This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/IwNqZHehpTDHnJ8QlZZ39kQlqiY.roa File: IwNqZHehpTDHnJ8QlZZ39kQlqiY.roa (raw, json) Hash identifier: SPUfGyO7WdlCKsJpK4jdURqfYZY+4bEqHRoor37f+oc= Subject key identifier: 23:03:6A:64:77:A1:A5:30:C7:9C:9F:10:95:96:77:F6:44:25:AA:26 Certificate issuer: /CN=7a6735b7a553a1680c11add3e48c3635b53979ca Certificate serial: 019B7911150BE45E0253836240B45F503513 Authority key identifier: 7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/IwNqZHehpTDHnJ8QlZZ39kQlqiY.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49604 IP address blocks: 45.151.4.0/23 maxlen: 23 45.151.6.0/23 maxlen: 23 85.222.232.0/22 maxlen: 24 85.234.242.0/23 maxlen: 23 85.234.244.0/23 maxlen: 23 85.234.246.0/23 maxlen: 24 185.31.240.0/22 maxlen: 24 217.146.64.0/20 maxlen: 24 2a02:29e9:10::/48 maxlen: 48 2a02:29e9:20::/48 maxlen: 48 2a02:29e9:30::/48 maxlen: 48 2a02:29ea::/32 maxlen: 32 2a02:29ea:a::/48 maxlen: 48 2a02:29ea:14::/48 maxlen: 48 2a02:29ea:1e::/48 maxlen: 48 2a02:29ea:ffff::/48 maxlen: 48 2a02:29eb::/32 maxlen: 32 2a02:29ec::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.mft rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:15:0b:e4:5e:02:53:83:62:40:b4:5f:50:35:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a6735b7a553a1680c11add3e48c3635b53979ca Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23036a6477a1a530c79c9f10959677f64425aa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:85:2f:e5:2d:a6:ff:09:ca:d9:02:85:53: 96:28:ed:9e:07:8c:e9:ea:51:d9:9e:5a:d4:ea:2a: ae:c2:81:09:ac:85:c2:30:45:a1:36:4b:71:d4:4a: a3:af:f9:a9:d0:fc:65:6e:c4:7f:ce:62:bf:4a:92: 04:9a:17:e1:36:b0:62:8c:99:65:6b:d2:28:5b:92: 40:1e:0e:c2:4f:01:12:14:2a:96:92:bc:4a:3c:f8: 41:19:35:69:a0:50:ab:69:0a:ab:40:5c:b2:9b:e7: 09:cb:8d:b9:5f:fb:d8:59:26:49:21:62:d6:e1:a0: 38:10:d5:7b:3a:b1:65:2a:72:6d:a7:ca:bb:e3:92: 03:52:ec:c8:00:30:f4:3d:52:42:54:7f:2e:f2:e0: 21:c8:ff:2a:ff:bf:63:d7:57:a3:e2:06:38:4e:1c: bb:7c:ff:92:96:cf:fe:63:f2:51:f3:12:50:34:a2: e7:54:e4:4e:42:56:62:c1:ae:e2:f5:52:9a:8b:e4: 46:bd:41:a5:b2:f0:5f:d8:e2:3b:e9:3e:af:91:4d: 07:2c:85:9b:a0:23:66:db:a9:d8:0b:73:8a:45:aa: 0c:b5:a9:8b:08:ae:0b:1f:d2:7e:a5:2e:8e:ab:dd: f3:a6:10:9b:e1:9f:65:0a:90:bf:5a:c1:0f:c2:23: 4b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:03:6A:64:77:A1:A5:30:C7:9C:9F:10:95:96:77:F6:44:25:AA:26 X509v3 Authority Key Identifier: keyid:7A:67:35:B7:A5:53:A1:68:0C:11:AD:D3:E4:8C:36:35:B5:39:79:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/emc1t6VToWgMEa3T5Iw2NbU5eco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/IwNqZHehpTDHnJ8QlZZ39kQlqiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bb2647-0950-46a4-b56d-34eb67b475f6/1/emc1t6VToWgMEa3T5Iw2NbU5eco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.4.0/22 