This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/iyMArnj2mSf9JUdDUKaC0s_aWiQ.roa File: iyMArnj2mSf9JUdDUKaC0s_aWiQ.roa (raw, json) Hash identifier: ztqEMQk0KJEvJYnMs33OUyvfdnw/f4MoJFqGkDOX2fk= Subject key identifier: 8B:23:00:AE:78:F6:99:27:FD:25:47:43:50:A6:82:D2:CF:DA:5A:24 Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019BA74E22211F75614AD9A1E8C99C7048A8 Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/iyMArnj2mSf9JUdDUKaC0s_aWiQ.roa Signing time: Sat 10 Jan 2026 09:47:54 +0000 ROA not before: Sat 10 Jan 2026 09:47:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 212.116.228.0/23 maxlen: 23 212.116.238.0/23 maxlen: 24 212.116.238.0/24 maxlen: 24 212.116.240.0/24 maxlen: 24 212.116.243.0/24 maxlen: 24 212.116.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a7:4e:22:21:1f:75:61:4a:d9:a1:e8:c9:9c:70:48:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Jan 10 09:47:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b2300ae78f69927fd25474350a682d2cfda5a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6b:2f:47:21:eb:0a:05:5c:1d:a9:1f:fd:54: 65:b8:8e:c1:f6:36:f9:cf:61:49:53:60:be:ad:77: 06:1e:6f:e6:c0:01:9a:c2:a9:ff:d6:91:ef:c6:0c: 2c:3f:d8:c3:50:66:9b:d7:1d:97:28:c5:59:9b:c2: 7b:b5:6d:2c:fe:c1:c4:05:e1:6d:39:58:7c:e7:86: ce:0d:51:8e:80:6c:32:3d:ec:26:6e:74:03:76:ce: fd:24:cd:c8:8c:49:ce:aa:bd:20:5e:c6:20:1b:89: 09:7b:c6:7a:89:ed:db:e2:b7:4a:a4:e9:90:db:d6: 48:b3:68:ca:26:85:72:4b:34:fe:26:77:67:32:0d: d6:fd:92:79:47:54:6d:1d:95:0e:56:ef:e9:96:87: 31:9f:ab:39:13:32:8d:12:39:5b:e5:e2:90:4d:71: cc:db:a0:2e:81:06:9a:c9:a0:78:80:28:57:ad:f6: 54:a7:1a:0d:4a:d0:68:1d:07:59:45:73:79:21:2a: 0d:ce:e8:dd:90:7e:ba:a3:c4:e8:7f:57:46:bf:f4: 85:a6:2c:6f:ef:c1:4a:9b:eb:43:40:13:80:40:9d: f1:94:5c:37:d7:2c:db:79:ef:91:37:90:e1:24:a5: ee:13:6b:12:b5:41:b7:1e:1b:86:34:94:99:df:81: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:23:00:AE:78:F6:99:27:FD:25:47:43:50:A6:82:D2:CF:DA:5A:24 X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/iyMArnj2mSf9JUdDUKaC0s_aWiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.228.0/23 212.116.238.0-212.116.240.255 212.116.243.0/24 212.116.245.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:79:13:89:c8:12:72:91:ee:a5:8f:97:c0:61:b1:34:42:26: 29:a5:0a:3a:73:8c:e2:f6:e1:b8:af:3f:d8:97:4a:8a:81:03: 32:08:ab:7a:4e:75:9f:34:c1:12:92:ed:02:3e:8d:8f:c9:b6: 0f:97:28:a1:89:6b:b3:9d:3a:e9:cc:07:1b:4a:96:d6:e3:e7: b2:18:15:69:59:29:15:83:f9:8b:84:75:1c:b6:92:bc:f6:21: 46:10:da:9c:90:28:34:ff:1d:5b:2c:34:0b:f9:40:f7:db:40: 64:bc:92:c9:b7:6a:13:ba:1e:ca:c3:b7:bd:52:b1:52:08:68: b6:27:04:6e:35:c6:43:6d:d2:d9:88:ce:e2:5c:d0:27:3c:3f: c2:d4:71:90:45:6b:14:ad:3f:c8:2c:ac:0f:79:b0:8b:b2:75: eb:ce:cb:1a:73:95:7d:07:b2:98:54:6c:76:e8:9e:d6:fc:d5: c2:46:31:69:55:4a:cd:5c:5a:e6:70:00:38:94:d8:88:d6:c2: 8a:fc:34:13:2a:14:df:e3:a6:75:f8:b7:09:0c:ff:16:18:5c: 6b:89:55:a1:1b:b5:d3:c5:12:fa:d4:32:bf:41:05:1c:f5:b9: da:2e:5b:d4:3a:e0:04:67:2b:c3:ca:11:1a:2d:b7:6f:58:51: 87:15:27:d7 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZunTiIhH3VhStmh6MmccEioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjYwMTEwMDk0NzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjIzMDBhZTc4ZjY5OTI3ZmQyNTQ3NDM1MGE2ODJkMmNmZGE1YTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGsvRyHrCgVcHakf/VRluI7B9jb5 z2FJU2C+rXcGHm/mwAGawqn/1pHvxgwsP9jDUGab1x2XKMVZm8J7tW0s/sHEBeFt OVh854bODVGOgGwyPewmbnQDds79JM3IjEnOqr0gXsYgG4kJe8Z6ie3b4rdKpOmQ 29ZIs2jKJoVySzT+JndnMg3W/ZJ5R1RtHZUOVu/plocxn6s5EzKNEjlb5eKQTXHM 26AugQaayaB4gChXrfZUpxoNStBoHQdZRXN5ISoNzujdkH66o8Tof1dGv/SFpixv 78FKm+tDQBOAQJ3xlFw31yzbee+RN5DhJKXuE2sStUG3HhuGNJSZ34EYWwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFIsjAK549pkn/SVHQ1CmgtLP2lokMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvaXlNQXJuajJtU2Y5SlVkRFVLYUMwc19hV2lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQB1HTkMAwD BAHUdO4DBADUdPADBADUdPMDBADUdPUwDQYJKoZIhvcNAQELBQADggEBAJ55E4nI EnKR7qWPl8BhsTRCJimlCjpzjOL24bivP9iXSoqBAzIIq3pOdZ80wRKS7QI+jY/J tg+XKKGJa7OdOunMBxtKltbj57IYFWlZKRWD+YuEdRy2krz2IUYQ2pyQKDT/HVss NAv5QPfbQGS8ksm3ahO6HsrDt71SsVIIaLYnBG41xkNt0tmIzuJc0Cc8P8LUcZBF axStP8gsrA95sIuydevOyxpzlX0HsphUbHbontb81cJGMWlVSs1cWuZwADiU2IjW wor8NBMqFN/jpnX4twkM/xYYXGuJVaEbtdPFEvrUMr9BBRz1udouW9Q64ARnK8PK ERott29YUYcVJ9c= -----END CERTIFICATE-----Generated at Fri Jan 23 00:36:02 2026 by rpki-client