This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/i1q-5ppGHZKen0mg4iu01mYnQM0.roa File: i1q-5ppGHZKen0mg4iu01mYnQM0.roa (raw, json) Hash identifier: sIuyBrADQrDmfb4gofoZhceJ2ljMvz5t7ov19sRqXKo= Subject key identifier: 8B:5A:BE:E6:9A:46:1D:92:9E:9F:49:A0:E2:2B:B4:D6:66:27:40:CD Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Certificate serial: 019B7758E02A2A65B017FAB58052537C5948 Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/i1q-5ppGHZKen0mg4iu01mYnQM0.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206078 IP address blocks: 185.180.32.0/23 maxlen: 23 185.180.32.0/24 maxlen: 24 185.180.33.0/24 maxlen: 24 185.180.34.0/23 maxlen: 23 185.180.34.0/24 maxlen: 24 185.180.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e0:2a:2a:65:b0:17:fa:b5:80:52:53:7c:59:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b5abee69a461d929e9f49a0e22bb4d6662740cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:26:96:47:f8:7d:ca:52:91:48:6a:8f:32:0e: 1e:d1:85:ef:5c:35:a4:bc:ce:51:d8:f5:11:8d:7b: 06:80:3f:fd:99:02:37:99:db:d2:e3:e4:bb:7f:08: 6c:11:05:70:ed:a3:04:5a:49:42:1c:fe:83:fe:c2: dd:9b:fb:ca:d1:4f:e7:02:d2:5c:9b:84:58:97:3c: 61:7f:5d:ae:22:15:1e:8c:49:9c:9e:8c:7d:b0:1b: 45:a9:37:33:98:d6:c2:d0:52:f7:d8:9c:e6:ff:cd: 65:d4:7f:f1:c9:0f:0c:ae:1f:14:21:80:de:33:a6: a4:e9:79:1f:cc:8a:8e:0c:17:85:ae:e5:54:28:59: 8b:84:83:ae:a4:a9:cb:f5:0d:ed:a1:9f:3e:2e:3e: 1f:16:b4:88:6b:a2:c5:31:c0:4f:44:2e:c8:31:22: 4a:66:01:48:c6:e8:71:72:ab:bc:9c:39:15:81:93: 8b:a9:7f:e1:d2:a4:4a:da:fa:06:b1:36:99:2d:71: a0:b6:88:d5:82:2e:81:b2:62:f6:4b:63:59:87:e7: 2c:2e:20:f8:61:d2:ab:c9:ed:ae:ec:d1:9d:dc:3c: 6d:c5:a6:ff:46:3c:db:7d:e4:9e:7d:d3:21:a0:ce: 01:a9:ee:7b:96:d6:98:da:0c:4b:ed:13:79:b7:15: bf:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:5A:BE:E6:9A:46:1D:92:9E:9F:49:A0:E2:2B:B4:D6:66:27:40:CD X509v3 Authority Key Identifier: keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/i1q-5ppGHZKen0mg4iu01mYnQM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.32.0/22 Signature Algorithm: sha256WithRSAEncryption 93:da:4d:b9:e0:43:d5:85:fe:79:6b:b6:ec:4a:99:63:e3:a3: 2d:a4:74:c6:10:9a:2f:9f:57:4a:5c:69:a3:f0:45:2a:13:41: ed:c9:bf:e3:76:34:32:03:5c:c0:fe:1c:c5:b5:5a:59:a7:56: a7:ae:9c:54:22:23:00:98:29:27:4e:24:68:37:ee:68:57:25: 51:69:50:78:b6:e7:fc:b9:18:38:00:63:68:8a:43:73:7d:5b: 95:77:7c:50:1b:42:13:cd:63:7f:73:87:90:09:3f:9a:bd:a9: 50:b5:36:ba:f7:ad:95:9f:8c:bd:0e:fc:57:e8:f1:06:e6:70: ef:01:c4:01:96:9c:03:8d:83:90:ec:76:0f:c9:01:19:96:f6: 77:80:8c:52:3e:9a:fc:5a:59:0b:9b:0a:ca:e7:ff:46:42:d3: 53:27:c8:ec:2b:1c:c7:08:fa:e5:ce:d3:cb:e9:69:d6:d3:75: 42:70:34:60:01:53:f9:fc:e7:81:35:25:38:20:6d:c4:5e:12: b0:ea:c7:1a:5d:9a:da:c0:f8:8b:db:7e:14:df:e7:b9:4c:f3: 5f:e4:fc:d2:02:57:c1:b1:51:fc:24:4f:93:fd:0c:6a:ad:b2: 13:c6:a2:49:d7:81:68:ad:a7:90:35:28:9b:8b:1e:37:56:80: a6:39:bb:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOAqKmWwF/q1gFJTfFlIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4 NDgwNzAwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjVhYmVlNjlhNDYxZDkyOWU5ZjQ5YTBlMjJiYjRkNjY2Mjc0MGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyaWR/h9ylKRSGqPMg4e0YXvXDWk vM5R2PURjXsGgD/9mQI3mdvS4+S7fwhsEQVw7aMEWklCHP6D/sLdm/vK0U/nAtJc m4RYlzxhf12uIhUejEmcnox9sBtFqTczmNbC0FL32Jzm/81l1H/xyQ8Mrh8UIYDe M6ak6XkfzIqODBeFruVUKFmLhIOupKnL9Q3toZ8+Lj4fFrSIa6LFMcBPRC7IMSJK ZgFIxuhxcqu8nDkVgZOLqX/h0qRK2voGsTaZLXGgtojVgi6BsmL2S2NZh+csLiD4 YdKrye2u7NGd3Dxtxab/RjzbfeSefdMhoM4Bqe57ltaY2gxL7RN5txW/8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFItavuaaRh2Snp9JoOIrtNZmJ0DNMB8GA1UdIwQY MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt ZDRiNzIzZWQ3ODFjLzEvaTFxLTVwcEdIWktlbjBtZzRpdTAxbVluUU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubQgMA0G CSqGSIb3DQEBCwUAA4IBAQCT2k254EPVhf55a7bsSplj46MtpHTGEJovn1dKXGmj 8EUqE0Htyb/jdjQyA1zA/hzFtVpZp1anrpxUIiMAmCknTiRoN+5oVyVRaVB4tuf8 uRg4AGNoikNzfVuVd3xQG0ITzWN/c4eQCT+avalQtTa6962Vn4y9DvxX6PEG5nDv AcQBlpwDjYOQ7HYPyQEZlvZ3gIxSPpr8WlkLmwrK5/9GQtNTJ8jsKxzHCPrlztPL 6WnW03VCcDRgAVP5/OeBNSU4IG3EXhKw6scaXZrawPiL234U3+e5TPNf5PzSAlfB sVH8JE+T/QxqrbITxqJJ14ForaeQNSibix43VoCmObsR -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:40 2026 by rpki-client