This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa File: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (raw, json) Hash identifier: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ= Subject key identifier: 88:EB:64:F0:B5:E0:38:AC:43:58:F9:4F:E0:12:B3:F0:E4:D6:37:C1 Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7 Certificate serial: 019B7B368B45D68EBE8E74FD3FA3A8BF6AF3 Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa Signing time: Thu 01 Jan 2026 20:18:50 +0000 ROA not before: Thu 01 Jan 2026 20:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1298 IP address blocks: 83.66.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:8b:45:d6:8e:be:8e:74:fd:3f:a3:a8:bf:6a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7 Validity Not Before: Jan 1 20:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88eb64f0b5e038ac4358f94fe012b3f0e4d637c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:88:c6:1f:40:89:68:74:f7:38:30:5c:ba: a8:f7:a6:a6:9d:d1:4b:ee:77:83:2f:c6:b2:fe:1d: 44:90:25:74:7d:44:93:b9:bf:cc:f1:76:89:af:fb: f2:d8:fd:79:15:7a:d7:41:2a:c8:85:ec:98:2f:6b: 73:49:21:7e:f2:37:6f:ed:9b:df:b5:ac:73:4b:c5: 64:05:64:ab:22:14:7e:32:d3:11:b4:f9:24:46:0e: d6:08:15:1f:73:fe:6b:1a:87:33:b4:92:ff:65:d7: 5e:bc:24:06:b1:75:a5:bb:59:86:10:e5:8f:0a:1e: f5:33:ca:98:32:30:a2:09:dd:94:5d:dd:94:ed:0d: 3b:4a:aa:d3:24:d3:0b:09:3e:58:aa:03:a6:0c:1f: 8d:bb:e6:be:a2:a0:9e:c4:9e:d3:ae:0b:75:e4:9c: c2:53:1e:56:7c:69:15:06:74:dd:32:eb:dc:e3:95: cc:d0:14:9f:b7:61:b5:dc:e4:05:71:81:6e:a0:6e: 0a:6f:b9:18:da:71:60:86:49:71:f2:54:de:98:f9: 73:d9:87:d3:13:2b:8c:e1:3b:31:d7:d1:56:f7:36: 2f:0d:34:10:33:a9:d7:27:5d:10:fb:b4:a8:f0:d8: d7:a7:49:5d:9a:71:9a:78:a9:93:79:45:01:fb:25: 6e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EB:64:F0:B5:E0:38:AC:43:58:F9:4F:E0:12:B3:F0:E4:D6:37:C1 X509v3 Authority Key Identifier: keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.66.27.0/24 Signature Algorithm: sha256WithRSAEncryption 02:eb:eb:f1:18:13:60:c6:38:f6:38:72:3e:cf:22:f1:4c:a3: 5c:04:2e:97:de:69:6d:ad:2d:98:a5:a3:5a:e6:5f:b1:8d:00: c3:1f:ec:be:f1:dc:8a:fb:94:87:f7:a8:e0:83:96:44:a2:11: e0:44:4e:58:8d:d9:54:9b:5e:a9:c7:b6:01:c0:af:53:27:13: da:b3:52:32:17:90:6c:18:30:fc:d7:3e:ad:2b:a6:bb:7f:0f: 2a:79:f2:b4:12:00:ea:23:97:f8:ca:ac:4b:5f:0b:f4:96:76: b1:54:b8:12:64:ae:e1:77:a3:49:fa:d1:eb:9a:4f:5f:60:74: a9:ba:50:24:6a:43:43:07:cb:a3:37:22:f2:3b:18:f1:14:b7: c8:a4:dd:67:86:9a:f2:f4:e8:c1:68:68:5a:cb:3d:f0:1b:c8: 94:1a:14:47:9e:a2:ec:93:2a:7a:bc:41:c7:54:83:b2:78:40: 02:80:c1:42:cd:4a:80:11:dd:6a:ad:81:25:78:3a:01:51:e6: 47:ef:c2:2e:81:99:66:41:e7:c6:86:98:b0:35:e3:5a:31:30: 1d:b2:31:6b:5f:65:91:10:e2:3f:05:80:32:39:40:2e:a2:a8: fb:ae:5f:3d:9e:64:d9:ce:8c:a8:70:84:a5:e3:8b:4d:d1:d5: 9d:1b:bc:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NotF1o6+jnT9P6Oov2rzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3OTIyMGE4MDVlNDM3ODU0N2U0M2JhYzczMWNlODZmZTAx MTQ1YzcwHhcNMjYwMTAxMjAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGViNjRmMGI1ZTAzOGFjNDM1OGY5NGZlMDEyYjNmMGU0ZDYzN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR6Ixh9AiWh09zgwXLqo96amndFL 7neDL8ay/h1EkCV0fUSTub/M8XaJr/vy2P15FXrXQSrIheyYL2tzSSF+8jdv7Zvf taxzS8VkBWSrIhR+MtMRtPkkRg7WCBUfc/5rGocztJL/ZddevCQGsXWlu1mGEOWP Ch71M8qYMjCiCd2UXd2U7Q07SqrTJNMLCT5YqgOmDB+Nu+a+oqCexJ7Trgt15JzC Ux5WfGkVBnTdMuvc45XM0BSft2G13OQFcYFuoG4Kb7kY2nFghklx8lTemPlz2YfT EyuM4Tsx19FW9zYvDTQQM6nXJ10Q+7So8NjXp0ldmnGaeKmTeUUB+yVufQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjrZPC14DisQ1j5T+ASs/Dk1jfBMB8GA1UdIwQY MBaAFLeSIKgF5DeFR+Q7rHMc6G/gEUXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDkt NDIzYWZjMmI2OGI4LzEvaU90azhMWGdPS3hEV1BsUDRCS3o4T1RXTjhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9lN2Y4ODQtY2Y3Yi00OTFjLTllZDktNDIzYWZjMmI2OGI4 LzEvdDVJZ3FBWGtONFZINUR1c2N4em9iLUFSUmNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU0IbMA0G CSqGSIb3DQEBCwUAA4IBAQAC6+vxGBNgxjj2OHI+zyLxTKNcBC6X3mltrS2YpaNa 5l+xjQDDH+y+8dyK+5SH96jgg5ZEohHgRE5YjdlUm16px7YBwK9TJxPas1IyF5Bs GDD81z6tK6a7fw8qefK0EgDqI5f4yqxLXwv0lnaxVLgSZK7hd6NJ+tHrmk9fYHSp ulAkakNDB8ujNyLyOxjxFLfIpN1nhpry9OjBaGhayz3wG8iUGhRHnqLskyp6vEHH VIOyeEACgMFCzUqAEd1qrYEleDoBUeZH78IugZlmQefGhpiwNeNaMTAdsjFrX2WR EOI/BYAyOUAuoqj7rl89nmTZzoyocISl44tN0dWdG7wq -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:50 2026 by rpki-client