This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/IVL7dLrg6wGDU1LsfYsBBP5fLww.roa File: IVL7dLrg6wGDU1LsfYsBBP5fLww.roa (raw, json) Hash identifier: nXXz2gE0BqsxA3+AlASgnT6agymsn4mqf9G776nMdI8= Subject key identifier: 21:52:FB:74:BA:E0:EB:01:83:53:52:EC:7D:8B:01:04:FE:5F:2F:0C Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Certificate serial: 019B7AC79EB9133DBAEDD86C8CF51860A252 Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/IVL7dLrg6wGDU1LsfYsBBP5fLww.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49703 IP address blocks: 193.24.116.0/24 maxlen: 24 2a13:f700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.mft rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9e:b9:13:3d:ba:ed:d8:6c:8c:f5:18:60:a2:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233 Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2152fb74bae0eb01835352ec7d8b0104fe5f2f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:71:a8:c7:28:23:c4:29:09:6e:c7:1c:a8: 1b:1b:af:21:27:40:e9:d9:35:ef:0c:5c:62:5e:8e: dc:84:17:5c:d2:fa:d3:8c:03:27:86:87:32:f6:d3: 69:4a:03:25:f9:8a:fd:2c:ab:1d:a9:57:bf:fc:0d: 00:d9:5c:10:15:74:e8:7e:c1:6c:5b:31:01:4e:b4: fd:ab:94:d7:2d:22:56:74:62:d4:cd:c7:62:9d:9c: cf:53:79:0e:2a:00:87:33:ac:34:f3:53:fb:b9:21: db:ad:57:1a:d5:c4:8b:d5:73:04:d5:63:31:a7:04: f5:52:34:2a:6c:5d:3f:52:9e:f7:ad:7a:c8:32:b8: 80:d2:d9:78:63:50:ab:7d:92:21:85:4b:90:ed:79: 7a:63:2e:e3:0d:f4:0e:e2:70:48:ef:71:a5:db:56: c1:23:a2:28:73:ed:be:40:81:48:3d:9b:79:4b:d5: 1d:2e:5d:17:1e:c6:e0:a6:fc:93:35:ea:65:7a:24: f8:34:28:95:78:57:5f:f7:83:f2:9e:23:7d:8b:bf: 51:2e:c1:f8:0f:83:8a:0f:28:4f:31:d3:bd:61:60: a5:01:2a:c2:a0:d7:e8:7f:d0:d7:1e:fd:a2:80:4a: dd:03:8d:bb:9b:97:f6:b3:2a:11:8b:dd:43:f1:7d: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:52:FB:74:BA:E0:EB:01:83:53:52:EC:7D:8B:01:04:FE:5F:2F:0C X509v3 Authority Key Identifier: keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/IVL7dLrg6wGDU1LsfYsBBP5fLww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.116.0/24 IPv6: 2a13:f700::/29 Signature Algorithm: sha256WithRSAEncryption 1a:2c:5d:9b:b0:3b:53:a0:8f:87:ec:8e:d6:40:f5:ec:35:73: 5d:37:9e:fb:8f:9d:b6:22:72:84:78:90:bb:2f:8f:c8:77:75: f2:cc:2e:60:20:db:f1:57:cd:aa:4e:16:a7:46:a2:4f:51:16: 0f:be:c3:5a:bc:5f:87:71:be:46:a4:6e:30:06:53:8c:c6:bd: 9d:a5:cb:56:23:b8:e0:f1:0f:bd:ac:6f:41:af:99:64:54:af: df:9a:79:cc:54:e1:16:5b:66:c1:93:3c:1c:00:7b:25:46:fe: b8:6c:48:a6:8f:6a:22:0e:93:0d:92:d8:8c:5b:3a:e4:c2:71: 24:3d:ec:58:91:1d:e5:8b:03:4b:e1:07:e2:fb:4b:16:01:c4: 58:ca:71:b3:19:79:05:df:e1:28:6d:6d:b6:58:ab:57:0a:ba: f3:a2:85:37:58:e4:5e:a5:46:1a:da:f6:18:f6:eb:23:f0:f8: 23:5c:91:b6:47:b9:bb:cf:c9:63:12:7e:89:59:6a:34:e9:6a: 7f:09:61:69:77:38:bb:6f:c6:60:99:26:82:98:36:bb:15:4c: 98:5d:3e:af:c0:42:14:94:61:85:5c:bd:6b:07:7a:b6:bc:10: ad:45:6b:da:04:84:ad:12:a2:27:51:5b:5f:bd:15:7b:1d:43: 60:ec:d4:2a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6x565Ez267dhsjPUYYKJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNjFhNDJiZjIyNjRjYjVlYmNlYzZlMTkwZDAyYTZkNTUz YjYyMzMwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTUyZmI3NGJhZTBlYjAxODM1MzUyZWM3ZDhiMDEwNGZlNWYyZjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rVxqMcoI8QpCW7HHKgbG68hJ0Dp 2TXvDFxiXo7chBdc0vrTjAMnhocy9tNpSgMl+Yr9LKsdqVe//A0A2VwQFXTofsFs WzEBTrT9q5TXLSJWdGLUzcdinZzPU3kOKgCHM6w081P7uSHbrVca1cSL1XME1WMx pwT1UjQqbF0/Up73rXrIMriA0tl4Y1CrfZIhhUuQ7Xl6Yy7jDfQO4nBI73Gl21bB I6Ioc+2+QIFIPZt5S9UdLl0XHsbgpvyTNepleiT4NCiVeFdf94PyniN9i79RLsH4 D4OKDyhPMdO9YWClASrCoNfof9DXHv2igErdA427m5f2syoRi91D8X02XQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCFS+3S64OsBg1NS7H2LAQT+Xy8MMB8GA1UdIwQY MBaAFIJhpCvyJky1687G4ZDQKm1VO2IzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYt ZGNhZTcwZjFjOTNiLzEvSVZMN2RMcmc2d0dEVTFMc2ZZc0JCUDVmTHd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS81NGI2NzgtYjJmZS00NDlkLWIzMjYtZGNhZTcwZjFjOTNi LzEvZ21Ha0tfSW1UTFhyenNiaGtOQXFiVlU3WWpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwRh0MA0E AgACMAcDBQMqE/cAMA0GCSqGSIb3DQEBCwUAA4IBAQAaLF2bsDtToI+H7I7WQPXs NXNdN577j522InKEeJC7L4/Id3XyzC5gINvxV82qThanRqJPURYPvsNavF+Hcb5G pG4wBlOMxr2dpctWI7jg8Q+9rG9Br5lkVK/fmnnMVOEWW2bBkzwcAHslRv64bEim j2oiDpMNktiMWzrkwnEkPexYkR3liwNL4Qfi+0sWAcRYynGzGXkF3+EobW22WKtX CrrzooU3WORepUYa2vYY9usj8PgjXJG2R7m7z8ljEn6JWWo06Wp/CWFpdzi7b8Zg mSaCmDa7FUyYXT6vwEIUlGGFXL1rB3q2vBCtRWvaBIStEqInUVtfvRV7HUNg7NQq -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:53 2026 by rpki-client