This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/iIFXLBXRyhHRxODZud1xrElh64s.roa File: iIFXLBXRyhHRxODZud1xrElh64s.roa (raw, json) Hash identifier: AExhCYGcQMhNtoiQSq64xmFEgJgvDNV9lYLc/Z+6mC0= Subject key identifier: 88:81:57:2C:15:D1:CA:11:D1:C4:E0:D9:B9:DD:71:AC:49:61:EB:8B Certificate issuer: /CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Certificate serial: 019B7D5B3D58C4F9986E4D51DDBFAFD19108 Authority key identifier: AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/iIFXLBXRyhHRxODZud1xrElh64s.roa Signing time: Fri 02 Jan 2026 06:18:10 +0000 ROA not before: Fri 02 Jan 2026 06:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59521 IP address blocks: 45.115.108.0/22 maxlen: 22 45.149.52.0/24 maxlen: 24 103.55.100.0/22 maxlen: 22 103.57.40.0/22 maxlen: 22 195.72.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:3d:58:c4:f9:98:6e:4d:51:dd:bf:af:d1:91:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7670698cfaef2647fbc9a06f7380856e2b3027 Validity Not Before: Jan 2 06:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8881572c15d1ca11d1c4e0d9b9dd71ac4961eb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:1a:94:77:87:bb:7a:39:8c:64:fb:6d:67: f8:c1:67:ae:f3:41:56:68:ca:65:d0:45:5b:58:81: eb:c8:2d:58:b7:dd:10:54:1e:69:ad:ac:3a:9d:9f: 66:19:5d:ba:a4:56:c6:08:76:f7:eb:44:13:17:a4: a4:84:2f:cb:52:21:ca:50:c0:32:e2:09:71:3d:33: dc:48:1a:2e:f0:94:22:15:77:32:dc:02:e0:63:04: 5b:33:34:67:42:18:6a:14:a8:33:95:f5:80:11:f3: 1b:c4:2d:9c:2a:80:81:6d:23:90:f1:11:38:dc:42: ff:9a:17:da:fc:a4:d3:77:71:7f:a9:8c:0f:56:bc: 4c:a4:3d:f1:85:cc:b4:6b:e4:e3:5d:08:79:d5:5b: ed:c7:cc:38:18:ae:8e:b3:57:20:51:8e:5a:c9:65: 46:22:d0:fa:fb:ac:03:e6:64:05:20:12:f8:53:31: b3:a1:9e:75:dd:f0:bd:18:53:98:53:c6:a5:40:4d: f6:db:e2:03:42:61:0f:c5:22:53:24:f0:cf:ed:fb: 34:5c:06:e2:b7:7a:4e:41:d3:41:82:dc:99:ed:80: ea:40:d5:39:9f:c3:c9:92:6b:02:31:eb:8a:8e:59: cf:d2:8e:97:54:bf:7e:9f:ac:29:10:de:67:3b:0c: db:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:81:57:2C:15:D1:CA:11:D1:C4:E0:D9:B9:DD:71:AC:49:61:EB:8B X509v3 Authority Key Identifier: keyid:AC:76:70:69:8C:FA:EF:26:47:FB:C9:A0:6F:73:80:85:6E:2B:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHZwaYz67yZH-8mgb3OAhW4rMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/iIFXLBXRyhHRxODZud1xrElh64s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/68f651-f3a6-4252-9faf-9e044092b826/1/rHZwaYz67yZH-8mgb3OAhW4rMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.108.0/22 45.149.52.0/24 103.55.100.0/22 103.57.40.0/22 195.72.124.