This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/iK87eJg7y-_rcG1D3z4FzaXgRNE.roa File: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (raw, json) Hash identifier: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY= Subject key identifier: 88:AF:3B:78:98:3B:CB:EF:EB:70:6D:43:DF:3E:05:CD:A5:E0:44:D1 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019B7D5C315860B7567BE7EE8C73CD987D79 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/iK87eJg7y-_rcG1D3z4FzaXgRNE.roa Signing time: Fri 02 Jan 2026 06:19:12 +0000 ROA not before: Fri 02 Jan 2026 06:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2821 IP address blocks: 45.10.139.0/24 maxlen: 24 185.101.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:31:58:60:b7:56:7b:e7:ee:8c:73:cd:98:7d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jan 2 06:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88af3b78983bcbefeb706d43df3e05cda5e044d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:0e:e1:ac:81:dc:ac:7e:e0:0b:2c:29:32: 49:ce:f0:54:37:b9:56:e1:13:40:4b:3e:60:8a:84: be:fd:3a:1a:89:a1:3e:55:12:80:94:e3:36:7c:6b: 6f:c3:1d:98:05:e5:cb:6e:bc:a7:a8:9b:a0:aa:d0: 89:de:f7:dc:81:08:b3:f6:75:8b:8c:e7:2f:7f:50: 0d:65:c0:e9:14:8f:1a:22:a4:0b:71:e1:9e:c0:6d: bf:d7:84:ed:ff:6e:31:93:0c:64:80:8d:f9:31:1b: 5d:1f:c5:da:73:70:ea:16:39:93:d5:53:89:3f:d0: f4:8e:f3:82:25:55:45:7e:29:95:0e:47:7d:cc:08: e6:1b:7a:44:5c:55:84:32:54:9d:6c:5a:68:1f:cd: 88:1e:77:69:2a:a3:fc:66:e8:f9:bf:61:ee:e3:45: 32:bb:56:2d:c7:b5:b6:77:28:f4:94:14:66:58:e0: 36:ab:65:a8:bb:1f:d5:ab:f6:31:ff:0d:e9:a7:3e: 11:dd:11:43:bc:08:69:16:81:0b:29:b6:9f:7e:a8: 5f:a1:32:61:a0:be:2c:a9:35:b8:08:7e:29:8d:c2: 45:5c:3e:56:d1:39:65:ae:71:46:94:4d:57:ed:75: 7d:9f:04:19:67:54:1d:ef:70:97:98:08:70:99:8e: 2e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AF:3B:78:98:3B:CB:EF:EB:70:6D:43:DF:3E:05:CD:A5:E0:44:D1 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/iK87eJg7y-_rcG1D3z4FzaXgRNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.139.0/24 185.101.128.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:ed:e5:35:f5:72:66:f5:e6:4f:90:05:f5:76:78:1e:ad:7c: 84:89:eb:76:97:f0:bb:76:b0:8d:11:fb:3b:d2:6e:98:21:ed: 82:65:fa:76:42:65:2c:9a:57:fb:f4:ad:a6:df:a2:cd:62:5e: 48:3e:e9:8e:89:55:af:d4:1f:0c:64:c4:22:0e:98:4c:91:0a: fb:2c:de:f3:88:31:7e:4b:05:4c:34:96:87:fc:80:89:59:6a: 99:cf:72:5d:5c:a7:ac:f0:43:b9:f5:68:a8:98:5e:0f:a7:36: 13:d1:84:9b:5c:30:7d:05:3d:b6:1c:6d:dd:b5:9b:e8:b3:93: 3a:86:9f:d7:59:aa:89:da:c4:85:ce:cb:e1:e2:81:39:f4:4e: 6e:4a:ba:df:0c:e4:f5:c9:be:34:1b:88:ec:62:87:b5:f8:bb: 51:d5:12:ba:b2:54:33:42:12:e5:1c:ef:b5:e9:b6:46:4f:30: 96:f0:76:89:a3:e4:4e:94:f3:aa:60:f8:c3:de:85:68:73:bc: 8e:35:2e:f4:aa:ef:b3:47:f1:fc:6a:70:06:e9:ba:e8:1c:5d: 45:d2:2e:da:76:90:e5:e8:61:74:59:45:8c:45:37:1c:88:1c: 59:32:a3:f4:7f:eb:10:4f:02:47:d2:b7:09:40:38:f7:1f:4b: 94:b4:93:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XDFYYLdWe+fujHPNmH15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwMTAyMDYxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGFmM2I3ODk4M2JjYmVmZWI3MDZkNDNkZjNlMDVjZGE1ZTA0NGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xwO4ayB3Kx+4AssKTJJzvBUN7lW 4RNASz5gioS+/ToaiaE+VRKAlOM2fGtvwx2YBeXLbrynqJugqtCJ3vfcgQiz9nWL jOcvf1ANZcDpFI8aIqQLceGewG2/14Tt/24xkwxkgI35MRtdH8Xac3DqFjmT1VOJ P9D0jvOCJVVFfimVDkd9zAjmG3pEXFWEMlSdbFpoH82IHndpKqP8Zuj5v2Hu40Uy u1Ytx7W2dyj0lBRmWOA2q2Woux/Vq/Yx/w3ppz4R3RFDvAhpFoELKbaffqhfoTJh oL4sqTW4CH4pjcJFXD5W0TllrnFGlE1X7XV9nwQZZ1Qd73CXmAhwmY4uRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIivO3iYO8vv63BtQ98+Bc2l4ETRMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvaUs4N2VKZzd5LV9yY0cxRDN6NEZ6YVhnUk5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQqLAwQA uWWAMA0GCSqGSIb3DQEBCwUAA4IBAQBL7eU19XJm9eZPkAX1dngerXyEiet2l/C7 drCNEfs70m6YIe2CZfp2QmUsmlf79K2m36LNYl5IPumOiVWv1B8MZMQiDphMkQr7 LN7ziDF+SwVMNJaH/ICJWWqZz3JdXKes8EO59WiomF4PpzYT0YSbXDB9BT22HG3d tZvos5M6hp/XWaqJ2sSFzsvh4oE59E5uSrrfDOT1yb40G4jsYoe1+LtR1RK6slQz QhLlHO+16bZGTzCW8HaJo+ROlPOqYPjD3oVoc7yONS70qu+zR/H8anAG6broHF1F 0i7adpDl6GF0WUWMRTcciBxZMqP0f+sQTwJH0rcJQDj3H0uUtJNe -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client