This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_IlJaMALGme9_U6IypcpIioNSR4.roa File: _IlJaMALGme9_U6IypcpIioNSR4.roa (raw, json) Hash identifier: wg0ELU3z8gx80Sl90aI//qzV9aJ5jyUhoPthsRIgj84= Subject key identifier: FC:89:49:68:C0:0B:1A:67:BD:FD:4E:88:CA:97:29:22:2A:0D:49:1E Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA4044AC64C73446D49D82A7509890B Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_IlJaMALGme9_U6IypcpIioNSR4.roa Signing time: Thu 01 Jan 2026 22:18:25 +0000 ROA not before: Thu 01 Jan 2026 22:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 185.106.95.0/24 maxlen: 24 185.109.21.0/24 maxlen: 24 213.108.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:04:4a:c6:4c:73:44:6d:49:d8:2a:75:09:89:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc894968c00b1a67bdfd4e88ca9729222a0d491e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:d8:56:fe:f8:f4:b8:82:fa:94:ad:aa:6e: c2:b1:63:7b:78:34:87:93:89:8d:e9:99:ac:84:48: 5f:bf:71:d7:c2:ca:e2:f3:64:01:7d:08:aa:92:ff: 34:35:6c:15:a7:a3:58:f9:41:06:5a:eb:2d:c8:39: e9:2f:3a:12:a8:08:ec:82:f8:a4:fb:36:4f:81:53: f1:45:ff:23:42:91:ca:57:66:d2:f6:df:df:b8:a5: a3:c9:27:a8:a5:44:54:55:c2:aa:93:6b:33:5a:3a: 34:a8:06:4c:cb:c3:71:3d:a4:15:73:2b:df:4b:04: 8e:27:f1:3c:57:d7:7b:52:aa:e6:e8:86:4f:40:a5: a6:50:b6:ca:c2:b5:ea:13:1e:d7:03:7a:17:4d:78: 01:24:2f:d1:bf:29:76:eb:26:74:8e:a3:67:e9:fb: 5a:97:dd:c9:cf:ca:c7:a7:6f:1e:15:fa:4f:0c:09: 6b:ac:43:a9:52:92:e3:95:19:89:92:76:44:5c:da: 4c:18:53:86:01:ea:a6:59:fc:20:5b:d2:1e:bd:1a: 74:47:83:14:f3:82:57:96:ac:13:dc:33:5e:5b:29: 87:9e:57:87:89:f6:16:da:86:2a:ee:97:25:c2:1b: 9c:c0:61:b7:41:5b:c3:99:ec:6c:46:b2:7e:91:28: e9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:89:49:68:C0:0B:1A:67:BD:FD:4E:88:CA:97:29:22:2A:0D:49:1E X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/_IlJaMALGme9_U6IypcpIioNSR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.106.95.0/24 185.109.21.0/24 213.108.199.0/24 Signature Algorithm: sha256WithRSAEncryption 06:12:1c:25:9f:0c:bf:7a:ed:a9:d2:03:37:23:d4:8c:9b:85: dd:34:a8:78:ae:f0:db:51:c3:51:e6:21:fc:39:ae:26:27:96: a1:ec:65:66:a7:84:8d:11:5e:d0:66:97:63:db:af:07:94:06: 82:af:ee:53:81:80:57:38:8c:55:ce:19:c9:d2:ae:1a:07:66: 52:61:4b:c1:1a:40:fd:48:5c:00:93:56:f3:ce:cd:25:dd:b3: a7:29:69:d6:e4:43:ef:d5:cd:23:89:08:ea:2a:bc:ce:dc:1a: fd:70:a4:a8:80:f0:36:2b:74:da:7d:7e:bd:a7:9b:ab:bb:9c: 8b:19:48:25:b0:b5:f7:ba:d0:7a:2d:38:45:f6:4a:31:fc:c3: 8b:0c:f3:c9:1e:e3:9c:d1:16:9e:fc:d2:06:e8:18:78:e9:9f: 37:95:50:3e:d6:3c:8d:12:8c:ae:66:85:8b:5b:85:80:4a:75: e7:d6:37:e3:e8:d7:e1:23:14:f3:84:6f:26:5b:08:6b:0a:c4: 96:94:01:f5:d8:15:99:8c:94:74:6d:7c:0a:44:55:5c:20:17: 42:0e:84:b9:7c:43:11:6a:e9:09:93:d7:f0:05:bc:e9:02:7a: f3:dc:d3:e9:69:20:3e:4c:e3:e6:f2:7d:2e:ee:d9:47:be:34: 9e:e9:8f:e7 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pARKxkxzRG1J2Cp1CYkLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzg5NDk2OGMwMGIxYTY3YmRmZDRlODhjYTk3MjkyMjJhMGQ0OTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogDYVv749LiC+pStqm7CsWN7eDSH k4mN6ZmshEhfv3HXwsri82QBfQiqkv80NWwVp6NY+UEGWustyDnpLzoSqAjsgvik +zZPgVPxRf8jQpHKV2bS9t/fuKWjySeopURUVcKqk2szWjo0qAZMy8NxPaQVcyvf SwSOJ/E8V9d7Uqrm6IZPQKWmULbKwrXqEx7XA3oXTXgBJC/Rvyl26yZ0jqNn6fta l93Jz8rHp28eFfpPDAlrrEOpUpLjlRmJknZEXNpMGFOGAeqmWfwgW9IevRp0R4MU 84JXlqwT3DNeWymHnleHifYW2oYq7pclwhucwGG3QVvDmexsRrJ+kSjp3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFPyJSWjACxpnvf1OiMqXKSIqDUkeMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvX0lsSmFNQUxHbWU5X1U2SXlwY3BJaW9OU1I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuWpfAwQA uW0VAwQA1WzHMA0GCSqGSIb3DQEBCwUAA4IBAQAGEhwlnwy/eu2p0gM3I9SMm4Xd NKh4rvDbUcNR5iH8Oa4mJ5ah7GVmp4SNEV7QZpdj268HlAaCr+5TgYBXOIxVzhnJ 0q4aB2ZSYUvBGkD9SFwAk1bzzs0l3bOnKWnW5EPv1c0jiQjqKrzO3Br9cKSogPA2 K3TafX69p5uru5yLGUglsLX3utB6LThF9kox/MOLDPPJHuOc0Rae/NIG6Bh46Z83 lVA+1jyNEoyuZoWLW4WASnXn1jfj6NfhIxTzhG8mWwhrCsSWlAH12BWZjJR0bXwK RFVcIBdCDoS5fEMRaukJk9fwBbzpAnrz3NPpaSA+TOPm8n0u7tlHvjSe6Y/n -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:13 2026 by rpki-client