This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/IkWlnkMRYmmY0z6RsMt9nVHWTHY.roa File: IkWlnkMRYmmY0z6RsMt9nVHWTHY.roa (raw, json) Hash identifier: HZyHDjW4LM4yDmwpXJyjj9r1XYcSwDmPu4g9chOA6fY= Subject key identifier: 22:45:A5:9E:43:11:62:69:98:D3:3E:91:B0:CB:7D:9D:51:D6:4C:76 Certificate issuer: /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Certificate serial: 019B7F834364E8987509BEAC7461FC15610E Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/IkWlnkMRYmmY0z6RsMt9nVHWTHY.roa Signing time: Fri 02 Jan 2026 16:21:07 +0000 ROA not before: Fri 02 Jan 2026 16:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202499 IP address blocks: 109.205.194.0/24 maxlen: 24 176.106.186.0/23 maxlen: 23 193.142.188.0/22 maxlen: 24 195.216.208.0/23 maxlen: 24 2a0c:9b40::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:43:64:e8:98:75:09:be:ac:74:61:fc:15:61:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67 Validity Not Before: Jan 2 16:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2245a59e4311626998d33e91b0cb7d9d51d64c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:12:e4:fd:70:bb:9e:6d:37:15:b9:14:f1: ae:72:16:88:5b:e3:4f:27:46:a6:bc:6c:c3:c9:eb: e7:b2:5d:07:62:32:45:1c:48:12:90:8c:69:db:b9: 00:f7:5c:b0:20:13:d2:24:d9:46:85:dc:92:7b:5e: cc:65:5a:a0:b5:11:25:d9:f9:b8:b0:fb:1b:cc:c1: 2b:fc:64:e6:d7:37:02:2c:12:c9:38:d1:d2:cf:cb: cb:10:c2:c4:8d:e7:2c:bc:ae:a4:8a:46:0c:4a:3f: e0:d5:fc:ee:07:7b:b0:17:d9:2c:c5:c2:f1:64:38: cc:0e:ab:8f:23:09:d6:a6:a5:52:bd:e9:1e:2f:01: fa:5b:f4:c4:51:ea:70:6d:d8:b2:e8:e8:c0:6d:0f: 1c:03:ed:f3:9c:e6:2d:bc:11:d9:b5:7e:c0:e2:e5: 90:75:90:ee:9f:09:df:df:3a:6c:83:e4:b5:2b:87: e8:89:f3:9b:7b:d4:98:f8:75:6b:11:c0:c0:69:fb: 95:08:7f:ec:24:cf:33:49:e0:a2:04:0d:28:5d:0d: 86:a1:36:6a:a5:98:9f:74:81:1c:4b:8a:48:e8:b6: 95:dd:48:b7:1b:5a:2f:47:53:81:92:76:df:a5:62: 7c:05:7c:6c:d7:74:0a:f0:e1:60:6f:33:5a:16:9e: 8d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:45:A5:9E:43:11:62:69:98:D3:3E:91:B0:CB:7D:9D:51:D6:4C:76 X509v3 Authority Key Identifier: keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/IkWlnkMRYmmY0z6RsMt9nVHWTHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.194.0/24 176.106.186.0/23 193.142.188.0/22 195.216.208.0/23 IPv6: 2a0c:9b40::/29 Signature Algorithm: sha256WithRSAEncryption 60:c8:5b:09:fb:14:a2:f4:d3:f8:bb:20:3b:de:c3:a5:2f:da: 