This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/iwPuwjLUOo3U1tEymCjMjg1S2FU.roa File: iwPuwjLUOo3U1tEymCjMjg1S2FU.roa (raw, json) Hash identifier: FYV96Q6p4TxhTxeWor3CuxcH0yZIGhdCwbvXSs6XHNA= Subject key identifier: 8B:03:EE:C2:32:D4:3A:8D:D4:D6:D1:32:98:28:CC:8E:0D:52:D8:55 Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F604C9B40DFB709C32A47BEB7C5D5 Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/iwPuwjLUOo3U1tEymCjMjg1S2FU.roa Signing time: Fri 02 Jan 2026 02:18:01 +0000 ROA not before: Fri 02 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202162 IP address blocks: 85.232.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:60:4c:9b:40:df:b7:09:c3:2a:47:be:b7:c5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b03eec232d43a8dd4d6d1329828cc8e0d52d855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4b:d5:53:1a:9d:30:62:e6:13:4b:51:3c:3c: 74:97:fb:bb:66:6d:21:97:93:c0:4d:cc:dd:7b:a3: 36:ee:95:d7:23:01:03:24:7f:c4:4e:5a:93:1f:84: 06:44:a9:00:01:76:e3:ec:c7:42:93:b9:a6:bc:e4: 56:76:7e:cc:6b:ca:0b:a6:6c:b2:b3:9c:f3:fa:67: 2f:06:42:2e:88:b0:7c:9e:d5:84:67:97:3e:ea:d5: 55:e8:2a:86:29:5b:43:cc:40:07:d6:24:2f:c2:6b: 14:e5:6f:cc:35:6b:a6:3f:c9:86:a3:0f:54:76:89: a9:74:35:5d:42:53:7b:92:d7:40:a6:9d:55:36:e4: 75:0e:7a:69:42:a2:60:b1:a8:ca:e0:eb:7f:01:64: c8:f5:c2:66:a2:8f:0a:bb:61:47:7f:9f:a0:36:d7: 4c:3a:db:37:1f:07:70:c4:34:35:67:56:91:27:80: 25:46:4c:98:d2:bd:1c:e1:df:22:26:cd:47:04:5f: bb:d1:4a:1f:75:ee:91:f6:da:7f:ba:0c:77:63:63: 5d:6a:26:35:17:0e:27:90:01:53:fe:d6:e3:a0:84: 20:85:af:47:1a:20:2e:68:67:44:39:4c:d7:5e:5b: 33:fe:fc:2f:c2:c4:88:eb:5e:fc:fd:0a:40:e6:fd: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:EE:C2:32:D4:3A:8D:D4:D6:D1:32:98:28:CC:8E:0D:52:D8:55 X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/iwPuwjLUOo3U1tEymCjMjg1S2FU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.232.236.0/24 Signature Algorithm: sha256WithRSAEncryption 91:0c:1d:11:95:b3:fe:44:c3:c3:8c:5c:83:b7:28:4f:f5:e9: dd:d0:f6:9f:9b:f4:4e:56:d5:91:c4:3c:be:19:44:a4:55:78: 35:13:4c:ef:06:9b:be:97:55:05:4a:a7:7e:42:18:08:0e:d0: 23:4d:30:ef:1c:19:0f:14:e3:fb:89:7f:12:da:53:0c:c6:0d: cd:a9:77:75:e7:76:d9:d3:9a:c1:81:7f:fb:71:12:a2:75:28: 26:03:40:f2:68:b0:38:0f:da:3e:b4:27:e7:92:0d:e0:00:d7: ce:29:81:66:8f:ff:50:0a:14:94:0f:cc:e4:88:cc:f5:7a:d8: 9f:9f:9e:c8:de:3c:f3:9a:77:92:a3:29:33:9c:21:74:9c:6a: 97:5f:36:92:f4:79:69:6e:34:5a:52:3d:ae:08:1f:19:d3:27: 91:81:d0:68:e8:ca:c5:98:5d:6f:5d:24:0d:96:d8:22:b7:97: f1:64:ba:14:d4:c8:96:2d:67:45:5d:2b:7d:03:8a:6e:57:5f: 03:ec:b7:41:f4:4b:27:76:f5:29:c1:25:1f:d9:fc:fd:34:4a: fc:b6:2a:b2:00:71:37:6a:80:7d:2c:cd:d8:b3:ad:99:da:4e: 62:3a:75:63:88:86:52:2a:14:d5:50:e9:8d:e7:ff:0c:e8:f7: 96:30:ca:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f2BMm0DftwnDKke+t8XVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjAzZWVjMjMyZDQzYThkZDRkNmQxMzI5ODI4Y2M4ZTBkNTJkODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkvVUxqdMGLmE0tRPDx0l/u7Zm0h l5PATczde6M27pXXIwEDJH/ETlqTH4QGRKkAAXbj7MdCk7mmvORWdn7Ma8oLpmyy s5zz+mcvBkIuiLB8ntWEZ5c+6tVV6CqGKVtDzEAH1iQvwmsU5W/MNWumP8mGow9U dompdDVdQlN7ktdApp1VNuR1DnppQqJgsajK4Ot/AWTI9cJmoo8Ku2FHf5+gNtdM Ots3HwdwxDQ1Z1aRJ4AlRkyY0r0c4d8iJs1HBF+70Uofde6R9tp/ugx3Y2NdaiY1 Fw4nkAFT/tbjoIQgha9HGiAuaGdEOUzXXlsz/vwvwsSI6178/QpA5v0xowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsD7sIy1DqN1NbRMpgozI4NUthVMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvaXdQdXdqTFVPbzNVMXRFeW1Dak1qZzFTMkZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVejsMA0G CSqGSIb3DQEBCwUAA4IBAQCRDB0RlbP+RMPDjFyDtyhP9end0Pafm/ROVtWRxDy+ GUSkVXg1E0zvBpu+l1UFSqd+QhgIDtAjTTDvHBkPFOP7iX8S2lMMxg3NqXd153bZ 05rBgX/7cRKidSgmA0DyaLA4D9o+tCfnkg3gANfOKYFmj/9QChSUD8zkiMz1etif n57I3jzzmneSoykznCF0nGqXXzaS9HlpbjRaUj2uCB8Z0yeRgdBo6MrFmF1vXSQN ltgit5fxZLoU1MiWLWdFXSt9A4puV18D7LdB9EsndvUpwSUf2fz9NEr8tiqyAHE3 aoB9LM3Ys62Z2k5iOnVjiIZSKhTVUOmN5/8M6PeWMMre -----END CERTIFICATE-----Generated at Mon Jan 26 23:21:07 2026 by rpki-client