This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa File: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (raw, json) Hash identifier: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4= Subject key identifier: 22:B6:79:F0:2F:01:E9:BB:AF:2E:54:B2:38:5B:F7:5A:8D:4E:90:53 Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Certificate serial: 019B7DCAA4ADA10D0F84F0ABC3730DB2FF59 Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa Signing time: Fri 02 Jan 2026 08:19:50 +0000 ROA not before: Fri 02 Jan 2026 08:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207223 IP address blocks: 185.162.116.0/23 maxlen: 23 185.162.118.0/23 maxlen: 23 185.179.64.0/23 maxlen: 24 185.179.66.0/23 maxlen: 24 2a0a:e000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a4:ad:a1:0d:0f:84:f0:ab:c3:73:0d:b2:ff:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Validity Not Before: Jan 2 08:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22b679f02f01e9bbaf2e54b2385bf75a8d4e9053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:22:b4:b4:a0:e3:d2:d9:be:7d:2f:c8:a9: 10:2d:c3:9d:bf:aa:a5:d6:92:a0:d9:60:2a:d7:c5: 9b:61:0d:6e:1c:bb:4d:9b:c7:19:97:f5:73:1f:98: 56:ba:bd:91:7b:54:47:c0:02:07:68:4e:b9:19:69: 01:b3:ec:8f:37:cf:c1:d5:1e:d0:f8:8b:87:85:c1: 3e:eb:66:92:ee:bd:34:07:57:84:b7:ce:0d:14:29: 0e:ec:8b:63:03:4d:df:f0:03:69:bf:36:1f:45:91: bf:d2:56:11:8a:5d:3b:86:8f:00:3e:a9:22:f8:6e: 6b:5e:6f:8a:66:ec:a1:53:01:44:58:83:d6:6d:9b: 4a:93:89:11:e2:8e:cb:20:93:66:c0:61:45:ff:8c: 41:fa:bf:5d:2b:c4:20:c4:a8:9b:80:af:80:2a:fb: 50:ed:62:31:f3:93:38:4b:9a:4b:5b:a2:00:ef:01: 4f:2e:9e:fd:d6:ca:ce:2f:1f:72:5b:48:6a:20:8e: 0d:f6:c8:5f:56:25:a0:90:ca:c9:7d:b8:c4:29:d8: 9e:60:84:27:10:e7:7a:95:91:ee:87:b6:87:3b:7a: 31:23:5e:1a:eb:6d:d3:7c:74:c9:27:29:0a:73:df: db:8f:26:36:2e:c6:d0:f1:db:38:c5:0e:4f:40:df: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B6:79:F0:2F:01:E9:BB:AF:2E:54:B2:38:5B:F7:5A:8D:4E:90:53 X509v3 Authority Key Identifier: keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.116.0/22 185.179.64.0/22 IPv6: 2a0a:e000::/29 Signature Algorithm: sha256WithRSAEncryption 1f:c1:fb:75:df:31:a5:70:8e:a6:a6:61:19:97:ac:02:62:02: 4b:41:90:d3:cd:85:3d:cd:d1:07:3a:87:bf:52:91:04:55:88: 26:1d:52:9a:63:30:57:5f:6f:2e:ad:99:bd:74:ae:e0:7d:91: 8c:7d:63:a4:46:8f:4d:55:d4:f4:fd:bf:b7:b2:7c:22:57:83: eb:01:9d:71:4c:c8:6b:22:0f:05:fe:3c:1f:5d:0b:69:f3:1e: 45:16:8e:14:9d:f1:a0:84:08:f7:81:2e:84:5f:90:f8:0d:24: 56:ad:ab:03:c3:3a:a5:78:4c:2f:56:e5:41:7e:93:0f:bd:9a: 17:59:c5:18:7f:f2:7d:d8:04:f1:5e:b5:fe:19:2d:eb:85:72: be:e3:ae:b2:fc:b8:0b:4a:1f:36:e1:0a:b2:f1:48:ad:4c:c6: 69:83:a0:48:e7:fe:de:50:e4:9c:ec:e7:58:09:04:c1:c5:b2: c7:a8:9a:90:27:79:52:40:06:91:07:15:0a:3b:e8:8f:a2:c5: 65:4e:c7:50:96:e3:f6:55:7a:46:eb:ce:72:1e:64:eb:eb:25: 9c:b7:ca:cc:7c:92:08:44:f9:a3:e1:8a:ca:d8:47:0a:f0:4e: 20:72:5d:90:5e:09:31:9f:ee:be:3e:c6:b0:0b:a0:7c:fc:8a: 9b:8b:a3:89 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yqStoQ0PhPCrw3MNsv9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl OTliNDMwHhcNMjYwMTAyMDgxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmI2NzlmMDJmMDFlOWJiYWYyZTU0YjIzODViZjc1YThkNGU5MDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMcitLSg49LZvn0vyKkQLcOdv6ql 1pKg2WAq18WbYQ1uHLtNm8cZl/VzH5hWur2Re1RHwAIHaE65GWkBs+yPN8/B1R7Q +IuHhcE+62aS7r00B1eEt84NFCkO7ItjA03f8ANpvzYfRZG/0lYRil07ho8APqki +G5rXm+KZuyhUwFEWIPWbZtKk4kR4o7LIJNmwGFF/4xB+r9dK8QgxKibgK+AKvtQ 7WIx85M4S5pLW6IA7wFPLp791srOLx9yW0hqII4N9shfViWgkMrJfbjEKdieYIQn EOd6lZHuh7aHO3oxI14a623TfHTJJykKc9/bjyY2LsbQ8ds4xQ5PQN8bZwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFCK2efAvAem7ry5Usjhb91qNTpBTMB8GA1UdIwQY MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt YjUwOTQ0OTEzYWJmLzEvSXJaNThDOEI2YnV2TGxTeU9GdjNXbzFPa0ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuaJ0AwQC ubNAMA0EAgACMAcDBQMqCuAAMA0GCSqGSIb3DQEBCwUAA4IBAQAfwft13zGlcI6m pmEZl6wCYgJLQZDTzYU9zdEHOoe/UpEEVYgmHVKaYzBXX28urZm9dK7gfZGMfWOk Ro9NVdT0/b+3snwiV4PrAZ1xTMhrIg8F/jwfXQtp8x5FFo4UnfGghAj3gS6EX5D4 DSRWrasDwzqleEwvVuVBfpMPvZoXWcUYf/J92ATxXrX+GS3rhXK+466y/LgLSh82 4Qqy8UitTMZpg6BI5/7eUOSc7OdYCQTBxbLHqJqQJ3lSQAaRBxUKO+iPosVlTsdQ luP2VXpG685yHmTr6yWct8rMfJIIRPmj4YrK2EcK8E4gcl2QXgkxn+6+PsawC6B8 /Iqbi6OJ -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:54 2026 by rpki-client