This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa File: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (raw, json) Hash identifier: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw= Subject key identifier: 88:E3:CA:44:23:1C:50:0C:AF:C4:36:F1:6B:DE:26:4A:1E:1A:54:B4 Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Certificate serial: 019B77593415832CEA9050A8A48D11095D90 Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15372 IP address blocks: 91.90.167.0/24 maxlen: 24 193.36.120.0/22 maxlen: 22 193.176.146.0/24 maxlen: 24 195.248.83.0/24 maxlen: 24 212.111.224.0/19 maxlen: 24 2a01:7700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:34:15:83:2c:ea:90:50:a8:a4:8d:11:09:5d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88e3ca44231c500cafc436f16bde264a1e1a54b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:96:8c:7e:7a:5f:28:83:9a:e9:4c:dd:d7:14: dd:4f:a5:79:2a:cc:39:82:47:c6:7b:40:19:74:e1: 55:00:52:6e:27:fc:30:7e:52:a9:f0:06:6e:d5:da: 85:18:79:20:58:42:cc:5e:fe:b2:91:89:a4:58:60: 87:f0:50:0c:d9:36:86:c7:48:d3:29:a2:1c:a7:91: f7:53:a9:60:ba:84:4d:10:88:1d:e1:dc:b5:9c:61: f2:84:85:d8:57:f3:77:47:e9:91:59:0e:6b:46:51: 12:06:f5:22:5d:e1:1e:ed:d1:ac:52:93:41:3b:80: 3e:97:6c:5f:c2:e3:47:51:d7:4c:76:64:aa:2b:bc: 00:c6:7e:86:68:29:fe:fe:f3:2a:92:e0:9a:fa:3d: 26:ac:26:dd:48:68:95:72:47:b2:16:81:ac:fe:75: cd:f5:3d:51:e6:34:1a:66:d7:cb:01:4e:3d:bb:21: fa:3c:f5:07:b7:5f:35:aa:ac:7e:74:bd:99:2d:9f: 87:d7:33:5f:4b:0a:b0:39:c8:be:59:89:41:c1:a0: ea:38:4c:44:97:81:75:e1:a7:cc:08:7c:5e:8f:aa: 64:9f:52:8a:5f:4b:36:41:27:77:fe:e6:90:54:ff: 7e:cd:d8:4f:eb:e6:62:97:5e:fd:b6:bf:fc:f6:09: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:E3:CA:44:23:1C:50:0C:AF:C4:36:F1:6B:DE:26:4A:1E:1A:54:B4 X509v3 Authority Key Identifier: keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.90.167.0/24 193.36.120.0/22 193.176.146.0/24 195.248.83.0/24 212.111.224.0/19 IPv6: 2a01:7700::/32 Signature Algorithm: sha256WithRSAEncryption 96:9f:c8:d9:80:63:6b:e2:37:8f:2c:6b:bb:b4:c4:2b:86:f7: 78:60:bc:95:88:d8:5c:c2:28:76:b2:00:f5:b9:d5:bb:5c:2a: 7c:0f:02:22:44:18:2e:91:b3:2b:e4:7c:d2:51:95:50:7a:4c: 0a:8f:d6:2f:89:22:e5:e3:e0:3b:1b:d8:dc:af:d4:48:4e:84: d6:a2:28:bd:33:67:0f:d1:c5:e8:fd:cd:b1:00:e9:b4:35:b6: d3:d5:0a:2a:bf:f0:39:14:0a:4d:68:77:19:fb:81:8a:c0:b9: 9a:a9:62:d5:36:83:62:52:e8:93:72:b8:e3:51:d7:8b:6f:b6: 5d:f1:33:6f:b9:9e:42:cd:26:1d:f2:ae:79:22:1d:53:a5:55: 10:2d:4f:7f:83:8e:40:1d:b5:be:94:8f:73:ec:f6:3e:5d:d5: a3:3f:dc:9e:26:1c:31:b4:89:c2:73:3d:2e:94:c3:1e:a9:7d: 54:95:ea:7d:f4:c4:46:0a:02:7a:5b:6f:39:30:bf:02:48:8e: 64:a5:3b:47:c3:43:bd:9a:8a:86:9a:a1:20:21:c8:c7:b3:70: 55:90:d9:d0:d4:0b:e0:5d:32:76:01:97:51:79:ee:90:86:bf: a4:99:29:c4:a6:b4:15:8e:1c:17:d3:90:04:9d:aa:f0:d6:a9: dd:16:c3:8a -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt3WTQVgyzqkFCopI0RCV2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy OTFlZTgwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGUzY2E0NDIzMWM1MDBjYWZjNDM2ZjE2YmRlMjY0YTFlMWE1NGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5aMfnpfKIOa6Uzd1xTdT6V5Ksw5 gkfGe0AZdOFVAFJuJ/wwflKp8AZu1dqFGHkgWELMXv6ykYmkWGCH8FAM2TaGx0jT KaIcp5H3U6lguoRNEIgd4dy1nGHyhIXYV/N3R+mRWQ5rRlESBvUiXeEe7dGsUpNB O4A+l2xfwuNHUddMdmSqK7wAxn6GaCn+/vMqkuCa+j0mrCbdSGiVckeyFoGs/nXN 9T1R5jQaZtfLAU49uyH6PPUHt181qqx+dL2ZLZ+H1zNfSwqwOci+WYlBwaDqOExE l4F14afMCHxej6pkn1KKX0s2QSd3/uaQVP9+zdhP6+Zil179tr/89gmUPQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFIjjykQjHFAMr8Q28WveJkoeGlS0MB8GA1UdIwQY MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct ZDVhYmY1MDMxZDIxLzEvaU9QS1JDTWNVQXl2eERieGE5NG1TaDRhVkxRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAW1qnAwQC wSR4AwQAwbCSAwQAw/hTAwQF1G/gMA0EAgACMAcDBQAqAXcAMA0GCSqGSIb3DQEB CwUAA4IBAQCWn8jZgGNr4jePLGu7tMQrhvd4YLyViNhcwih2sgD1udW7XCp8DwIi RBgukbMr5HzSUZVQekwKj9YviSLl4+A7G9jcr9RIToTWoii9M2cP0cXo/c2xAOm0 NbbT1Qoqv/A5FApNaHcZ+4GKwLmaqWLVNoNiUuiTcrjjUdeLb7Zd8TNvuZ5CzSYd 8q55Ih1TpVUQLU9/g45AHbW+lI9z7PY+XdWjP9yeJhwxtInCcz0ulMMeqX1Ulep9 9MRGCgJ6W285ML8CSI5kpTtHw0O9moqGmqEgIcjHs3BVkNnQ1AvgXTJ2AZdRee6Q hr+kmSnEprQVjhwX05AEnarw1qndFsOK -----END CERTIFICATE-----Generated at Wed Jan 21 17:15:18 2026 by rpki-client