This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa File: IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa (raw, json) Hash identifier: ZkNSMusbdYjyY6Jst6K+Zs/Pf+gwZBfB+9r0tVdAYHs= Subject key identifier: 22:42:14:7D:45:81:82:BA:B3:F8:C4:18:03:52:68:8A:E9:CB:6D:9F Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Certificate serial: 019B7CEDC31E0D477CCEC61204FD26634CFD Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa Signing time: Fri 02 Jan 2026 04:18:35 +0000 ROA not before: Fri 02 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1926 IP address blocks: 153.1.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c3:1e:0d:47:7c:ce:c6:12:04:fd:26:63:4c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af Validity Not Before: Jan 2 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2242147d458182bab3f8c4180352688ae9cb6d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:2a:ac:9a:cc:22:14:3b:4b:82:a5:9e:1c:7d: 8e:e1:d0:e6:31:a0:8c:0a:b8:fd:c0:d3:2b:02:cc: 87:79:af:41:7c:19:32:19:c1:04:99:9c:af:0c:c3: 4d:c3:a7:88:7f:72:da:3a:4b:2a:46:cf:5e:61:98: 2e:d6:88:a6:7e:58:5e:9f:02:ba:0c:57:21:a4:0d: e0:fa:a8:18:02:68:9f:8a:6e:d7:e7:b2:b2:3d:b9: 2f:33:7d:7d:cd:80:da:5c:67:94:c1:4b:2e:eb:96: 53:48:f0:e7:f1:0a:d7:2d:23:51:a4:13:ea:66:1b: 9c:ab:12:45:cd:dc:47:45:86:a4:43:7b:68:f4:e6: a6:f5:1a:0e:b0:ed:83:c2:a9:22:46:ff:29:f9:48: e7:ce:74:5c:6b:3e:3e:de:ce:a3:b9:d5:1c:4f:bf: a3:5a:ee:dd:89:7e:da:2d:60:45:e2:28:88:a4:fc: 4d:ed:94:b6:db:e4:73:fa:c6:ee:8d:b7:9b:5a:fa: 7b:88:52:be:e9:e3:e7:18:ae:14:d8:3c:d7:c1:f6: 4d:ff:6f:ee:32:29:37:ff:61:0a:db:95:52:f1:e6: e0:bb:17:92:d3:e0:db:97:34:9c:78:fa:57:da:95: be:16:ab:21:e2:b1:80:58:5b:d4:aa:61:47:a4:83: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:42:14:7D:45:81:82:BA:B3:F8:C4:18:03:52:68:8A:E9:CB:6D:9F X509v3 Authority Key Identifier: keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.1.0.0/16 Signature Algorithm: sha256WithRSAEncryption 41:d8:23:b7:80:bb:ca:11:0b:a9:50:8d:d5:5f:89:01:54:01: 96:40:df:ff:73:dc:fd:24:7f:f1:91:12:f7:9c:16:37:18:4e: 34:a7:86:da:20:b7:68:35:02:9a:0c:22:cf:d6:0b:78:ab:d0: 69:eb:2d:2a:f4:eb:9b:aa:63:df:4e:22:bf:89:3e:33:8d:51: e9:cd:27:6e:b2:15:59:1a:d5:12:c5:d8:11:5e:2d:fb:fd:38: 1c:2f:7a:54:08:d7:dd:e4:7b:9b:8a:df:50:45:31:07:98:0f: 1a:eb:1c:93:a9:78:8f:d1:9c:96:fd:97:03:62:27:c0:dd:7b: 65:a6:df:cf:90:4f:27:52:9a:c7:f7:22:f8:d0:46:77:fa:b2: 25:c4:1e:ef:74:ae:11:d3:a0:f0:a5:e7:7e:b6:34:0c:82:5a: 7e:87:cd:2a:ce:43:8c:08:de:12:ca:2e:e2:2c:97:2a:23:ab: 52:df:55:3f:08:d6:87:1e:c0:e0:38:0a:6a:3d:24:c5:38:a4: 08:08:0c:28:ce:cc:6a:cc:ea:af:90:98:9b:06:23:c9:a2:8c: b6:31:b2:c1:14:ae:91:30:f4:8b:ab:34:64:71:78:47:16:ea: 9f:19:c8:16:a3:fb:99:0f:bf:e3:19:56:4c:0f:89:b2:a4:1c: 70:a6:9c:6d -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt87cMeDUd8zsYSBP0mY0z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWVjOGRiNTk3MjYwNzVlZTI5ZjVlZmM5MGI2MWU3M2Mw N2Y3YWYwHhcNMjYwMTAyMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQyMTQ3ZDQ1ODE4MmJhYjNmOGM0MTgwMzUyNjg4YWU5Y2I2ZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iqsmswiFDtLgqWeHH2O4dDmMaCM Crj9wNMrAsyHea9BfBkyGcEEmZyvDMNNw6eIf3LaOksqRs9eYZgu1oimflhenwK6 DFchpA3g+qgYAmifim7X57KyPbkvM319zYDaXGeUwUsu65ZTSPDn8QrXLSNRpBPq ZhucqxJFzdxHRYakQ3to9Oam9RoOsO2DwqkiRv8p+UjnznRcaz4+3s6judUcT7+j Wu7diX7aLWBF4iiIpPxN7ZS22+Rz+sbujbebWvp7iFK+6ePnGK4U2DzXwfZN/2/u Mik3/2EK25VS8ebguxeS0+DblzScePpX2pW+Fqsh4rGAWFvUqmFHpIPvGQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFCJCFH1FgYK6s/jEGANSaIrpy22fMB8GA1UdIwQY MBaAFLyeyNtZcmB17in178kLYec8B/evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjIt ZTU3ZmJkYWU1OTAzLzEvSWtJVWZVV0JncnF6LU1RWUExSm9pdW5MYlo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjItZTU3ZmJkYWU1OTAz LzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmQEwDQYJ KoZIhvcNAQELBQADggEBAEHYI7eAu8oRC6lQjdVfiQFUAZZA3/9z3P0kf/GREvec FjcYTjSnhtogt2g1ApoMIs/WC3ir0GnrLSr065uqY99OIr+JPjONUenNJ26yFVka 1RLF2BFeLfv9OBwvelQI193ke5uK31BFMQeYDxrrHJOpeI/RnJb9lwNiJ8Dde2Wm 38+QTydSmsf3IvjQRnf6siXEHu90rhHToPCl5362NAyCWn6HzSrOQ4wI3hLKLuIs lyojq1LfVT8I1ocewOA4Cmo9JMU4pAgIDCjOzGrM6q+QmJsGI8mijLYxssEUrpEw 9IurNGRxeEcW6p8ZyBaj+5kPv+MZVkwPibKkHHCmnG0= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:47 2026 by rpki-client