3f:ca:90:57:c4:3f:75:af:dc:ff:2d:1a:d3:fd:39:74:2b:c1: dc:13:bd:ab:c3:12:af:67:b0:2a:ac:be:d3:3b:37:e4:1f:17: c0:f0:60:46:bd:1c:37:1d:65:fe:56:83:94:e8:f7:97:f2:06: 7e:a1:80:71:10:4e:f6:41:94:84:23:c6:83:c0:8d:df:ce:fb: e7:49:d0:8c:4e:b9:f7:ae:67:e5:ca:fc:53:7d:95:4e:4f:7f: 08:2d:96:e0:4a:de:13:4a:9f:67:ed:6e:ba:1a:fc:5e:7f:6f: 61:7d:b8:ff:cc:42:f5:a3:e5:b8:e4:44:52:9e:d9:e8:46:04: 26:90:2e:67:83:17:e8:92:cf:9d:72:59:65:9d:92:b3:24:8f: 66:ba:ee:0c:73:1f:19:34:e9:d8:85:32:38:97:1f:6e:61:17: 37:3e:4b:57:f8:f5:c7:c2:d5:28:86:e7:90:bd:19:5c:f7:40: 8a:bb:a4:c9:a0:9e:d0:6e:d9:8b:59:82:12:5c:68:f4:8a:c0: 4a:fc:bd:4e:1f:8c:c2:5a:74:fd:01:f8:7a:6f:04:cb:1d:0f: 08:5c:d4:fc:7c:6a:4b:87:2e:c9:9b:3d:0c:31:99:41:d2:3b: 46:8b:ba:55 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/g0Nk6Jh1Cb6sdGH8FWEOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2OTRmMDA1ZjU5NzdjMzIzZWNkYmVhOWM1ZjhjY2EzNjll NjVjNjcwHhcNMjYwMTAyMTYyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ1YTU5ZTQzMTE2MjY5OThkMzNlOTFiMGNiN2Q5ZDUxZDY0Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOsS5P1wu55tNxW5FPGuchaIW+NP J0amvGzDyevnsl0HYjJFHEgSkIxp27kA91ywIBPSJNlGhdySe17MZVqgtREl2fm4 sPsbzMEr/GTm1zcCLBLJONHSz8vLEMLEjecsvK6kikYMSj/g1fzuB3uwF9ksxcLx ZDjMDquPIwnWpqVSvekeLwH6W/TEUepwbdiy6OjAbQ8cA+3znOYtvBHZtX7A4uWQ dZDunwnf3zpsg+S1K4foifObe9SY+HVrEcDAafuVCH/sJM8zSeCiBA0oXQ2GoTZq pZifdIEcS4pI6LaV3Ui3G1ovR1OBknbfpWJ8BXxs13QK8OFgbzNaFp6NMQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCJFpZ5DEWJpmNM+kbDLfZ1R1kx2MB8GA1UdIwQY MBaAFKaU8AX1l3wyPs2+qcX4zKNp5lxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAt MWI1MjdjZTE2NTExLzEvSWtXbG5rTVJZbW1ZMHo2UnNNdDluVkhXVEhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jNzkxODctMGQ3YS00OTBiLTkyYjAtMWI1MjdjZTE2NTEx LzEvcHBUd0JmV1hmREktemI2cHhmak1vMm5tWEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAbc3CAwQB sGq6AwQCwY68AwQBw9jQMA0EAgACMAcDBQMqDJtAMA0GCSqGSIb3DQEBCwUAA4IB AQBgyFsJ+xSi9NP4uyA73sOlL9o/ypBXxD91r9z/LRrT/Tl0K8HcE72rwxKvZ7Aq rL7TOzfkHxfA8GBGvRw3HWX+VoOU6PeX8gZ+oYBxEE72QZSEI8aDwI3fzvvnSdCM Trn3rmflyvxTfZVOT38ILZbgSt4TSp9n7W66Gvxef29hfbj/zEL1o+W45ERSntno RgQmkC5ngxfoks+dclllnZKzJI9muu4Mcx8ZNOnYhTI4lx9uYRc3PktX+PXHwtUo hueQvRlc90CKu6TJoJ7QbtmLWYISXGj0isBK/L1OH4zCWnT9Afh6bwTLHQ8IXNT8 fGpLhy7Jmz0MMZlB0jtGi7pV -----END CERTIFICATE-----Generated at Mon Jan 26 12:23:30 2026 by rpki-client