This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/IGMCuKzSRZK6ojrjgQ_lMAFpYhI.roa File: IGMCuKzSRZK6ojrjgQ_lMAFpYhI.roa (raw, json) Hash identifier: mzoE6ZRVGF3GSOdPdeFwn8J6pWu/b3AWXWzYbVkQ5xo= Subject key identifier: 20:63:02:B8:AC:D2:45:92:BA:A2:3A:E3:81:0F:E5:30:01:69:62:12 Certificate issuer: /CN=8751759bb92cba5520536945ed1b3fa5ad151b65 Certificate serial: 019B79ECEC8527029AF3963CE2AFA1FBEF8D Authority key identifier: 87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/IGMCuKzSRZK6ojrjgQ_lMAFpYhI.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57653 IP address blocks: 45.149.241.0/24 maxlen: 24 94.156.96.0/24 maxlen: 24 94.156.186.0/24 maxlen: 24 109.69.232.0/21 maxlen: 21 109.69.232.0/24 maxlen: 24 109.69.233.0/24 maxlen: 24 109.69.234.0/24 maxlen: 24 109.69.235.0/24 maxlen: 24 109.69.236.0/24 maxlen: 24 109.69.237.0/24 maxlen: 24 109.69.238.0/24 maxlen: 24 109.69.239.0/24 maxlen: 24 185.191.84.0/22 maxlen: 22 185.191.84.0/24 maxlen: 24 185.191.85.0/24 maxlen: 24 185.191.86.0/24 maxlen: 24 185.191.87.0/24 maxlen: 24 2a00:1ba8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.mft rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ec:85:27:02:9a:f3:96:3c:e2:af:a1:fb:ef:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8751759bb92cba5520536945ed1b3fa5ad151b65 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=206302b8acd24592baa23ae3810fe53001696212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:e2:a2:97:e1:86:d0:5b:38:3d:77:0e:99: bc:62:ef:c8:bf:a0:29:65:22:e2:5c:03:2d:6c:ba: e5:88:b3:7a:be:df:cc:93:f4:22:1f:78:26:64:f6: d2:6e:15:0f:f9:22:d0:b4:63:30:bd:f4:ad:53:9b: f7:43:84:7e:62:5b:da:7d:58:68:58:1a:4f:62:e0: 18:51:0a:e7:11:18:52:73:c3:a0:95:57:4c:35:b4: 08:ee:cb:00:8b:38:0f:86:03:16:d1:2c:10:fd:d5: 50:cc:12:17:ba:d4:f3:0c:a3:ea:7e:f6:d1:ec:2c: 69:ac:e1:00:a7:27:d4:7b:ea:d3:c3:05:a1:46:3c: f5:d1:7f:35:13:59:7e:11:da:e4:ff:de:79:26:ab: e7:03:9c:96:12:8c:11:15:98:28:71:98:9b:0a:55: 36:84:52:d2:59:11:82:57:1d:eb:2f:5f:fb:e0:ab: 49:44:ee:79:27:15:fd:1a:d6:05:30:ab:a3:02:5f: bf:c7:68:22:b5:2f:ba:42:8b:b0:39:5e:39:af:16: e7:f6:58:f0:dc:7b:71:64:5c:71:d0:82:ed:c5:95: cb:84:ae:37:ac:5f:2a:24:79:0e:2a:70:e1:74:5c: e2:dc:2a:dc:30:32:0d:33:b5:ef:d7:a1:83:fc:8c: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:63:02:B8:AC:D2:45:92:BA:A2:3A:E3:81:0F:E5:30:01:69:62:12 X509v3 Authority Key Identifier: keyid:87:51:75:9B:B9:2C:BA:55:20:53:69:45:ED:1B:3F:A5:AD:15:1B:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1F1m7ksulUgU2lF7Rs_pa0VG2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/IGMCuKzSRZK6ojrjgQ_lMAFpYhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/862525-f63f-4653-a3a6-e89f51ca6840/1/h1F1m7ksulUgU2lF7Rs_pa0VG2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.241.0/24 