This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/izkOI9oY18uKSV4FRgb611Hp7mU.roa File: izkOI9oY18uKSV4FRgb611Hp7mU.roa (raw, json) Hash identifier: QUMFHyKky+C4/Hhg2gnIkNny4unJriThfo8M2jzgsDs= Subject key identifier: 8B:39:0E:23:DA:18:D7:CB:8A:49:5E:05:46:06:FA:D7:51:E9:EE:65 Certificate issuer: /CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Certificate serial: 019B797EE42C96D8A3BAA04C114F0D235710 Authority key identifier: 93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/izkOI9oY18uKSV4FRgb611Hp7mU.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15598 IP address blocks: 193.239.185.0/24 maxlen: 32 2001:67c:2a7c::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.mft rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e4:2c:96:d8:a3:ba:a0:4c:11:4f:0d:23:57:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=930a463d67e4b42d8639acdf0d15424f82f19a60 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b390e23da18d7cb8a495e054606fad751e9ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b4:e4:49:b5:23:76:f1:d5:e2:6e:5e:9a:8d: 86:f1:1f:53:7d:da:bb:67:ca:80:cd:e8:3d:99:31: 51:0d:fc:5b:2e:34:fe:6b:c5:a0:1f:5c:0a:c0:69: e7:b0:39:96:9c:60:9d:23:18:73:3d:2b:98:eb:fe: b0:01:3f:bb:1c:e2:9e:9e:87:c7:0a:86:28:72:8b: 2a:3c:33:58:65:9a:07:08:85:dd:77:77:31:78:9e: 19:19:de:03:07:f0:0f:c4:ab:e1:7a:f9:6c:43:8a: 2f:40:82:c3:5e:9a:d5:f3:17:cb:56:85:4f:68:c8: a1:45:a0:6c:d5:7e:49:69:8c:84:c6:5c:89:ad:f4: 90:8d:28:16:fa:d3:44:c0:b7:3d:60:ee:be:fe:e1: 64:87:2f:b7:0a:df:4c:89:98:e4:61:d0:8f:6d:8c: b8:38:4b:54:6a:4d:c4:77:8b:49:ca:09:ac:00:6a: b2:06:ff:c6:62:c1:e5:45:79:7d:99:9e:53:10:c3: b9:88:89:5c:20:5b:f3:d6:c5:84:24:3d:31:3a:6c: 1e:33:38:72:62:e9:ae:f2:ca:e4:94:ac:e7:f2:73: 32:f3:66:50:6b:e1:62:a3:82:f4:39:8a:b3:fa:19: 54:05:a8:3a:c6:f0:d3:af:ac:0d:f2:a2:69:a6:5e: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:39:0E:23:DA:18:D7:CB:8A:49:5E:05:46:06:FA:D7:51:E9:EE:65 X509v3 Authority Key Identifier: keyid:93:0A:46:3D:67:E4:B4:2D:86:39:AC:DF:0D:15:42:4F:82:F1:9A:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwpGPWfktC2GOazfDRVCT4LxmmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/izkOI9oY18uKSV4FRgb611Hp7mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/37b63e-9c88-42dc-b043-de844964f5ee/1/kwpGPWfktC2GOazfDRVCT4LxmmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.185.0/24 IPv6: 2001:67c:2a7c::/48 Signature Algorithm: sha256WithRSAEncryption a3:94:4b:8b:d3:f6:40:75:97:71:b0:f4:ad:eb:f7:64:25:56: c0:1d:62:e4:bc:d5:07:d0:a6:ad:3d:45:76:85:2b:0e:70:ec: 78:66:f9:9f:aa:25:8c:10:9b:b7:ac:89:25:cf:06:2c:f4:30: 87:8a:84:b8:3c:52:54:f8:2c:1f:6d:28:0c:78:16:bd:96:b8: d0:9c:9a:0a:a3:31:ff:a0:10:e2:45:b0:49:59:3c:bb:85:56: 3b:aa:ce:a6:3f:5b:d0:e7:78:83:1e:46:1c:7a:e5:1c:15:e8: 02:84:a9:a1:0f:b5:67:a5:49:f2:53:20:9d:98:80:de:6d:d9: 4d:d8:94:c7:07:33:ee:60:1c:da:a7:fc:cc:45:ae:25:1f:a9: 2c:54:56:92:da:20:b8:fc:8a:ff:6a:1d:2e:77:4b:31:87:04: a6:11:fe:25:8f:27:68:ba:3a:2a:9d:37:02:56:ee:97:cf:b3: ed:ca:2d:65:a2:49:a3:9f:b4:7b:88:f1:34:e5:3d:81:e4:57: 85:1f:82:f7:44:ec:1c:54:e5:56:19:76:69:23:b0:0d:b5:57: 08:c3:22:bb:b1:4b:49:e8:18:bd:cc:ab:99:8c:db:7b:86:cf: 6e:ed:c8:17:ef:b4:9d:d5:fb:4d:e0:77:9b:38:e8:7b:29:12: cb:cb:d8:8c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fuQsltijuqBMEU8NI1cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMGE0NjNkNjdlNGI0MmQ4NjM5YWNkZjBkMTU0MjRmODJm MTlhNjAwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjM5MGUyM2RhMThkN2NiOGE0OTVlMDU0NjA2ZmFkNzUxZTllZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbTkSbUjdvHV4m5emo2G8R9Tfdq7 Z8qAzeg9mTFRDfxbLjT+a8WgH1wKwGnnsDmWnGCdIxhzPSuY6/6wAT+7HOKenofH CoYocosqPDNYZZoHCIXdd3cxeJ4ZGd4DB/APxKvhevlsQ4ovQILDXprV8xfLVoVP aMihRaBs1X5JaYyExlyJrfSQjSgW+tNEwLc9YO6+/uFkhy+3Ct9MiZjkYdCPbYy4 OEtUak3Ed4tJygmsAGqyBv/GYsHlRXl9mZ5TEMO5iIlcIFvz1sWEJD0xOmweMzhy Yumu8srklKzn8nMy82ZQa+Fio4L0OYqz+hlUBag6xvDTr6wN8qJppl6p8QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFIs5DiPaGNfLikleBUYG+tdR6e5lMB8GA1UdIwQY MBaAFJMKRj1n5LQthjms3w0VQk+C8ZpgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMt ZGU4NDQ5NjRmNWVlLzEvaXprT0k5b1kxOHVLU1Y0RlJnYjYxMUhwN21VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zN2I2M2UtOWM4OC00MmRjLWIwNDMtZGU4NDQ5NjRmNWVl LzEva3dwR1BXZmt0QzJHT2F6ZkRSVkNUNEx4bW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwe+5MA8E AgACMAkDBwAgAQZ8KnwwDQYJKoZIhvcNAQELBQADggEBAKOUS4vT9kB1l3Gw9K3r 92QlVsAdYuS81QfQpq09RXaFKw5w7Hhm+Z+qJYwQm7esiSXPBiz0MIeKhLg8UlT4 LB9tKAx4Fr2WuNCcmgqjMf+gEOJFsElZPLuFVjuqzqY/W9DneIMeRhx65RwV6AKE qaEPtWelSfJTIJ2YgN5t2U3YlMcHM+5gHNqn/MxFriUfqSxUVpLaILj8iv9qHS53 SzGHBKYR/iWPJ2i6OiqdNwJW7pfPs+3KLWWiSaOftHuI8TTlPYHkV4UfgvdE7BxU 5VYZdmkjsA21VwjDIruxS0noGL3Mq5mM23uGz27tyBfvtJ3V+03gd5s46HspEsvL 2Iw= -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:59 2026 by rpki-client