This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa File: izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa (raw, json) Hash identifier: wI9EPeDCKXCM+FRLEMa5vPoWLl/ecDeCm1gVreAFy1Y= Subject key identifier: 8B:3B:88:43:04:8D:7A:30:6A:9C:DA:47:DC:0F:FB:C7:42:B1:A7:E6 Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Certificate serial: 019B78A2C82A2E92B90FBA29C842EBB69545 Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa Signing time: Thu 01 Jan 2026 08:18:12 +0000 ROA not before: Thu 01 Jan 2026 08:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31549 IP address blocks: 87.236.39.0/24 maxlen: 24 185.110.244.0/24 maxlen: 24 185.110.245.0/24 maxlen: 24 185.110.246.0/24 maxlen: 24 185.110.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:c8:2a:2e:92:b9:0f:ba:29:c8:42:eb:b6:95:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24 Validity Not Before: Jan 1 08:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b3b8843048d7a306a9cda47dc0ffbc742b1a7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:6e:69:60:bb:02:06:fb:a3:25:d1:d3:1d: 88:05:4c:50:b5:e5:dc:65:d6:d8:79:f9:26:14:bc: 8c:28:85:e2:69:d3:dc:89:4f:eb:81:7d:05:3b:5e: b0:59:96:34:3e:f4:67:2d:d6:a2:a4:f5:3b:06:fc: 20:d9:3a:e7:fd:df:96:28:de:78:6e:92:ae:fa:25: 3c:46:f0:92:c7:45:ec:0b:a5:27:2a:16:42:d7:ff: 64:ae:5b:ee:e8:2f:76:17:b8:bd:f6:ae:30:c5:e4: 46:78:dc:39:91:01:76:f3:81:57:36:7b:48:be:a2: d8:2d:d7:2d:49:b6:7e:d1:e6:ec:21:68:3c:86:73: 1d:b8:23:66:8e:41:78:0f:41:d3:cc:49:39:1a:d9: cc:81:60:93:60:7b:e1:76:5e:25:a8:a6:bf:dc:d7: db:e6:bd:63:f3:08:0a:26:1f:61:37:73:df:fc:3f: a9:41:c4:f9:a7:13:94:e7:ee:55:cd:d8:e4:a3:3c: 57:56:fb:5a:dd:8c:1e:f8:64:88:6a:14:04:67:2f: 42:0f:60:6c:71:00:15:d6:46:3d:84:86:d4:29:f2: e9:e5:d6:33:46:c0:99:0e:f0:c6:7c:53:2e:af:b9: 25:5f:c3:57:16:5e:84:0a:1c:74:b2:bd:fa:9c:d2: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3B:88:43:04:8D:7A:30:6A:9C:DA:47:DC:0F:FB:C7:42:B1:A7:E6 X509v3 Authority Key Identifier: keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/izuIQwSNejBqnNpH3A_7x0Kxp-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.39.0/24 185.110.244.0/22 Signature Algorithm: sha256WithRSAEncryption 50:c4:07:67:e4:2a:36:d8:0f:3d:cf:5e:5c:6f:a4:19:88:c3: b3:4e:39:fd:8c:9a:3a:ba:89:4b:42:2d:8e:6b:e6:11:78:a1: a4:e0:42:00:c8:f0:0e:c1:e8:14:b3:ab:78:5d:76:7b:bd:73: b4:b6:a2:50:da:2d:e7:17:b7:25:ff:ae:12:3e:7e:27:5b:9b: e6:52:c4:cd:13:25:b6:70:a5:c6:1b:5c:50:3c:25:ff:eb:3a: 6d:d6:87:0b:c3:13:6b:b7:f5:f1:47:a0:16:0f:a9:12:d1:2e: bd:a4:53:05:42:8b:e2:5b:1e:12:bc:cc:df:f8:7e:69:ed:ca: 36:67:c7:fb:27:ff:30:18:99:62:97:ad:e6:cc:87:1c:80:21: 09:5b:73:dc:54:d3:69:fe:2a:6b:93:7d:f0:10:c3:55:ad:14: 34:87:02:8b:be:5b:3d:6f:a0:6d:b0:ae:98:b9:41:d1:48:52: 39:2a:17:a8:93:be:25:1c:6f:89:9b:aa:de:07:27:5d:cd:04: dd:58:a2:97:1e:fb:6a:ff:47:c1:8b:c0:c4:75:24:83:85:7c: 3c:2f:4e:75:03:e3:70:e2:cf:76:c5:36:60:00:75:ac:cd:0e: cb:59:9d:a5:36:b3:a2:af:f2:2b:ea:af:80:9b:95:91:dc:f0: 2a:3f:9d:31 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4osgqLpK5D7opyELrtpVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYWM2NzliNDgwYTc4ZWFkNzk3ZjJlMGI3Nzc5ZTU4ZjIy NzFmMjQwHhcNMjYwMTAxMDgxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjNiODg0MzA0OGQ3YTMwNmE5Y2RhNDdkYzBmZmJjNzQyYjFhN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSduaWC7Agb7oyXR0x2IBUxQteXc ZdbYefkmFLyMKIXiadPciU/rgX0FO16wWZY0PvRnLdaipPU7Bvwg2Trn/d+WKN54 bpKu+iU8RvCSx0XsC6UnKhZC1/9krlvu6C92F7i99q4wxeRGeNw5kQF284FXNntI vqLYLdctSbZ+0ebsIWg8hnMduCNmjkF4D0HTzEk5GtnMgWCTYHvhdl4lqKa/3Nfb 5r1j8wgKJh9hN3Pf/D+pQcT5pxOU5+5VzdjkozxXVvta3Ywe+GSIahQEZy9CD2Bs cQAV1kY9hIbUKfLp5dYzRsCZDvDGfFMur7klX8NXFl6EChx0sr36nNIX3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIs7iEMEjXowapzaR9wP+8dCsafmMB8GA1UdIwQY MBaAFI2sZ5tICnjq15fy4Ld3nljyJx8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTIt NjAyMGU4YTU2NTU2LzEvaXp1SVF3U05lakJxbk5wSDNBXzd4MEt4cC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi83NzhjZTAtMmNjMi00OTBiLWE2ZTItNjAyMGU4YTU2NTU2 LzEvamF4bm0wZ0tlT3JYbF9MZ3QzZWVXUEluSHlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+wnAwQC uW70MA0GCSqGSIb3DQEBCwUAA4IBAQBQxAdn5Co22A89z15cb6QZiMOzTjn9jJo6 uolLQi2Oa+YReKGk4EIAyPAOwegUs6t4XXZ7vXO0tqJQ2i3nF7cl/64SPn4nW5vm UsTNEyW2cKXGG1xQPCX/6zpt1ocLwxNrt/XxR6AWD6kS0S69pFMFQoviWx4SvMzf +H5p7co2Z8f7J/8wGJlil63mzIccgCEJW3PcVNNp/iprk33wEMNVrRQ0hwKLvls9 b6BtsK6YuUHRSFI5Kheok74lHG+Jm6reByddzQTdWKKXHvtq/0fBi8DEdSSDhXw8 L051A+Nw4s92xTZgAHWszQ7LWZ2lNrOir/Ir6q+Am5WR3PAqP50x -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:57 2026 by rpki-client