This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/iuRgfu21PTYsbZmCXChlKNQrvwY.roa File: iuRgfu21PTYsbZmCXChlKNQrvwY.roa (raw, json) Hash identifier: bBVTlacYWROGx5pT6t29eLcMFfwpCwecFakjUlLqFkQ= Subject key identifier: 8A:E4:60:7E:ED:B5:3D:36:2C:6D:99:82:5C:28:65:28:D4:2B:BF:06 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC83264AA3A4074398734CDF314033B Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/iuRgfu21PTYsbZmCXChlKNQrvwY.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209847 IP address blocks: 5.252.21.0/24 maxlen: 24 5.252.22.0/24 maxlen: 24 5.252.23.0/24 maxlen: 24 146.19.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:32:64:aa:3a:40:74:39:87:34:cd:f3:14:03:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae4607eedb53d362c6d99825c286528d42bbf06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:f4:5a:ad:40:5d:ab:e4:43:ee:dd:c8:c3: 87:79:aa:72:62:68:84:44:91:af:65:84:b1:6c:ed: ef:4e:a4:22:f3:0a:4c:54:d5:a6:96:cf:b3:58:96: 91:2b:fc:e9:c6:8b:97:30:a5:49:a9:9c:00:aa:18: 39:a3:42:11:70:b3:b2:48:aa:7b:da:29:40:ad:82: cb:5a:4c:55:00:86:4c:16:aa:d9:3e:6f:1a:69:40: 95:be:70:29:01:64:c8:ac:dd:25:a4:90:b5:7e:4c: 19:89:6f:0a:bb:ba:21:57:f3:74:0d:8b:f7:5e:08: 35:09:c2:ff:bc:6c:4a:da:06:14:f8:5b:d6:9f:53: 21:ac:d5:53:63:ee:fb:d5:34:04:86:6b:3b:30:c5: 6a:16:25:54:1d:66:ad:10:ea:49:71:3e:bd:a8:d6: 48:b3:2e:cc:73:19:4b:a0:a0:78:8c:ac:e1:e3:e1: 4e:0c:e1:c4:22:c4:6a:76:f3:68:8b:a0:f8:d9:cc: 2e:84:b7:78:53:2a:a2:68:9e:7b:f9:55:b0:6f:40: 27:86:a2:aa:0b:09:2e:ed:34:de:ef:67:9b:c2:04: 88:bb:1d:a7:a2:6a:0f:9f:5d:ad:f9:ae:4b:a3:e3: 79:76:ff:b6:25:de:ce:86:42:93:a6:4f:35:16:ee: 02:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:60:7E:ED:B5:3D:36:2C:6D:99:82:5C:28:65:28:D4:2B:BF:06 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/iuRgfu21PTYsbZmCXChlKNQrvwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.21.0-5.252.23.255 146.19.233.0/24 Signature Algorithm: sha256WithRSAEncryption 85:1a:c4:08:65:b4:72:ec:30:81:ed:e1:1a:f3:3d:8d:a8:3a: 50:0b:97:d6:fe:58:f8:c9:9d:cf:e1:a8:8e:6d:92:4b:3f:d3: 69:cc:93:b1:07:19:f8:75:ef:2d:23:d4:65:94:e2:c6:10:30: 9b:cf:65:e8:55:56:47:88:f0:94:28:35:81:9a:7d:5e:61:64: af:ef:a2:24:1b:7e:40:ae:dd:ee:a8:51:e1:4f:bc:be:3f:25: ce:ff:d9:6d:a8:7d:35:4e:5b:0c:3f:bf:47:ef:25:0b:65:f6: 2f:af:7c:95:a2:24:eb:5d:0a:ae:ae:e6:cf:e9:49:f1:fb:6a: 09:5b:6e:2e:9e:a9:42:77:5a:fa:66:0e:a3:eb:e1:77:5c:5d: 38:3c:19:5a:5a:78:31:0f:ba:48:c4:3e:83:91:50:bb:2d:af: c1:b5:fb:93:9f:b7:f2:c2:15:0d:76:b4:df:5f:ab:64:fc:a1: 5c:58:53:61:ec:13:a1:06:a4:fc:d8:31:5c:2d:68:20:63:22: 1b:55:d6:89:db:ec:db:81:8a:1b:f1:ac:9d:13:32:d7:8b:41: 38:74:e4:fd:23:67:aa:ac:87:82:ac:ec:68:25:68:e0:30:f7: 3e:4a:68:b6:6b:be:89:49:45:36:5a:56:fb:85:2f:e9:8a:e3: a7:67:84:56 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt6yDJkqjpAdDmHNM3zFAM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWU0NjA3ZWVkYjUzZDM2MmM2ZDk5ODI1YzI4NjUyOGQ0MmJiZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ70Wq1AXavkQ+7dyMOHeapyYmiE RJGvZYSxbO3vTqQi8wpMVNWmls+zWJaRK/zpxouXMKVJqZwAqhg5o0IRcLOySKp7 2ilArYLLWkxVAIZMFqrZPm8aaUCVvnApAWTIrN0lpJC1fkwZiW8Ku7ohV/N0DYv3 Xgg1CcL/vGxK2gYU+FvWn1MhrNVTY+771TQEhms7MMVqFiVUHWatEOpJcT69qNZI sy7McxlLoKB4jKzh4+FODOHEIsRqdvNoi6D42cwuhLd4UyqiaJ57+VWwb0AnhqKq Cwku7TTe72ebwgSIux2nomoPn12t+a5Lo+N5dv+2Jd7OhkKTpk81Fu4CbwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIrkYH7ttT02LG2ZglwoZSjUK78GMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvaXVSZ2Z1MjFQVFlzYlptQ1hDaGxLTlFydndZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAF/BUD BAMF/BADBACSE+kwDQYJKoZIhvcNAQELBQADggEBAIUaxAhltHLsMIHt4RrzPY2o OlALl9b+WPjJnc/hqI5tkks/02nMk7EHGfh17y0j1GWU4sYQMJvPZehVVkeI8JQo NYGafV5hZK/voiQbfkCu3e6oUeFPvL4/Jc7/2W2ofTVOWww/v0fvJQtl9i+vfJWi JOtdCq6u5s/pSfH7aglbbi6eqUJ3WvpmDqPr4XdcXTg8GVpaeDEPukjEPoORULst r8G1+5Oft/LCFQ12tN9fq2T8oVxYU2HsE6EGpPzYMVwtaCBjIhtV1onb7NuBihvx rJ0TMteLQTh05P0jZ6qsh4Ks7GglaOAw9z5KaLZrvolJRTZaVvuFL+mK46dnhFY= -----END CERTIFICATE-----Generated at Wed Jan 21 09:53:52 2026 by rpki-client