This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IX9AY78PwrQOnk4F4GQD3ZlPTUY.roa File: IX9AY78PwrQOnk4F4GQD3ZlPTUY.roa (raw, json) Hash identifier: AhAqfFLuXgxFkKp4Pbtror2E760W+hHLTvx8IWrivCs= Subject key identifier: 21:7F:40:63:BF:0F:C2:B4:0E:9E:4E:05:E0:64:03:DD:99:4F:4D:46 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B357B0B81A2D95EB3686C35402E5006 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IX9AY78PwrQOnk4F4GQD3ZlPTUY.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50190 IP address blocks: 85.120.226.0/24 maxlen: 24 85.120.227.0/24 maxlen: 24 85.120.228.0/24 maxlen: 24 85.120.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7b:0b:81:a2:d9:5e:b3:68:6c:35:40:2e:50:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=217f4063bf0fc2b40e9e4e05e06403dd994f4d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:37:e3:46:ff:e4:5f:b2:59:bf:31:6e:0a: 40:89:97:ab:13:ad:38:b9:cc:38:02:64:73:32:f0: 76:a4:25:a4:29:9e:91:ad:66:5c:33:77:e5:a2:e9: 32:2a:31:ac:ad:f0:f4:3b:4a:c8:63:2c:31:02:8a: ed:90:db:82:43:35:8a:ae:20:10:9a:31:f3:32:be: 1c:21:58:49:c4:70:4b:4b:d8:0e:73:d5:f4:13:62: 67:e5:5b:41:eb:57:d1:36:2e:56:bc:66:5d:b3:f8: ea:5a:a3:3a:74:10:27:1f:e3:58:6e:79:60:2a:b7: bb:f3:4a:80:53:d3:54:97:4a:68:89:9d:80:fb:52: 6b:7d:58:0f:d5:06:dd:14:df:b9:0f:67:52:18:27: 6e:81:ff:6d:e2:96:58:f6:70:5c:58:fb:46:04:56: ae:d0:e1:a2:35:ff:84:67:b6:17:3d:f1:26:8b:46: 16:84:c1:c4:54:67:24:50:48:e2:af:77:fa:13:94: d0:50:3e:ba:b5:cf:f4:28:bc:49:6c:79:a4:6f:a5: 27:be:43:bd:9a:4b:8a:21:2c:3f:2d:19:a4:bf:e0: 73:43:56:28:c2:0a:40:11:0f:00:19:f2:5f:fe:03: 1f:8a:84:9d:8c:04:93:9e:4d:a3:56:1c:84:33:05: 05:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7F:40:63:BF:0F:C2:B4:0E:9E:4E:05:E0:64:03:DD:99:4F:4D:46 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IX9AY78PwrQOnk4F4GQD3ZlPTUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.226.0-85.120.229.255 Signature Algorithm: sha256WithRSAEncryption 1d:62:38:a4:d5:8e:63:35:a1:88:3d:5d:f3:e7:bd:18:05:f3: cf:66:2f:cc:b4:55:b9:b2:8f:ad:9e:04:97:7b:b7:0e:80:cd: 27:aa:21:24:26:0e:40:1c:2b:04:b0:1c:c2:89:e9:6b:fe:83: d8:83:90:0d:37:28:b2:d8:38:72:4d:eb:34:07:fc:d3:64:59: 68:a8:62:b4:d2:7b:49:c4:63:7d:cc:10:63:46:54:77:36:f3: 92:eb:7c:c6:5f:ab:68:57:6d:19:b9:ed:06:68:b6:78:87:01: 5d:81:e4:d7:42:58:10:8a:21:d8:93:4b:14:45:ca:87:0f:09: 8d:d7:7c:de:26:7c:e8:79:46:28:af:41:b5:10:3f:25:03:b6: 6d:b5:a9:f0:38:c9:d7:57:92:91:26:52:21:00:1c:19:89:9e: fd:91:85:a0:2b:27:52:ac:d8:f6:a2:dd:11:01:8e:95:74:e0: 07:92:0d:34:79:c2:13:6f:81:b9:11:ab:65:d3:ab:8c:fc:6c: 18:29:25:0c:9f:33:af:7c:a1:13:99:1d:47:40:57:7f:c1:85: 99:de:fe:8f:ea:e8:6c:ab:c6:55:1b:c5:16:d6:61:28:58:61: 38:e9:c3:79:01:db:c8:69:22:80:58:37:75:41:95:86:c6:f2: 4b:e6:50:32 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7NXsLgaLZXrNobDVALlAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTdmNDA2M2JmMGZjMmI0MGU5ZTRlMDVlMDY0MDNkZDk5NGY0ZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM4340b/5F+yWb8xbgpAiZerE604 ucw4AmRzMvB2pCWkKZ6RrWZcM3floukyKjGsrfD0O0rIYywxAortkNuCQzWKriAQ mjHzMr4cIVhJxHBLS9gOc9X0E2Jn5VtB61fRNi5WvGZds/jqWqM6dBAnH+NYbnlg Kre780qAU9NUl0poiZ2A+1JrfVgP1QbdFN+5D2dSGCdugf9t4pZY9nBcWPtGBFau 0OGiNf+EZ7YXPfEmi0YWhMHEVGckUEjir3f6E5TQUD66tc/0KLxJbHmkb6UnvkO9 mkuKISw/LRmkv+BzQ1YowgpAEQ8AGfJf/gMfioSdjASTnk2jVhyEMwUF7QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCF/QGO/D8K0Dp5OBeBkA92ZT01GMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvSVg5QVk3OFB3clFPbms0RjRHUUQzWmxQVFVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFVeOID BAFVeOQwDQYJKoZIhvcNAQELBQADggEBAB1iOKTVjmM1oYg9XfPnvRgF889mL8y0 Vbmyj62eBJd7tw6AzSeqISQmDkAcKwSwHMKJ6Wv+g9iDkA03KLLYOHJN6zQH/NNk WWioYrTSe0nEY33MEGNGVHc285LrfMZfq2hXbRm57QZotniHAV2B5NdCWBCKIdiT SxRFyocPCY3XfN4mfOh5RiivQbUQPyUDtm21qfA4yddXkpEmUiEAHBmJnv2RhaAr J1Ks2Pai3REBjpV04AeSDTR5whNvgbkRq2XTq4z8bBgpJQyfM698oROZHUdAV3/B hZne/o/q6GyrxlUbxRbWYShYYTjpw3kB28hpIoBYN3VBlYbG8kvmUDI= -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:05 2026 by rpki-client