This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/irgcza7ueUyMGnD413LhS2bOjJI.roa File: irgcza7ueUyMGnD413LhS2bOjJI.roa (raw, json) Hash identifier: daWp79CmAXWz32HU7ki6gyN205KgB+0e3s53G3yOlXg= Subject key identifier: 8A:B8:1C:CD:AE:EE:79:4C:8C:1A:70:F8:D7:72:E1:4B:66:CE:8C:92 Certificate issuer: /CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Certificate serial: 019B7AC8D3DAB2330A7B78310286354FEE24 Authority key identifier: 8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/irgcza7ueUyMGnD413LhS2bOjJI.roa Signing time: Thu 01 Jan 2026 18:19:00 +0000 ROA not before: Thu 01 Jan 2026 18:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 185.60.76.0/23 maxlen: 23 185.60.76.0/24 maxlen: 24 185.60.77.0/24 maxlen: 24 185.60.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.mft rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:d3:da:b2:33:0a:7b:78:31:02:86:35:4f:ee:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c05b364fcf319ccf53c5f2e8c634290ac0eb129 Validity Not Before: Jan 1 18:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab81ccdaeee794c8c1a70f8d772e14b66ce8c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8a:85:e0:d1:70:ef:b2:38:95:c8:f7:b6:d7: 03:3a:7f:77:d0:8e:d6:19:f7:6d:4e:56:7d:5e:98: b9:e5:7e:61:e4:37:a8:ca:74:d0:de:6e:8c:2e:a9: e9:80:f6:d5:11:7e:9e:8d:f6:03:14:9c:db:e7:21: 30:86:72:c0:f3:40:75:84:51:e5:7f:ad:1d:d8:35: 71:ec:cc:aa:d1:e4:da:3b:3b:30:ee:61:18:67:d0: 60:0f:ba:e4:f2:4d:91:ae:af:85:86:a1:a6:7d:9c: 55:af:15:fc:c3:bc:be:49:07:ff:8d:c8:7a:2d:4a: 53:fe:a9:e9:85:00:64:b3:da:ec:c8:06:84:c8:9c: 2c:48:d5:df:9c:4c:04:9d:17:c5:38:de:ca:fc:26: 58:84:47:33:bb:b0:91:2e:99:6f:5c:1e:d3:14:d0: bc:3a:cc:2e:9d:36:85:00:37:02:10:09:3b:e1:e9: 39:d1:20:5f:f1:99:db:7d:ac:11:46:b3:4d:e7:fc: ed:be:c0:41:f3:27:ca:d8:ed:68:f9:f0:ab:9f:1e: 60:fa:50:b6:0f:db:f0:cb:fc:6e:63:b6:53:cb:e8: 5e:0b:6c:23:83:f5:12:83:1f:7f:10:1a:6f:a1:d8: 4b:21:b7:74:12:0a:9d:5a:21:c8:1d:88:be:88:71: 19:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B8:1C:CD:AE:EE:79:4C:8C:1A:70:F8:D7:72:E1:4B:66:CE:8C:92 X509v3 Authority Key Identifier: keyid:8C:05:B3:64:FC:F3:19:CC:F5:3C:5F:2E:8C:63:42:90:AC:0E:B1:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAWzZPzzGcz1PF8ujGNCkKwOsSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/irgcza7ueUyMGnD413LhS2bOjJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2d346b-8825-4681-94e3-98441607b228/1/jAWzZPzzGcz1PF8ujGNCkKwOsSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.60.76.0/23 185.60.79.