This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IjHxZLCoNi1XGauD3y4V-cTWDLk.roa File: IjHxZLCoNi1XGauD3y4V-cTWDLk.roa (raw, json) Hash identifier: 42RCAJNc+3vpFIzxYlYvsxEMNnfp4/vJa9Cy+hDpE30= Subject key identifier: 22:31:F1:64:B0:A8:36:2D:57:19:AB:83:DF:2E:15:F9:C4:D6:0C:B9 Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7 Certificate serial: 019B7CEDE7D91ACE840B48D19F5774E4108B Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IjHxZLCoNi1XGauD3y4V-cTWDLk.roa Signing time: Fri 02 Jan 2026 04:18:44 +0000 ROA not before: Fri 02 Jan 2026 04:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203728 IP address blocks: 81.21.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.mft rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:e7:d9:1a:ce:84:0b:48:d1:9f:57:74:e4:10:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7 Validity Not Before: Jan 2 04:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2231f164b0a8362d5719ab83df2e15f9c4d60cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:42:05:8a:1a:23:b3:2b:25:09:a3:f7:ca:b6: 0b:b7:d2:5f:3e:bb:c0:83:bd:06:10:cb:cd:13:74: 77:14:2e:db:3a:a5:f3:cd:75:5f:51:d3:ce:4b:fc: 5b:0f:0f:2a:dc:da:1e:60:1f:b0:04:1b:df:78:9a: 7e:66:5a:92:2f:20:b3:d5:19:e4:6c:fb:be:b8:8b: cb:5d:68:8e:01:5f:55:30:3c:ca:26:b7:91:f3:15: d5:a1:e4:d1:ba:0e:c4:7b:eb:52:25:e5:74:8a:c6: 60:94:98:e2:9b:04:98:cf:33:76:4c:75:4a:3f:ed: e9:10:0a:2a:24:4f:a7:fa:77:85:82:07:20:69:35: 79:b7:4f:0e:ab:9e:10:1a:c2:67:81:1c:f9:79:98: be:00:e5:5f:b1:40:d7:a3:70:6d:68:98:83:69:f1: 2a:c0:c6:64:d9:b9:8c:ba:f6:28:30:49:22:05:2a: dd:97:79:50:02:97:5f:de:33:33:51:77:f5:e6:e6: bd:b5:0b:cf:69:95:ca:3b:32:f1:24:a7:22:50:cd: f8:2b:3b:93:62:19:50:49:fa:72:58:ea:40:c8:63: fe:a5:af:27:61:b3:0a:c6:6f:7b:ff:25:37:eb:75: bb:f9:7d:7d:4d:2f:e5:bb:55:db:94:92:38:0c:41: 7c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:31:F1:64:B0:A8:36:2D:57:19:AB:83:DF:2E:15:F9:C4:D6:0C:B9 X509v3 Authority Key Identifier: keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/IjHxZLCoNi1XGauD3y4V-cTWDLk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.4.0/24 Signature Algorithm: sha256WithRSAEncryption a0:3a:87:d4:69:02:9c:99:ee:19:2d:8c:04:56:4f:68:52:55: 7c:fb:46:77:f7:1f:8d:b1:69:5b:50:7b:ee:2d:a4:53:ed:b4: 10:9e:57:be:49:a0:97:45:b5:97:24:34:18:9f:c2:97:24:7e: 6b:ae:50:3c:c4:6b:30:b2:98:89:0f:b6:bf:76:f3:93:55:6e: 30:e6:ae:83:18:13:e8:41:48:de:77:23:a7:5d:37:49:e5:7b: bd:5f:3a:2c:b6:bd:b1:5d:18:2b:53:69:04:53:fb:cd:bf:de: 96:ee:ef:af:70:a1:73:36:9f:47:59:ba:c6:26:08:45:17:a7: d5:37:1a:cd:03:02:37:07:4e:0a:bc:3c:c5:79:c1:52:62:21: ec:a6:b4:33:64:77:72:d6:72:78:2f:20:ca:31:00:62:a7:37: 11:00:d4:61:58:1c:c1:e0:0f:2a:7e:fd:4a:2f:0e:54:a8:47: 3a:d0:57:2d:2b:5f:35:f6:5c:45:59:a2:81:71:8d:a4:9f:9a: 77:69:15:53:48:6d:d6:08:08:e1:10:85:fa:d0:24:27:a6:ed: d6:c8:78:1a:6b:9e:3a:94:42:ff:2f:19:f4:21:fa:c4:b1:53: 8b:68:09:d7:4c:f1:2c:22:45:fc:a9:b8:12:63:50:ad:85:ad: 91:26:fe:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87efZGs6EC0jRn1d05BCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl ZTQ2ZDcwHhcNMjYwMTAyMDQxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjMxZjE2NGIwYTgzNjJkNTcxOWFiODNkZjJlMTVmOWM0ZDYwY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0IFihojsyslCaP3yrYLt9JfPrvA g70GEMvNE3R3FC7bOqXzzXVfUdPOS/xbDw8q3NoeYB+wBBvfeJp+ZlqSLyCz1Rnk bPu+uIvLXWiOAV9VMDzKJreR8xXVoeTRug7Ee+tSJeV0isZglJjimwSYzzN2THVK P+3pEAoqJE+n+neFggcgaTV5t08Oq54QGsJngRz5eZi+AOVfsUDXo3BtaJiDafEq wMZk2bmMuvYoMEkiBSrdl3lQApdf3jMzUXf15ua9tQvPaZXKOzLxJKciUM34KzuT YhlQSfpyWOpAyGP+pa8nYbMKxm97/yU363W7+X19TS/lu1XblJI4DEF8jQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIx8WSwqDYtVxmrg98uFfnE1gy5MB8GA1UdIwQY MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt NTYyNDRmNDMwZGNjLzEvSWpIeFpMQ29OaTFYR2F1RDN5NFYtY1RXRExrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURUEMA0G CSqGSIb3DQEBCwUAA4IBAQCgOofUaQKcme4ZLYwEVk9oUlV8+0Z39x+NsWlbUHvu LaRT7bQQnle+SaCXRbWXJDQYn8KXJH5rrlA8xGswspiJD7a/dvOTVW4w5q6DGBPo QUjedyOnXTdJ5Xu9Xzostr2xXRgrU2kEU/vNv96W7u+vcKFzNp9HWbrGJghFF6fV NxrNAwI3B04KvDzFecFSYiHsprQzZHdy1nJ4LyDKMQBipzcRANRhWBzB4A8qfv1K Lw5UqEc60FctK1819lxFWaKBcY2kn5p3aRVTSG3WCAjhEIX60CQnpu3WyHgaa546 lEL/Lxn0IfrEsVOLaAnXTPEsIkX8qbgSY1Ctha2RJv6A -----END CERTIFICATE-----Generated at Fri Jan 2 17:52:23 2026 by rpki-client