This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ibXi0-8aUsVXGB09qV0j95JgrIY.roa File: ibXi0-8aUsVXGB09qV0j95JgrIY.roa (raw, json) Hash identifier: TLsVKyeWQpt6Te+i4gVhEctps4GC1gxgoIzygpugufY= Subject key identifier: 89:B5:E2:D3:EF:1A:52:C5:57:18:1D:3D:A9:5D:23:F7:92:60:AC:86 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D04AB6F356D3DE68C874AD1AE28C7 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ibXi0-8aUsVXGB09qV0j95JgrIY.roa Signing time: Fri 02 Jan 2026 06:20:06 +0000 ROA not before: Fri 02 Jan 2026 06:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197600 IP address blocks: 85.219.142.0/24 maxlen: 24 157.25.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:04:ab:6f:35:6d:3d:e6:8c:87:4a:d1:ae:28:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89b5e2d3ef1a52c557181d3da95d23f79260ac86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:18:24:76:fc:94:3e:2e:26:58:6f:47:48:1c: ba:44:c4:b5:d2:d6:10:57:c6:27:a0:f1:67:a9:34: ad:3a:68:a9:9f:29:56:2a:17:57:33:61:da:5e:17: c7:3a:8c:6c:83:b5:39:16:6e:f9:76:d6:6c:17:ff: f7:c3:db:63:de:56:54:57:96:cf:dd:b5:5e:8e:b0: eb:6c:14:64:9d:b4:61:e9:d0:1e:40:48:32:38:53: 1a:21:e2:cc:8a:2a:27:e7:3d:d2:fc:97:a2:7c:44: b4:d5:2c:20:43:5d:52:c2:77:3d:de:71:90:79:9c: 06:19:f2:46:99:fc:20:58:30:37:1d:fb:9e:d6:ba: e7:87:bb:72:4b:c4:dd:89:b8:86:d3:6c:ea:04:a4: 05:c9:15:1f:b8:05:fd:69:7d:48:be:85:bd:71:9b: 35:d0:0d:cc:a9:23:bb:6f:12:bb:84:0d:40:c7:b7: 1d:a0:6a:39:6a:66:8d:43:a5:fd:05:cf:c1:09:fd: 7b:36:50:13:60:63:d0:36:6f:49:12:06:02:3c:39: 55:64:3d:61:72:58:8b:0f:e5:f1:3a:0d:ee:10:b3: 66:c6:4a:6e:0e:75:55:22:f9:58:64:0f:05:d8:3b: f7:dd:ea:4a:cb:30:fe:32:f6:1d:af:99:ef:8c:89: cc:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:B5:E2:D3:EF:1A:52:C5:57:18:1D:3D:A9:5D:23:F7:92:60:AC:86 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/ibXi0-8aUsVXGB09qV0j95JgrIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.219.142.0/24 157.25.123.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:b6:d4:df:92:f1:b4:aa:dc:f4:46:ce:a5:0d:0a:71:e7:26: 4a:f8:17:ac:90:8f:b0:ef:b4:b6:ce:9c:59:cf:00:e5:bd:4e: dc:13:32:3e:0e:ec:fd:02:04:8d:7c:9a:1b:94:3b:da:09:5a: b7:62:6e:10:5a:5d:0f:6c:a0:e4:3f:c2:72:0a:fa:cb:5d:d7: 99:96:66:4d:cb:8a:10:b3:64:37:54:da:67:af:da:0c:9d:93: 51:d2:3a:c1:49:e7:8f:6e:ad:82:2a:28:37:01:c1:d3:5c:99: 31:86:86:93:7a:cc:10:9e:76:3e:28:e6:3e:0c:19:77:36:15: 99:05:9f:0a:51:c2:84:76:7d:ac:bf:52:e2:59:ba:0d:44:e4: fb:f5:b8:7a:e3:d9:9e:11:5b:63:01:ed:d6:7c:6f:5a:4a:34: 9a:2b:3e:5f:52:6f:55:7f:80:60:80:75:86:12:c3:c3:b1:75: e4:37:af:dd:ab:14:4d:fd:d0:e3:f6:0f:1a:bc:62:b7:78:43: 87:2f:78:12:18:0b:04:c0:16:69:1b:83:4c:73:e8:74:2a:9d: 30:e5:e9:9f:87:4d:6d:24:9e:1c:28:20:9f:58:2b:91:71:45: df:52:c8:e4:c0:40:ba:63:4c:0a:c3:e7:08:09:26:ff:ab:2c: 0d:0c:fa:ea -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XQSrbzVtPeaMh0rRrijHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWI1ZTJkM2VmMWE1MmM1NTcxODFkM2RhOTVkMjNmNzkyNjBhYzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhgkdvyUPi4mWG9HSBy6RMS10tYQ V8YnoPFnqTStOmipnylWKhdXM2HaXhfHOoxsg7U5Fm75dtZsF//3w9tj3lZUV5bP 3bVejrDrbBRknbRh6dAeQEgyOFMaIeLMiion5z3S/JeifES01SwgQ11Swnc93nGQ eZwGGfJGmfwgWDA3Hfue1rrnh7tyS8TdibiG02zqBKQFyRUfuAX9aX1IvoW9cZs1 0A3MqSO7bxK7hA1Ax7cdoGo5amaNQ6X9Bc/BCf17NlATYGPQNm9JEgYCPDlVZD1h cliLD+XxOg3uELNmxkpuDnVVIvlYZA8F2Dv33epKyzD+MvYdr5nvjInMWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIm14tPvGlLFVxgdPaldI/eSYKyGMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvaWJYaTAtOGFVc1ZYR0IwOXFWMGo5NUpncklZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVduOAwQA nRl7MA0GCSqGSIb3DQEBCwUAA4IBAQBLttTfkvG0qtz0Rs6lDQpx5yZK+BeskI+w 77S2zpxZzwDlvU7cEzI+Duz9AgSNfJoblDvaCVq3Ym4QWl0PbKDkP8JyCvrLXdeZ lmZNy4oQs2Q3VNpnr9oMnZNR0jrBSeePbq2CKig3AcHTXJkxhoaTeswQnnY+KOY+ DBl3NhWZBZ8KUcKEdn2sv1LiWboNROT79bh649meEVtjAe3WfG9aSjSaKz5fUm9V f4BggHWGEsPDsXXkN6/dqxRN/dDj9g8avGK3eEOHL3gSGAsEwBZpG4NMc+h0Kp0w 5emfh01tJJ4cKCCfWCuRcUXfUsjkwEC6Y0wKw+cICSb/qywNDPrq -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client