This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/Isf0X2VA5k71HKCeTyJN9hXCDdw.roa File: Isf0X2VA5k71HKCeTyJN9hXCDdw.roa (raw, json) Hash identifier: moujoYkwbdpd8nceyk8u6dwvR2yVCkwxf/DT9Cg/itk= Subject key identifier: 22:C7:F4:5F:65:40:E6:4E:F5:1C:A0:9E:4F:22:4D:F6:15:C2:0D:DC Certificate issuer: /CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Certificate serial: 019B7A5AA17709FA5EBB08950BDB9836A107 Authority key identifier: 8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/Isf0X2VA5k71HKCeTyJN9hXCDdw.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198279 IP address blocks: 37.26.80.0/21 maxlen: 21 37.26.82.0/24 maxlen: 24 37.26.83.0/24 maxlen: 24 37.26.84.0/24 maxlen: 24 37.26.85.0/24 maxlen: 24 37.26.86.0/24 maxlen: 24 37.26.87.0/24 maxlen: 24 185.89.156.0/22 maxlen: 22 185.89.156.0/24 maxlen: 24 185.89.157.0/24 maxlen: 24 185.89.158.0/24 maxlen: 24 185.89.159.0/24 maxlen: 24 2a00:4940::/29 maxlen: 32 2a00:4940::/32 maxlen: 32 2a00:4940::/48 maxlen: 48 2a00:4940:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.mft rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a1:77:09:fa:5e:bb:08:95:0b:db:98:36:a1:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a38d1191f66f1f0315de5f45cc194d1cd19d1fb Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c7f45f6540e64ef51ca09e4f224df615c20ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:10:4f:5f:0f:47:df:ad:3a:3c:c7:76:b8: f2:f9:a7:be:2a:af:62:49:01:8f:d4:0e:73:f2:7f: ee:06:86:bc:49:af:f1:54:94:56:e9:12:ab:ae:8b: e8:d6:98:7e:00:f4:92:2f:bb:49:9d:a0:47:50:13: 79:3d:b0:e2:85:51:9f:e9:4b:40:b1:12:e8:57:05: ac:c3:46:82:ec:54:31:0c:db:25:f8:bd:81:1e:e6: cb:a4:72:32:ef:bb:02:7f:6e:08:b3:25:f0:87:5b: b3:11:40:03:5b:8d:15:c6:1a:c4:d4:27:cf:88:79: 2e:a5:1a:c2:54:b3:2f:65:aa:93:c6:96:d3:e0:9c: 06:ed:d7:78:3b:37:11:fd:14:bf:6e:05:8e:68:8f: d7:9e:01:d6:b4:7c:74:bf:fa:42:88:aa:8e:f6:b7: a2:6c:cc:68:53:26:2e:a9:fe:ba:ad:e7:28:4c:2c: de:6f:39:9c:09:0c:82:4b:d0:fd:b3:42:7c:78:05: db:ef:03:0d:fb:a3:27:13:ab:c7:99:6b:c8:a7:8a: 50:07:13:6f:fd:21:00:d2:5b:32:74:49:d5:f4:14: 27:5c:af:91:50:b6:89:04:52:6e:3d:bd:76:e8:d9: d7:58:e8:82:7e:35:d0:4c:21:10:10:06:83:f6:52: 75:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:F4:5F:65:40:E6:4E:F5:1C:A0:9E:4F:22:4D:F6:15:C2:0D:DC X509v3 Authority Key Identifier: keyid:8A:38:D1:19:1F:66:F1:F0:31:5D:E5:F4:5C:C1:94:D1:CD:19:D1:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/Isf0X2VA5k71HKCeTyJN9hXCDdw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/87206f-33d0-4f33-b781-84f8fdc0c698/1/ijjRGR9m8fAxXeX0XMGU0c0Z0fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.26.80.0/21 