This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ivt2RpaHgo_irq3Ijgjtrb7RBPc.roa File: ivt2RpaHgo_irq3Ijgjtrb7RBPc.roa (raw, json) Hash identifier: Nbp6vLE+HYrfWs6fBQ0Cs9fJypygfpIHCnEWJWxlF98= Subject key identifier: 8A:FB:76:46:96:87:82:8F:E2:AE:AD:C8:8E:08:ED:AD:BE:D1:04:F7 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019BE09EEE390E8FAD40942F0FC31B515D09 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ivt2RpaHgo_irq3Ijgjtrb7RBPc.roa Signing time: Wed 21 Jan 2026 12:54:30 +0000 ROA not before: Wed 21 Jan 2026 12:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 87.101.0.0/24 maxlen: 24 87.101.1.0/24 maxlen: 24 87.101.2.0/24 maxlen: 24 87.101.3.0/24 maxlen: 24 87.101.4.0/24 maxlen: 24 87.101.5.0/24 maxlen: 24 87.101.6.0/24 maxlen: 24 87.101.7.0/24 maxlen: 24 185.227.72.0/24 maxlen: 24 185.227.73.0/24 maxlen: 24 185.227.74.0/24 maxlen: 24 185.227.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:9e:ee:39:0e:8f:ad:40:94:2f:0f:c3:1b:51:5d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 21 12:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8afb76469687828fe2aeadc88e08edadbed104f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:f1:b9:59:0b:fd:bc:39:d4:07:fa:eb:f3: 14:75:5d:52:9b:c1:88:07:95:61:64:c1:d0:e6:8a: 9d:82:0a:58:91:2f:e1:af:d5:e2:e7:5e:68:7f:19: 2f:c8:75:d8:35:e2:d1:fd:44:29:48:b9:5e:e4:ff: 21:c7:e1:12:57:72:24:78:14:c0:e7:24:90:d5:72: f5:75:50:9d:2c:5c:46:95:36:87:32:e6:cb:e1:69: 05:8d:e8:10:26:a3:db:a2:a0:c8:c0:f4:74:a7:59: 70:b4:9e:1a:fb:d6:62:31:19:6f:c0:d9:01:62:b6: 60:4e:91:4d:56:6c:a2:04:95:78:b1:85:fa:56:e9: 90:5c:e8:68:9b:de:14:cb:ac:bd:0b:6a:9e:3d:39: be:48:67:34:1b:a9:1b:a9:0c:83:63:9a:fa:49:e9: 75:c5:88:ef:01:22:47:c1:8a:92:87:ae:97:55:2d: 7b:91:90:6e:19:a3:36:ba:17:01:3e:19:bd:60:8c: 33:46:2e:06:62:fa:1c:36:7d:96:11:92:85:0c:8f: 37:25:11:a5:6e:5e:d6:1b:26:71:bc:a5:a7:6e:4f: 70:12:e8:66:69:f0:58:d7:19:a0:f0:a7:c2:69:c2: 66:8a:8b:96:66:51:2b:2a:0a:26:ce:89:bb:a2:3e: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:FB:76:46:96:87:82:8F:E2:AE:AD:C8:8E:08:ED:AD:BE:D1:04:F7 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/ivt2RpaHgo_irq3Ijgjtrb7RBPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.101.0.0/21 185.227.72.0/22 Signature Algorithm: sha256WithRSAEncryption 13:12:e6:89:25:c9:92:5b:be:9a:f7:0d:e5:00:2e:56:0b:ef: f2:44:fc:5c:40:db:9f:9a:77:60:cf:e9:83:ab:31:42:98:58: ce:a8:69:a3:b2:4b:a1:35:45:5d:8a:30:18:fd:75:14:be:64: 44:68:45:fa:5a:a9:85:28:40:9f:b1:a8:24:00:3b:70:89:58: 7e:36:cd:4e:d7:dd:01:e7:fb:d5:f0:78:95:90:f2:b4:07:f7: 6c:ce:6f:51:6d:e8:1e:62:07:39:5a:8b:27:e1:e0:f5:47:af: 48:8f:c1:f7:70:05:09:e1:36:f6:0c:ac:49:d4:e1:82:2e:7e: 8a:0c:51:96:53:c9:60:f8:43:12:4d:08:3d:bf:8b:18:58:8f: 9e:1a:8e:56:47:31:0f:74:13:a0:9c:5a:0c:42:81:78:f5:d9: 69:d9:58:bb:99:cb:fa:90:d7:7a:79:08:63:93:1d:5d:f0:95: 67:3a:ae:59:47:c1:1c:31:eb:e6:ea:01:de:46:a8:d2:45:76: 35:4e:b2:cc:0a:d2:1a:23:b9:d9:4c:95:45:a8:37:fc:b2:1a: 68:ca:1c:23:47:93:81:68:1d:5a:43:0a:fb:80:1e:c7:ad:f9: 32:b0:4c:fb:ec:0a:ce:83:72:51:60:02:1d:a9:71:f6:fc:53: 76:5b:96:7d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvgnu45Do+tQJQvD8MbUV0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTIxMTI1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWZiNzY0Njk2ODc4MjhmZTJhZWFkYzg4ZTA4ZWRhZGJlZDEwNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GPxuVkL/bw51Af66/MUdV1Sm8GI B5VhZMHQ5oqdggpYkS/hr9Xi515ofxkvyHXYNeLR/UQpSLle5P8hx+ESV3IkeBTA 5ySQ1XL1dVCdLFxGlTaHMubL4WkFjegQJqPboqDIwPR0p1lwtJ4a+9ZiMRlvwNkB YrZgTpFNVmyiBJV4sYX6VumQXOhom94Uy6y9C2qePTm+SGc0G6kbqQyDY5r6Sel1 xYjvASJHwYqSh66XVS17kZBuGaM2uhcBPhm9YIwzRi4GYvocNn2WEZKFDI83JRGl bl7WGyZxvKWnbk9wEuhmafBY1xmg8KfCacJmiouWZlErKgomzom7oj5WdwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIr7dkaWh4KP4q6tyI4I7a2+0QT3MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvaXZ0MlJwYUhnb19pcnEzSWpnanRyYjdSQlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV2UAAwQC ueNIMA0GCSqGSIb3DQEBCwUAA4IBAQATEuaJJcmSW76a9w3lAC5WC+/yRPxcQNuf mndgz+mDqzFCmFjOqGmjskuhNUVdijAY/XUUvmREaEX6WqmFKECfsagkADtwiVh+ Ns1O190B5/vV8HiVkPK0B/dszm9RbegeYgc5Wosn4eD1R69Ij8H3cAUJ4Tb2DKxJ 1OGCLn6KDFGWU8lg+EMSTQg9v4sYWI+eGo5WRzEPdBOgnFoMQoF49dlp2Vi7mcv6 kNd6eQhjkx1d8JVnOq5ZR8EcMevm6gHeRqjSRXY1TrLMCtIaI7nZTJVFqDf8shpo yhwjR5OBaB1aQwr7gB7HrfkysEz77ArOg3JRYAIdqXH2/FN2W5Z9 -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:38 2026 by rpki-client