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:0e:46:8a:c4:2e:9d:2e:71:db:8e:4d:f0:f2:24:b5:0a:ff: 0f:fb:2e:a5:56:58:85:8d:4d:94:44:05:c0:c0:7f:b8:bf:6a: 47:b3:3c:c5:86:8d:93:50:87:f6:aa:a0:b1:51:8f:05:ec:a8: 7f:b1:ae:21:04:e3:78:ca:7f:33:09:80:14:48:29:a7:8f:87: df:56:d9:cf:23:1f:e0:21:a8:6b:03:8b:0e:45:a8:08:4b:32: f2:df:2b:b0:39:d9:71:d1:59:1f:f7:0d:d5:c8:30:c9:e7:c4: c0:cb:d1:13:ec:16:8a:de:6f:58:14:80:36:ed:d8:f3:53:6e: ee:61:83:3a:9a:66:9b:42:b6:67:b4:59:95:3c:35:89:7a:62: ff:0b:b5:6f:e0:f6:a7:17:e8:b6:30:1e:e4:59:fb:76:23:ee: 5b:c8:b0:1e:88:60:40:c9:a6:e1:53:c8:12:2e:0e:a5:59:d3: 73:4b:36:06:f1:8e:80:bf:28:ca:47:b7:c6:25:c5:b6:76:01: cf:b6:35:bc:f1:15:74:35:73:b8:6d:bd:07:48:90:95:b8:e8: 7d:f2:9b:12:2d:26:59:51:b1:e5:55:f1:af:10:57:34:f2:c6: 88:b5:9b:04:e4:92:ee:ce:9e:5a:36:41:97:ad:ae:91:8a:cb: c1:f5:07:b2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9Wz1YxPmYbk1R3b+v0ZEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNzY3MDY5OGNmYWVmMjY0N2ZiYzlhMDZmNzM4MDg1NmUy YjMwMjcwHhcNMjYwMTAyMDYxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODgxNTcyYzE1ZDFjYTExZDFjNGUwZDliOWRkNzFhYzQ5NjFlYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtIalHeHu3o5jGT7bWf4wWeu80FW aMpl0EVbWIHryC1Yt90QVB5praw6nZ9mGV26pFbGCHb360QTF6SkhC/LUiHKUMAy 4glxPTPcSBou8JQiFXcy3ALgYwRbMzRnQhhqFKgzlfWAEfMbxC2cKoCBbSOQ8RE4 3EL/mhfa/KTTd3F/qYwPVrxMpD3xhcy0a+TjXQh51Vvtx8w4GK6Os1cgUY5ayWVG ItD6+6wD5mQFIBL4UzGzoZ513fC9GFOYU8alQE322+IDQmEPxSJTJPDP7fs0XAbi t3pOQdNBgtyZ7YDqQNU5n8PJkmsCMeuKjlnP0o6XVL9+n6wpEN5nOwzb+QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIiBVywV0coR0cTg2bndcaxJYeuLMB8GA1UdIwQY MBaAFKx2cGmM+u8mR/vJoG9zgIVuKzAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYt OWUwNDQwOTJiODI2LzEvaUlGWExCWFJ5aEhSeE9EWnVkMXhyRWxoNjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82OGY2NTEtZjNhNi00MjUyLTlmYWYtOWUwNDQwOTJiODI2 LzEvckhad2FZejY3eVpILThtZ2IzT0FoVzRyTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLXNsAwQA LZU0AwQCZzdkAwQCZzkoAwQCw0h8MA0GCSqGSIb3DQEBCwUAA4IBAQCLDkaKxC6d LnHbjk3w8iS1Cv8P+y6lVliFjU2URAXAwH+4v2pHszzFho2TUIf2qqCxUY8F7Kh/ sa4hBON4yn8zCYAUSCmnj4ffVtnPIx/gIahrA4sORagISzLy3yuwOdlx0Vkf9w3V yDDJ58TAy9ET7BaK3m9YFIA27djzU27uYYM6mmabQrZntFmVPDWJemL/C7Vv4Pan F+i2MB7kWft2I+5byLAeiGBAyabhU8gSLg6lWdNzSzYG8Y6AvyjKR7fGJcW2dgHP tjW88RV0NXO4bb0HSJCVuOh98psSLSZZUbHlVfGvEFc08saItZsE5JLuzp5aNkGX ra6RisvB9Qey -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:27 2026 by rpki-client