This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa File: iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa (raw, json) Hash identifier: 9GhANmHxIYz0vSDlZn19gbsqViraUvvPcjEm2QpG0pw= Subject key identifier: 8A:29:89:FC:52:76:CD:AE:2B:3D:BD:25:6D:64:85:FB:03:05:57:E5 Certificate issuer: /CN=84a69fc568894cb3985edef22216bd99974de251 Certificate serial: 019B7A5B7CC926B40F25862F6C3C47AF63AC Authority key identifier: 84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56339 IP address blocks: 91.243.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7c:c9:26:b4:0f:25:86:2f:6c:3c:47:af:63:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84a69fc568894cb3985edef22216bd99974de251 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a2989fc5276cdae2b3dbd256d6485fb030557e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:94:02:40:17:38:96:c9:cc:49:f9:d8:ce:58: 99:2f:4e:a8:03:36:1f:16:e7:a5:9b:04:74:6f:98: b4:ce:d8:9c:45:da:f0:1b:36:08:90:ab:90:f7:26: 6c:ca:2c:41:a0:6a:ab:c7:82:69:be:52:fe:ef:d1: 3e:d5:97:84:1e:a9:28:55:9c:9d:d8:4f:c8:3a:14: 72:51:b8:57:1c:9f:d1:08:99:a1:8c:cb:60:98:d6: 61:ef:06:83:e0:28:d9:1f:dd:3a:33:da:9a:6a:86: 8e:ea:f3:e5:97:8e:67:6e:db:e9:a6:ae:b7:4a:d7: a3:85:be:97:ea:a1:35:ff:bc:91:d2:cf:28:95:a5: 01:bf:7f:f2:36:1c:e3:36:9c:fe:ca:90:c0:14:f1: 66:21:17:b5:18:0f:3b:ae:58:ab:94:68:6a:3d:e2: 6d:f4:fb:18:32:4e:6e:72:4c:92:5c:13:b9:83:d1: d0:45:1b:a1:a2:f0:57:de:9f:56:0b:23:8d:d4:cc: 4f:aa:63:b2:ae:67:7f:b7:60:6e:0d:5f:1d:c2:45: ba:c3:aa:26:64:d5:4c:fb:97:a2:7b:a0:d4:79:32: 86:9b:67:6a:59:d5:88:33:09:9f:28:51:e9:b4:15: 49:1c:0d:13:af:68:87:38:a4:ed:bb:95:50:e0:49: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:29:89:FC:52:76:CD:AE:2B:3D:BD:25:6D:64:85:FB:03:05:57:E5 X509v3 Authority Key Identifier: keyid:84:A6:9F:C5:68:89:4C:B3:98:5E:DE:F2:22:16:BD:99:97:4D:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hKafxWiJTLOYXt7yIha9mZdN4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/iimJ_FJ2za4rPb0lbWSF-wMFV-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c60a1e-9080-4b08-95da-437fe50bb4f7/1/hKafxWiJTLOYXt7yIha9mZdN4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.117.0/24 Signature Algorithm: sha256WithRSAEncryption 58:81:ba:1d:1e:8a:ec:e8:88:d6:da:b1:00:53:58:c4:46:8d: 03:7f:b2:c8:a1:0c:f5:69:83:71:9e:ec:38:05:55:97:c1:c2: 6e:0d:fd:e2:7b:08:21:4f:5b:7e:0b:49:10:35:e0:06:40:9f: 60:65:39:f7:da:5e:03:fd:de:72:9e:98:1f:36:27:04:3f:e1: 17:7d:f5:53:40:ba:a5:40:3c:8a:2e:16:9b:4d:88:ce:68:39: 23:78:be:4d:c6:5f:86:9a:a8:07:4d:41:a6:8f:42:e1:c1:58: 50:8e:1e:42:33:cc:a0:2c:45:91:3f:b6:bf:f1:f8:11:4d:6b: a3:f4:45:16:af:75:a7:0b:4e:34:be:41:37:f9:75:39:02:ff: f1:ab:d1:15:da:c5:9a:92:ff:0b:a8:81:24:4d:ff:0e:bf:0d: 5b:7e:b7:b8:33:7c:ae:62:37:09:03:f3:3b:18:9c:01:de:5c: 06:8c:01:22:c3:3a:23:55:80:79:b0:eb:04:64:7d:e0:56:2b: 45:0b:25:eb:50:63:49:b1:b5:12:23:2d:7b:9c:3d:51:3a:fe: 62:67:bb:17:61:eb:95:37:8c:2f:d3:bd:52:62:93:e5:7a:21: 74:b7:54:f5:73:d1:e7:1f:1d:48:2a:66:c9:ed:0e:22:bc:2e: 4b:77:f1:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3zJJrQPJYYvbDxHr2OsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YTY5ZmM1Njg4OTRjYjM5ODVlZGVmMjIyMTZiZDk5OTc0 ZGUyNTEwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTI5ODlmYzUyNzZjZGFlMmIzZGJkMjU2ZDY0ODVmYjAzMDU1N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZQCQBc4lsnMSfnYzliZL06oAzYf FuelmwR0b5i0zticRdrwGzYIkKuQ9yZsyixBoGqrx4JpvlL+79E+1ZeEHqkoVZyd 2E/IOhRyUbhXHJ/RCJmhjMtgmNZh7waD4CjZH906M9qaaoaO6vPll45nbtvppq63 Stejhb6X6qE1/7yR0s8olaUBv3/yNhzjNpz+ypDAFPFmIRe1GA87rlirlGhqPeJt 9PsYMk5uckySXBO5g9HQRRuhovBX3p9WCyON1MxPqmOyrmd/t2BuDV8dwkW6w6om ZNVM+5eie6DUeTKGm2dqWdWIMwmfKFHptBVJHA0Tr2iHOKTtu5VQ4Emp2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIopifxSds2uKz29JW1khfsDBVflMB8GA1UdIwQY MBaAFISmn8VoiUyzmF7e8iIWvZmXTeJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEt NDM3ZmU1MGJiNGY3LzEvaWltSl9GSjJ6YTRyUGIwbGJXU0Ytd01GVi1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9jNjBhMWUtOTA4MC00YjA4LTk1ZGEtNDM3ZmU1MGJiNGY3 LzEvaEthZnhXaUpUTE9ZWHQ3eUloYTltWmRONGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/N1MA0G CSqGSIb3DQEBCwUAA4IBAQBYgbodHors6IjW2rEAU1jERo0Df7LIoQz1aYNxnuw4 BVWXwcJuDf3iewghT1t+C0kQNeAGQJ9gZTn32l4D/d5ynpgfNicEP+EXffVTQLql QDyKLhabTYjOaDkjeL5Nxl+GmqgHTUGmj0LhwVhQjh5CM8ygLEWRP7a/8fgRTWuj 9EUWr3WnC040vkE3+XU5Av/xq9EV2sWakv8LqIEkTf8Ovw1bfre4M3yuYjcJA/M7 GJwB3lwGjAEiwzojVYB5sOsEZH3gVitFCyXrUGNJsbUSIy17nD1ROv5iZ7sXYeuV N4wv071SYpPleiF0t1T1c9HnHx1IKmbJ7Q4ivC5Ld/G0 -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:45 2026 by rpki-client