This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iTRZUl9u3dFUzXFla6Nn401LlPY.roa File: iTRZUl9u3dFUzXFla6Nn401LlPY.roa (raw, json) Hash identifier: LYxApEehpz19xwTIoIgu2pivBJ4r2tojuhuIOTqIvDg= Subject key identifier: 89:34:59:52:5F:6E:DD:D1:54:CD:71:65:6B:A3:67:E3:4D:4B:94:F6 Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C802202934B2307A20028A554DDA77F Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iTRZUl9u3dFUzXFla6Nn401LlPY.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149020 IP address blocks: 45.142.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:22:02:93:4b:23:07:a2:00:28:a5:54:dd:a7:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=893459525f6eddd154cd71656ba367e34d4b94f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6b:80:0e:b6:53:07:3c:8a:ad:c4:d6:ee:e7: 7d:d9:23:af:f9:5a:a9:58:64:c1:e0:86:be:05:38: 70:d0:5a:79:55:ab:9f:24:d5:2b:44:b5:2c:98:be: 1b:d9:00:0c:0a:1e:cf:e5:2f:d4:e4:5b:68:b7:06: be:a5:d6:b5:96:7d:38:54:72:9b:90:e0:6e:a4:7c: c4:20:0a:c2:68:4c:aa:7b:1c:ca:b7:fd:67:04:0c: 2b:f6:2d:8a:e2:76:3c:95:10:73:13:4f:6c:74:06: a8:a5:ce:d4:d7:ce:e4:11:58:84:92:8f:2f:e6:b0: bb:df:8a:60:7c:d2:08:ad:b2:93:e6:3d:3a:bc:76: 12:27:de:4e:46:3a:92:c1:bc:3f:7a:08:05:79:2f: f8:40:ae:37:d9:e0:1d:fd:0e:4c:77:6f:78:0b:bc: c0:bf:b7:c5:41:de:a2:38:29:aa:19:97:b6:f1:4a: ac:00:55:e9:de:99:e3:79:4b:83:3b:91:78:de:d2: ed:7e:45:4e:75:f2:a8:97:8e:a4:6a:d1:bf:dc:81: ae:1d:c0:b6:9c:f0:cf:13:d4:44:27:4c:e2:76:16: ea:1e:52:d9:ba:c1:6a:72:4f:d3:81:fb:48:78:63: 89:ea:78:b9:ab:58:2b:b6:36:ed:7b:c0:2b:9e:90: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:34:59:52:5F:6E:DD:D1:54:CD:71:65:6B:A3:67:E3:4D:4B:94:F6 X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/iTRZUl9u3dFUzXFla6Nn401LlPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.142.105.0/24 Signature Algorithm: sha256WithRSAEncryption 18:d4:f6:cc:d3:ec:f4:6f:dc:8a:0f:d5:ec:6c:d9:b6:75:20: 11:4c:be:dd:31:89:79:cd:99:0a:90:14:e1:74:09:c6:1d:b5: cf:bc:63:4f:bc:6b:f2:af:15:ee:8c:1e:75:ea:43:7f:6c:0d: 06:6c:e6:6c:c9:48:cd:ca:b2:2d:6d:e3:e7:3e:8d:11:4a:01: c9:b5:bc:10:25:d7:ba:9d:e9:fc:77:ef:1b:3b:02:4e:e2:34: f6:ef:29:7e:3a:19:db:54:f1:40:ec:ec:1e:d4:99:b2:fc:ad: 4a:84:dd:44:c0:aa:be:24:a7:c9:ac:1b:2c:0f:4e:a0:73:c4: c4:69:e7:82:2c:bc:a5:42:33:00:ed:5a:be:d0:2a:49:cf:6f: 36:09:38:3f:41:7e:e4:d3:eb:69:f3:7f:a9:36:4e:b9:f6:22: 76:24:9d:fa:e5:6c:8c:77:41:d5:38:ac:ba:98:f8:8f:1a:06: 8c:5f:d1:ba:75:c0:b8:5d:b1:df:e6:d2:1a:86:d5:39:0e:cd: 13:83:de:2e:9c:e3:87:85:ba:c5:fa:c9:b7:71:49:3c:99:54: f2:8f:0c:9c:1f:03:bf:13:d0:56:ad:97:99:c9:d9:98:57:00: ef:c4:40:5a:35:4e:b0:12:8c:5a:a2:90:87:e6:0b:3a:cf:8f: 76:70:cd:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCICk0sjB6IAKKVU3ad/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTM0NTk1MjVmNmVkZGQxNTRjZDcxNjU2YmEzNjdlMzRkNGI5NGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GuADrZTBzyKrcTW7ud92SOv+Vqp WGTB4Ia+BThw0Fp5VaufJNUrRLUsmL4b2QAMCh7P5S/U5Ftotwa+pda1ln04VHKb kOBupHzEIArCaEyqexzKt/1nBAwr9i2K4nY8lRBzE09sdAaopc7U187kEViEko8v 5rC734pgfNIIrbKT5j06vHYSJ95ORjqSwbw/eggFeS/4QK432eAd/Q5Md294C7zA v7fFQd6iOCmqGZe28UqsAFXp3pnjeUuDO5F43tLtfkVOdfKol46katG/3IGuHcC2 nPDPE9REJ0zidhbqHlLZusFqck/TgftIeGOJ6ni5q1grtjbte8ArnpAb+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIk0WVJfbt3RVM1xZWujZ+NNS5T2MB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvaVRSWlVsOXUzZEZVelhGbGE2Tm40MDFMbFBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY5pMA0G CSqGSIb3DQEBCwUAA4IBAQAY1PbM0+z0b9yKD9XsbNm2dSARTL7dMYl5zZkKkBTh dAnGHbXPvGNPvGvyrxXujB516kN/bA0GbOZsyUjNyrItbePnPo0RSgHJtbwQJde6 nen8d+8bOwJO4jT27yl+OhnbVPFA7Owe1Jmy/K1KhN1EwKq+JKfJrBssD06gc8TE aeeCLLylQjMA7Vq+0CpJz282CTg/QX7k0+tp83+pNk659iJ2JJ365WyMd0HVOKy6 mPiPGgaMX9G6dcC4XbHf5tIahtU5Ds0Tg94unOOHhbrF+sm3cUk8mVTyjwycHwO/ E9BWrZeZydmYVwDvxEBaNU6wEoxaopCH5gs6z492cM3A -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:19 2026 by rpki-client