85.222.232.0/22 85.234.242.0-85.234.247.255 185.31.240.0/22 217.146.64.0/20 IPv6: 2a02:29e9:10::/48 2a02:29e9:20::/48 2a02:29e9:30::/48 2a02:29ea::-2a02:29ec:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 2c:6f:07:88:db:ca:0a:24:f4:73:f9:a6:da:cd:26:66:c5:01: 76:22:73:1e:42:c4:4b:ce:8e:85:9e:cb:e0:c7:58:f0:10:c4: 47:b8:9e:5a:9c:46:0b:53:8a:f5:ba:ce:13:70:22:4c:e2:79: 58:14:1e:8d:13:15:c3:10:1f:cc:47:05:38:38:91:6c:2e:b6: ee:7e:b3:cc:ef:6b:54:fb:52:f8:ca:af:77:96:c7:09:04:32: af:7c:43:73:cb:07:87:f0:ca:ab:07:3a:ed:dd:7e:b6:42:5b: 4f:9f:bb:30:6d:75:be:ce:b4:f2:2c:25:f8:98:09:39:3f:23: 7d:da:b0:32:06:35:70:5c:ba:b2:b5:c4:fc:38:c6:93:fd:67: a6:9a:9d:82:69:50:40:27:e4:a1:64:0f:fd:be:4b:f2:f0:cd: eb:76:0a:e7:26:9a:97:66:06:71:e3:ac:2c:c9:30:0c:55:df: 2c:4b:d5:ea:23:d0:a1:0e:1a:34:04:b2:99:d0:f8:14:21:bc: 16:20:5f:fe:2d:6b:52:8c:ea:a2:9d:3b:57:d6:11:78:29:7c: 12:f6:76:0e:b9:91:96:56:70:f3:58:eb:56:df:d8:b7:ef:8f: cd:41:02:33:a1:3f:fd:d7:4c:b7:4f:58:c8:9b:67:1d:90:9a: e9:15:71:ef -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt5ERUL5F4CU4NiQLRfUDUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhNjczNWI3YTU1M2ExNjgwYzExYWRkM2U0OGMzNjM1YjUz OTc5Y2EwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzAzNmE2NDc3YTFhNTMwYzc5YzlmMTA5NTk2NzdmNjQ0MjVhYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun+FL+Utpv8JytkChVOWKO2eB4zp 6lHZnlrU6iquwoEJrIXCMEWhNktx1Eqjr/mp0PxlbsR/zmK/SpIEmhfhNrBijJll a9IoW5JAHg7CTwESFCqWkrxKPPhBGTVpoFCraQqrQFyym+cJy425X/vYWSZJIWLW 4aA4ENV7OrFlKnJtp8q745IDUuzIADD0PVJCVH8u8uAhyP8q/79j11ej4gY4Thy7 fP+Sls/+Y/JR8xJQNKLnVOROQlZiwa7i9VKai+RGvUGlsvBf2OI76T6vkU0HLIWb oCNm26nYC3OKRaoMtamLCK4LH9J+pS6Oq93zphCb4Z9lCpC/WsEPwiNLeQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFCMDamR3oaUwx5yfEJWWd/ZEJaomMB8GA1UdIwQY MBaAFHpnNbelU6FoDBGt0+SMNjW1OXnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQt MzRlYjY3YjQ3NWY2LzEvSXdOcVpIZWhwVERIbko4UWxaWjM5a1FscWlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9iYjI2NDctMDk1MC00NmE0LWI1NmQtMzRlYjY3YjQ3NWY2 LzEvZW1jMXQ2VlRvV2dNRWEzVDVJdzJOYlU1ZWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTAsBAIAATAmAwQCLZcEAwQC Vd7oMAwDBAFV6vIDBANV6vADBAK5H/ADBATZkkAwMQQCAAIwKwMHACoCKekAEAMH ACoCKekAIAMHACoCKekAMDAOAwUBKgIp6gMFACoCKewwDQYJKoZIhvcNAQELBQAD ggEBACxvB4jbygok9HP5ptrNJmbFAXYicx5CxEvOjoWey+DHWPAQxEe4nlqcRgtT ivW6zhNwIkzieVgUHo0TFcMQH8xHBTg4kWwutu5+s8zva1T7UvjKr3eWxwkEMq98 Q3PLB4fwyqsHOu3dfrZCW0+fuzBtdb7OtPIsJfiYCTk/I33asDIGNXBcurK1xPw4 xpP9Z6aanYJpUEAn5KFkD/2+S/Lwzet2CucmmpdmBnHjrCzJMAxV3yxL1eoj0KEO GjQEspnQ+BQhvBYgX/4ta1KM6qKdO1fWEXgpfBL2dg65kZZWcPNY61bf2Lfvj81B AjOhP/3XTLdPWMibZx2QmukVce8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:00 2026 by rpki-client