This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ijK8JvtMw7E_jx9Rd5D7P3_LQdw.roa File: ijK8JvtMw7E_jx9Rd5D7P3_LQdw.roa (raw, json) Hash identifier: 0mOLIetdSD7zyuLDan0HXxc4RpqzUwC8wuNmFvXMXuQ= Subject key identifier: 8A:32:BC:26:FB:4C:C3:B1:3F:8F:1F:51:77:90:FB:3F:7F:CB:41:DC Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F14FC8C0630F2FAB72043F236E7529B Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ijK8JvtMw7E_jx9Rd5D7P3_LQdw.roa Signing time: Fri 02 Jan 2026 14:20:40 +0000 ROA not before: Fri 02 Jan 2026 14:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51235 IP address blocks: 87.107.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:fc:8c:06:30:f2:fa:b7:20:43:f2:36:e7:52:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a32bc26fb4cc3b13f8f1f517790fb3f7fcb41dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:63:ac:b3:5a:47:f8:bb:31:ed:75:49:b4:a3: 0a:7b:b0:fb:df:9a:b5:33:28:db:ee:c2:87:ab:b8: 26:c4:81:86:e4:2d:9b:ad:37:06:1e:fc:d3:46:2b: 38:24:0b:4e:fe:fb:fc:00:af:78:a5:61:db:f8:c9: 4a:76:7e:20:5b:78:84:c5:f2:f4:9c:ad:34:13:2c: 62:37:a4:48:cf:85:eb:a6:a7:e9:81:a6:f2:da:2c: 42:b4:9a:f8:05:e5:6b:6a:31:68:3a:69:17:3c:52: 84:08:7e:f3:aa:ab:ca:6f:e3:e5:f4:8c:75:03:44: 42:15:6a:e8:7f:bd:ab:a4:ef:e9:d1:44:e3:0f:3a: 16:87:6f:7d:05:96:52:0c:e0:7c:d3:7e:20:d2:53: 00:e2:03:76:f4:db:6a:a5:15:67:bf:95:6c:57:f2: 63:42:b0:3d:b7:8d:39:65:85:dc:c9:8a:77:0f:cc: 13:be:ce:d9:58:9f:58:36:36:59:52:6e:69:b3:e1: 7c:92:01:bf:99:8d:0b:a6:1c:13:8f:37:b8:88:2c: 8e:83:e6:00:ae:8b:85:a3:b1:ef:0b:d9:c1:aa:73: 92:24:a8:35:c2:0e:36:c2:dc:04:92:ec:11:eb:11: 4c:93:7c:d6:e7:57:57:c2:4c:ab:d1:27:86:9f:d0: 25:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:32:BC:26:FB:4C:C3:B1:3F:8F:1F:51:77:90:FB:3F:7F:CB:41:DC X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/ijK8JvtMw7E_jx9Rd5D7P3_LQdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.107.139.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ab:c5:ba:3c:d8:4c:57:3d:58:2a:02:eb:4f:1e:d2:63:73: 3d:67:ab:ea:30:51:a7:63:0b:eb:4e:32:2a:bd:d0:fd:c2:5a: 6f:a8:be:0a:12:5a:40:05:26:83:43:d7:00:f8:ef:e3:57:45: d6:38:89:02:56:5d:42:81:c1:40:cc:aa:72:2b:9f:84:6b:bd: e8:7a:43:27:64:63:50:68:39:84:d4:a3:55:1d:42:60:03:03: ef:8c:c5:4b:a2:a8:b6:2d:ea:a5:70:92:3c:bd:f3:2a:23:2b: 1e:b9:9c:9a:3f:67:6b:c5:eb:d0:8d:7f:98:72:c4:03:7f:e7: 0e:79:cd:21:1c:27:47:c2:ec:c4:b5:3d:0a:81:fd:70:58:80: a4:41:4f:12:a9:1a:c8:56:f8:bb:96:0b:45:19:c5:09:05:a3: a2:0a:cd:23:d6:c7:88:1a:32:d7:f3:26:f4:6a:8b:75:63:99: dc:98:fc:4d:d1:16:40:10:0e:f4:03:4b:14:cc:59:6e:84:aa: f5:47:28:23:3f:9f:35:90:ea:12:75:2f:ab:68:07:f4:66:14: 4f:89:14:e9:7e:26:cd:3d:8b:11:83:15:7b:6c:a9:59:2a:70: 8b:81:da:ff:3a:d0:ca:d4:ad:2a:4d:21:7f:63:02:b6:01:8a: f7:31:49:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FPyMBjDy+rcgQ/I251KbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTMyYmMyNmZiNGNjM2IxM2Y4ZjFmNTE3NzkwZmIzZjdmY2I0MWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGOss1pH+Lsx7XVJtKMKe7D735q1 Myjb7sKHq7gmxIGG5C2brTcGHvzTRis4JAtO/vv8AK94pWHb+MlKdn4gW3iExfL0 nK00EyxiN6RIz4Xrpqfpgaby2ixCtJr4BeVrajFoOmkXPFKECH7zqqvKb+Pl9Ix1 A0RCFWrof72rpO/p0UTjDzoWh299BZZSDOB8034g0lMA4gN29NtqpRVnv5VsV/Jj QrA9t405ZYXcyYp3D8wTvs7ZWJ9YNjZZUm5ps+F8kgG/mY0LphwTjze4iCyOg+YA rouFo7HvC9nBqnOSJKg1wg42wtwEkuwR6xFMk3zW51dXwkyr0SeGn9AlOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIoyvCb7TMOxP48fUXeQ+z9/y0HcMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvaWpLOEp2dE13N0Vfang5UmQ1RDdQM19MUWR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV2uLMA0G CSqGSIb3DQEBCwUAA4IBAQAHq8W6PNhMVz1YKgLrTx7SY3M9Z6vqMFGnYwvrTjIq vdD9wlpvqL4KElpABSaDQ9cA+O/jV0XWOIkCVl1CgcFAzKpyK5+Ea73oekMnZGNQ aDmE1KNVHUJgAwPvjMVLoqi2LeqlcJI8vfMqIyseuZyaP2drxevQjX+YcsQDf+cO ec0hHCdHwuzEtT0Kgf1wWICkQU8SqRrIVvi7lgtFGcUJBaOiCs0j1seIGjLX8yb0 aot1Y5ncmPxN0RZAEA70A0sUzFluhKr1RygjP581kOoSdS+raAf0ZhRPiRTpfibN PYsRgxV7bKlZKnCLgdr/OtDK1K0qTSF/YwK2AYr3MUl/ -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:30 2026 by rpki-client