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f6:17:28:46:b3:fd:e0:e8:90:d1:a7:9b:72:f6:76:63:ef: 35:e9:1a:e0:73:82:10:22:d2:fc:f2:dd:d4:fd:52:c5:f1:67: 0a:b9:67:b0:76:80:f1:21:ce:58:e9:e0:18:7b:30:47:72:d5: 74:5b:52:9e:c3:4b:c4:f7:8e:21:66:f7:b7:15:41:d2:8c:74: 79:87:e0:4f:18:21:fd:b5:8a:79:8b:51:11:8e:cb:26:55:05: ce:2d:03:10:36:77:da:82:44:53:f9:67:ab:da:42:57:bb:9c: 5a:3a:e4:df:f4:6e:cc:22:08:12:3f:49:7a:27:5a:b5:40:53: 8d:86:27:9c:da:cc:1e:07:f9:5f:64:eb:a8:82:11:55:db:6d: 07:0e:39:0e:3d:5e:8e:37:20:cf:3f:ac:3f:36:5d:76:1d:a0: 75:b3:5a:a5:4c:10:1f:4d:e9:a1:08:0e:27:07:04:90:93:cc: ea:69:26:53:2e:ad:42:c3:1c:84:f5:ec:dc:fb:20:c0:55:8c: 15:12:b6:27:39:dc:98:f3:4d:c6:32:c6:1f:25:eb:40:c5:6e: 64:92:f7:ab:35:e5:a1:bb:7b:da:af:4d:fb:d9:33:2c:70:bd: 48:4e:ae:e2:92:cb:e9:e9:79:4d:39:f0:e3:0d:d2:5d:17:04: 32:b6:d3:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yNPasjMKe3gxAoY1T+4kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMDViMzY0ZmNmMzE5Y2NmNTNjNWYyZThjNjM0MjkwYWMw ZWIxMjkwHhcNMjYwMTAxMTgxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWI4MWNjZGFlZWU3OTRjOGMxYTcwZjhkNzcyZTE0YjY2Y2U4YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIqF4NFw77I4lcj3ttcDOn930I7W GfdtTlZ9Xpi55X5h5DeoynTQ3m6MLqnpgPbVEX6ejfYDFJzb5yEwhnLA80B1hFHl f60d2DVx7Myq0eTaOzsw7mEYZ9BgD7rk8k2Rrq+FhqGmfZxVrxX8w7y+SQf/jch6 LUpT/qnphQBks9rsyAaEyJwsSNXfnEwEnRfFON7K/CZYhEczu7CRLplvXB7TFNC8 OswunTaFADcCEAk74ek50SBf8ZnbfawRRrNN5/ztvsBB8yfK2O1o+fCrnx5g+lC2 D9vwy/xuY7ZTy+heC2wjg/USgx9/EBpvodhLIbd0EgqdWiHIHYi+iHEZiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIq4HM2u7nlMjBpw+Ndy4UtmzoySMB8GA1UdIwQY MBaAFIwFs2T88xnM9TxfLoxjQpCsDrEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMt OTg0NDE2MDdiMjI4LzEvaXJnY3phN3VlVXlNR25ENDEzTGhTMmJPakpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8yZDM0NmItODgyNS00NjgxLTk0ZTMtOTg0NDE2MDdiMjI4 LzEvakFXelpQenpHY3oxUEY4dWpHTkNrS3dPc1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuTxMAwQA uTxPMA0GCSqGSIb3DQEBCwUAA4IBAQBP9hcoRrP94OiQ0aebcvZ2Y+816Rrgc4IQ ItL88t3U/VLF8WcKuWewdoDxIc5Y6eAYezBHctV0W1Kew0vE944hZve3FUHSjHR5 h+BPGCH9tYp5i1ERjssmVQXOLQMQNnfagkRT+Wer2kJXu5xaOuTf9G7MIggSP0l6 J1q1QFONhiec2sweB/lfZOuoghFV220HDjkOPV6ONyDPP6w/Nl12HaB1s1qlTBAf TemhCA4nBwSQk8zqaSZTLq1CwxyE9ezc+yDAVYwVErYnOdyY803GMsYfJetAxW5k kverNeWhu3var0372TMscL1ITq7iksvp6XlNOfDjDdJdFwQyttP2 -----END CERTIFICATE-----Generated at Wed Jan 21 13:19:08 2026 by rpki-client