This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/IWKw_ZEu1EZRORuZiGmI2s0AHTI.roa File: IWKw_ZEu1EZRORuZiGmI2s0AHTI.roa (raw, json) Hash identifier: tNIkQWe0p3ZEhypZifxp8CXBvaq3p1TZN8n90ivbpfs= Subject key identifier: 21:62:B0:FD:91:2E:D4:46:51:39:1B:99:88:69:88:DA:CD:00:1D:32 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D0DA4DFE8A4177B537AC4A951F0B6 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/IWKw_ZEu1EZRORuZiGmI2s0AHTI.roa Signing time: Fri 02 Jan 2026 06:20:08 +0000 ROA not before: Fri 02 Jan 2026 06:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205738 IP address blocks: 85.219.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:0d:a4:df:e8:a4:17:7b:53:7a:c4:a9:51:f0:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2162b0fd912ed44651391b99886988dacd001d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:14:e0:85:5c:4c:31:69:e9:41:56:cf:a7: 7e:72:79:87:fa:c4:c6:9b:d7:c5:22:b5:04:7b:69: df:c5:ae:dc:ac:93:71:d4:ce:a0:f2:b8:30:d4:db: f8:cd:8c:8d:9b:8c:05:db:c2:58:e7:9f:66:b8:bb: d5:cd:5a:f8:39:b2:6e:2e:c3:b0:1f:3b:b6:f8:e6: 93:28:11:e6:1e:3a:c3:28:1b:38:84:1b:4d:40:8a: 06:26:c1:35:fe:47:74:98:2f:bf:1d:c0:0c:58:75: a8:68:cb:3a:46:f3:01:1b:2a:e6:44:00:2c:c9:b9: d8:7c:04:54:9d:29:1e:2e:62:09:1f:ed:07:ed:97: 1d:f9:ae:6a:01:c1:8c:37:7f:c3:56:a3:d9:3a:06: 9e:ba:9f:e0:4b:84:50:ea:b6:8b:ae:e0:80:b7:56: 94:ab:16:f1:22:ae:90:54:f3:76:aa:b4:f6:ff:44: 79:12:1e:ef:f4:82:f9:e6:a7:5f:a7:14:4d:8f:83: fd:f5:d2:ce:e1:fe:a7:06:cf:3a:5d:45:d4:51:15: 94:4c:64:5b:2e:a5:ec:f9:b5:5a:c0:f8:b6:8f:fe: 4e:cb:2f:34:f0:4c:8c:46:d1:14:a4:31:a5:70:3d: 18:3a:8a:6f:15:32:d5:33:93:fb:b5:2b:5a:b6:2e: 65:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:62:B0:FD:91:2E:D4:46:51:39:1B:99:88:69:88:DA:CD:00:1D:32 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/IWKw_ZEu1EZRORuZiGmI2s0AHTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.219.216.0/24 Signature Algorithm: sha256WithRSAEncryption 16:fc:a9:94:09:1c:9b:73:d2:0d:1c:ef:1d:b5:66:45:92:ea: 41:e0:a2:28:dc:05:a7:47:f5:28:cc:93:24:d5:72:83:0b:cf: af:38:23:7a:94:50:2f:03:07:f3:37:60:d7:70:d1:1e:b3:a5: 1e:ce:5e:73:e1:8e:3f:66:01:bd:13:c5:f0:11:b8:66:b5:f2: da:11:e0:bb:07:b6:88:0c:a2:ff:08:63:e5:b9:2a:fe:e0:ad: 6f:46:fd:a1:bd:22:ae:8f:50:31:35:ef:b3:ea:a5:2a:ed:46: f5:77:fd:0d:7f:e4:5e:9c:86:d0:64:90:c2:25:8b:ac:a7:ef: 6b:f2:19:bf:ae:42:7a:97:b0:6c:b7:c8:ea:64:b1:15:c8:8e: 10:64:ac:c8:8d:81:9d:f1:6e:f4:1b:d3:22:03:08:f4:ea:8c: 5f:f6:10:27:4a:ac:b9:58:c9:89:ba:ee:df:bc:ea:3a:9e:00: 37:47:fc:d7:e3:48:51:15:9c:ec:a7:0a:8c:3d:da:15:7a:3b: bf:07:fc:7e:26:85:a9:6c:37:74:4d:dd:10:47:2a:e2:7b:7d: 2e:be:a0:7c:f4:d3:85:f8:29:6f:17:ba:71:74:fa:25:0c:d6: 1b:f8:27:00:02:03:16:ac:7d:f7:8b:7a:4a:b1:d3:f4:d8:fa: 85:ed:c5:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XQ2k3+ikF3tTesSpUfC2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTYyYjBmZDkxMmVkNDQ2NTEzOTFiOTk4ODY5ODhkYWNkMDAxZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygQU4IVcTDFp6UFWz6d+cnmH+sTG m9fFIrUEe2nfxa7crJNx1M6g8rgw1Nv4zYyNm4wF28JY559muLvVzVr4ObJuLsOw Hzu2+OaTKBHmHjrDKBs4hBtNQIoGJsE1/kd0mC+/HcAMWHWoaMs6RvMBGyrmRAAs ybnYfARUnSkeLmIJH+0H7Zcd+a5qAcGMN3/DVqPZOgaeup/gS4RQ6raLruCAt1aU qxbxIq6QVPN2qrT2/0R5Eh7v9IL55qdfpxRNj4P99dLO4f6nBs86XUXUURWUTGRb LqXs+bVawPi2j/5Oyy808EyMRtEUpDGlcD0YOopvFTLVM5P7tStati5lAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFisP2RLtRGUTkbmYhpiNrNAB0yMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvSVdLd19aRXUxRVpST1J1WmlHbUkyczBBSFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVdvYMA0G CSqGSIb3DQEBCwUAA4IBAQAW/KmUCRybc9INHO8dtWZFkupB4KIo3AWnR/UozJMk 1XKDC8+vOCN6lFAvAwfzN2DXcNEes6Uezl5z4Y4/ZgG9E8XwEbhmtfLaEeC7B7aI DKL/CGPluSr+4K1vRv2hvSKuj1AxNe+z6qUq7Ub1d/0Nf+RenIbQZJDCJYusp+9r 8hm/rkJ6l7Bst8jqZLEVyI4QZKzIjYGd8W70G9MiAwj06oxf9hAnSqy5WMmJuu7f vOo6ngA3R/zX40hRFZzspwqMPdoVeju/B/x+JoWpbDd0Td0QRyrie30uvqB89NOF +ClvF7pxdPolDNYb+CcAAgMWrH33i3pKsdP02PqF7cUb -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:42 2026 by rpki-client