This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa File: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (raw, json) Hash identifier: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8= Subject key identifier: 21:43:68:F8:6E:40:04:88:52:B9:25:9D:7A:25:42:73:78:7D:0F:80 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 019B77C70A0793DC444D6B2BFF60DD2B276F Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30889 IP address blocks: 45.145.124.0/22 maxlen: 24 79.98.96.0/21 maxlen: 24 185.15.128.0/22 maxlen: 24 185.95.120.0/22 maxlen: 24 185.149.8.0/22 maxlen: 24 185.172.16.0/22 maxlen: 24 185.196.248.0/22 maxlen: 24 193.27.194.0/23 maxlen: 24 194.177.32.0/19 maxlen: 24 195.214.240.0/21 maxlen: 24 2a01:6d8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:07:93:dc:44:4d:6b:2b:ff:60:dd:2b:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=214368f86e40048852b9259d7a254273787d0f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4b:bf:6c:25:e7:b3:5c:14:e5:30:3c:c6:7c: b7:a0:65:25:c8:70:15:de:b9:97:63:f1:67:5e:5f: 22:ce:8f:07:54:ee:72:f6:a3:aa:da:ea:ea:6d:a4: 5c:76:ce:d1:ec:24:55:0c:26:43:cc:d4:9c:45:f0: 74:be:37:67:f6:d7:e1:e1:e1:29:f4:6a:89:47:a7: ba:35:30:c2:4f:8d:f7:3f:0f:4d:6d:48:29:20:df: 58:79:a0:99:89:75:4f:70:ce:1e:03:08:56:f6:24: 90:55:36:18:59:8b:91:87:19:de:a1:0e:19:cc:a1: 70:79:f4:dd:af:f7:d9:f0:fd:0d:8a:f8:62:12:36: 7a:b2:f6:56:1e:92:bb:09:21:08:a0:f0:66:33:c2: 32:c9:29:61:b0:70:90:f2:25:b0:ee:6c:b4:b9:fb: bb:31:bd:05:b6:09:d9:bc:17:73:83:fe:8e:88:05: 07:e9:79:92:26:44:05:0a:23:9b:98:88:17:34:9a: ad:ad:6a:ac:85:62:c0:85:84:90:63:97:a9:8e:d7: 34:3d:95:50:1a:26:61:0a:48:d4:de:8a:e7:a8:ed: f9:bb:13:c8:71:9e:07:cd:f5:2b:a6:85:ce:d1:bb: e9:4e:e1:a4:3d:87:67:15:3d:c4:3f:88:d8:c0:bc: 7f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:43:68:F8:6E:40:04:88:52:B9:25:9D:7A:25:42:73:78:7D:0F:80 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.124.0/22 79.98.96.0/21 185.15.128.0/22 185.95.120.0/22 185.149.8.0/22 185.172.16.0/22 185.196.248.0/22 193.27.194.0/23 194.177.32.0/19 195.214.240.0/21 IPv6: 2a01:6d8::/32 Signature Algorithm: sha256WithRSAEncryption 0e:bc:9a:50:9c:74:95:45:e5:9c:16:fe:57:57:4c:39:d6:72: f7:06:02:a0:23:77:20:72:91:7d:5f:e0:7c:eb:c6:0f:ee:65: d5:ae:af:7c:22:6e:46:54:1c:57:d3:46:63:58:ca:95:b5:1c: 6c:fa:26:af:eb:51:a0:af:dd:57:70:23:02:a1:47:43:77:8a: f0:51:a0:21:b3:36:a3:f5:60:bf:d7:2e:c2:95:46:4f:6e:fe: c0:26:4a:f9:83:75:b0:0e:a0:0d:ca:f6:b1:31:83:7e:e1:b2: 9e:e1:a5:42:5d:6e:d4:13:48:ba:50:b5:81:a5:1e:59:b9:8a: d2:de:a6:66:c5:42:89:52:83:f9:a8:ce:65:dc:e8:f9:4f:21: 28:48:74:9e:b2:48:54:b1:c7:61:27:78:e4:9b:97:66:12:b5: 41:5b:4d:1c:2c:85:b9:a8:47:fd:af:ff:5a:31:24:7d:e2:c1: 60:9e:56:0f:31:f6:93:de:42:3c:fe:62:46:83:1f:7a:1c:fb: 89:87:5d:25:e8:ce:0c:2b:99:98:55:cf:aa:89:b1:36:f7:42: 2c:52:92:66:42:b8:e2:2b:a2:09:cc:20:7d:a7:5e:82:88:2e: c8:43:54:3d:3a:5c:b2:72:23:58:0a:6a:83:bc:69:83:35:ac: aa:7a:64:92 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgISAZt3xwoHk9xETWsr/2DdKydvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTQzNjhmODZlNDAwNDg4NTJiOTI1OWQ3YTI1NDI3Mzc4N2QwZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUu/bCXns1wU5TA8xny3oGUlyHAV 3rmXY/FnXl8izo8HVO5y9qOq2urqbaRcds7R7CRVDCZDzNScRfB0vjdn9tfh4eEp 9GqJR6e6NTDCT433Pw9NbUgpIN9YeaCZiXVPcM4eAwhW9iSQVTYYWYuRhxneoQ4Z zKFwefTdr/fZ8P0NivhiEjZ6svZWHpK7CSEIoPBmM8IyySlhsHCQ8iWw7my0ufu7 Mb0FtgnZvBdzg/6OiAUH6XmSJkQFCiObmIgXNJqtrWqshWLAhYSQY5epjtc0PZVQ GiZhCkjU3ornqO35uxPIcZ4HzfUrpoXO0bvpTuGkPYdnFT3EP4jYwLx/zwIDAQAB o4ICTjCCAkowHQYDVR0OBBYEFCFDaPhuQASIUrklnXolQnN4fQ+AMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvSVVOby1HNUFCSWhTdVNXZGVpVkNjM2g5RDRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGQGCCsGAQUFBwEHAQH/BFUwUzBCBAIAATA8AwQCLZF8AwQD T2JgAwQCuQ+AAwQCuV94AwQCuZUIAwQCuawQAwQCucT4AwQBwRvCAwQFwrEgAwQD w9bwMA0EAgACMAcDBQAqAQbYMA0GCSqGSIb3DQEBCwUAA4IBAQAOvJpQnHSVReWc Fv5XV0w51nL3BgKgI3cgcpF9X+B868YP7mXVrq98Im5GVBxX00ZjWMqVtRxs+iav 61Ggr91XcCMCoUdDd4rwUaAhszaj9WC/1y7ClUZPbv7AJkr5g3WwDqANyvaxMYN+ 4bKe4aVCXW7UE0i6ULWBpR5ZuYrS3qZmxUKJUoP5qM5l3Oj5TyEoSHSeskhUscdh J3jkm5dmErVBW00cLIW5qEf9r/9aMSR94sFgnlYPMfaT3kI8/mJGgx96HPuJh10l 6M4MK5mYVc+qibE290IsUpJmQrjiK6IJzCB9p16CiC7IQ1Q9OlyyciNYCmqDvGmD NayqemSS -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:13 2026 by rpki-client