This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/iLJXM2riD2xLyWPgVHhFPJznv3A.roa File: iLJXM2riD2xLyWPgVHhFPJznv3A.roa (raw, json) Hash identifier: htQVMbTQl+9gmW8aaJPtyq2ErZGw3e/ACgLnMofyCY8= Subject key identifier: 88:B2:57:33:6A:E2:0F:6C:4B:C9:63:E0:54:78:45:3C:9C:E7:BF:70 Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6 Certificate serial: 019B7F155AFADAE825B19285E801C7AB49FC Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/iLJXM2riD2xLyWPgVHhFPJznv3A.roa Signing time: Fri 02 Jan 2026 14:21:04 +0000 ROA not before: Fri 02 Jan 2026 14:21:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209088 IP address blocks: 5.181.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:5a:fa:da:e8:25:b1:92:85:e8:01:c7:ab:49:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6 Validity Not Before: Jan 2 14:21:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b257336ae20f6c4bc963e05478453c9ce7bf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:68:2d:a9:36:7f:55:94:ef:d8:22:e9:81:0a: 50:41:8f:2f:11:61:c0:71:1e:f5:32:59:07:2c:08: 5c:c1:2e:25:7c:41:fa:62:4f:3a:bc:53:36:b2:0b: 2d:62:ec:ea:53:74:7d:0a:03:dc:61:b2:47:2d:6c: 64:83:e9:73:9e:87:26:1d:ae:fc:33:56:61:35:6f: 6a:e3:3a:eb:4d:10:9b:c1:4e:2b:da:03:cb:9a:1e: 41:2e:30:59:9b:6a:69:14:28:2d:c4:13:17:fb:a2: 57:56:4e:80:50:7b:fb:75:81:62:bc:f1:85:72:ec: d0:05:8d:ef:cf:f6:ca:80:44:a0:a8:8f:76:70:54: 03:24:6d:7c:c3:a8:b8:21:2b:fd:9c:24:37:f3:22: b9:21:d8:9c:44:65:6d:41:e1:f3:ef:09:70:3f:bf: 25:eb:53:49:ac:70:0f:b2:ff:f0:6f:6e:60:f6:05: 7e:60:75:19:d4:31:70:0b:65:5e:f8:92:d3:b8:6d: 8d:ab:13:d8:85:ea:40:bb:7a:ef:25:be:cd:d9:36: 7c:cb:9c:d0:23:ee:1b:11:ed:78:64:40:0e:8e:6b: de:70:86:39:5a:b0:45:85:fa:8b:66:61:1f:2c:98: ec:c8:17:38:ed:d3:3e:2a:70:2e:d2:ef:b8:0a:cc: 27:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B2:57:33:6A:E2:0F:6C:4B:C9:63:E0:54:78:45:3C:9C:E7:BF:70 X509v3 Authority Key Identifier: keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/iLJXM2riD2xLyWPgVHhFPJznv3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.212.0/22 Signature Algorithm: sha256WithRSAEncryption 70:3d:18:81:6e:30:e4:09:a3:97:6d:c9:cb:67:8d:83:d6:21: fe:bb:51:35:6f:4f:6a:d5:32:ae:cf:65:3d:1e:16:25:c5:e5: ae:fe:e3:4c:71:07:f4:6b:2f:22:b0:b4:f9:3c:10:97:2b:2f: 94:23:10:54:0e:4a:5a:2b:96:fa:14:5c:9f:9c:8b:e6:24:67: 24:2f:e7:67:5e:dd:bc:14:98:88:a9:97:cf:7e:8b:8e:36:6d: 5c:69:32:c9:76:2b:78:a0:d3:72:da:e9:a4:e5:a6:1d:1e:e0: f7:fa:07:ee:2d:27:cb:c5:48:22:f0:4f:f9:8b:a1:02:e6:86: 23:5b:a8:26:d7:0f:a2:3b:32:aa:24:6d:0e:ba:c8:09:b1:14: 12:0c:5b:46:ac:f6:be:04:9f:36:24:e8:c6:21:0c:9d:30:cc: 69:75:9d:04:e3:ca:a2:55:8d:64:ef:d1:d5:d2:d5:5d:44:b7: cc:f9:3f:a0:b1:d8:fb:fd:6b:8d:67:cf:f6:01:9e:15:17:05: c3:09:41:05:9b:bc:3b:21:42:0b:fc:3c:49:eb:8c:fc:3b:75: ba:85:36:c6:41:4b:2e:92:ff:55:3c:ac:4e:84:e1:3c:34:aa: 9c:85:42:9d:2e:3c:e1:0d:4c:80:89:80:fd:e0:9d:2c:f7:b7: a9:66:25:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVr62uglsZKF6AHHq0n8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NGQ5MWNmYTBhNmRiOWJmZDkxNTRhNDQxODU4ZTAwZTM4 YmRiZDYwHhcNMjYwMTAyMTQyMTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGIyNTczMzZhZTIwZjZjNGJjOTYzZTA1NDc4NDUzYzljZTdiZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GgtqTZ/VZTv2CLpgQpQQY8vEWHA cR71MlkHLAhcwS4lfEH6Yk86vFM2sgstYuzqU3R9CgPcYbJHLWxkg+lznocmHa78 M1ZhNW9q4zrrTRCbwU4r2gPLmh5BLjBZm2ppFCgtxBMX+6JXVk6AUHv7dYFivPGF cuzQBY3vz/bKgESgqI92cFQDJG18w6i4ISv9nCQ38yK5IdicRGVtQeHz7wlwP78l 61NJrHAPsv/wb25g9gV+YHUZ1DFwC2Ve+JLTuG2NqxPYhepAu3rvJb7N2TZ8y5zQ I+4bEe14ZEAOjmvecIY5WrBFhfqLZmEfLJjsyBc47dM+KnAu0u+4CswnMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIiyVzNq4g9sS8lj4FR4RTyc579wMB8GA1UdIwQY MBaAFCdNkc+gptub/ZFUpEGFjgDji9vWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYt OTc4MjM0YzNiYjcwLzEvaUxKWE0ycmlEMnhMeVdQZ1ZIaEZQSnpudjNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jNTFkNTgtZTM0OS00MjMxLTg2NGYtOTc4MjM0YzNiYjcw LzEvSjAyUno2Q20yNXY5a1ZTa1FZV09BT09MMjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbXUMA0G CSqGSIb3DQEBCwUAA4IBAQBwPRiBbjDkCaOXbcnLZ42D1iH+u1E1b09q1TKuz2U9 HhYlxeWu/uNMcQf0ay8isLT5PBCXKy+UIxBUDkpaK5b6FFyfnIvmJGckL+dnXt28 FJiIqZfPfouONm1caTLJdit4oNNy2umk5aYdHuD3+gfuLSfLxUgi8E/5i6EC5oYj W6gm1w+iOzKqJG0OusgJsRQSDFtGrPa+BJ82JOjGIQydMMxpdZ0E48qiVY1k79HV 0tVdRLfM+T+gsdj7/WuNZ8/2AZ4VFwXDCUEFm7w7IUIL/DxJ64z8O3W6hTbGQUsu kv9VPKxOhOE8NKqchUKdLjzhDUyAiYD94J0s97epZiVK -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:27 2026 by rpki-client