This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/iZFLoubthAW-BC4w-7ChI6OwAD8.roa File: iZFLoubthAW-BC4w-7ChI6OwAD8.roa (raw, json) Hash identifier: dWAb16oUg/afrMlWz39glEGNuafzmLmIv2nVeIlgG+A= Subject key identifier: 89:91:4B:A2:E6:ED:84:05:BE:04:2E:30:FB:B0:A1:23:A3:B0:00:3F Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Certificate serial: 019B7AC9235100FAE60B5C0E2E0BCEF337AF Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/iZFLoubthAW-BC4w-7ChI6OwAD8.roa Signing time: Thu 01 Jan 2026 18:19:20 +0000 ROA not before: Thu 01 Jan 2026 18:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214286 IP address blocks: 185.223.136.0/24 maxlen: 24 185.223.137.0/24 maxlen: 24 185.223.138.0/24 maxlen: 24 185.223.139.0/24 maxlen: 24 2a14:43c0:1000::/36 maxlen: 36 2a14:43c0:2000::/36 maxlen: 36 2a14:43c0:3000::/36 maxlen: 36 2a14:43c0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:23:51:00:fa:e6:0b:5c:0e:2e:0b:ce:f3:37:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab Validity Not Before: Jan 1 18:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89914ba2e6ed8405be042e30fbb0a123a3b0003f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:69:b0:88:45:1c:61:00:b8:e2:11:00:61: 77:b8:05:0c:6f:ba:1d:de:ee:ee:ba:7e:a5:fe:7f: d4:f8:8c:87:63:ac:64:09:65:44:cc:0c:04:96:1c: e0:98:75:d6:54:77:47:08:60:0d:e5:bf:60:d8:95: 5a:e4:ac:7b:21:f0:d5:0a:02:0b:c7:5d:ef:c3:a9: 51:32:ff:7f:97:96:7b:c0:7e:fb:08:d1:83:df:0f: d6:de:d5:a5:14:ee:19:61:25:9f:0d:2d:0c:98:8f: 07:76:ed:16:f2:10:67:f0:06:9e:2e:2a:31:c8:d1: 66:12:81:06:9f:64:0a:f3:25:cf:56:63:7b:c3:b3: 76:91:53:a2:4a:28:b2:d6:5a:4f:cc:ac:80:88:22: 92:55:e8:d6:de:ef:3a:58:48:43:53:f7:03:41:4c: 6d:11:b7:84:ac:8c:46:d7:05:28:c8:7a:7f:e2:31: 07:dd:b9:67:67:27:22:b6:39:13:c5:f5:47:b0:3c: 48:e3:5b:b8:46:f4:f2:3f:8f:5e:3f:51:4b:5b:be: 31:48:a7:cd:ca:a9:02:c3:4b:93:d3:eb:a1:de:c9: 4d:4b:1f:80:0c:63:30:f4:ea:01:d4:10:40:a5:7f: 24:0d:73:58:b3:97:94:f4:0c:ff:d1:b5:8c:83:87: d3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:91:4B:A2:E6:ED:84:05:BE:04:2E:30:FB:B0:A1:23:A3:B0:00:3F X509v3 Authority Key Identifier: keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/iZFLoubthAW-BC4w-7ChI6OwAD8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.136.0/22 IPv6: 2a14:43c0:1000::-2a14:43c0:4fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 27:2d:5d:e3:57:0f:c1:5e:38:7d:a3:5d:3d:f2:ae:c3:2d:9b: e7:6b:d9:96:42:0a:ad:b6:c6:9e:8b:e3:29:18:5e:e2:8c:ae: f4:e0:61:c7:09:4d:db:98:b9:70:9f:23:0e:3b:53:b2:31:6a: 8f:f1:6e:9b:f8:db:20:ab:30:4e:12:f6:c4:22:68:33:30:db: 75:4a:37:de:ba:1c:be:c4:76:90:f1:ee:7e:2e:b3:09:58:ba: f9:18:00:3b:86:30:96:3c:6f:d1:1a:7e:fe:34:2d:08:40:b1: 95:89:d1:51:6c:ff:69:d0:45:af:7d:24:75:4f:95:a1:d1:43: a7:7d:df:97:55:d4:6d:f4:62:b4:14:08:68:07:ae:f4:05:43: b0:e8:d5:32:6b:08:ae:65:fd:25:6f:b3:5d:40:8e:d5:fb:3a: 32:08:f7:d3:b5:0b:d9:c9:ef:43:93:4c:f0:2c:69:f1:5e:6a: 56:36:21:6d:25:0e:1a:db:79:44:77:da:9b:13:49:35:d0:0e: 9e:c8:f3:d0:6f:38:2c:46:6e:96:71:7c:3c:76:32:24:6c:c7: ae:2a:cb:8d:48:a8:8f:c1:d2:30:e0:17:fa:a0:d0:83:2b:39: d4:d6:82:da:9c:0e:0c:3e:a8:c1:5a:f8:20:f6:fc:9a:d9:c0: 74:42:3e:d9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6ySNRAPrmC1wOLgvO8zevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzEzNzRlYjk2NzkxMDllOTFhMzhlMjhiMTdiZjI2MGFi OWQzYWIwHhcNMjYwMTAxMTgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTkxNGJhMmU2ZWQ4NDA1YmUwNDJlMzBmYmIwYTEyM2EzYjAwMDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wNpsIhFHGEAuOIRAGF3uAUMb7od 3u7uun6l/n/U+IyHY6xkCWVEzAwElhzgmHXWVHdHCGAN5b9g2JVa5Kx7IfDVCgIL x13vw6lRMv9/l5Z7wH77CNGD3w/W3tWlFO4ZYSWfDS0MmI8Hdu0W8hBn8AaeLiox yNFmEoEGn2QK8yXPVmN7w7N2kVOiSiiy1lpPzKyAiCKSVejW3u86WEhDU/cDQUxt EbeErIxG1wUoyHp/4jEH3blnZycitjkTxfVHsDxI41u4RvTyP49eP1FLW74xSKfN yqkCw0uT0+uh3slNSx+ADGMw9OoB1BBApX8kDXNYs5eU9Az/0bWMg4fTrwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFImRS6Lm7YQFvgQuMPuwoSOjsAA/MB8GA1UdIwQY MBaAFHAxN065Z5EJ6Ro44osXvyYKudOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt MmMyMTgwNzE0ZTcxLzEvaVpGTG91YnRoQVctQkM0dy03Q2hJNk93QUQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx LzEvY0RFM1RybG5rUW5wR2pqaWl4ZV9KZ3E1MDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCud+IMBgE AgACMBIwEAMGBCoUQ8AQAwYEKhRDwEAwDQYJKoZIhvcNAQELBQADggEBACctXeNX D8FeOH2jXT3yrsMtm+dr2ZZCCq22xp6L4ykYXuKMrvTgYccJTduYuXCfIw47U7Ix ao/xbpv42yCrME4S9sQiaDMw23VKN966HL7EdpDx7n4uswlYuvkYADuGMJY8b9Ea fv40LQhAsZWJ0VFs/2nQRa99JHVPlaHRQ6d935dV1G30YrQUCGgHrvQFQ7Do1TJr CK5l/SVvs11AjtX7OjII99O1C9nJ70OTTPAsafFealY2IW0lDhrbeUR32psTSTXQ Dp7I89BvOCxGbpZxfDx2MiRsx64qy41IqI/B0jDgF/qg0IMrOdTWgtqcDgw+qMFa +CD2/JrZwHRCPtk= -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:58 2026 by rpki-client