This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/IFNkQ1NSTzLF-9O_XttRckzFGrs.roa File: IFNkQ1NSTzLF-9O_XttRckzFGrs.roa (raw, json) Hash identifier: OBVZMQv/RI7RvgzmnrzRrU47aBDByk7IPhxiYPN1zGE= Subject key identifier: 20:53:64:43:53:52:4F:32:C5:FB:D3:BF:5E:DB:51:72:4C:C5:1A:BB Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019BDC4E0E60B308B5C4EC530E6852EF906C Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/IFNkQ1NSTzLF-9O_XttRckzFGrs.roa Signing time: Tue 20 Jan 2026 16:47:41 +0000 ROA not before: Tue 20 Jan 2026 16:47:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31463 IP address blocks: 195.191.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:4e:0e:60:b3:08:b5:c4:ec:53:0e:68:52:ef:90:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Jan 20 16:47:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2053644353524f32c5fbd3bf5edb51724cc51abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:ba:82:1d:fe:4f:8a:c0:13:16:5f:e0:80: cf:2d:a0:f1:56:c1:7f:d4:ba:c1:f6:66:96:98:f0: aa:a0:09:f8:d8:c6:8e:7e:f7:13:99:60:20:74:40: 2b:a9:db:98:35:aa:8b:93:5c:e9:7d:12:bc:17:0d: 82:71:0c:96:6a:1c:a1:7a:4f:5a:18:a8:74:f9:00: 5e:2f:7c:07:bc:48:07:65:a3:80:97:e7:4a:d6:4d: 53:1d:7b:db:79:60:52:bd:54:26:7e:75:82:79:aa: de:bb:7d:bd:e4:9b:ed:06:d3:7a:fe:b4:d9:85:3e: 63:2f:42:33:6a:ee:6a:20:00:29:3d:ca:5e:c4:68: 4d:a0:45:96:56:39:d1:af:a9:34:5c:be:8a:7b:e8: 85:ee:ff:cb:8e:ee:05:8a:7f:29:7c:61:f8:54:b5: 33:9d:92:b0:46:e0:2c:9c:31:4f:92:b4:a6:9e:98: 98:ad:fd:8f:9d:38:c9:a6:8e:71:7e:c4:9d:f5:9d: 9c:ce:be:ff:15:0b:6d:b8:06:23:79:9d:43:94:4c: 84:8f:8f:bf:e0:5e:b2:71:08:fe:24:6b:12:f7:ae: 24:5e:ac:86:4f:8d:28:ee:0d:3e:27:bd:87:bb:0f: 42:c1:7f:6c:c9:fb:b0:9c:68:b6:7d:fe:b4:bd:7e: 43:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:53:64:43:53:52:4F:32:C5:FB:D3:BF:5E:DB:51:72:4C:C5:1A:BB X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/IFNkQ1NSTzLF-9O_XttRckzFGrs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.164.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:81:da:67:1c:8a:77:64:04:10:04:cb:74:ab:06:9e:d7:d6: b3:4c:c4:1f:99:c6:1f:ab:59:2a:1d:5e:44:3a:a1:00:b4:85: 7f:c8:41:5e:e7:ec:22:3c:a3:54:e8:0b:13:06:ac:3c:db:b7: 6f:8b:86:f5:52:d2:99:c1:bc:0d:50:04:c0:2d:24:dd:8d:24: 0b:7c:5d:4a:02:5a:60:bc:c7:20:c0:53:4e:e6:a2:42:fb:33: 93:fa:c0:22:7d:17:33:a0:f1:f7:a9:69:19:e7:cf:a6:24:af: b1:cf:60:21:8d:99:1e:6a:fb:62:f2:a4:e1:32:a9:c5:b4:82: 03:c5:30:cb:39:2e:ce:68:d8:dc:24:9c:67:55:75:33:10:4e: 77:62:82:43:01:50:d5:73:c7:df:78:61:56:41:89:fc:ac:b3: 1b:f9:dd:e5:d1:d8:c9:2c:25:c6:7a:88:bb:1f:3b:84:d9:85: da:30:49:c1:d0:d5:87:d1:0e:88:6e:6e:41:27:a9:e1:1e:bb: 1c:08:1a:a7:15:01:a7:66:b4:f4:af:b5:fb:32:91:95:aa:70: 79:04:8c:19:a6:80:cc:f9:d6:f5:d4:bd:74:67:61:d5:42:4d: 6f:98:95:49:ae:11:64:0a:ad:dd:82:f7:e6:58:e9:07:14:cb: 9a:36:13:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcTg5gswi1xOxTDmhS75BsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjYwMTIwMTY0NzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDUzNjQ0MzUzNTI0ZjMyYzVmYmQzYmY1ZWRiNTE3MjRjYzUxYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmm6gh3+T4rAExZf4IDPLaDxVsF/ 1LrB9maWmPCqoAn42MaOfvcTmWAgdEArqduYNaqLk1zpfRK8Fw2CcQyWahyhek9a GKh0+QBeL3wHvEgHZaOAl+dK1k1THXvbeWBSvVQmfnWCeareu3295JvtBtN6/rTZ hT5jL0Izau5qIAApPcpexGhNoEWWVjnRr6k0XL6Ke+iF7v/Lju4Fin8pfGH4VLUz nZKwRuAsnDFPkrSmnpiYrf2PnTjJpo5xfsSd9Z2czr7/FQttuAYjeZ1DlEyEj4+/ 4F6ycQj+JGsS964kXqyGT40o7g0+J72Huw9CwX9syfuwnGi2ff60vX5DwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBTZENTUk8yxfvTv17bUXJMxRq7MB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvSUZOa1ExTlNUekxGLTlPX1h0dFJja3pGR3JzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7+kMA0G CSqGSIb3DQEBCwUAA4IBAQA9gdpnHIp3ZAQQBMt0qwae19azTMQfmcYfq1kqHV5E OqEAtIV/yEFe5+wiPKNU6AsTBqw827dvi4b1UtKZwbwNUATALSTdjSQLfF1KAlpg vMcgwFNO5qJC+zOT+sAifRczoPH3qWkZ58+mJK+xz2AhjZkeavti8qThMqnFtIID xTDLOS7OaNjcJJxnVXUzEE53YoJDAVDVc8ffeGFWQYn8rLMb+d3l0djJLCXGeoi7 HzuE2YXaMEnB0NWH0Q6Ibm5BJ6nhHrscCBqnFQGnZrT0r7X7MpGVqnB5BIwZpoDM +db11L10Z2HVQk1vmJVJrhFkCq3dgvfmWOkHFMuaNhMb -----END CERTIFICATE-----Generated at Mon Jan 26 04:39:36 2026 by rpki-client