94.156.96.0/24 94.156.186.0/24 109.69.232.0/21 185.191.84.0/22 IPv6: 2a00:1ba8::/32 Signature Algorithm: sha256WithRSAEncryption 44:76:84:1b:58:3d:7d:1c:34:c6:1c:58:24:aa:bf:74:e7:b2: ff:39:7d:08:a0:d8:69:a3:05:09:83:d5:c4:cd:02:33:4b:e7: 89:e7:fb:e4:5b:c7:fd:d3:f1:09:28:7f:59:ba:78:1c:c2:6d: 61:5a:9c:74:f2:8c:49:89:cc:89:b9:97:54:dc:53:1b:2c:86: 91:23:20:a2:30:a2:ef:0e:df:65:83:43:5d:26:68:db:e5:2c: 3a:9b:75:35:bd:b9:52:e5:74:90:b3:f4:db:25:f3:71:8b:10: 92:1b:7c:2d:12:11:52:cb:79:c7:43:5c:72:fc:b5:8e:a6:6f: 07:bd:52:2f:02:2e:96:56:96:1f:ce:9a:b0:95:f2:6b:62:03: ce:5f:7a:ed:53:0c:f6:39:37:10:37:9e:1e:ab:28:d3:dc:7c: 6e:e8:a9:15:5b:79:89:11:7e:dd:ac:7b:e2:fc:03:9b:a3:bd: 32:d8:e3:a8:1e:d6:be:d0:25:93:7d:2d:93:82:a9:d3:d6:16: 1a:9a:ec:02:c9:c5:71:64:4a:af:c3:fc:1f:91:e7:f4:bc:07: f6:3c:0c:52:13:ea:a2:79:a0:2d:c1:eb:61:c5:0f:ec:99:24: 65:0e:00:79:ee:2a:05:9e:63:05:f5:d4:a3:f5:e9:1c:3a:5c: 8a:2c:82:9b -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt57OyFJwKa85Y84q+h+++NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NTE3NTliYjkyY2JhNTUyMDUzNjk0NWVkMWIzZmE1YWQx NTFiNjUwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDYzMDJiOGFjZDI0NTkyYmFhMjNhZTM4MTBmZTUzMDAxNjk2MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmijiopfhhtBbOD13Dpm8Yu/Iv6Ap ZSLiXAMtbLrliLN6vt/Mk/QiH3gmZPbSbhUP+SLQtGMwvfStU5v3Q4R+YlvafVho WBpPYuAYUQrnERhSc8OglVdMNbQI7ssAizgPhgMW0SwQ/dVQzBIXutTzDKPqfvbR 7CxprOEApyfUe+rTwwWhRjz10X81E1l+Edrk/955JqvnA5yWEowRFZgocZibClU2 hFLSWRGCVx3rL1/74KtJRO55JxX9GtYFMKujAl+/x2gitS+6QouwOV45rxbn9ljw 3HtxZFxx0ILtxZXLhK43rF8qJHkOKnDhdFzi3CrcMDINM7Xv16GD/IzlfwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFCBjAris0kWSuqI644EP5TABaWISMB8GA1UdIwQY MBaAFIdRdZu5LLpVIFNpRe0bP6WtFRtlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDFGMW03a3N1bFVnVTJsRjdSc19wYTBWRzJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84NjI1MjUtZjYzZi00NjUzLWEzYTYt ZTg5ZjUxY2E2ODQwLzEvSUdNQ3VLelNSWks2b2pyamdRX2xNQUZwWWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84NjI1MjUtZjYzZi00NjUzLWEzYTYtZTg5ZjUxY2E2ODQw LzEvaDFGMW03a3N1bFVnVTJsRjdSc19wYTBWRzJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQALZXxAwQA XpxgAwQAXpy6AwQDbUXoAwQCub9UMA0EAgACMAcDBQAqABuoMA0GCSqGSIb3DQEB CwUAA4IBAQBEdoQbWD19HDTGHFgkqr9057L/OX0IoNhpowUJg9XEzQIzS+eJ5/vk W8f90/EJKH9Zungcwm1hWpx08oxJicyJuZdU3FMbLIaRIyCiMKLvDt9lg0NdJmjb 5Sw6m3U1vblS5XSQs/TbJfNxixCSG3wtEhFSy3nHQ1xy/LWOpm8HvVIvAi6WVpYf zpqwlfJrYgPOX3rtUwz2OTcQN54eqyjT3Hxu6KkVW3mJEX7drHvi/AObo70y2OOo Hta+0CWTfS2TgqnT1hYamuwCycVxZEqvw/wfkef0vAf2PAxSE+qieaAtwethxQ/s mSRlDgB57ioFnmMF9dSj9ekcOlyKLIKb -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:22 2026 by rpki-client