This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa File: IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa (raw, json) Hash identifier: AWvg3wl7fzu5i9djaKK4h6Y9sJ9Pr3WgdeDcYIz8ktg= Subject key identifier: 20:16:60:92:FE:22:0A:72:F6:8F:85:C3:77:9B:06:52:6C:99:52:3F Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Certificate serial: 019B7EA57DB5EFCBE9545E181154254FACCE Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208520 IP address blocks: 45.94.14.0/24 maxlen: 24 45.94.15.0/24 maxlen: 24 2001:1497:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.mft rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7d:b5:ef:cb:e9:54:5e:18:11:54:25:4f:ac:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20166092fe220a72f68f85c3779b06526c99523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:a2:02:7c:81:45:38:e8:f5:54:b7:90:73: e4:81:bd:5e:bc:31:4c:bc:ac:ad:ed:12:68:2c:f8: 7e:0c:b4:8d:e6:bb:c4:00:8b:d4:81:78:29:76:8e: 23:bb:57:80:a8:4d:b3:21:63:5e:61:35:2f:64:ee: a8:e5:9d:14:aa:7a:39:5a:86:8e:c3:80:e4:02:62: f7:cf:8b:e8:bc:68:da:29:9d:1a:58:d1:f2:be:9d: d6:21:fe:7a:4f:87:66:65:ad:f6:fa:bb:25:0a:8f: 0f:a3:17:56:4e:4d:a2:10:c3:a2:19:8b:59:37:65: d7:ef:ef:71:dc:1b:99:f2:68:61:6b:21:aa:96:88: 15:d3:73:88:7d:86:f4:93:ed:b5:81:eb:24:53:20: a4:d1:ae:b9:d3:9c:11:cb:f7:4b:03:2c:ce:71:a1: 30:fd:ec:cc:b9:00:65:91:be:ba:6a:30:c9:32:dd: a4:67:74:05:ca:02:f7:01:6c:95:94:78:48:09:be: 9a:0f:4d:ef:45:a1:0b:78:2c:17:b6:bc:3a:b4:4d: d1:fd:45:5e:89:f5:73:4f:61:16:78:1f:57:30:d2: 3e:15:12:ad:7e:6b:a1:cd:b9:ec:40:cb:36:5b:48: dd:7f:6a:1f:89:08:f1:7b:9a:cc:5b:d1:fe:1d:a2: dc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:16:60:92:FE:22:0A:72:F6:8F:85:C3:77:9B:06:52:6C:99:52:3F X509v3 Authority Key Identifier: keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/IBZgkv4iCnL2j4XDd5sGUmyZUj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.14.0/23 IPv6: 2001:1497:2::/48 Signature Algorithm: sha256WithRSAEncryption 4f:4b:94:b4:a3:e6:c8:07:0c:59:68:ef:ab:07:e1:95:93:2d: c1:2b:c1:4b:08:c0:97:8f:f7:a2:36:ef:8c:ec:04:4a:58:62: ad:bc:b0:87:51:c6:af:22:ed:b9:b8:48:94:0d:11:93:52:a9: a3:e2:b5:17:98:32:f1:34:93:e8:09:26:ec:bf:b6:02:8b:77: a2:84:41:47:51:a0:e6:25:63:6b:1d:55:bd:29:05:51:e9:e1: ff:f6:7e:39:29:aa:33:55:73:af:56:33:2d:a5:67:81:d0:4f: 21:dc:5e:97:14:09:2c:f3:45:3b:1a:19:54:16:80:03:63:f2: bd:c6:07:c9:5b:04:8c:7b:c6:f4:4d:86:df:b4:5f:91:f8:6a: 14:cf:e2:b5:49:36:47:19:e8:82:19:00:bc:15:9e:cd:b8:cb: 20:e4:00:5c:76:c9:64:9b:5c:ed:eb:a2:c5:4c:fd:e9:d6:0f: 5a:02:9d:c4:ff:2e:69:45:89:fa:d1:46:a0:87:08:53:86:00: 50:c8:d2:61:6e:43:bd:05:34:45:57:ac:0e:99:d6:02:76:45: 20:88:61:ce:7d:ec:1f:e1:46:d7:96:4f:37:73:5f:56:06:3a: 68:32:db:fd:8a:a9:28:ec:e7:94:fa:d1:61:0b:f2:d6:87:7f: 9f:c5:db:a8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pX2178vpVF4YEVQlT6zOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGRmNTJhZjQ2MGNhNmZhOGM5MjNhNDlmNWNiNzk1ZWE2 NzA3ZjcwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDE2NjA5MmZlMjIwYTcyZjY4Zjg1YzM3NzliMDY1MjZjOTk1MjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSaiAnyBRTjo9VS3kHPkgb1evDFM vKyt7RJoLPh+DLSN5rvEAIvUgXgpdo4ju1eAqE2zIWNeYTUvZO6o5Z0Uqno5WoaO w4DkAmL3z4vovGjaKZ0aWNHyvp3WIf56T4dmZa32+rslCo8PoxdWTk2iEMOiGYtZ N2XX7+9x3BuZ8mhhayGqlogV03OIfYb0k+21geskUyCk0a6505wRy/dLAyzOcaEw /ezMuQBlkb66ajDJMt2kZ3QFygL3AWyVlHhICb6aD03vRaELeCwXtrw6tE3R/UVe ifVzT2EWeB9XMNI+FRKtfmuhzbnsQMs2W0jdf2ofiQjxe5rMW9H+HaLc6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCAWYJL+Igpy9o+Fw3ebBlJsmVI/MB8GA1UdIwQY MBaAFOhN9Sr0YMpvqMkjpJ9ct5XqZwf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUt OTRjMmZkYTM5ZWFkLzEvSUJaZ2t2NGlDbkwyajRYRGQ1c0dVbXlaVWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZTY5MmItNzkzMi00NTU0LThjMTUtOTRjMmZkYTM5ZWFk LzEvNkUzMUt2Umd5bS1veVNPa24xeTNsZXBuQl9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLV4OMA8E AgACMAkDBwAgARSXAAIwDQYJKoZIhvcNAQELBQADggEBAE9LlLSj5sgHDFlo76sH 4ZWTLcErwUsIwJeP96I274zsBEpYYq28sIdRxq8i7bm4SJQNEZNSqaPitReYMvE0 k+gJJuy/tgKLd6KEQUdRoOYlY2sdVb0pBVHp4f/2fjkpqjNVc69WMy2lZ4HQTyHc XpcUCSzzRTsaGVQWgANj8r3GB8lbBIx7xvRNht+0X5H4ahTP4rVJNkcZ6IIZALwV ns24yyDkAFx2yWSbXO3rosVM/enWD1oCncT/LmlFifrRRqCHCFOGAFDI0mFuQ70F NEVXrA6Z1gJ2RSCIYc597B/hRteWTzdzX1YGOmgy2/2KqSjs55T60WEL8taHf5/F 26g= -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:45 2026 by rpki-client