This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ITlvHJTabQxrwYN7APUVh9jQlL4.roa File: ITlvHJTabQxrwYN7APUVh9jQlL4.roa (raw, json) Hash identifier: K1JUQry9xi3Jfbc+E8pcHXHacpTFbHE9SecisGZYRcI= Subject key identifier: 21:39:6F:1C:94:DA:6D:0C:6B:C1:83:7B:00:F5:15:87:D8:D0:94:BE Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Certificate serial: 019B7F140EAD90F2B48085BB220E3A8F3BE6 Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ITlvHJTabQxrwYN7APUVh9jQlL4.roa Signing time: Fri 02 Jan 2026 14:19:39 +0000 ROA not before: Fri 02 Jan 2026 14:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30633 IP address blocks: 84.37.32.0/23 maxlen: 24 84.37.46.0/23 maxlen: 24 84.37.176.0/23 maxlen: 24 84.37.190.0/23 maxlen: 24 84.37.192.0/23 maxlen: 24 84.37.222.0/23 maxlen: 24 84.37.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:0e:ad:90:f2:b4:80:85:bb:22:0e:3a:8f:3b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7 Validity Not Before: Jan 2 14:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21396f1c94da6d0c6bc1837b00f51587d8d094be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:62:d4:a8:e3:d4:ad:91:88:4d:64:15:eb: 79:b8:75:fa:4b:bc:e3:ca:3e:71:d6:ba:64:87:6e: f5:20:29:7e:b6:5a:ea:c5:de:bb:93:5c:13:f0:ed: de:7e:2d:55:10:40:01:8d:a9:40:fd:1d:75:6b:ac: 27:97:f8:06:05:4d:17:cf:f6:d7:42:15:ac:27:c2: 9c:3e:8d:de:55:4d:33:4e:a7:c5:98:47:d4:2a:8d: 7d:b5:ff:d1:78:21:05:4f:f1:55:f6:f5:7d:b5:cd: 76:36:82:0c:1b:a6:0f:21:48:fe:fb:e0:dd:da:ea: c3:1d:26:ff:53:92:19:63:69:a4:67:3e:1f:46:26: 3d:b4:82:0b:c6:9b:44:bf:fb:60:fb:73:bf:33:ca: 4b:c4:98:af:ec:5b:2f:0c:b0:dd:99:03:22:c1:74: f0:b4:86:f9:10:84:e7:ef:9e:21:13:d0:92:52:e8: a3:f8:4e:09:fd:3c:5c:a1:75:41:a7:3a:23:77:fc: 8a:43:5c:92:08:fe:ff:0e:bd:bf:9b:c6:43:1e:5e: 39:2a:92:07:d2:56:ad:1d:7c:13:25:b4:bc:31:f1: 01:6d:a5:25:07:20:9a:b0:be:04:93:b4:23:9f:ea: b9:97:08:2c:bb:3a:7f:8e:c1:dd:b6:c9:11:10:a5: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:6F:1C:94:DA:6D:0C:6B:C1:83:7B:00:F5:15:87:D8:D0:94:BE X509v3 Authority Key Identifier: keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/ITlvHJTabQxrwYN7APUVh9jQlL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.37.32.0/23 84.37.46.0/23 84.37.176.0/23 84.37.190.0-84.37.193.255 84.37.222.0/23 84.37.254.0/23 Signature Algorithm: sha256WithRSAEncryption 43:fd:7b:3e:02:cf:58:dd:30:a0:94:6f:ee:4a:f3:80:ba:d6: 77:21:7e:4a:5c:01:78:bc:d6:79:de:fd:ca:4a:ee:3c:93:32: cd:3e:7e:f6:ea:f9:09:5c:a1:5f:05:e0:da:6d:28:32:a0:4a: d2:b8:26:7b:56:7b:ab:18:db:9f:09:45:ae:42:ab:f3:43:28: 10:37:21:52:b1:3a:8a:09:ee:7c:b1:c0:1e:db:e2:51:f2:44: 08:7e:18:f3:fe:00:67:fe:81:f7:7b:d1:46:0e:58:42:07:90: b5:13:07:6f:63:fc:97:2a:fd:42:e1:07:5a:06:2d:41:9d:e6: d9:aa:fa:e4:58:a1:fd:d0:cb:65:66:70:aa:dc:fc:ae:fc:b2: 40:83:af:b0:3b:53:9b:70:34:9a:05:ca:97:ea:e8:1f:70:77: 6f:2a:7b:1f:a5:dc:c1:d7:ee:bd:3a:ee:e1:a1:12:e9:5c:e1: 20:d1:ee:c9:da:7f:d5:8c:c3:fc:c6:ce:30:70:c9:b2:c3:c1: bb:2a:d8:6e:ab:6d:df:fa:f4:88:5f:72:66:4e:8a:cd:86:be: 5d:36:a0:1c:95:7b:6d:7c:3a:13:af:4c:7e:cd:6e:61:f5:54: bf:d4:fc:ce:ec:d7:47:36:88:e5:7c:16:5f:44:bf:a8:14:0b: a4:19:56:dc -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt/FA6tkPK0gIW7Ig46jzvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky YWUzYjcwHhcNMjYwMTAyMTQxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTM5NmYxYzk0ZGE2ZDBjNmJjMTgzN2IwMGY1MTU4N2Q4ZDA5NGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNNi1Kjj1K2RiE1kFet5uHX6S7zj yj5x1rpkh271ICl+tlrqxd67k1wT8O3efi1VEEABjalA/R11a6wnl/gGBU0Xz/bX QhWsJ8KcPo3eVU0zTqfFmEfUKo19tf/ReCEFT/FV9vV9tc12NoIMG6YPIUj+++Dd 2urDHSb/U5IZY2mkZz4fRiY9tIILxptEv/tg+3O/M8pLxJiv7FsvDLDdmQMiwXTw tIb5EITn754hE9CSUuij+E4J/TxcoXVBpzojd/yKQ1ySCP7/Dr2/m8ZDHl45KpIH 0latHXwTJbS8MfEBbaUlByCasL4Ek7Qjn+q5lwgsuzp/jsHdtskREKU/GwIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFCE5bxyU2m0Ma8GDewD1FYfY0JS+MB8GA1UdIwQY MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt ZDJhZGVlZDc1NWQ4LzEvSVRsdkhKVGFiUXhyd1lON0FQVVZoOWpRbEw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4 LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBVCUgAwQB VCUuAwQBVCWwMAwDBAFUJb4DBAFUJcADBAFUJd4DBAFUJf4wDQYJKoZIhvcNAQEL BQADggEBAEP9ez4Cz1jdMKCUb+5K84C61nchfkpcAXi81nne/cpK7jyTMs0+fvbq +QlcoV8F4NptKDKgStK4JntWe6sY258JRa5Cq/NDKBA3IVKxOooJ7nyxwB7b4lHy RAh+GPP+AGf+gfd70UYOWEIHkLUTB29j/Jcq/ULhB1oGLUGd5tmq+uRYof3Qy2Vm cKrc/K78skCDr7A7U5twNJoFypfq6B9wd28qex+l3MHX7r067uGhEulc4SDR7sna f9WMw/zGzjBwybLDwbsq2G6rbd/69IhfcmZOis2Gvl02oByVe218OhOvTH7NbmH1 VL/U/M7s10c2iOV8Fl9Ev6gUC6QZVtw= -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:27 2026 by rpki-client