This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ieXYKHiM51yMFcEQ8ia2GoCD1rY.roa File: ieXYKHiM51yMFcEQ8ia2GoCD1rY.roa (raw, json) Hash identifier: y2Be/Gs6Vn8Q2gQ3HHRKWiETZ/pV6vS+BPUebUE49D0= Subject key identifier: 89:E5:D8:28:78:8C:E7:5C:8C:15:C1:10:F2:26:B6:1A:80:83:D6:B6 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019C0FCC953F0020AA178AB4EE835C6E470C Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ieXYKHiM51yMFcEQ8ia2GoCD1rY.roa Signing time: Fri 30 Jan 2026 16:46:31 +0000 ROA not before: Fri 30 Jan 2026 16:46:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213438 IP address blocks: 37.60.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:cc:95:3f:00:20:aa:17:8a:b4:ee:83:5c:6e:47:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 30 16:46:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89e5d828788ce75c8c15c110f226b61a8083d6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:cf:73:00:46:de:3a:9d:04:bb:a1:74:36: 47:19:73:f3:70:ba:e3:f6:92:2a:82:db:94:f5:d0: dd:77:e1:88:db:2d:c5:90:3d:25:a8:de:d2:65:e1: 99:4c:8a:b6:07:38:63:80:d9:1d:23:a2:44:72:51: f7:5a:9e:fc:2c:6b:a0:8f:1c:07:0e:b4:30:89:b7: cb:02:8e:ec:6c:6a:fd:02:0c:18:bc:c6:13:44:84: 9f:a0:e5:d2:4a:87:f3:d2:a9:fa:79:ca:67:81:27: e4:5f:fe:69:c5:d5:ab:c1:85:71:8f:90:cf:46:97: 35:45:6c:2c:6f:1c:a5:4a:b7:fc:fd:96:b0:82:a3: 9e:3c:bf:a2:c4:57:2c:36:5f:90:0b:4d:0b:d8:ff: aa:bd:d5:30:4d:32:f1:62:27:40:6c:a6:25:f0:53: 1d:3a:4e:fb:06:ea:b3:34:30:23:09:62:7d:c1:82: d8:87:b4:16:ae:e3:33:ba:e5:ca:9d:86:38:0e:ae: 07:ca:a6:7e:aa:6e:53:d9:03:11:96:7a:6f:b5:9b: c4:29:57:47:7e:37:bb:5c:a9:1a:76:06:8c:38:0f: a2:63:b2:fb:05:95:0c:c2:92:20:1a:3e:2f:69:68: 7c:1c:47:5d:9c:f1:43:47:b6:d8:2c:93:1a:f2:47: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E5:D8:28:78:8C:E7:5C:8C:15:C1:10:F2:26:B6:1A:80:83:D6:B6 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ieXYKHiM51yMFcEQ8ia2GoCD1rY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.141.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:9f:5c:b1:a2:ef:e3:48:28:3a:f5:da:77:8e:91:28:d7:91: c4:0c:4c:90:46:46:65:85:f8:aa:cd:47:97:95:19:3f:e3:3c: 6b:77:4a:6a:69:f6:83:84:ee:b6:2d:9f:30:d0:01:0c:5e:e9: 5e:f6:5f:28:60:d2:38:51:ac:67:b7:2b:cb:5f:5d:32:e0:42: 0f:74:a7:89:0e:6d:9d:2a:c9:1e:d7:c3:67:20:a2:dd:96:ec: c3:81:43:0d:0d:84:26:ea:1e:71:a6:e6:cd:b9:c0:bf:88:56: 6e:63:a9:68:e0:31:02:07:be:71:cb:b0:1f:6f:88:64:19:0e: e4:d6:ec:af:ab:7f:4a:7f:66:b3:49:3c:56:b3:cc:ec:af:71: bd:c9:3c:aa:a1:cc:02:ef:06:71:fa:be:5a:41:89:28:8d:5a: 60:86:89:12:84:77:8d:fd:56:9d:19:a4:9d:c2:d4:e7:23:d9: 6f:61:0c:b4:aa:9d:e2:bd:15:fd:c1:20:d5:88:d8:c1:16:4d: 34:46:42:99:7e:2d:61:0b:7a:6b:4e:d8:c8:7b:19:db:1e:21: e5:2c:c9:ea:82:f8:11:59:96:0f:08:d4:52:ad:84:c6:28:8c: ad:12:b6:8b:0c:e2:17:dc:46:41:5b:f9:e2:95:2e:41:1a:48: 80:32:cf:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwPzJU/ACCqF4q07oNcbkcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTMwMTY0NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWU1ZDgyODc4OGNlNzVjOGMxNWMxMTBmMjI2YjYxYTgwODNkNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JvPcwBG3jqdBLuhdDZHGXPzcLrj 9pIqgtuU9dDdd+GI2y3FkD0lqN7SZeGZTIq2BzhjgNkdI6JEclH3Wp78LGugjxwH DrQwibfLAo7sbGr9AgwYvMYTRISfoOXSSofz0qn6ecpngSfkX/5pxdWrwYVxj5DP Rpc1RWwsbxylSrf8/ZawgqOePL+ixFcsNl+QC00L2P+qvdUwTTLxYidAbKYl8FMd Ok77BuqzNDAjCWJ9wYLYh7QWruMzuuXKnYY4Dq4HyqZ+qm5T2QMRlnpvtZvEKVdH fje7XKkadgaMOA+iY7L7BZUMwpIgGj4vaWh8HEddnPFDR7bYLJMa8keJdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFInl2Ch4jOdcjBXBEPImthqAg9a2MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvaWVYWUtIaU01MXlNRmNFUThpYTJHb0NEMXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJTyNMA0G CSqGSIb3DQEBCwUAA4IBAQBtn1yxou/jSCg69dp3jpEo15HEDEyQRkZlhfiqzUeX lRk/4zxrd0pqafaDhO62LZ8w0AEMXule9l8oYNI4UaxntyvLX10y4EIPdKeJDm2d Kske18NnIKLdluzDgUMNDYQm6h5xpubNucC/iFZuY6lo4DECB75xy7Afb4hkGQ7k 1uyvq39Kf2azSTxWs8zsr3G9yTyqocwC7wZx+r5aQYkojVpghokShHeN/VadGaSd wtTnI9lvYQy0qp3ivRX9wSDViNjBFk00RkKZfi1hC3prTtjIexnbHiHlLMnqgvgR WZYPCNRSrYTGKIytEraLDOIX3EZBW/nilS5BGkiAMs8u -----END CERTIFICATE-----Generated at Thu Feb 5 15:32:54 2026 by rpki-client