This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/ikavjZ5f6GJawA563R9lfvFF_yw.roa File: ikavjZ5f6GJawA563R9lfvFF_yw.roa (raw, json) Hash identifier: xj6NjfSn9z5nQZs/dmQKm0hr04bNYyjHHm+s3X5QLbI= Subject key identifier: 8A:46:AF:8D:9E:5F:E8:62:5A:C0:0E:7A:DD:1F:65:7E:F1:45:FF:2C Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a Certificate serial: 019B7F1556318813524B6C53742FBF0D5F90 Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/ikavjZ5f6GJawA563R9lfvFF_yw.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.244.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:56:31:88:13:52:4b:6c:53:74:2f:bf:0d:5f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a46af8d9e5fe8625ac00e7add1f657ef145ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:99:6c:1f:db:8d:d9:a0:c3:77:6b:fd:f2: 77:04:ad:2d:c4:5c:07:c7:02:b7:bc:45:1d:1f:44: 24:8b:02:4a:2c:e4:60:79:b5:9e:9c:36:16:36:3b: e5:5f:5f:59:1d:ab:c9:99:8d:05:57:8b:ab:f4:31: b0:e5:44:ed:8b:b1:42:8c:4f:11:95:08:45:78:d5: be:b6:e0:d6:52:e5:39:91:34:cc:e7:b9:fb:ff:99: 88:9a:9c:cc:d5:d5:3a:7f:af:06:de:e0:27:f0:d2: 80:5e:49:df:c2:f7:32:19:66:7e:0c:a0:04:0d:9a: 36:64:49:24:4c:18:8b:d6:24:c2:cc:9a:e4:90:fc: 72:53:e3:34:d9:51:51:64:ea:32:6c:3c:9e:22:03: 11:6b:7b:65:ba:8b:16:42:a0:02:11:46:65:42:22: 62:09:b6:37:70:21:b7:ca:68:a3:64:ad:e2:60:9d: 6d:34:aa:5e:73:43:3e:cf:f3:6a:66:e2:10:f3:c8: ad:51:27:1c:71:bb:5f:fe:d2:d4:75:21:4b:e0:94: b5:43:82:24:e0:b2:58:ef:d4:6c:46:19:11:1a:fa: 40:b8:be:00:8f:0f:dc:11:1e:cc:dd:ca:ed:6c:05: 1c:3e:3d:14:2f:0a:f1:46:b7:c2:7e:ae:72:1c:50: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:AF:8D:9E:5F:E8:62:5A:C0:0E:7A:DD:1F:65:7E:F1:45:FF:2C X509v3 Authority Key Identifier: keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/ikavjZ5f6GJawA563R9lfvFF_yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.244.28.0/23 Signature Algorithm: sha256WithRSAEncryption 15:4b:02:69:4e:a2:ce:26:c1:0d:d7:d8:b9:a9:5d:87:9e:71: d1:dc:a9:88:3b:4a:d1:6f:6e:e7:57:23:d0:ab:f8:22:70:32: 75:b0:2f:55:4d:ea:6d:5d:bd:d4:53:06:f2:67:ed:62:00:c4: 9f:af:46:57:3a:c2:c2:f5:9d:f6:a0:f3:bf:ff:cc:7e:be:6f: 88:5d:b3:11:45:fd:85:41:57:e7:be:30:10:3a:40:06:96:a4: 62:c7:2f:d0:ee:ea:9e:79:9a:0c:24:5f:e1:84:22:71:96:84: 9b:bd:70:2c:6d:ed:11:45:38:6d:35:1f:8f:bd:11:ac:c7:81: 8e:48:83:49:4b:b2:65:9d:84:b9:8b:b7:90:36:37:71:8e:dd: 20:68:ec:d0:a7:7c:24:79:77:ca:16:e8:c6:ec:1b:0f:ca:e3: 76:53:a4:92:03:de:8a:f4:08:1e:7f:cd:33:de:89:bb:26:28: cf:9b:e5:6b:b7:b3:a8:8b:5e:0a:ed:c1:a7:f4:65:18:36:6d: af:11:86:9b:13:ca:2b:de:38:5f:eb:3d:3a:76:d1:85:15:cd: 51:1e:cc:ab:29:58:70:a8:80:cc:68:82:dd:5b:8c:04:2a:38: 45:9c:eb:8c:59:fe:a0:6a:d3:ec:d9:31:02:bb:dd:97:58:2a: 5c:1e:8d:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVYxiBNSS2xTdC+/DV+QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm ZTAwOWEwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTQ2YWY4ZDllNWZlODYyNWFjMDBlN2FkZDFmNjU3ZWYxNDVmZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqemZbB/bjdmgw3dr/fJ3BK0txFwH xwK3vEUdH0QkiwJKLORgebWenDYWNjvlX19ZHavJmY0FV4ur9DGw5UTti7FCjE8R lQhFeNW+tuDWUuU5kTTM57n7/5mImpzM1dU6f68G3uAn8NKAXknfwvcyGWZ+DKAE DZo2ZEkkTBiL1iTCzJrkkPxyU+M02VFRZOoybDyeIgMRa3tluosWQqACEUZlQiJi CbY3cCG3ymijZK3iYJ1tNKpec0M+z/NqZuIQ88itUScccbtf/tLUdSFL4JS1Q4Ik 4LJY79RsRhkRGvpAuL4Ajw/cER7M3crtbAUcPj0ULwrxRrfCfq5yHFCFEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpGr42eX+hiWsAOet0fZX7xRf8sMB8GA1UdIwQY MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt ZWZhYWZmMGE5ODJmLzEvaWthdmpaNWY2R0phd0E1NjNSOWxmdkZGX3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QcMA0G CSqGSIb3DQEBCwUAA4IBAQAVSwJpTqLOJsEN19i5qV2HnnHR3KmIO0rRb27nVyPQ q/gicDJ1sC9VTeptXb3UUwbyZ+1iAMSfr0ZXOsLC9Z32oPO//8x+vm+IXbMRRf2F QVfnvjAQOkAGlqRixy/Q7uqeeZoMJF/hhCJxloSbvXAsbe0RRThtNR+PvRGsx4GO SINJS7JlnYS5i7eQNjdxjt0gaOzQp3wkeXfKFujG7BsPyuN2U6SSA96K9Agef80z 3om7JijPm+Vrt7Ooi14K7cGn9GUYNm2vEYabE8or3jhf6z06dtGFFc1RHsyrKVhw qIDMaILdW4wEKjhFnOuMWf6gatPs2TECu92XWCpcHo2x -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:23 2026 by rpki-client