This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/ISCc4tni62UOSGX9mZkRawtzVJ4.roa File: ISCc4tni62UOSGX9mZkRawtzVJ4.roa (raw, json) Hash identifier: l+zMFWNINgv4W3LV5PF3KVOBpyu0Rw4iE2F/LywZLlg= Subject key identifier: 21:20:9C:E2:D9:E2:EB:65:0E:48:65:FD:99:99:11:6B:0B:73:54:9E Certificate issuer: /CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Certificate serial: 019B797EE1927DAB0401E04A082CFF736DD0 Authority key identifier: C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/ISCc4tni62UOSGX9mZkRawtzVJ4.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41782 IP address blocks: 84.38.243.0/24 maxlen: 24 91.216.57.0/24 maxlen: 24 193.84.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e1:92:7d:ab:04:01:e0:4a:08:2c:ff:73:6d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c406ea8d5d7054ef8997e6292e3b044b093a27c6 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21209ce2d9e2eb650e4865fd9999116b0b73549e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:48:8d:d1:ed:5b:95:d8:05:42:63:62:02: 1b:f5:a2:03:08:5b:7d:cb:fd:cf:ac:95:55:91:2b: 55:00:d5:fa:7c:da:f9:12:be:b8:8b:f4:a2:ea:c4: 16:94:0d:38:95:70:d5:c9:70:26:9a:a8:8c:d6:14: 62:2c:a2:5b:71:b8:a1:1b:cb:e4:24:9e:b2:7f:1d: e8:10:c6:87:8f:22:46:3c:37:f7:e3:4c:4e:59:74: 8f:f0:95:a4:77:1e:15:40:77:f5:48:d6:57:33:b9: de:9a:a1:93:52:b6:8d:99:88:fe:b5:5d:25:a3:c4: 5a:00:19:60:86:1d:31:ad:29:f6:c2:61:d4:fe:8c: 62:9c:de:fc:19:c3:73:66:1c:0b:db:05:b4:04:69: 93:40:aa:5c:0b:e0:65:c7:80:54:4d:8c:b6:94:34: 27:52:52:89:04:22:ef:ff:4e:3f:9b:51:5b:b4:e3: e3:f0:d6:ff:81:ab:04:47:6a:06:1f:d9:57:1c:10: 6d:39:db:9f:a7:17:7f:12:0d:33:ca:b4:ae:67:39: 74:7c:40:b9:3d:82:26:60:8a:04:2c:f2:1c:99:3e: 6c:f4:e1:93:67:a0:ba:39:aa:43:54:10:63:49:d2: 2e:79:de:9e:79:b9:69:7a:71:8a:c9:17:32:52:68: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:20:9C:E2:D9:E2:EB:65:0E:48:65:FD:99:99:11:6B:0B:73:54:9E X509v3 Authority Key Identifier: keyid:C4:06:EA:8D:5D:70:54:EF:89:97:E6:29:2E:3B:04:4B:09:3A:27:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/ISCc4tni62UOSGX9mZkRawtzVJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b1b26c-2b7c-4117-b235-8b301bac30c9/1/xAbqjV1wVO-Jl-YpLjsESwk6J8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.38.243.0/24 91.216.57.0/24 193.84.103.0/24 Signature Algorithm: sha256WithRSAEncryption ab:05:57:fe:36:77:c2:d6:92:cf:a5:93:1f:64:17:d7:1a:41: ca:bc:3a:f5:71:ff:95:d9:4c:47:81:1a:ed:21:01:50:32:83: 1c:ca:25:2f:45:f9:ad:8d:51:db:05:a8:a9:23:15:28:5d:0f: 80:30:01:70:15:03:eb:d8:7a:68:f3:20:1d:59:6d:2b:01:c4: 98:3a:2e:f1:6c:75:cf:0c:87:62:9b:da:b8:96:57:fa:23:ee: 66:29:ce:7e:3f:81:54:56:1a:0b:93:fc:04:63:4f:7d:cb:b9: 23:c5:6c:b1:c3:d0:85:27:0d:fa:73:a4:39:25:92:ea:e3:9c: 1f:e4:26:62:e1:ce:8a:9c:36:1b:f9:ab:6b:0f:29:04:c4:97: 27:0f:be:52:4f:32:d4:ab:eb:ec:63:38:f0:e2:f7:9a:2c:46: 17:74:26:6a:2a:53:ea:f2:8c:81:55:28:ac:5a:97:0b:93:bb: e2:29:26:76:5f:83:cc:aa:45:9f:11:dc:96:74:2e:8c:52:68: 2c:05:9b:73:fd:66:82:d7:5b:84:70:e6:0f:7f:bf:08:80:0b: c7:2b:84:6d:9d:e2:b9:d1:fe:1d:b2:ea:f7:49:c4:cb:ae:88: 26:6c:3d:22:45:e6:8f:9e:1b:1a:e7:91:81:99:03:f8:d7:03: 8c:0a:7f:f2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fuGSfasEAeBKCCz/c23QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MDZlYThkNWQ3MDU0ZWY4OTk3ZTYyOTJlM2IwNDRiMDkz YTI3YzYwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTIwOWNlMmQ5ZTJlYjY1MGU0ODY1ZmQ5OTk5MTE2YjBiNzM1NDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ZIjdHtW5XYBUJjYgIb9aIDCFt9 y/3PrJVVkStVANX6fNr5Er64i/Si6sQWlA04lXDVyXAmmqiM1hRiLKJbcbihG8vk JJ6yfx3oEMaHjyJGPDf340xOWXSP8JWkdx4VQHf1SNZXM7nemqGTUraNmYj+tV0l o8RaABlghh0xrSn2wmHU/oxinN78GcNzZhwL2wW0BGmTQKpcC+Blx4BUTYy2lDQn UlKJBCLv/04/m1FbtOPj8Nb/gasER2oGH9lXHBBtOdufpxd/Eg0zyrSuZzl0fEC5 PYImYIoELPIcmT5s9OGTZ6C6OapDVBBjSdIued6eeblpenGKyRcyUmiWKQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCEgnOLZ4utlDkhl/ZmZEWsLc1SeMB8GA1UdIwQY MBaAFMQG6o1dcFTviZfmKS47BEsJOifGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUt OGIzMDFiYWMzMGM5LzEvSVNDYzR0bmk2MlVPU0dYOW1aa1Jhd3R6Vko0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iMWIyNmMtMmI3Yy00MTE3LWIyMzUtOGIzMDFiYWMzMGM5 LzEveEFicWpWMXdWTy1KbC1ZcExqc0VTd2s2SjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVCbzAwQA W9g5AwQAwVRnMA0GCSqGSIb3DQEBCwUAA4IBAQCrBVf+NnfC1pLPpZMfZBfXGkHK vDr1cf+V2UxHgRrtIQFQMoMcyiUvRfmtjVHbBaipIxUoXQ+AMAFwFQPr2Hpo8yAd WW0rAcSYOi7xbHXPDIdim9q4llf6I+5mKc5+P4FUVhoLk/wEY099y7kjxWyxw9CF Jw36c6Q5JZLq45wf5CZi4c6KnDYb+atrDykExJcnD75STzLUq+vsYzjw4veaLEYX dCZqKlPq8oyBVSisWpcLk7viKSZ2X4PMqkWfEdyWdC6MUmgsBZtz/WaC11uEcOYP f78IgAvHK4RtneK50f4dsur3ScTLrogmbD0iReaPnhsa55GBmQP41wOMCn/y -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:37 2026 by rpki-client