This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/itvEUHoAaJl17faWlj6NT_FxL94.roa
File: itvEUHoAaJl17faWlj6NT_FxL94.roa (raw, json)
Hash identifier: AjucNzluWbTiJYxrYlGErePUiK0Itei7jfiA2tx5Tk0=
Subject key identifier: 8A:DB:C4:50:7A:00:68:99:75:ED:F6:96:96:3E:8D:4F:F1:71:2F:DE
Certificate issuer: /CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Certificate serial: 019B7A5B6602C9CCAA4FBF3484B04728F47B
Authority key identifier: 1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/itvEUHoAaJl17faWlj6NT_FxL94.roa
Signing time: Thu 01 Jan 2026 16:19:28 +0000
ROA not before: Thu 01 Jan 2026 16:19:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 89.18.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:66:02:c9:cc:aa:4f:bf:34:84:b0:47:28:f4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1e2eaaef0701595ac2754d0121217e7b91d739
Validity
Not Before: Jan 1 16:19:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8adbc4507a00689975edf696963e8d4ff1712fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:82:59:6f:ff:5d:8a:6c:f3:17:43:9e:a6:
19:61:9c:8a:7f:fa:bc:b6:4f:9e:32:6a:58:f8:df:
67:e7:f8:a9:5b:58:d8:16:71:0e:c7:bf:4a:99:bd:
cd:da:2b:64:3c:b9:26:be:47:73:95:7b:50:14:8b:
e7:21:f5:24:bb:47:17:4b:eb:f9:0b:3f:07:28:e5:
36:98:86:c8:67:b3:8e:b7:57:47:c3:e8:87:75:e8:
92:24:7c:34:f4:33:c2:a2:8c:90:0e:0f:7b:c4:80:
ab:f3:97:0a:9b:13:34:d8:2b:d5:06:b8:8d:9a:b8:
b2:e8:1b:6e:22:4c:d8:d9:78:76:55:ff:97:0b:23:
a8:84:cf:20:d6:68:b4:e1:43:59:e1:f8:f8:9c:8b:
8b:de:59:f2:0c:d0:f6:04:b6:23:45:52:eb:f5:30:
d5:50:5c:f0:52:0b:48:31:ee:c0:f2:c7:9f:bd:7d:
92:02:01:86:6a:2c:9e:d1:b0:69:87:58:c7:59:d3:
8b:50:d6:a4:85:9c:76:79:a6:da:6b:99:c1:5f:95:
8c:46:64:a8:e1:e1:5a:15:2a:61:f5:5d:fd:e5:c6:
3f:4f:85:e7:d4:49:83:73:15:68:60:39:c8:44:46:
4e:46:55:98:c2:fc:64:73:9d:c3:65:27:9c:4c:b8:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DB:C4:50:7A:00:68:99:75:ED:F6:96:96:3E:8D:4F:F1:71:2F:DE
X509v3 Authority Key Identifier:
keyid:1F:1E:2E:AA:EF:07:01:59:5A:C2:75:4D:01:21:21:7E:7B:91:D7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hx4uqu8HAVlawnVNASEhfnuR1zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/itvEUHoAaJl17faWlj6NT_FxL94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/4d6ffd-1fac-497f-810c-2b34b8433bb5/1/Hx4uqu8HAVlawnVNASEhfnuR1zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.18.60.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:f0:5f:68:1f:22:d0:12:9f:90:64:26:96:80:af:82:29:16:
40:46:33:c6:1a:d6:f2:e4:a9:61:19:ae:a3:07:63:06:92:27:
69:2c:68:c5:e3:aa:a9:69:b7:c2:00:6f:ed:32:7a:c9:8f:16:
e6:c4:c7:b6:87:95:c9:9c:f2:0b:8e:e7:98:43:12:8f:ba:e5:
ab:2f:66:71:5f:dc:07:35:e9:be:41:50:d0:21:7e:5d:00:ad:
58:1f:62:c1:b4:ad:71:47:59:b1:33:74:49:e2:45:d5:86:6b:
3c:92:7a:9f:93:4c:f3:37:f7:02:96:cf:c5:8a:5b:a0:a5:44:
92:70:a6:e2:1a:7d:33:b2:b9:91:1f:38:06:2b:18:eb:f8:5d:
1a:69:5f:b4:ca:f3:0a:11:81:70:6f:58:03:b4:31:c6:ec:b0:
d6:da:be:20:8f:ac:7b:e7:4b:bf:6a:7e:b5:6a:c0:94:1e:fc:
ee:a9:cd:d1:a3:66:4f:00:b8:5a:77:43:01:30:39:88:76:4c:
2b:87:47:a2:89:f0:f9:ff:7d:86:fb:85:ab:c0:44:8c:e3:54:
ad:55:09:14:98:14:24:74:14:b2:68:9b:08:1b:7d:2f:e9:70:
d2:d9:be:8a:f6:2b:20:82:93:07:72:8c:bb:47:f8:a9:df:d6:
e5:ca:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:44 2026 by rpki-client