This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/I1lVIITCXu0d3NWIfdAOToX39As.roa File: I1lVIITCXu0d3NWIfdAOToX39As.roa (raw, json) Hash identifier: fMTWrRTrvT0x0LH1cr4GFHMbAxQ/Z2XC4mo4fTlUdzw= Subject key identifier: 23:59:55:20:84:C2:5E:ED:1D:DC:D5:88:7D:D0:0E:4E:85:F7:F4:0B Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7755A0E261024225413AA6143E7B3 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/I1lVIITCXu0d3NWIfdAOToX39As.roa Signing time: Thu 01 Jan 2026 04:18:38 +0000 ROA not before: Thu 01 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201016 IP address blocks: 195.144.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:75:5a:0e:26:10:24:22:54:13:aa:61:43:e7:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2359552084c25eed1ddcd5887dd00e4e85f7f40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:be:c6:13:02:b2:dd:5a:ad:6f:71:45:bf:3b: 49:52:52:30:78:33:14:fd:68:3c:d4:5a:2c:64:b2: d0:d8:39:16:53:a8:c3:cb:0f:5a:2f:6e:0d:23:39: c4:69:ba:ba:48:40:4a:05:61:13:92:f8:f8:c0:e9: 5d:b1:db:1f:3a:5f:94:29:b7:82:22:65:ff:21:b3: 51:cc:80:72:0f:ef:5a:a9:6f:1e:13:64:e1:f0:f9: c1:ef:cd:2a:5e:e2:df:8f:e9:ed:ff:be:79:8e:79: 01:47:02:62:7a:3a:6f:d0:45:50:b1:a2:a9:c6:a4: 78:6a:68:c6:c7:a8:37:46:69:c7:3a:8a:a4:b4:7a: d0:29:4f:a1:4b:69:2a:a8:80:9e:34:93:aa:c7:e6: 06:57:22:5f:cc:a7:cb:9c:60:d5:3f:21:be:24:69: fa:83:36:75:27:63:fb:65:d7:8a:a4:3d:d7:58:84: cc:80:eb:99:4a:a2:63:4f:52:b6:50:77:c0:ea:27: ca:03:85:6c:73:6a:21:91:d8:71:31:7c:f0:d3:4d: df:cb:a2:c1:60:d6:f1:70:07:f2:79:17:65:11:29: e0:85:ee:50:89:da:d0:4d:f7:d2:e1:1c:63:65:6a: 1d:54:34:50:99:29:a2:43:1c:66:fd:4b:6c:81:02: a2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:55:20:84:C2:5E:ED:1D:DC:D5:88:7D:D0:0E:4E:85:F7:F4:0B X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/I1lVIITCXu0d3NWIfdAOToX39As.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.144.243.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:2d:ba:15:15:db:28:fb:bd:bf:18:6c:38:ac:08:4d:92:f7: 8d:9a:2d:0d:17:e6:58:b1:05:6b:30:b1:a1:c7:93:39:12:18: 0d:ff:51:af:7e:42:3e:04:b9:d5:d7:19:4e:b7:b6:d9:5d:66: ee:80:25:15:03:70:48:99:94:0d:a7:b3:d6:2f:3d:30:38:75: c1:d7:d0:34:99:a6:c9:c2:3f:80:a3:de:92:c4:46:bd:a8:0d: e2:09:04:4d:f7:39:92:54:4e:2f:b7:c8:ea:d5:e0:78:e1:99: 92:87:84:c6:79:ec:42:bd:f1:a9:83:6f:69:ed:7c:b7:46:2e: a4:e2:12:2c:bb:d8:57:d6:64:03:2e:78:bd:09:cf:08:5e:6d: 5b:a8:78:69:e7:4e:57:de:1e:c4:a8:67:f3:8e:54:43:89:a4: 60:19:af:3c:f9:17:55:c0:37:b2:52:43:a1:a0:2f:41:81:ee: 2d:10:b6:a6:07:c3:3c:12:fb:26:ae:5e:48:46:ad:c6:c2:4b: 49:67:5f:dc:49:5f:26:f7:e1:49:f3:94:12:a7:13:93:83:3d: af:8c:e6:ca:f4:6b:00:69:a7:0e:e9:c4:d3:65:66:a1:b3:9f: 81:23:69:df:10:88:3f:58:fd:ae:cc:4d:8a:83:f6:e7:43:2d: a8:df:00:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3VaDiYQJCJUE6phQ+ezMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzU5NTUyMDg0YzI1ZWVkMWRkY2Q1ODg3ZGQwMGU0ZTg1ZjdmNDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr7GEwKy3Vqtb3FFvztJUlIweDMU /Wg81FosZLLQ2DkWU6jDyw9aL24NIznEabq6SEBKBWETkvj4wOldsdsfOl+UKbeC ImX/IbNRzIByD+9aqW8eE2Th8PnB780qXuLfj+nt/755jnkBRwJiejpv0EVQsaKp xqR4amjGx6g3RmnHOoqktHrQKU+hS2kqqICeNJOqx+YGVyJfzKfLnGDVPyG+JGn6 gzZ1J2P7ZdeKpD3XWITMgOuZSqJjT1K2UHfA6ifKA4Vsc2ohkdhxMXzw003fy6LB YNbxcAfyeRdlESnghe5QidrQTffS4RxjZWodVDRQmSmiQxxm/UtsgQKiSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNZVSCEwl7tHdzViH3QDk6F9/QLMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvSTFsVklJVENYdTBkM05XSWZkQU9Ub1gzOUFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5DzMA0G CSqGSIb3DQEBCwUAA4IBAQB8LboVFdso+72/GGw4rAhNkveNmi0NF+ZYsQVrMLGh x5M5EhgN/1GvfkI+BLnV1xlOt7bZXWbugCUVA3BImZQNp7PWLz0wOHXB19A0mabJ wj+Ao96SxEa9qA3iCQRN9zmSVE4vt8jq1eB44ZmSh4TGeexCvfGpg29p7Xy3Ri6k 4hIsu9hX1mQDLni9Cc8IXm1bqHhp505X3h7EqGfzjlRDiaRgGa88+RdVwDeyUkOh oC9Bge4tELamB8M8Evsmrl5IRq3GwktJZ1/cSV8m9+FJ85QSpxOTgz2vjObK9GsA aacO6cTTZWahs5+BI2nfEIg/WP2uzE2Kg/bnQy2o3wDr -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:48 2026 by rpki-client