This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ir68V4nnZXMcM6su4E53Z2sPiPY.roa File: Ir68V4nnZXMcM6su4E53Z2sPiPY.roa (raw, json) Hash identifier: lSuOvFNbw/w4QoIfL4Sy9erXzeD0fPgJM5VGjdoFZuQ= Subject key identifier: 22:BE:BC:57:89:E7:65:73:1C:33:AB:2E:E0:4E:77:67:6B:0F:88:F6 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019B77C77185AA605351767CF7B6EB04E64B Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ir68V4nnZXMcM6su4E53Z2sPiPY.roa Signing time: Thu 01 Jan 2026 04:18:37 +0000 ROA not before: Thu 01 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46844 IP address blocks: 212.116.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:71:85:aa:60:53:51:76:7c:f7:b6:eb:04:e6:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 1 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22bebc5789e765731c33ab2ee04e77676b0f88f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:69:a8:28:bf:36:fc:ba:2e:9b:57:09:b9:f4: 79:5f:77:13:85:6e:c7:1d:cc:96:ce:b5:b6:64:d9: 11:b5:51:b2:09:77:a0:0c:c0:17:12:8b:6c:70:68: 1d:2b:bb:d1:b7:3f:e9:2c:63:c5:6f:98:51:d5:f8: 95:17:f4:d9:c4:8b:e4:31:15:4a:ab:9b:f5:e2:ea: 5e:71:88:be:07:ac:ed:be:df:64:d4:7f:e3:74:13: f1:79:7a:98:6b:15:df:4e:56:b8:93:70:a9:dc:61: d8:47:48:de:d4:d0:ed:c3:df:c6:f2:5c:93:2c:99: 7b:39:41:7f:17:9d:fa:78:3b:53:a7:fd:9d:ca:91: 4d:90:b0:7d:e9:1d:2d:56:e2:98:ee:bb:25:41:a0: 79:50:3a:0a:19:1b:7f:13:fe:ae:40:ac:fe:5d:e9: 4b:30:d1:64:aa:4b:64:65:4a:73:08:3c:c5:ab:1a: 37:3d:ed:8d:01:e4:a1:22:0b:f7:0f:c3:e2:5c:62: 5d:14:7c:6e:5f:9f:a2:aa:d4:15:b6:de:35:20:ec: 54:33:29:99:63:52:56:88:c9:a5:24:f7:44:fa:55: 14:68:61:e0:8c:9c:3c:70:23:9b:6f:7d:1b:cc:fa: 13:0a:c4:89:1e:eb:3d:5c:8f:59:24:42:e3:8c:1c: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:BC:57:89:E7:65:73:1C:33:AB:2E:E0:4E:77:67:6B:0F:88:F6 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/Ir68V4nnZXMcM6su4E53Z2sPiPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.236.0/24 Signature Algorithm: sha256WithRSAEncryption 45:a3:e2:93:c9:e2:f3:78:30:f3:96:55:17:73:36:f9:31:ba: ed:36:0d:a5:e9:a6:71:c8:b3:20:ac:d3:24:0b:85:51:23:83: 54:69:a4:6e:a1:16:75:a3:a8:01:20:7c:95:45:ec:2a:1c:a6: f3:86:7d:13:d6:61:7d:7d:e4:1f:e2:f6:57:07:f6:4c:37:cf: 69:07:33:67:3b:f7:bb:fc:36:26:18:f0:5d:d8:85:01:e8:10: f2:ab:d5:cc:09:23:1c:f2:3a:46:08:cc:e7:3e:27:e8:28:07: a4:43:f8:65:8f:e3:7d:d2:79:25:1b:63:dd:00:b5:65:83:3c: bc:57:3e:ad:7c:de:c6:83:e1:e7:38:fd:99:1d:54:b3:2a:f5: e2:70:c1:b8:59:da:cb:71:ee:28:3e:36:4c:26:bf:89:e1:25: ee:18:10:96:87:f1:5f:d0:e6:94:70:ad:75:37:61:69:10:42: 0e:81:4a:9a:9e:78:13:d9:b5:e0:29:f9:b2:9f:77:86:2c:bd: 8e:f4:c9:af:b4:e0:ff:de:00:53:fb:66:51:fa:19:53:46:34: 00:f9:71:b3:d3:23:53:bc:27:e7:1e:08:16:3e:30:76:7d:60: 9c:6d:36:6c:ba:28:2b:88:8c:09:18:21:13:57:bb:17:52:99: 06:27:13:0b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3GFqmBTUXZ897brBOZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTAxMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmJlYmM1Nzg5ZTc2NTczMWMzM2FiMmVlMDRlNzc2NzZiMGY4OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2moKL82/Loum1cJufR5X3cThW7H HcyWzrW2ZNkRtVGyCXegDMAXEotscGgdK7vRtz/pLGPFb5hR1fiVF/TZxIvkMRVK q5v14upecYi+B6ztvt9k1H/jdBPxeXqYaxXfTla4k3Cp3GHYR0je1NDtw9/G8lyT LJl7OUF/F536eDtTp/2dypFNkLB96R0tVuKY7rslQaB5UDoKGRt/E/6uQKz+XelL MNFkqktkZUpzCDzFqxo3Pe2NAeShIgv3D8PiXGJdFHxuX5+iqtQVtt41IOxUMymZ Y1JWiMmlJPdE+lUUaGHgjJw8cCObb30bzPoTCsSJHus9XI9ZJELjjBznRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCK+vFeJ52VzHDOrLuBOd2drD4j2MB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvSXI2OFY0bm5aWE1jTTZzdTRFNTNaMnNQaVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HTsMA0G CSqGSIb3DQEBCwUAA4IBAQBFo+KTyeLzeDDzllUXczb5MbrtNg2l6aZxyLMgrNMk C4VRI4NUaaRuoRZ1o6gBIHyVRewqHKbzhn0T1mF9feQf4vZXB/ZMN89pBzNnO/e7 /DYmGPBd2IUB6BDyq9XMCSMc8jpGCMznPifoKAekQ/hlj+N90nklG2PdALVlgzy8 Vz6tfN7Gg+HnOP2ZHVSzKvXicMG4WdrLce4oPjZMJr+J4SXuGBCWh/Ff0OaUcK11 N2FpEEIOgUqanngT2bXgKfmyn3eGLL2O9MmvtOD/3gBT+2ZR+hlTRjQA+XGz0yNT vCfnHggWPjB2fWCcbTZsuigriIwJGCETV7sXUpkGJxML -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:44 2026 by rpki-client