185.89.156.0/22 IPv6: 2a00:4940::/29 Signature Algorithm: sha256WithRSAEncryption 8f:77:0c:7c:c1:0b:0a:4a:08:53:99:ef:e1:f6:d1:c1:98:aa: a9:af:bb:6e:3c:05:d7:ec:a4:2c:b4:e3:61:35:b2:5b:f6:9a: c0:e6:3a:c3:79:fb:1f:80:64:ce:00:d9:c3:98:6a:dd:3a:9f: e4:c0:19:60:c5:ea:7d:6a:32:0d:92:6f:90:b0:57:3b:ce:27: b6:ef:24:0e:97:33:3d:8f:fe:1a:25:c2:5a:d2:e8:19:30:58: 2f:0f:02:2b:eb:ff:62:6b:ea:7d:34:76:35:a9:9d:de:e1:c1: 48:78:1a:ab:0c:9b:7d:14:0a:02:ed:69:16:3a:ee:e1:88:27: f3:5d:0c:62:11:7f:a9:30:93:62:82:79:e4:b3:dd:c2:74:b5: 66:ab:71:13:a6:d0:d2:c5:59:51:ce:4a:b4:f4:99:de:26:e1: 6e:c0:39:11:ea:62:83:ea:a8:4e:dd:cd:ae:1f:c4:a2:3e:f4: 73:3f:3f:14:08:b1:16:84:73:45:1e:1c:93:c7:47:41:07:48: 2c:36:aa:8c:2c:de:dc:99:f6:53:26:57:10:1c:60:3c:b0:d7: d5:9a:8b:4c:1e:b6:4a:28:02:7a:5b:3b:a6:c7:bf:4f:d1:8a: 09:b1:2b:e5:2c:49:e4:e3:43:0a:ee:51:11:ef:b6:4e:89:65: 2a:af:74:e4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WqF3CfpeuwiVC9uYNqEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMzhkMTE5MWY2NmYxZjAzMTVkZTVmNDVjYzE5NGQxY2Qx OWQxZmIwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM3ZjQ1ZjY1NDBlNjRlZjUxY2EwOWU0ZjIyNGRmNjE1YzIwZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bQQT18PR9+tOjzHdrjy+ae+Kq9i SQGP1A5z8n/uBoa8Sa/xVJRW6RKrrovo1ph+APSSL7tJnaBHUBN5PbDihVGf6UtA sRLoVwWsw0aC7FQxDNsl+L2BHubLpHIy77sCf24IsyXwh1uzEUADW40VxhrE1CfP iHkupRrCVLMvZaqTxpbT4JwG7dd4OzcR/RS/bgWOaI/XngHWtHx0v/pCiKqO9rei bMxoUyYuqf66recoTCzebzmcCQyCS9D9s0J8eAXb7wMN+6MnE6vHmWvIp4pQBxNv /SEA0lsydEnV9BQnXK+RULaJBFJuPb126NnXWOiCfjXQTCEQEAaD9lJ1mwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCLH9F9lQOZO9Rygnk8iTfYVwg3cMB8GA1UdIwQY MBaAFIo40RkfZvHwMV3l9FzBlNHNGdH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEt ODRmOGZkYzBjNjk4LzEvSXNmMFgyVkE1azcxSEtDZVR5Sk45aFhDRGR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi84NzIwNmYtMzNkMC00ZjMzLWI3ODEtODRmOGZkYzBjNjk4 LzEvaWpqUkdSOW04ZkF4WGVYMFhNR1UwYzBaMGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJRpQAwQC uVmcMA0EAgACMAcDBQMqAElAMA0GCSqGSIb3DQEBCwUAA4IBAQCPdwx8wQsKSghT me/h9tHBmKqpr7tuPAXX7KQstONhNbJb9prA5jrDefsfgGTOANnDmGrdOp/kwBlg xep9ajINkm+QsFc7zie27yQOlzM9j/4aJcJa0ugZMFgvDwIr6/9ia+p9NHY1qZ3e 4cFIeBqrDJt9FAoC7WkWOu7hiCfzXQxiEX+pMJNignnks93CdLVmq3ETptDSxVlR zkq09JneJuFuwDkR6mKD6qhO3c2uH8SiPvRzPz8UCLEWhHNFHhyTx0dBB0gsNqqM LN7cmfZTJlcQHGA8sNfVmotMHrZKKAJ6Wzumx79P0YoJsSvlLEnk40MK7lER77ZO iWUqr3Tk -----END CERTIFICATE-----Generated at Tue Jan 27 00:05:34 2026 by rpki-client