This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/iNjCT_BLZd9vl0rv4dLzCKK08gs.roa File: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (raw, json) Hash identifier: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg= Subject key identifier: 88:D8:C2:4F:F0:4B:65:DF:6F:97:4A:EF:E1:D2:F3:08:A2:B4:F2:0B Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9 Certificate serial: 019B7CECFE1E4F322430DA39D4FC47F54FF9 Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/iNjCT_BLZd9vl0rv4dLzCKK08gs.roa Signing time: Fri 02 Jan 2026 04:17:44 +0000 ROA not before: Fri 02 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51055 IP address blocks: 64.38.104.0/22 maxlen: 22 92.243.72.0/23 maxlen: 23 185.156.244.0/22 maxlen: 22 2a03:5b00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:fe:1e:4f:32:24:30:da:39:d4:fc:47:f5:4f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9 Validity Not Before: Jan 2 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88d8c24ff04b65df6f974aefe1d2f308a2b4f20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:49:01:aa:34:7f:76:c3:b4:c9:f1:3b:41: 24:47:f2:fa:0e:07:17:fb:45:83:47:02:32:ef:a1: 70:3c:5c:46:f6:9e:f2:57:ff:22:c4:6b:88:80:c7: f7:1b:2e:db:b2:a1:aa:42:f8:bd:13:b8:2d:c4:22: 0e:2c:39:32:2f:d2:f9:6e:4e:88:f9:93:84:a8:d5: 06:d7:75:88:9d:eb:27:30:e9:c0:39:2f:19:44:48: df:03:e4:3b:e1:a8:04:9e:39:83:6c:5b:7c:b0:49: 67:40:c8:ee:0e:de:3b:52:a8:62:9b:e2:02:df:7c: 31:7d:69:90:44:41:35:3c:dc:96:3f:13:2b:df:38: 14:74:bf:0a:50:4f:59:fe:6c:27:17:33:a7:29:ec: c6:9d:a0:09:3d:ad:a9:3c:42:e1:c0:bd:fb:e3:72: 8f:5c:fb:f2:d8:ee:86:9e:11:de:16:3f:28:17:90: ac:b6:cc:59:41:aa:8b:ce:5f:3e:9a:d0:34:5c:48: 9b:75:73:4a:eb:b3:01:95:17:d1:d5:03:74:37:9e: 44:df:44:26:5d:a6:41:29:71:60:27:31:0e:38:fb: 60:d9:2a:d5:36:aa:a3:af:17:7a:3a:03:ad:19:fa: 58:4f:1b:78:6a:11:b9:05:ae:28:62:68:7f:29:c9: 70:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D8:C2:4F:F0:4B:65:DF:6F:97:4A:EF:E1:D2:F3:08:A2:B4:F2:0B X509v3 Authority Key Identifier: keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/iNjCT_BLZd9vl0rv4dLzCKK08gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.38.104.0/22 92.243.72.0/23 185.156.244.0/22 IPv6: 2a03:5b00::/32 Signature Algorithm: sha256WithRSAEncryption 12:25:24:06:98:ff:6a:78:ea:65:68:c1:89:28:f6:69:7b:5e: 7b:14:f9:4e:85:07:e6:01:2d:84:86:39:03:87:d9:4c:71:2c: ad:5f:41:8f:74:7b:aa:02:8f:88:48:a8:6e:dd:16:75:37:5b: 2f:78:81:16:f6:4f:2f:9a:af:0a:c3:9f:b0:79:1c:1e:9d:85: cc:23:82:7e:9c:c3:92:c6:5f:36:aa:1e:c0:3f:cf:d6:18:4c: fc:b2:da:55:9c:13:85:9b:0e:8b:3c:67:53:dd:fc:f5:10:76: b6:59:01:53:3a:54:94:7d:d7:68:4f:8e:0e:02:50:e3:71:be: 24:2c:dd:b7:b0:a0:ac:a6:16:05:4a:3c:a9:15:84:c7:57:2e: 1d:05:50:d3:db:d3:c9:90:0c:db:34:b1:0e:62:97:cd:9d:cc: 8f:82:93:a9:53:43:c0:18:56:bc:68:cb:7b:41:6b:a9:d4:69: 20:47:19:88:93:c4:d6:06:e3:4d:8b:3c:9f:61:85:81:50:fd: f1:9e:0e:73:c6:94:fe:c5:a9:0c:b3:eb:a6:6f:c9:77:d3:7c: 7f:6d:9e:56:88:c3:cb:83:b9:4b:88:d8:30:a0:ee:9a:ef:4c: 01:73:a0:95:c4:4a:08:c0:d8:1d:78:d6:a0:0a:5d:39:1f:04: 24:01:f3:8c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87P4eTzIkMNo51PxH9U/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMWM0MzIyMDgyMTkxYzc5ZTJkODZkYjRlMWJmOWQwNzE4 ZTI3ZTkwHhcNMjYwMTAyMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGQ4YzI0ZmYwNGI2NWRmNmY5NzRhZWZlMWQyZjMwOGEyYjRmMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmExJAao0f3bDtMnxO0EkR/L6DgcX +0WDRwIy76FwPFxG9p7yV/8ixGuIgMf3Gy7bsqGqQvi9E7gtxCIOLDkyL9L5bk6I +ZOEqNUG13WInesnMOnAOS8ZREjfA+Q74agEnjmDbFt8sElnQMjuDt47Uqhim+IC 33wxfWmQREE1PNyWPxMr3zgUdL8KUE9Z/mwnFzOnKezGnaAJPa2pPELhwL3743KP XPvy2O6GnhHeFj8oF5CstsxZQaqLzl8+mtA0XEibdXNK67MBlRfR1QN0N55E30Qm XaZBKXFgJzEOOPtg2SrVNqqjrxd6OgOtGfpYTxt4ahG5Ba4oYmh/KclwqQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIjYwk/wS2Xfb5dK7+HS8wiitPILMB8GA1UdIwQY MBaAFEEcQyIIIZHHni2G204b+dBxjifpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMt ZjM4MTBiZDcwMzc2LzEvaU5qQ1RfQkxaZDl2bDBydjRkTHpDS0swOGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hNzkzOGYtN2M5YS00M2M5LTk1ZjMtZjM4MTBiZDcwMzc2 LzEvUVJ4RElnZ2hrY2VlTFliYlRodjUwSEdPSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCQCZoAwQB XPNIAwQCuZz0MA0EAgACMAcDBQAqA1sAMA0GCSqGSIb3DQEBCwUAA4IBAQASJSQG mP9qeOplaMGJKPZpe157FPlOhQfmAS2EhjkDh9lMcSytX0GPdHuqAo+ISKhu3RZ1 N1sveIEW9k8vmq8Kw5+weRwenYXMI4J+nMOSxl82qh7AP8/WGEz8stpVnBOFmw6L PGdT3fz1EHa2WQFTOlSUfddoT44OAlDjcb4kLN23sKCsphYFSjypFYTHVy4dBVDT 29PJkAzbNLEOYpfNncyPgpOpU0PAGFa8aMt7QWup1GkgRxmIk8TWBuNNizyfYYWB UP3xng5zxpT+xakMs+umb8l303x/bZ5WiMPLg7lLiNgwoO6a70wBc6CVxEoIwNgd eNagCl05HwQkAfOM -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:35 2026 by rpki-client