This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/IggoS081L9PfSnoANLO8UPkw_zo.roa File: IggoS081L9PfSnoANLO8UPkw_zo.roa (raw, json) Hash identifier: RstMLmB9/U68WoUS3YJFOjuTsGp4LpQVXF1KSqQUnnk= Subject key identifier: 22:08:28:4B:4F:35:2F:D3:DF:4A:7A:00:34:B3:BC:50:F9:30:FF:3A Certificate issuer: /CN=c989660bf147f628fb7cf8b2718737fea86298d0 Certificate serial: 019B7E375CA16D7708C9F887C06F3807D318 Authority key identifier: C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/IggoS081L9PfSnoANLO8UPkw_zo.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33883 IP address blocks: 46.30.232.0/21 maxlen: 21 185.22.124.0/22 maxlen: 22 217.168.208.0/20 maxlen: 20 2a03:2b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.mft rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5c:a1:6d:77:08:c9:f8:87:c0:6f:38:07:d3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c989660bf147f628fb7cf8b2718737fea86298d0 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2208284b4f352fd3df4a7a0034b3bc50f930ff3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:3c:63:d8:42:e8:f7:7f:95:96:c5:b5:50: d3:1b:0f:db:a5:81:47:d9:ec:b2:17:7f:18:da:3a: 3c:62:46:32:51:6b:84:78:8c:14:3a:11:03:3d:3a: c4:84:a3:52:5e:6b:40:a2:c7:6c:2e:be:a3:b8:50: b3:c7:83:9d:3c:c5:6b:c8:26:a3:ba:b8:ed:04:3a: c5:88:78:5f:c3:41:c2:f0:44:bf:95:d3:e8:32:31: 89:9b:82:04:09:29:98:75:a7:66:26:9a:d6:d5:25: b6:41:f6:4c:dc:ea:63:b9:ba:67:45:8d:e1:d5:c3: 90:a4:ec:05:7a:24:a6:8e:3f:40:88:73:37:cf:3c: 8d:6f:c4:94:64:2c:e8:a0:ac:38:f2:31:97:47:a8: c5:b8:71:a9:24:ea:06:8a:75:a4:9d:c6:f4:0d:9f: 02:94:ad:41:9f:99:45:e8:d4:41:34:68:c8:46:cc: d6:d3:c1:99:f0:64:a8:a3:7f:21:df:76:00:89:96: b3:c0:04:8e:9c:16:36:d8:8b:9f:99:68:17:06:58: 5a:dd:5e:84:17:8a:e2:de:44:d4:4d:db:5e:b3:55: 63:91:a1:56:51:4b:44:dc:a3:b0:61:a1:3a:7c:14: 0b:79:fa:07:1d:2e:19:e8:42:c3:85:9a:f9:18:d8: 75:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:08:28:4B:4F:35:2F:D3:DF:4A:7A:00:34:B3:BC:50:F9:30:FF:3A X509v3 Authority Key Identifier: keyid:C9:89:66:0B:F1:47:F6:28:FB:7C:F8:B2:71:87:37:FE:A8:62:98:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYlmC_FH9ij7fPiycYc3_qhimNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/IggoS081L9PfSnoANLO8UPkw_zo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6f0392-8a85-47ab-8746-c198653aac5f/1/yYlmC_FH9ij7fPiycYc3_qhimNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.232.0/21 185.22.124.0/22 217.168.208.0/20 IPv6: 