This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iojxs-4stuh5VLOzZynsjkM6c0E.roa File: iojxs-4stuh5VLOzZynsjkM6c0E.roa (raw, json) Hash identifier: UEmjKKCU8lRCDvcwWsLDPsTENcP/mGR9V70rcXozZ0A= Subject key identifier: 8A:88:F1:B3:EE:2C:B6:E8:79:54:B3:B3:67:29:EC:8E:43:3A:73:41 Certificate issuer: /CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Certificate serial: 019B7B36B0287A7C9DC16D59AECB2923CA9F Authority key identifier: 88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iojxs-4stuh5VLOzZynsjkM6c0E.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25091 IP address blocks: 185.185.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.mft rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b0:28:7a:7c:9d:c1:6d:59:ae:cb:29:23:ca:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88987ed4e73d0407483cc224ccf45aedf4969dd5 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a88f1b3ee2cb6e87954b3b36729ec8e433a7341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:66:5b:2c:2e:36:b6:01:ed:ad:a4:57:7f: 6c:3c:19:8f:cb:a4:17:19:b8:50:4f:f0:b2:d1:da: 3b:ad:b3:07:97:d9:7a:2a:02:b6:97:03:84:59:a5: a2:37:fe:35:69:77:46:85:32:35:8e:4b:f9:55:fe: 9c:3f:3c:fb:07:43:3e:bd:10:ed:a4:f1:fc:b0:25: 5e:83:51:b8:fa:90:20:07:3d:5d:0d:23:91:f6:eb: a0:82:e4:5a:21:83:e6:cc:98:a0:1b:c7:e0:1c:a6: 1e:43:47:19:0e:87:24:d4:b1:1f:2b:48:42:79:5f: d2:08:ae:19:1c:1b:02:e2:01:dc:22:d3:ce:e9:52: 78:4b:43:e6:fb:21:90:7c:dc:ed:99:aa:de:f5:03: d9:98:f8:54:f7:ac:4b:f0:84:bd:3f:0f:df:2b:93: 1b:b0:0d:c3:e4:c6:15:84:2d:7b:e6:1f:5f:c5:a1: f3:38:84:49:36:4a:41:9f:5d:e8:05:8f:78:cf:dd: 1e:ab:6d:4e:42:1d:8c:a4:3a:39:64:fa:ba:54:16: c7:c2:a3:50:d5:a0:3f:35:27:45:cf:cc:12:a7:d3: 44:48:9c:76:86:c1:fb:8e:2e:58:2a:a6:02:58:f8: c4:8f:55:9e:3e:ff:a2:0b:d2:4f:72:ce:9e:08:ee: a4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:88:F1:B3:EE:2C:B6:E8:79:54:B3:B3:67:29:EC:8E:43:3A:73:41 X509v3 Authority Key Identifier: keyid:88:98:7E:D4:E7:3D:04:07:48:3C:C2:24:CC:F4:5A:ED:F4:96:9D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJh-1Oc9BAdIPMIkzPRa7fSWndU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iojxs-4stuh5VLOzZynsjkM6c0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/04c4ce-b9f3-4c6a-a3e9-91bf61dd853f/1/iJh-1Oc9BAdIPMIkzPRa7fSWndU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.200.0/22 Signature Algorithm: sha256WithRSAEncryption 49:c9:9a:42:54:79:26:ab:c3:47:31:6f:78:ac:5d:96:22:58: 68:32:31:ed:87:ce:de:1a:0d:ee:bf:45:1d:84:81:47:c8:90: 55:a9:1d:95:e1:f3:84:5a:93:50:ab:3c:c2:c0:60:59:e7:51: 1e:e9:ee:ce:16:cc:3f:a2:fd:72:79:7b:c7:33:df:e0:d6:76: ed:f1:fa:1f:96:38:ba:d5:75:63:95:ad:18:93:38:2c:79:df: 62:7a:ef:81:8a:46:75:fc:84:77:de:84:cb:ec:12:3f:c2:40: ad:67:6b:c6:39:60:28:55:b8:b7:cf:bb:22:a8:a1:4d:13:b4: 33:84:79:8e:f9:4a:97:ca:c6:a6:0f:1f:11:62:26:1a:03:d4: 0d:97:36:27:44:a8:c6:d6:15:7b:f2:c2:05:b7:d7:71:c9:b4: 3f:07:92:68:01:6b:05:63:d4:f3:fd:69:cd:7b:41:b0:f8:97: 59:9f:f7:eb:06:8e:82:cf:43:cd:09:d4:a5:9a:f4:af:aa:71: b4:0a:c5:f6:9a:33:d2:1e:78:7c:77:64:cf:71:57:3f:3d:be: 66:a5:ae:10:f9:53:fd:af:6e:41:6e:56:df:bf:e9:8e:17:2f: dc:c6:9c:13:e7:b3:60:dd:e9:af:03:8c:37:f7:56:b2:7a:ff: 1e:48:ed:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrAoenydwW1ZrsspI8qfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4OTg3ZWQ0ZTczZDA0MDc0ODNjYzIyNGNjZjQ1YWVkZjQ5 NjlkZDUwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTg4ZjFiM2VlMmNiNmU4Nzk1NGIzYjM2NzI5ZWM4ZTQzM2E3MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCRmWywuNrYB7a2kV39sPBmPy6QX GbhQT/Cy0do7rbMHl9l6KgK2lwOEWaWiN/41aXdGhTI1jkv5Vf6cPzz7B0M+vRDt pPH8sCVeg1G4+pAgBz1dDSOR9uugguRaIYPmzJigG8fgHKYeQ0cZDock1LEfK0hC eV/SCK4ZHBsC4gHcItPO6VJ4S0Pm+yGQfNztmare9QPZmPhU96xL8IS9Pw/fK5Mb sA3D5MYVhC175h9fxaHzOIRJNkpBn13oBY94z90eq21OQh2MpDo5ZPq6VBbHwqNQ 1aA/NSdFz8wSp9NESJx2hsH7ji5YKqYCWPjEj1WePv+iC9JPcs6eCO6kNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIqI8bPuLLboeVSzs2cp7I5DOnNBMB8GA1UdIwQY MBaAFIiYftTnPQQHSDzCJMz0Wu30lp3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTkt OTFiZjYxZGQ4NTNmLzEvaW9qeHMtNHN0dWg1VkxPelp5bnNqa002YzBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8wNGM0Y2UtYjlmMy00YzZhLWEzZTktOTFiZjYxZGQ4NTNm LzEvaUpoLTFPYzlCQWRJUE1Ja3pQUmE3ZlNXbmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubnIMA0G CSqGSIb3DQEBCwUAA4IBAQBJyZpCVHkmq8NHMW94rF2WIlhoMjHth87eGg3uv0Ud hIFHyJBVqR2V4fOEWpNQqzzCwGBZ51Ee6e7OFsw/ov1yeXvHM9/g1nbt8foflji6 1XVjla0Ykzgsed9ieu+BikZ1/IR33oTL7BI/wkCtZ2vGOWAoVbi3z7siqKFNE7Qz hHmO+UqXysamDx8RYiYaA9QNlzYnRKjG1hV78sIFt9dxybQ/B5JoAWsFY9Tz/WnN e0Gw+JdZn/frBo6Cz0PNCdSlmvSvqnG0CsX2mjPSHnh8d2TPcVc/Pb5mpa4Q+VP9 r25Bblbfv+mOFy/cxpwT57Ng3emvA4w391ayev8eSO0w -----END CERTIFICATE-----Generated at Sun Jan 18 20:54:37 2026 by rpki-client