This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/IQibXEHXkvi7sVVMICvEPQ8pExo.roa File: IQibXEHXkvi7sVVMICvEPQ8pExo.roa (raw, json) Hash identifier: OKtqd0x6WcgI74436MRbIO/vuu+3fh/uLL56MwEpp8U= Subject key identifier: 21:08:9B:5C:41:D7:92:F8:BB:B1:55:4C:20:2B:C4:3D:0F:29:13:1A Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC7A226FBBAAAFD6C2E9AAE85864BFC Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/IQibXEHXkvi7sVVMICvEPQ8pExo.roa Signing time: Thu 01 Jan 2026 18:17:42 +0000 ROA not before: Thu 01 Jan 2026 18:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212667 IP address blocks: 45.8.156.0/24 maxlen: 24 45.85.64.0/24 maxlen: 24 45.85.67.0/24 maxlen: 24 45.144.38.0/24 maxlen: 24 45.145.3.0/24 maxlen: 24 85.8.187.0/24 maxlen: 24 185.21.140.0/24 maxlen: 24 194.32.250.0/24 maxlen: 24 194.61.234.0/24 maxlen: 24 194.61.235.0/24 maxlen: 24 213.139.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:a2:26:fb:ba:aa:fd:6c:2e:9a:ae:85:86:4b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21089b5c41d792f8bbb1554c202bc43d0f29131a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:66:6a:aa:e6:6d:eb:6b:39:dd:f8:69:30:a8: 81:88:00:5b:a2:73:59:93:ac:24:ce:0b:31:28:4c: 25:42:41:f9:1e:ef:96:0c:ab:6f:dd:e2:99:fb:f6: de:ca:a6:84:1d:25:ae:df:2f:f8:3d:91:fe:64:d1: a6:ac:bd:e4:c3:66:fc:cd:07:c3:a5:c6:1d:b4:7f: bb:f7:9a:3d:7f:6f:e6:87:02:61:71:50:98:79:aa: 8e:b1:80:13:97:1e:de:b0:b1:7f:00:85:09:f0:9c: cc:80:19:bc:c4:1d:e9:76:04:74:28:ae:86:35:fd: 8e:f3:08:2e:b8:ac:74:eb:ec:70:ac:c9:99:1b:3c: 6d:28:b4:56:69:d0:21:52:01:4a:c2:82:b2:87:d5: 97:6d:02:a0:ff:bf:92:db:0d:f6:a2:7a:a7:13:cf: fd:a6:1d:67:31:ee:00:ef:a6:08:1b:b8:c2:cd:8b: de:fe:11:06:2f:ee:ec:a3:73:9c:ae:12:eb:db:16: 01:85:3b:5f:c1:7d:64:38:31:69:a6:11:02:7a:39: 5d:80:31:8b:5a:39:27:9b:05:37:8e:1b:bb:b8:77: 3d:f0:b7:59:82:f0:e0:ca:23:a3:d0:6b:b0:5b:9e: 2f:0f:fd:27:13:5a:e1:2b:9e:36:f7:d4:ad:ee:1a: 17:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:08:9B:5C:41:D7:92:F8:BB:B1:55:4C:20:2B:C4:3D:0F:29:13:1A X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/IQibXEHXkvi7sVVMICvEPQ8pExo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.156.0/24 45.85.64.0/24 45.85.67.0/24 45.144.38.0/24 45.145.3.0/24 85.8.187.0/24 185.21.140.0/24 194.32.250.0/24 194.61.234.0/23 213.139.231.0/24 Signature Algorithm: sha256WithRSAEncryption 62:d7:d6:7f:fe:b6:88:62:95:97:40:29:8b:ab:26:76:55:59: af:dc:ec:c3:0d:b8:43:51:44:10:e0:01:16:c6:75:23:5c:a9: f0:0c:ff:52:c8:2c:43:f4:28:fa:a8:19:6d:91:60:ae:25:10: ea:25:2e:1d:dc:4b:f4:02:87:58:eb:88:75:b6:3d:aa:be:95: 65:9c:be:5b:18:d3:06:1b:ae:69:31:83:16:77:32:1f:f5:28: a6:cd:f6:48:62:fc:2f:ff:1e:20:a4:11:43:de:23:7a:6b:35: 2b:eb:21:ff:63:1c:20:60:b4:34:85:7e:f8:d1:a2:e1:10:d1: 38:95:7d:2d:45:3c:a5:b1:65:30:14:14:a2:36:b4:07:f9:7c: 84:2b:22:15:a8:75:ec:a8:bd:81:7a:01:7c:23:81:8a:ff:cf: 96:3b:9d:3d:91:81:f1:0e:cb:e0:f5:f6:eb:5d:f8:c4:43:a3: a7:c7:cc:89:8d:9e:41:a4:a9:2d:e0:9c:24:cc:4f:63:52:06: aa:c4:8c:aa:02:4a:16:48:32:72:81:ea:34:a0:8d:84:69:05: f5:0f:49:1a:cf:e4:30:16:11:d8:4b:e4:76:9d:06:4a:7e:97: f8:61:14:50:e2:b3:ce:b6:58:14:1a:38:fe:8a:14:b9:7f:19: dc:7c:05:70 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt6x6Im+7qq/Wwumq6Fhkv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTA4OWI1YzQxZDc5MmY4YmJiMTU1NGMyMDJiYzQzZDBmMjkxMzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GZqquZt62s53fhpMKiBiABbonNZ k6wkzgsxKEwlQkH5Hu+WDKtv3eKZ+/beyqaEHSWu3y/4PZH+ZNGmrL3kw2b8zQfD pcYdtH+795o9f2/mhwJhcVCYeaqOsYATlx7esLF/AIUJ8JzMgBm8xB3pdgR0KK6G Nf2O8wguuKx06+xwrMmZGzxtKLRWadAhUgFKwoKyh9WXbQKg/7+S2w32onqnE8/9 ph1nMe4A76YIG7jCzYve/hEGL+7so3OcrhLr2xYBhTtfwX1kODFpphECejldgDGL WjknmwU3jhu7uHc98LdZgvDgyiOj0GuwW54vD/0nE1rhK54299St7hoXFQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFCEIm1xB15L4u7FVTCArxD0PKRMaMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvSVFpYlhFSFhrdmk3c1ZWTUlDdkVQUThwRXhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALQicAwQA LVVAAwQALVVDAwQALZAmAwQALZEDAwQAVQi7AwQAuRWMAwQAwiD6AwQBwj3qAwQA 1YvnMA0GCSqGSIb3DQEBCwUAA4IBAQBi19Z//raIYpWXQCmLqyZ2VVmv3OzDDbhD UUQQ4AEWxnUjXKnwDP9SyCxD9Cj6qBltkWCuJRDqJS4d3Ev0AodY64h1tj2qvpVl nL5bGNMGG65pMYMWdzIf9SimzfZIYvwv/x4gpBFD3iN6azUr6yH/YxwgYLQ0hX74 0aLhENE4lX0tRTylsWUwFBSiNrQH+XyEKyIVqHXsqL2BegF8I4GK/8+WO509kYHx Dsvg9fbrXfjEQ6Onx8yJjZ5BpKkt4JwkzE9jUgaqxIyqAkoWSDJygeo0oI2EaQX1 D0kaz+QwFhHYS+R2nQZKfpf4YRRQ4rPOtlgUGjj+ihS5fxncfAVw -----END CERTIFICATE-----Generated at Mon Jan 19 20:36:07 2026 by rpki-client