This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ilxsUka29LSmxhagYYgOUwx9G1M.roa File: ilxsUka29LSmxhagYYgOUwx9G1M.roa (raw, json) Hash identifier: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE= Subject key identifier: 8A:5C:6C:52:46:B6:F4:B4:A6:C6:16:A0:61:88:0E:53:0C:7D:1B:53 Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Certificate serial: 019B77C74AABC4E1D28818DB3A62F8D9C9C0 Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ilxsUka29LSmxhagYYgOUwx9G1M.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 91.246.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:ab:c4:e1:d2:88:18:db:3a:62:f8:d9:c9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a5c6c5246b6f4b4a6c616a061880e530c7d1b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:a0:9f:e7:79:97:c5:4b:a5:ae:95:8c:34: c5:5e:25:d5:d7:d4:0d:c7:ec:b5:1b:d3:1e:5e:68: 93:53:55:d1:fb:c9:44:a7:51:0f:8a:55:07:ec:56: 36:38:69:24:02:2a:43:7c:55:58:8a:ac:7f:f5:de: 61:97:24:bd:42:b6:e5:ec:b0:e3:f1:22:33:80:4b: 74:f1:d4:df:b0:0d:b0:f8:06:5b:b8:d6:8f:cd:a7: d6:45:be:85:12:d5:4f:cf:ca:b8:e0:14:83:e9:7e: 8d:71:f6:5d:3b:f5:61:f1:a9:47:33:e2:31:6c:49: da:b5:a2:c8:5b:99:4d:d4:26:6e:ba:18:16:d4:3d: ae:da:9b:06:5c:d6:15:19:5e:61:87:81:93:20:2b: 43:31:53:b2:f6:3b:fc:d3:03:3e:14:45:8b:b0:7e: 66:1b:bc:60:d0:7f:7e:78:b6:05:a8:f6:5f:b7:ee: fb:cc:96:1b:92:ce:bb:80:22:20:10:55:9f:8e:08: e8:28:7d:03:52:6d:a5:62:38:1b:39:45:23:cc:35: e0:10:8d:0e:cf:7a:f3:9d:9b:2c:af:52:ae:f5:8f: 84:87:fa:bd:07:40:1c:e9:87:bb:42:17:84:98:95: 6b:c7:9f:31:f0:9b:f8:c5:a1:0a:32:c4:d9:34:4d: 42:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:6C:52:46:B6:F4:B4:A6:C6:16:A0:61:88:0E:53:0C:7D:1B:53 X509v3 Authority Key Identifier: keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/ilxsUka29LSmxhagYYgOUwx9G1M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.55.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ab:3e:ba:15:b4:6a:a2:d7:95:59:ca:11:fe:44:2f:65:3d: d3:0f:c6:30:47:51:69:83:2d:9d:31:68:e9:5c:14:ea:d3:1c: 2b:a5:97:ef:cb:af:de:b7:06:1e:14:25:ca:49:4b:f9:44:cd: 76:e5:47:5e:99:07:ca:2c:14:7d:37:8c:19:e9:ea:ca:27:fb: 26:51:27:4f:c4:64:21:0e:4e:76:6e:71:6f:a2:63:1a:84:9d: 1c:a1:e5:88:e9:a7:e1:fd:a7:25:b8:b6:5c:fe:a7:0a:b7:2a: f3:5a:f1:51:cb:e4:14:94:15:5a:5f:c4:8f:b4:8b:13:10:12: 7f:3c:f4:8e:58:33:f8:74:b0:8d:03:b8:d4:a0:77:6e:e3:53: 18:61:94:3e:35:24:3b:0c:50:ad:ec:39:28:bc:a8:b7:3a:bf: b3:73:6d:40:dd:ad:99:b6:a7:55:2e:27:ba:cc:f4:92:9a:e8: 5b:56:6f:da:76:ed:fb:bf:a2:06:08:86:00:9a:73:ae:69:b1: 11:d8:a7:8f:34:96:e6:ea:8c:5f:e5:ed:da:e6:7f:b9:ea:01: 95:e4:01:f3:52:d7:61:a1:e5:16:9e:fa:77:df:da:26:f6:d2: 9d:d6:ec:e7:f8:18:66:f2:c8:97:fb:14:f0:70:b9:19:b6:bb: 64:1c:0d:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0qrxOHSiBjbOmL42cnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0 NDNiZDQwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTVjNmM1MjQ2YjZmNGI0YTZjNjE2YTA2MTg4MGU1MzBjN2QxYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVmgn+d5l8VLpa6VjDTFXiXV19QN x+y1G9MeXmiTU1XR+8lEp1EPilUH7FY2OGkkAipDfFVYiqx/9d5hlyS9Qrbl7LDj 8SIzgEt08dTfsA2w+AZbuNaPzafWRb6FEtVPz8q44BSD6X6NcfZdO/Vh8alHM+Ix bEnataLIW5lN1CZuuhgW1D2u2psGXNYVGV5hh4GTICtDMVOy9jv80wM+FEWLsH5m G7xg0H9+eLYFqPZft+77zJYbks67gCIgEFWfjgjoKH0DUm2lYjgbOUUjzDXgEI0O z3rznZssr1Ku9Y+Eh/q9B0Ac6Ye7QheEmJVrx58x8Jv4xaEKMsTZNE1CFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpcbFJGtvS0psYWoGGIDlMMfRtTMB8GA1UdIwQY MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct Y2RhNWMzNzY2ZjAzLzEvaWx4c1VrYTI5TFNteGhhZ1lZZ09Vd3g5RzFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y3MA0G CSqGSIb3DQEBCwUAA4IBAQBrqz66FbRqoteVWcoR/kQvZT3TD8YwR1Fpgy2dMWjp XBTq0xwrpZfvy6/etwYeFCXKSUv5RM125UdemQfKLBR9N4wZ6erKJ/smUSdPxGQh Dk52bnFvomMahJ0coeWI6afh/acluLZc/qcKtyrzWvFRy+QUlBVaX8SPtIsTEBJ/ PPSOWDP4dLCNA7jUoHdu41MYYZQ+NSQ7DFCt7DkovKi3Or+zc21A3a2ZtqdVLie6 zPSSmuhbVm/adu37v6IGCIYAmnOuabER2KePNJbm6oxf5e3a5n+56gGV5AHzUtdh oeUWnvp339om9tKd1uzn+Bhm8siX+xTwcLkZtrtkHA3I -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:50 2026 by rpki-client