This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/IJZ8naEGV7SdTGmdWR7BmWH0DgQ.roa File: IJZ8naEGV7SdTGmdWR7BmWH0DgQ.roa (raw, json) Hash identifier: OZaicQVaHJASypQwDKkjNaBMS0R4zrdxc4MziKO9rQw= Subject key identifier: 20:96:7C:9D:A1:06:57:B4:9D:4C:69:9D:59:1E:C1:99:61:F4:0E:04 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B18EF87EBC911E650A392B713ABD7F713 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/IJZ8naEGV7SdTGmdWR7BmWH0DgQ.roa Signing time: Sat 13 Dec 2025 18:18:29 +0000 ROA not before: Sat 13 Dec 2025 18:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 91.186.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:ef:87:eb:c9:11:e6:50:a3:92:b7:13:ab:d7:f7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Dec 13 18:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=20967c9da10657b49d4c699d591ec19961f40e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:43:aa:1f:e1:5f:4c:d4:3d:a0:91:96:36: 13:d4:c2:2b:6f:28:31:64:e3:1e:10:66:a3:45:35: 54:95:19:e9:ee:1a:57:60:88:5a:54:c6:d4:88:1e: ca:29:7d:36:44:70:81:51:05:ea:ed:1d:1e:3f:c9: 31:45:03:94:21:73:0a:a8:53:b4:26:5f:55:a3:99: 2b:d7:a1:87:ed:e1:00:a8:76:4d:2a:f8:58:d9:0a: a8:05:84:3a:08:e8:cb:13:b3:19:38:6a:6f:e1:a0: 72:98:18:0e:d6:fe:c6:55:8c:7e:ea:55:42:f5:53: 90:18:fa:a9:ba:27:29:5e:ed:e3:25:61:e8:51:90: 7f:32:3d:b1:c3:7f:83:6a:70:67:51:37:e9:a0:16: 49:c1:43:a4:bc:4f:df:92:5a:36:89:c0:b8:83:49: ab:87:74:f4:a0:21:78:fb:e5:10:f6:56:e9:5b:d9: 19:c7:77:f3:79:8a:6f:46:3f:e6:09:da:70:e9:39: 03:9c:9d:3d:6a:4d:a9:a7:b1:03:a5:c5:83:02:d1: 49:e8:15:4f:dc:a3:70:ef:71:ef:82:46:a3:68:a0: b8:68:42:79:24:72:38:6d:32:78:01:d4:ae:36:e8: aa:8a:18:ba:a5:7b:9b:cf:74:ac:94:ec:42:13:66: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:96:7C:9D:A1:06:57:B4:9D:4C:69:9D:59:1E:C1:99:61:F4:0E:04 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/IJZ8naEGV7SdTGmdWR7BmWH0DgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.186.195.0/24 Signature Algorithm: sha256WithRSAEncryption 74:d4:8b:2a:ce:99:9d:43:18:c6:d1:51:fd:33:02:a6:b5:3e: dd:92:59:1e:00:75:80:b9:be:e9:ec:0c:fb:24:89:a7:a4:52: ec:91:24:0a:5f:95:18:70:30:be:96:56:7c:f3:5a:eb:ff:e7: b8:c5:fc:26:f9:48:5f:50:67:22:71:36:58:3c:bf:00:1b:ae: 63:db:bb:9a:1f:a7:2e:e8:42:27:d9:77:9c:aa:76:e3:4c:cd: b9:89:9d:37:a5:e0:ee:87:b4:26:9e:26:0a:cc:a4:fc:5d:f2: 47:fc:26:57:69:94:61:14:f2:92:76:fd:42:3b:46:84:2a:f8: a6:aa:6d:a7:08:56:25:7e:21:4a:f7:7f:35:c9:b6:83:72:45: 7f:24:03:fe:db:8c:f8:38:17:71:bd:07:84:32:c1:7e:7a:5e: cf:66:9e:a4:9d:9c:ca:ea:67:cd:43:24:31:56:2a:a5:78:0e: a8:b0:f5:ba:84:9f:9f:7b:1b:22:5f:97:2d:c6:53:7e:7c:5e: 94:85:58:a7:28:4f:7e:e4:5d:f9:84:9d:13:dd:22:58:59:56: c9:aa:30:f1:0f:6d:71:b6:0e:e0:14:ea:94:c1:9c:57:3d:c3: 26:46:f1:5e:87:c2:7f:dc:de:b0:3e:eb:69:b3:e1:ef:2b:64: 2f:e6:a1:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsY74fryRHmUKOStxOr1/cTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjUxMjEzMTgxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDk2N2M5ZGExMDY1N2I0OWQ0YzY5OWQ1OTFlYzE5OTYxZjQwZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykZDqh/hX0zUPaCRljYT1MIrbygx ZOMeEGajRTVUlRnp7hpXYIhaVMbUiB7KKX02RHCBUQXq7R0eP8kxRQOUIXMKqFO0 Jl9Vo5kr16GH7eEAqHZNKvhY2QqoBYQ6COjLE7MZOGpv4aBymBgO1v7GVYx+6lVC 9VOQGPqpuicpXu3jJWHoUZB/Mj2xw3+DanBnUTfpoBZJwUOkvE/fklo2icC4g0mr h3T0oCF4++UQ9lbpW9kZx3fzeYpvRj/mCdpw6TkDnJ09ak2pp7EDpcWDAtFJ6BVP 3KNw73HvgkajaKC4aEJ5JHI4bTJ4AdSuNuiqihi6pXubz3SslOxCE2YmVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCWfJ2hBle0nUxpnVkewZlh9A4EMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvSUpaOG5hRUdWN1NkVEdtZFdSN0JtV0gwRGdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7rDMA0G CSqGSIb3DQEBCwUAA4IBAQB01IsqzpmdQxjG0VH9MwKmtT7dklkeAHWAub7p7Az7 JImnpFLskSQKX5UYcDC+llZ881rr/+e4xfwm+UhfUGcicTZYPL8AG65j27uaH6cu 6EIn2XecqnbjTM25iZ03peDuh7QmniYKzKT8XfJH/CZXaZRhFPKSdv1CO0aEKvim qm2nCFYlfiFK9381ybaDckV/JAP+24z4OBdxvQeEMsF+el7PZp6knZzK6mfNQyQx ViqleA6osPW6hJ+fexsiX5ctxlN+fF6UhVinKE9+5F35hJ0T3SJYWVbJqjDxD21x tg7gFOqUwZxXPcMmRvFeh8J/3N6wPutps+HvK2Qv5qEp -----END CERTIFICATE-----Generated at Fri Dec 19 19:42:25 2025 by rpki-client