This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/ISRSOffwnKTjPj1MMPFnE5hHe8s.roa File: ISRSOffwnKTjPj1MMPFnE5hHe8s.roa (raw, json) Hash identifier: TPD3Y1wSPDIQC6GIJIQVVQh3HSBeVb1LhJHakT+NdHs= Subject key identifier: 21:24:52:39:F7:F0:9C:A4:E3:3E:3D:4C:30:F1:67:13:98:47:7B:CB Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Certificate serial: 019B7DCB4E88DA040DF09EBA1AE5DF4C4726 Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/ISRSOffwnKTjPj1MMPFnE5hHe8s.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 45.129.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4e:88:da:04:0d:f0:9e:ba:1a:e5:df:4c:47:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21245239f7f09ca4e33e3d4c30f1671398477bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d6:07:02:87:ef:20:70:7d:ed:a2:a4:4f:25: 7f:9e:56:a0:88:2d:88:d9:8b:09:a8:f0:59:97:3d: 2f:09:4e:04:68:27:b3:a6:8b:59:2c:31:62:5d:93: 78:d2:a0:02:ad:e6:f5:a5:22:e3:25:cc:4b:08:18: 3c:e0:2b:a7:9d:b9:ea:ea:26:e1:27:ef:5e:46:c1: 88:9b:59:ca:4e:b5:9a:7d:83:e2:8a:93:f1:5f:3a: 70:a5:12:d7:52:e2:87:e0:6f:a6:96:04:9d:2a:63: 29:79:34:b0:46:93:ba:86:24:45:bc:3c:e7:86:35: 2a:7b:a9:55:5c:6b:ac:9c:06:ec:a2:0d:31:d8:8d: 2c:fd:98:55:02:1f:b5:18:a8:97:9e:d3:78:3b:a7: 22:f8:0a:cd:f3:3f:fa:ef:b6:80:4c:85:d4:97:ce: 55:8a:72:ea:52:f4:6c:b3:0d:91:e5:26:00:11:f2: 06:04:e7:50:91:9a:c3:63:46:9c:1f:17:ff:e6:c0: 34:09:3c:46:09:67:f1:a5:a5:1b:fa:c1:39:4d:93: 22:17:fb:35:0a:ed:45:16:c4:c7:48:aa:0d:18:c3: 29:58:b2:44:0c:1f:52:8d:8f:ab:f5:02:5a:01:65: ae:aa:90:4e:7b:8c:45:86:4e:25:ad:0b:9b:41:0a: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:24:52:39:F7:F0:9C:A4:E3:3E:3D:4C:30:F1:67:13:98:47:7B:CB X509v3 Authority Key Identifier: keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/ISRSOffwnKTjPj1MMPFnE5hHe8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.193.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:52:6b:2b:3b:5b:8d:63:5d:e5:04:86:00:f2:83:fd:37:5d: 02:12:6d:49:90:1e:81:72:8f:72:66:8f:9f:38:d2:a9:84:1a: 76:fb:2b:91:b1:d5:a0:0c:ca:df:47:c8:ad:93:e3:22:b1:65: 40:9f:b0:3a:8b:94:ff:85:a6:a7:85:3f:6c:01:5c:fd:7c:34: 24:0b:1d:35:7e:a3:10:7c:14:81:3c:2c:75:27:ed:d2:e0:b8: cd:09:f8:8b:95:f6:6d:f9:66:bf:3d:27:26:29:25:b6:65:60: 77:e4:c1:57:d2:c9:9d:51:4c:76:19:5d:4b:0d:f8:16:48:b0: 00:45:cb:91:c3:d9:43:d9:cf:c8:e1:42:a7:5d:7c:b6:96:a1: d8:70:33:3b:79:d7:6d:ab:fc:85:09:99:85:71:a4:a2:70:14: 95:56:e6:21:fe:10:4b:12:f7:94:7f:7d:42:20:a3:13:94:34: 6a:2e:90:2d:88:23:5f:3c:e1:ae:fe:0c:0e:04:1f:6b:b8:c8: 77:81:fd:4d:08:1d:f8:5d:9c:95:d0:cb:9d:0c:63:36:cc:e2: b6:3e:2c:2a:67:04:c2:8a:0c:32:c4:38:dd:4e:92:f6:6e:68: 9c:0a:63:8b:35:af:0e:a7:57:80:21:3c:15:b2:c7:be:98:3d: e3:2a:c9:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y06I2gQN8J66GuXfTEcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl YTJiYTEwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTI0NTIzOWY3ZjA5Y2E0ZTMzZTNkNGMzMGYxNjcxMzk4NDc3YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtYHAofvIHB97aKkTyV/nlagiC2I 2YsJqPBZlz0vCU4EaCezpotZLDFiXZN40qACreb1pSLjJcxLCBg84Cunnbnq6ibh J+9eRsGIm1nKTrWafYPiipPxXzpwpRLXUuKH4G+mlgSdKmMpeTSwRpO6hiRFvDzn hjUqe6lVXGusnAbsog0x2I0s/ZhVAh+1GKiXntN4O6ci+ArN8z/677aATIXUl85V inLqUvRssw2R5SYAEfIGBOdQkZrDY0acHxf/5sA0CTxGCWfxpaUb+sE5TZMiF/s1 Cu1FFsTHSKoNGMMpWLJEDB9SjY+r9QJaAWWuqpBOe4xFhk4lrQubQQoieQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEkUjn38Jyk4z49TDDxZxOYR3vLMB8GA1UdIwQY MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt OTJlOGJlNjI3OWJiLzEvSVNSU09mZnduS1RqUGoxTU1QRm5FNWhIZThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHBMA0G CSqGSIb3DQEBCwUAA4IBAQAfUmsrO1uNY13lBIYA8oP9N10CEm1JkB6Bco9yZo+f ONKphBp2+yuRsdWgDMrfR8itk+MisWVAn7A6i5T/haanhT9sAVz9fDQkCx01fqMQ fBSBPCx1J+3S4LjNCfiLlfZt+Wa/PScmKSW2ZWB35MFX0smdUUx2GV1LDfgWSLAA RcuRw9lD2c/I4UKnXXy2lqHYcDM7eddtq/yFCZmFcaSicBSVVuYh/hBLEveUf31C IKMTlDRqLpAtiCNfPOGu/gwOBB9ruMh3gf1NCB34XZyV0MudDGM2zOK2PiwqZwTC igwyxDjdTpL2bmicCmOLNa8Op1eAITwVsse+mD3jKskN -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:40 2026 by rpki-client