2a03:2b80::/29 Signature Algorithm: sha256WithRSAEncryption 2e:af:7f:fe:83:09:af:ec:ad:39:27:7c:50:41:af:15:18:ba: 27:e9:39:6d:fe:bb:68:cf:a2:b9:e3:74:bd:27:ff:3a:a2:09: 82:8a:00:16:e8:26:18:4b:64:f4:4e:5e:c9:e9:ee:6e:c4:09: 20:df:5f:cc:17:a2:e3:28:4a:c4:4a:7a:8b:89:5d:24:e8:df: 59:50:04:74:07:2d:a6:f9:09:b4:a0:73:97:68:18:5b:f7:15: df:b9:13:27:f0:ac:b5:40:6f:0e:d4:83:dd:17:42:14:68:1c: 84:e9:cb:3a:74:d7:b3:86:69:9c:e2:88:08:0c:9f:7a:6d:a6: 5e:0f:19:5a:d3:56:37:87:6c:1d:1c:4b:b8:ad:e1:04:a9:1a: 70:e5:2a:ee:31:e4:e0:4f:8b:35:61:42:23:1c:11:75:c3:18: 3b:b8:6c:8c:b4:95:f6:01:33:ec:f7:eb:08:e6:1a:95:a3:0c: 00:3f:4f:40:e5:2f:39:87:0d:55:9a:06:1b:2e:98:f4:f8:00: 84:58:21:a8:31:e4:05:56:62:2d:b2:30:93:9f:f6:11:49:64: 94:d3:83:3b:24:55:26:e1:69:60:de:ea:0d:f3:ac:d9:2d:09: 9b:35:48:ca:a9:b9:dd:84:b3:e0:41:1d:d9:df:75:02:a9:f7: 14:d7:08:6a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+N1yhbXcIyfiHwG84B9MYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ODk2NjBiZjE0N2Y2MjhmYjdjZjhiMjcxODczN2ZlYTg2 Mjk4ZDAwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjA4Mjg0YjRmMzUyZmQzZGY0YTdhMDAzNGIzYmM1MGY5MzBmZjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvw8Y9hC6Pd/lZbFtVDTGw/bpYFH 2eyyF38Y2jo8YkYyUWuEeIwUOhEDPTrEhKNSXmtAosdsLr6juFCzx4OdPMVryCaj urjtBDrFiHhfw0HC8ES/ldPoMjGJm4IECSmYdadmJprW1SW2QfZM3OpjubpnRY3h 1cOQpOwFeiSmjj9AiHM3zzyNb8SUZCzooKw48jGXR6jFuHGpJOoGinWkncb0DZ8C lK1Bn5lF6NRBNGjIRszW08GZ8GSoo38h33YAiZazwASOnBY22IufmWgXBlha3V6E F4ri3kTUTdtes1VjkaFWUUtE3KOwYaE6fBQLefoHHS4Z6ELDhZr5GNh1eQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCIIKEtPNS/T30p6ADSzvFD5MP86MB8GA1UdIwQY MBaAFMmJZgvxR/Yo+3z4snGHN/6oYpjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYt YzE5ODY1M2FhYzVmLzEvSWdnb1MwODFMOVBmU25vQU5MTzhVUGt3X3pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy82ZjAzOTItOGE4NS00N2FiLTg3NDYtYzE5ODY1M2FhYzVm LzEveVlsbUNfRkg5aWo3ZlBpeWNZYzNfcWhpbU5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLh7oAwQC uRZ8AwQE2ajQMA0EAgACMAcDBQMqAyuAMA0GCSqGSIb3DQEBCwUAA4IBAQAur3/+ gwmv7K05J3xQQa8VGLon6Tlt/rtoz6K543S9J/86ogmCigAW6CYYS2T0Tl7J6e5u xAkg31/MF6LjKErESnqLiV0k6N9ZUAR0By2m+Qm0oHOXaBhb9xXfuRMn8Ky1QG8O 1IPdF0IUaByE6cs6dNezhmmc4ogIDJ96baZeDxla01Y3h2wdHEu4reEEqRpw5Sru MeTgT4s1YUIjHBF1wxg7uGyMtJX2ATPs9+sI5hqVowwAP09A5S85hw1VmgYbLpj0 +ACEWCGoMeQFVmItsjCTn/YRSWSU04M7JFUm4Wlg3uoN86zZLQmbNUjKqbndhLPg QR3Z33UCqfcU1whq -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:32 2026 by rpki-client