:9b:f7:aa:a8: 5c:c1:0e:b7:c1:57:61:03:e8:0e:af:80:54:89:2e:8d:4c:82: 85:89:7f:7a:92:4b:7a:39:64:b8:de:e5:e8:62:b3:72:3a:3e: d2:ef:ea:a3:86:dd:0b:ab:78:c2:ce:9a:fb:f4:b9:70:61:45: 87:82:52:64:3b:bb:a3:47:8f:b9:7f:70:d6:b0:26:fe:79:00: 3f:cc:0a:46:0e:08:c0:17:ba:71:86:39:61:46:84:b3:72:90: 45:e8:d6:a1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xtoTY6n7+nkwswryXs3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2 NTg4MWEwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTJmNmVhMzYwOTVhNTcxMDExNThhMjQ5MDIxM2M5ZGI4NWIxMGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2btBZCqjno3+5Qq2T+PK9x13PwP zjB325iV+AzMZcBFz3G7Wz/w1W+2/CVUp3G8uDJJ9ZsA6HxaKvXK/oWPb8p9Kkbo JDXjD369HgwPqvWT2oLDPm/X0DdAzRsMF8IdPzyiGqmCwbQ/a49jkC3U+BBcO97R LgOiAFLTke4Q3SSDdok+0mjLbQi+MfpQ5vFlXHG65xOahFQGMtZDSrf1rTNl8m+T A1FfraNHQGyX04w43AoT4KUBtUoCkatqqbmiq8FUQTVpAnpGm54EMKbXkPRRkPcr jGw3cZWL0OnWIpIyaRA5BkjTsVe8Dzqe9YKnjD+B7YQ8OLI9bUpAYrh4kwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIkvbqNglaVxARWKJJAhPJ24WxDDMB8GA1UdIwQY MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct ZmViYjY0YjVlMTY0LzEvaVM5dW8yQ1ZwWEVCRllva2tDRThuYmhiRU1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0 LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFVRwgAwQE be7AMA0GCSqGSIb3DQEBCwUAA4IBAQAiMpxApuZ7Rc+dzRjbAfxzAOPZ6ercFx3n xmuBb3OmQw922y1p4bbt2DrMr/rj3z4KxNGdrO2WdHzTgD+5u6ZhbfVG+htnXe7X gSdjtgst1mdmnxd7RuZyA6EfwArkZELWIMclzZX2u1V/J1GbHoaq15d4JqaO2Usz ILtusabftnXf7Sp+o6vOsYKNorfWVtkMn6o+HEZGkTFRu004Cpv3qqhcwQ63wVdh A+gOr4BUiS6NTIKFiX96kkt6OWS43uXoYrNyOj7S7+qjht0Lq3jCzpr79LlwYUWH glJkO7ujR4+5f3DWsCb+eQA/zApGDgjAF7pxhjlhRoSzcpBF6Nah -----END CERTIFICATE-----Generated at Sun Jan 25 11:42:55 2026 by rpki-client