This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/iloUVLRqtoal6LUpk2_xa7xOnZg.roa File: iloUVLRqtoal6LUpk2_xa7xOnZg.roa (raw, json) Hash identifier: VBxsjAoKIrvki5mLaeRbqq1p9mC/zepjwgxGu4sJgFo= Subject key identifier: 8A:5A:14:54:B4:6A:B6:86:A5:E8:B5:29:93:6F:F1:6B:BC:4E:9D:98 Certificate issuer: /CN=36fedfeccfd00f577cb791f8e43aa659262e93db Certificate serial: 019B7C12B57E6DABC21248554C79EEC02A68 Authority key identifier: 36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/iloUVLRqtoal6LUpk2_xa7xOnZg.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198706 IP address blocks: 91.213.229.0/24 maxlen: 24 185.56.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.mft rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b5:7e:6d:ab:c2:12:48:55:4c:79:ee:c0:2a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fedfeccfd00f577cb791f8e43aa659262e93db Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a5a1454b46ab686a5e8b529936ff16bbc4e9d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:e0:80:2e:54:a1:b3:32:52:75:cb:c4:c4: 86:19:78:2a:5c:b1:bb:f1:2d:b1:43:c7:cd:44:55: 57:a8:15:de:af:00:34:14:c4:aa:95:82:ec:fe:d3: 18:e1:a1:ac:54:e1:2e:99:e8:03:94:00:ed:46:90: c8:26:63:b6:ac:06:e5:96:80:a3:5c:0f:2e:80:e1: a5:ac:67:e9:c5:02:d9:a6:b6:a4:3b:93:28:fc:e0: e1:14:2f:f8:d8:31:cf:6e:4c:1a:67:f4:49:e6:92: 5b:0f:76:7b:04:b4:fa:1a:ce:99:48:19:90:6e:b2: 37:1e:0e:18:23:84:78:e2:19:09:1d:df:66:3c:f2: db:70:a8:86:37:92:12:40:4a:ce:9a:c5:63:d2:8c: 07:5f:28:89:5d:8d:98:35:e3:5d:6a:9b:28:d4:45: 39:29:83:ed:cf:61:f2:4b:fe:17:7a:cd:8f:32:d5: d3:0e:56:df:6c:45:d1:60:8d:3d:8c:5c:d2:80:c2: b0:33:7d:34:91:64:57:cc:aa:ac:c7:2f:69:ce:04: 29:fd:20:86:5c:86:66:78:cd:4c:ef:2a:5a:95:25: a5:a1:64:b3:15:d1:9b:9a:9e:15:5c:57:5b:1b:a2: c3:0e:d1:c6:36:7e:f8:be:46:46:e9:fa:61:ef:35: 25:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:14:54:B4:6A:B6:86:A5:E8:B5:29:93:6F:F1:6B:BC:4E:9D:98 X509v3 Authority Key Identifier: keyid:36:FE:DF:EC:CF:D0:0F:57:7C:B7:91:F8:E4:3A:A6:59:26:2E:93:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7f7M_QD1d8t5H45DqmWSYuk9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/iloUVLRqtoal6LUpk2_xa7xOnZg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0660e4-8d5d-43b9-8c89-b5a428b7d14c/1/Nv7f7M_QD1d8t5H45DqmWSYuk9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.213.229.0/24 185.56.240.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:6d:86:f1:27:6f:7f:26:57:df:57:d6:55:89:1c:f3:6a:76: 9d:d8:5c:d6:7d:4d:00:7f:f9:2e:2c:2f:69:95:fb:df:d2:22: 5e:ef:a2:71:2b:1c:46:eb:bb:f1:3c:21:5e:18:cd:db:23:66: 87:48:64:1f:bc:e4:26:06:1a:7e:62:f0:02:a4:53:bb:0c:98: 64:ec:eb:67:b7:e4:90:a2:29:6a:d5:af:05:b7:15:d0:9a:8a: 73:5f:9f:0a:5c:bf:ba:b4:59:47:0f:6b:82:0a:7d:97:7a:1d: 29:f8:c6:08:21:21:57:ae:48:8d:96:b7:02:06:8c:fa:6e:f7: 4b:20:41:0a:85:fc:d3:d7:9b:4f:db:a6:f0:8b:32:85:4b:23: e6:49:b5:f5:fd:b8:ec:ea:40:f2:f2:14:79:50:6b:12:a7:e5: 10:a3:80:f2:1a:42:0e:6b:08:67:4e:37:73:75:3b:d5:49:6f: fd:f3:f2:24:b3:e3:15:93:49:a8:bc:76:c0:03:0e:5d:f0:c2: 58:90:56:67:69:8c:5a:04:d9:5e:7d:3d:e1:dc:bd:38:8e:8f: f3:e3:32:3e:d4:9c:14:17:f0:ef:a7:a2:22:cf:9d:06:10:e2: 24:1a:ee:84:8c:cc:0d:ae:a4:8d:23:84:ca:fd:4a:fc:16:90: 9f:f1:ca:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8ErV+bavCEkhVTHnuwCpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2ZmVkZmVjY2ZkMDBmNTc3Y2I3OTFmOGU0M2FhNjU5MjYy ZTkzZGIwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTVhMTQ1NGI0NmFiNjg2YTVlOGI1Mjk5MzZmZjE2YmJjNGU5ZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh/ggC5UobMyUnXLxMSGGXgqXLG7 8S2xQ8fNRFVXqBXerwA0FMSqlYLs/tMY4aGsVOEumegDlADtRpDIJmO2rAblloCj XA8ugOGlrGfpxQLZprakO5Mo/ODhFC/42DHPbkwaZ/RJ5pJbD3Z7BLT6Gs6ZSBmQ brI3Hg4YI4R44hkJHd9mPPLbcKiGN5ISQErOmsVj0owHXyiJXY2YNeNdapso1EU5 KYPtz2HyS/4Xes2PMtXTDlbfbEXRYI09jFzSgMKwM300kWRXzKqsxy9pzgQp/SCG XIZmeM1M7ypalSWloWSzFdGbmp4VXFdbG6LDDtHGNn74vkZG6fph7zUlrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIpaFFS0araGpei1KZNv8Wu8Tp2YMB8GA1UdIwQY MBaAFDb+3+zP0A9XfLeR+OQ6plkmLpPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wNjYwZTQtOGQ1ZC00M2I5LThjODkt YjVhNDI4YjdkMTRjLzEvaWxvVVZMUnF0b2FsNkxVcGsyX3hhN3hPblpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wNjYwZTQtOGQ1ZC00M2I5LThjODktYjVhNDI4YjdkMTRj LzEvTnY3ZjdNX1FEMWQ4dDVINDVEcW1XU1l1azlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9XlAwQC uTjwMA0GCSqGSIb3DQEBCwUAA4IBAQCabYbxJ29/JlffV9ZViRzzanad2FzWfU0A f/kuLC9plfvf0iJe76JxKxxG67vxPCFeGM3bI2aHSGQfvOQmBhp+YvACpFO7DJhk 7Otnt+SQoilq1a8FtxXQmopzX58KXL+6tFlHD2uCCn2Xeh0p+MYIISFXrkiNlrcC Boz6bvdLIEEKhfzT15tP26bwizKFSyPmSbX1/bjs6kDy8hR5UGsSp+UQo4DyGkIO awhnTjdzdTvVSW/98/Iks+MVk0movHbAAw5d8MJYkFZnaYxaBNlefT3h3L04jo/z 4zI+1JwUF/Dvp6Iiz50GEOIkGu6EjMwNrqSNI4TK/Ur8FpCf8cpl -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:34 2026 by rpki-client