This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IJSkzT2hFpdIaKAzWdQVbjDAJf0.roa File: IJSkzT2hFpdIaKAzWdQVbjDAJf0.roa (raw, json) Hash identifier: HZ7RYICrymotnMGoIeZoHvye7rL0BBdk/T+PD3RWruo= Subject key identifier: 20:94:A4:CD:3D:A1:16:97:48:68:A0:33:59:D4:15:6E:30:C0:25:FD Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3550D9753802566A534394BCD04D48 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IJSkzT2hFpdIaKAzWdQVbjDAJf0.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 85.122.232.0/24 maxlen: 24 85.122.233.0/24 maxlen: 24 85.122.234.0/24 maxlen: 24 85.122.235.0/24 maxlen: 24 85.122.236.0/24 maxlen: 24 85.122.237.0/24 maxlen: 24 85.122.238.0/24 maxlen: 24 85.122.239.0/24 maxlen: 24 85.122.240.0/24 maxlen: 24 85.122.241.0/24 maxlen: 24 85.122.242.0/24 maxlen: 24 85.122.243.0/24 maxlen: 24 85.122.244.0/24 maxlen: 24 85.122.245.0/24 maxlen: 24 85.122.246.0/24 maxlen: 24 85.122.247.0/24 maxlen: 24 85.122.248.0/24 maxlen: 24 85.122.249.0/24 maxlen: 24 85.122.250.0/24 maxlen: 24 85.122.251.0/24 maxlen: 24 85.122.252.0/24 maxlen: 24 85.122.254.0/24 maxlen: 24 85.122.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:50:d9:75:38:02:56:6a:53:43:94:bc:d0:4d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2094a4cd3da116974868a03359d4156e30c025fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:8d:5c:ed:97:82:ec:ed:1a:69:91:ec:88: a0:4a:48:3b:5c:a4:6a:82:71:5b:fc:2c:9b:dc:0e: 8f:85:31:7e:be:5b:7d:53:59:d4:28:78:8a:9f:7a: 76:c2:b6:e8:98:2f:eb:04:70:13:ad:a1:22:96:40: e8:51:5c:e4:15:f4:bf:4c:29:71:5a:6f:9a:88:2f: 59:43:e6:dc:6f:57:11:3b:34:8e:78:c9:a0:92:9c: a8:d4:50:60:27:cc:3e:9a:92:19:df:73:1b:bd:22: e5:2d:c6:62:67:10:c3:c2:68:31:2f:29:f0:a3:ec: 0e:f9:f4:2e:94:57:d8:4c:9f:5a:39:cd:d0:b8:d4: ef:67:6e:33:d7:a4:9b:db:8a:2a:4a:aa:4f:14:5c: 29:09:8d:01:2e:e0:a6:ea:43:7b:82:a1:f0:39:5e: ac:01:bc:c6:12:a3:42:80:29:0a:2a:47:de:22:63: 1c:ee:aa:30:d2:d7:e5:e3:2f:59:a5:37:1a:6b:fe: e1:e9:2a:05:d3:b6:3b:ba:ab:13:fb:61:02:5a:c0: 10:9b:f8:f6:10:21:98:86:5e:2d:b0:e4:e2:23:e9: dc:dc:a5:9a:da:35:77:d3:d4:c5:56:3a:15:c0:c6: 48:5b:2d:ef:97:89:c0:27:da:bd:51:05:aa:1a:dd: 5f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:94:A4:CD:3D:A1:16:97:48:68:A0:33:59:D4:15:6E:30:C0:25:FD X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IJSkzT2hFpdIaKAzWdQVbjDAJf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.122.232.0-85.122.252.255 85.122.254.0/23 Signature Algorithm: sha256WithRSAEncryption 12:74:12:35:e6:f5:49:a0:6c:00:bc:03:cc:79:83:c1:00:2a: ce:64:28:e7:2b:ee:a5:d6:24:73:5b:b6:ba:ac:86:74:31:a1: 1a:24:e2:da:8b:7b:22:e1:60:b4:6d:69:4d:e2:9c:7e:5b:c2: 85:6e:3e:f3:f9:84:12:33:37:04:75:44:ec:0c:1b:f5:f1:47: 6e:da:06:1b:db:f8:b4:5e:e4:cc:90:dc:34:1f:d9:4f:66:2a: 36:94:bb:d4:9c:dd:fc:ea:a0:ee:81:41:77:06:3a:71:33:30: 1c:bf:89:81:65:cc:af:5c:e7:22:cb:83:21:f8:dd:03:b5:08: b4:43:87:68:11:ef:ca:81:29:4b:98:bc:c5:5e:c4:ee:19:ef: 30:95:cc:56:f6:e4:cd:eb:90:67:df:36:2f:c1:5e:11:e4:40: 65:08:30:f4:c4:c3:62:89:5b:9c:3b:f9:62:da:77:ca:9b:19: 83:ad:36:0e:5d:ad:45:9b:f2:8e:af:d0:ca:c5:47:7e:33:05: 7f:0a:a6:8e:97:72:8a:1e:c6:78:2a:dc:7f:73:ef:3d:7a:77: 57:c3:74:bb:f7:19:f3:11:50:e3:a4:de:3b:21:57:d7:e7:53: e0:a6:4a:6e:e3:94:8d:0e:53:9d:58:73:4f:0a:16:b5:ee:4c: 3a:e3:8b:be -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7NVDZdTgCVmpTQ5S80E1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDk0YTRjZDNkYTExNjk3NDg2OGEwMzM1OWQ0MTU2ZTMwYzAyNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT6NXO2XguztGmmR7IigSkg7XKRq gnFb/Cyb3A6PhTF+vlt9U1nUKHiKn3p2wrbomC/rBHATraEilkDoUVzkFfS/TClx Wm+aiC9ZQ+bcb1cROzSOeMmgkpyo1FBgJ8w+mpIZ33MbvSLlLcZiZxDDwmgxLynw o+wO+fQulFfYTJ9aOc3QuNTvZ24z16Sb24oqSqpPFFwpCY0BLuCm6kN7gqHwOV6s AbzGEqNCgCkKKkfeImMc7qow0tfl4y9ZpTcaa/7h6SoF07Y7uqsT+2ECWsAQm/j2 ECGYhl4tsOTiI+nc3KWa2jV309TFVjoVwMZIWy3vl4nAJ9q9UQWqGt1fUQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCCUpM09oRaXSGigM1nUFW4wwCX9MB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvSUpTa3pUMmhGcGRJYUtBeldkUVZiakRBSmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANVeugD BABVevwDBAFVev4wDQYJKoZIhvcNAQELBQADggEBABJ0EjXm9UmgbAC8A8x5g8EA Ks5kKOcr7qXWJHNbtrqshnQxoRok4tqLeyLhYLRtaU3inH5bwoVuPvP5hBIzNwR1 ROwMG/XxR27aBhvb+LRe5MyQ3DQf2U9mKjaUu9Sc3fzqoO6BQXcGOnEzMBy/iYFl zK9c5yLLgyH43QO1CLRDh2gR78qBKUuYvMVexO4Z7zCVzFb25M3rkGffNi/BXhHk QGUIMPTEw2KJW5w7+WLad8qbGYOtNg5drUWb8o6v0MrFR34zBX8Kpo6Xcooexngq 3H9z7z16d1fDdLv3GfMRUOOk3jshV9fnU+CmSm7jlI0OU51Yc08KFrXuTDrji74= -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:34 2026 by rpki-client