This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/IZQtORr-3U05VM82NLGSac5kUKo.roa File: IZQtORr-3U05VM82NLGSac5kUKo.roa (raw, json) Hash identifier: vKvrHvX6TuHXpl6ZvCaEsWmF+MUfHlyXbUCXrMpEZ9U= Subject key identifier: 21:94:2D:39:1A:FE:DD:4D:39:54:CF:36:34:B1:92:69:CE:64:50:AA Certificate issuer: /CN=4d70af1a99886c9101d135f54bd2bdef358b266e Certificate serial: 019B7C80D252CC541026971351E268DF88F5 Authority key identifier: 4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/IZQtORr-3U05VM82NLGSac5kUKo.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35222 IP address blocks: 188.215.113.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.mft rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:d2:52:cc:54:10:26:97:13:51:e2:68:df:88:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d70af1a99886c9101d135f54bd2bdef358b266e Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21942d391afedd4d3954cf3634b19269ce6450aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:1f:74:90:50:8c:75:42:b0:f2:d6:54:9b: 42:00:cc:a3:63:4e:eb:00:c5:6b:bf:33:fd:3b:02: 85:3d:32:f8:6f:64:24:dc:4a:23:ba:1f:89:32:4d: d5:d3:cf:4e:ae:09:3c:2b:ca:2c:f0:2f:0e:1a:82: 86:11:c7:c1:19:35:3c:79:36:b0:94:d0:fa:b5:41: d8:f8:b8:46:07:20:82:71:d1:9c:b0:c2:df:b0:ab: a7:68:41:33:8a:53:9b:94:de:26:3d:0e:15:0e:6f: 93:c2:4e:aa:13:b9:47:9a:5a:31:29:56:45:84:5d: b7:56:8e:4c:9a:ee:3d:9e:31:c3:1d:a0:66:a7:f7: fb:5c:73:fa:fc:e1:60:05:26:2b:16:90:ec:ae:ad: 0b:e1:21:6b:03:8c:4e:f9:ef:9f:87:1d:5e:39:24: 55:fe:72:60:08:99:90:47:d1:d5:06:30:be:7f:61: db:f5:e0:3a:de:3b:3c:6f:79:e7:34:82:32:26:27: 3f:bc:f0:88:f9:e4:d6:b5:8f:e6:c7:75:a1:84:67: 02:03:d0:b6:4d:0d:21:0a:f9:b2:ff:93:07:99:85: b1:e8:13:5b:7d:ea:d0:09:8f:56:e0:69:66:64:ae: 89:6a:5c:c3:4e:a9:7e:4f:61:74:8f:70:e0:2c:e7: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:94:2D:39:1A:FE:DD:4D:39:54:CF:36:34:B1:92:69:CE:64:50:AA X509v3 Authority Key Identifier: keyid:4D:70:AF:1A:99:88:6C:91:01:D1:35:F5:4B:D2:BD:EF:35:8B:26:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXCvGpmIbJEB0TX1S9K97zWLJm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/IZQtORr-3U05VM82NLGSac5kUKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a98fc7-7935-4eae-962a-461ab0ecee01/1/TXCvGpmIbJEB0TX1S9K97zWLJm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.215.113.0/24 Signature Algorithm: sha256WithRSAEncryption 61:19:b5:11:43:96:4c:0b:1f:b0:98:6c:d3:19:c0:2b:c7:b5: 87:dd:65:82:9c:d5:54:3a:82:4a:ec:ff:c7:79:05:0f:5f:5f: 38:e6:7e:42:19:03:ca:c3:85:e4:bd:e3:8e:72:6e:7d:0f:8e: a7:6f:6b:e6:ee:4d:cc:6a:2e:ea:d5:0d:19:fa:98:a7:85:9b: a5:27:38:7c:0e:e4:85:c8:7b:e6:be:32:c0:e3:34:4f:6a:34: 3a:68:71:09:90:81:2a:a2:56:cb:cb:77:5a:f9:b0:36:58:9a: db:cc:9d:3a:02:69:c5:c2:06:1d:a8:57:d9:53:ae:bd:be:6a: c0:07:da:53:73:e2:44:c8:89:b0:6a:f0:26:df:1f:be:9f:0f: 2a:f2:57:80:e4:82:b9:40:3c:a7:3d:cc:a1:33:8c:31:e9:1f: e6:d8:c6:1e:d6:21:db:e0:b2:86:e1:32:3c:bd:b2:47:2f:08: 9c:61:d8:bb:7c:9e:2f:fc:25:05:da:cc:9d:9e:fc:5b:0f:de: 87:a7:3c:50:d5:d2:8c:9a:21:2f:3e:7d:c1:4d:50:67:83:b7: 3b:45:56:3b:87:67:c6:ec:88:66:a3:97:e1:2a:ff:36:32:bc: ec:6a:27:0c:2b:2e:a3:be:1a:e8:a4:08:1d:e5:f4:46:7d:e5: 52:e5:0e:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gNJSzFQQJpcTUeJo34j1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzBhZjFhOTk4ODZjOTEwMWQxMzVmNTRiZDJiZGVmMzU4 YjI2NmUwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTk0MmQzOTFhZmVkZDRkMzk1NGNmMzYzNGIxOTI2OWNlNjQ1MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEfdJBQjHVCsPLWVJtCAMyjY07r AMVrvzP9OwKFPTL4b2Qk3Eojuh+JMk3V089Orgk8K8os8C8OGoKGEcfBGTU8eTaw lND6tUHY+LhGByCCcdGcsMLfsKunaEEzilOblN4mPQ4VDm+Twk6qE7lHmloxKVZF hF23Vo5Mmu49njHDHaBmp/f7XHP6/OFgBSYrFpDsrq0L4SFrA4xO+e+fhx1eOSRV /nJgCJmQR9HVBjC+f2Hb9eA63js8b3nnNIIyJic/vPCI+eTWtY/mx3WhhGcCA9C2 TQ0hCvmy/5MHmYWx6BNbferQCY9W4GlmZK6JalzDTql+T2F0j3DgLOdmbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGULTka/t1NOVTPNjSxkmnOZFCqMB8GA1UdIwQY MBaAFE1wrxqZiGyRAdE19UvSve81iyZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEt NDYxYWIwZWNlZTAxLzEvSVpRdE9Sci0zVTA1Vk04Mk5MR1NhYzVrVUtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hOThmYzctNzkzNS00ZWFlLTk2MmEtNDYxYWIwZWNlZTAx LzEvVFhDdkdwbUliSkVCMFRYMVM5Szk3eldMSm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNdxMA0G CSqGSIb3DQEBCwUAA4IBAQBhGbURQ5ZMCx+wmGzTGcArx7WH3WWCnNVUOoJK7P/H eQUPX1845n5CGQPKw4XkveOOcm59D46nb2vm7k3Mai7q1Q0Z+pinhZulJzh8DuSF yHvmvjLA4zRPajQ6aHEJkIEqolbLy3da+bA2WJrbzJ06AmnFwgYdqFfZU669vmrA B9pTc+JEyImwavAm3x++nw8q8leA5IK5QDynPcyhM4wx6R/m2MYe1iHb4LKG4TI8 vbJHLwicYdi7fJ4v/CUF2sydnvxbD96HpzxQ1dKMmiEvPn3BTVBng7c7RVY7h2fG 7Ihmo5fhKv82MrzsaicMKy6jvhropAgd5fRGfeVS5Q6z -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:26 2026 by rpki-client