This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iDv27B807urr-WytOv9msVc2eiw.roa File: iDv27B807urr-WytOv9msVc2eiw.roa (raw, json) Hash identifier: alzJDOs0Z2m6xsRe+s1DR+xYct/ABPQaOS0QW5xNDps= Subject key identifier: 88:3B:F6:EC:1F:34:EE:EA:EB:F9:6C:AD:3A:FF:66:B1:57:36:7A:2C Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3599C34C042A76D4C9D31BFE5F9F1 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iDv27B807urr-WytOv9msVc2eiw.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216475 IP address blocks: 94.156.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:59:9c:34:c0:42:a7:6d:4c:9d:31:bf:e5:f9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=883bf6ec1f34eeeaebf96cad3aff66b157367a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:f8:15:33:05:53:e4:99:17:46:38:b2:89: 57:51:73:3c:e2:f4:55:a8:e4:83:56:50:7e:ec:ee: a4:4d:c9:d0:a3:24:61:b9:bc:6f:72:81:86:f3:d2: 47:7a:43:04:84:cd:48:64:be:20:a3:b2:65:77:4d: 58:b1:ce:c2:24:ac:60:a8:a9:2c:aa:0f:7b:5b:dc: a8:50:9d:e5:06:80:eb:42:31:02:aa:53:28:98:fd: d1:b1:96:a2:a7:77:4b:75:aa:18:1f:7c:2f:34:6b: 9c:00:37:33:d9:f7:49:dd:3c:45:43:84:b4:7d:aa: 57:dc:12:73:90:cc:c0:fb:13:83:5a:99:3d:6c:b3: 84:71:54:7f:47:96:7f:c6:64:ce:e7:e4:a7:f7:d7: 23:24:0b:36:51:39:b0:19:b9:25:2c:c9:88:a2:0d: 04:9b:45:45:05:8a:35:ab:fd:76:7d:54:98:48:0d: a5:db:6e:2d:64:18:95:40:34:6b:65:a8:d5:4f:d0: a1:43:d6:b5:af:c3:27:9f:db:a5:ef:38:78:45:cb: 3b:f3:eb:7c:af:e7:4a:25:6e:d5:97:07:1b:9e:72: b1:06:ca:a5:4f:fd:89:58:f2:7e:fb:1f:3e:93:c3: 6b:27:c0:7d:f6:92:78:0f:95:9b:48:2d:90:af:6c: 39:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3B:F6:EC:1F:34:EE:EA:EB:F9:6C:AD:3A:FF:66:B1:57:36:7A:2C X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/iDv27B807urr-WytOv9msVc2eiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.2.0/24 Signature Algorithm: sha256WithRSAEncryption 76:34:bd:10:26:b2:90:5e:d5:3a:9c:5f:96:2a:76:1c:5a:95: 87:d5:ba:98:eb:76:75:2c:ad:92:d7:21:85:2f:b8:7e:c5:e4: ff:94:fa:ec:f6:c7:8e:1a:e3:f0:d8:52:92:54:d0:d0:b8:36: af:cf:a1:7e:2a:2a:11:93:ae:4b:c4:34:82:21:b4:1f:52:9c: e7:09:03:8c:35:fe:b1:cf:05:ea:0a:1a:f0:30:f0:71:e3:1b: 91:54:6d:7a:8d:85:d0:90:5d:03:16:2e:f1:02:3b:86:6e:5f: d1:8f:51:b0:3b:80:66:62:ac:89:85:d2:7e:e4:c0:de:10:22: ae:59:55:b7:fe:f4:3d:c6:86:96:b4:c8:e0:f6:7c:15:f7:64: 3f:1a:e2:37:65:b2:18:d3:44:cb:10:6d:ad:f3:a3:6a:24:3b: 11:16:ae:b3:99:d2:30:b3:9a:9a:82:74:6f:23:ce:78:eb:68: e2:ba:c9:e0:54:ee:1d:e7:79:15:bb:1c:3a:fb:87:79:d3:bc: 3c:d4:be:8e:31:32:87:de:28:6d:26:77:c4:0c:32:02:a6:aa: 82:0d:b2:11:1a:c3:1b:41:74:70:d6:ab:6e:af:5a:43:59:b5: b4:6f:a7:70:99:a6:42:54:a5:59:9c:9d:a1:99:bc:a4:3d:c3: c4:9b:9d:6c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1mcNMBCp21MnTG/5fnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODNiZjZlYzFmMzRlZWVhZWJmOTZjYWQzYWZmNjZiMTU3MzY3YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVH4FTMFU+SZF0Y4solXUXM84vRV qOSDVlB+7O6kTcnQoyRhubxvcoGG89JHekMEhM1IZL4go7Jld01Ysc7CJKxgqKks qg97W9yoUJ3lBoDrQjECqlMomP3RsZaip3dLdaoYH3wvNGucADcz2fdJ3TxFQ4S0 fapX3BJzkMzA+xODWpk9bLOEcVR/R5Z/xmTO5+Sn99cjJAs2UTmwGbklLMmIog0E m0VFBYo1q/12fVSYSA2l224tZBiVQDRrZajVT9ChQ9a1r8Mnn9ul7zh4Rcs78+t8 r+dKJW7VlwcbnnKxBsqlT/2JWPJ++x8+k8NrJ8B99pJ4D5WbSC2Qr2w5TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIg79uwfNO7q6/lsrTr/ZrFXNnosMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaUR2MjdCODA3dXJyLVd5dE92OW1zVmMyZWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpwCMA0G CSqGSIb3DQEBCwUAA4IBAQB2NL0QJrKQXtU6nF+WKnYcWpWH1bqY63Z1LK2S1yGF L7h+xeT/lPrs9seOGuPw2FKSVNDQuDavz6F+KioRk65LxDSCIbQfUpznCQOMNf6x zwXqChrwMPBx4xuRVG16jYXQkF0DFi7xAjuGbl/Rj1GwO4BmYqyJhdJ+5MDeECKu WVW3/vQ9xoaWtMjg9nwV92Q/GuI3ZbIY00TLEG2t86NqJDsRFq6zmdIws5qagnRv I85462jiusngVO4d53kVuxw6+4d507w81L6OMTKH3ihtJnfEDDICpqqCDbIRGsMb QXRw1qtur1pDWbW0b6dwmaZCVKVZnJ2hmbykPcPEm51s -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:21 2026 by rpki-client