This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/IWls0AbP5WlDYBhalibARg9icP8.roa File: IWls0AbP5WlDYBhalibARg9icP8.roa (raw, json) Hash identifier: dYr+MsyOWEf1lFygz2jaouZlTKLtP7ebV5kBwfOgAwI= Subject key identifier: 21:69:6C:D0:06:CF:E5:69:43:60:18:5A:96:26:C0:46:0F:62:70:FF Certificate issuer: /CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Certificate serial: 019B7C11F0C2B6BCE75BE4B4B7C11635BB1B Authority key identifier: C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/IWls0AbP5WlDYBhalibARg9icP8.roa Signing time: Fri 02 Jan 2026 00:18:28 +0000 ROA not before: Fri 02 Jan 2026 00:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197998 IP address blocks: 91.243.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.mft rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:f0:c2:b6:bc:e7:5b:e4:b4:b7:c1:16:35:bb:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4e10c7cbffd7488a96a02d5c912f9f92564bb5c Validity Not Before: Jan 2 00:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21696cd006cfe5694360185a9626c0460f6270ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6e:1f:24:8b:09:8f:41:53:17:52:45:e7:8e: 27:ff:06:17:16:95:d9:d5:b3:5a:21:48:6a:c8:c0: 67:b7:2b:1e:c4:61:56:38:c4:05:b0:79:37:78:47: eb:bf:64:67:c3:03:74:82:e5:3f:f6:4a:d0:4f:91: 40:90:74:39:ca:ce:62:51:49:38:47:3b:02:0c:58: 30:31:d9:13:fb:94:a3:4e:4f:38:de:cf:57:95:eb: d6:86:0f:be:03:f7:0e:be:95:4e:4c:ef:24:01:c1: 46:ba:31:3d:73:d9:54:a4:b6:37:de:ac:c7:1b:a6: 06:f5:01:52:be:2e:c1:81:4b:5c:de:9a:25:4d:73: 31:5d:d3:15:cd:dc:66:f8:df:1e:53:4e:49:c1:70: 8e:7f:d1:84:93:cc:05:d8:a1:32:28:4a:19:95:4e: 04:a4:76:c7:ba:3c:50:07:3e:a3:80:34:73:8f:0a: 4b:cf:6e:95:e8:c8:4f:05:f6:20:0f:52:73:35:4a: 5e:b6:b7:9f:79:bb:be:38:42:27:18:2e:6d:b6:af: 84:92:8a:0b:25:06:41:bd:80:f9:76:1a:71:f0:59: a6:54:90:5c:f4:11:c9:18:cb:50:24:ef:91:20:f1: 55:4b:a7:07:57:b0:16:70:33:62:66:e4:4f:71:c2: 6b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:69:6C:D0:06:CF:E5:69:43:60:18:5A:96:26:C0:46:0F:62:70:FF X509v3 Authority Key Identifier: keyid:C4:E1:0C:7C:BF:FD:74:88:A9:6A:02:D5:C9:12:F9:F9:25:64:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOEMfL_9dIipagLVyRL5-SVku1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/IWls0AbP5WlDYBhalibARg9icP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4db0b1-5945-4a9d-a085-458bf5968dd1/1/xOEMfL_9dIipagLVyRL5-SVku1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.243.124.0/23 Signature Algorithm: sha256WithRSAEncryption 33:43:c3:4c:d6:08:6c:99:ef:dc:4b:5e:17:68:c0:da:7f:2f: 56:40:eb:c1:ea:fa:00:87:e7:8c:e9:7b:76:8e:63:15:40:9a: 01:96:1b:c7:34:b0:30:e0:7b:11:00:f0:74:09:43:05:1f:63: 24:18:1a:2f:fd:60:d9:9f:92:bc:e0:0d:99:dd:4a:69:b2:0c: 0c:b3:e3:61:7d:cf:5b:b2:96:a9:d9:c8:2d:53:30:87:55:94: 35:71:03:a1:a2:0d:00:21:de:68:da:ac:0f:82:cb:89:91:1d: a7:3e:0b:6d:7d:41:15:4d:3f:73:47:b3:b7:ca:09:52:c1:0d: a4:d7:41:e6:81:08:7c:1d:7b:da:e3:f6:17:02:de:b2:a3:8b: 52:77:29:76:69:56:5d:56:7a:cb:d1:7a:41:3e:96:c9:0c:98: 16:16:dc:28:9b:e0:23:31:f5:60:9d:be:08:67:67:e7:6f:7d: 03:06:b0:4a:9f:dc:24:6b:2f:a4:1b:1a:e5:ef:69:58:fb:db: a7:72:ef:a2:da:cc:0b:a3:40:4b:d1:5b:3c:19:bc:8c:de:91: df:c1:24:26:59:d3:fa:d3:90:33:90:04:40:60:51:30:fd:a1: 42:58:90:c4:bb:02:a9:7a:dc:b0:c4:e7:43:24:2b:4a:8d:34: 46:3e:96:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EfDCtrznW+S0t8EWNbsbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0ZTEwYzdjYmZmZDc0ODhhOTZhMDJkNWM5MTJmOWY5MjU2 NGJiNWMwHhcNMjYwMTAyMDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTY5NmNkMDA2Y2ZlNTY5NDM2MDE4NWE5NjI2YzA0NjBmNjI3MGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG4fJIsJj0FTF1JF544n/wYXFpXZ 1bNaIUhqyMBntysexGFWOMQFsHk3eEfrv2RnwwN0guU/9krQT5FAkHQ5ys5iUUk4 RzsCDFgwMdkT+5SjTk843s9XlevWhg++A/cOvpVOTO8kAcFGujE9c9lUpLY33qzH G6YG9QFSvi7BgUtc3polTXMxXdMVzdxm+N8eU05JwXCOf9GEk8wF2KEyKEoZlU4E pHbHujxQBz6jgDRzjwpLz26V6MhPBfYgD1JzNUpetrefebu+OEInGC5ttq+EkooL JQZBvYD5dhpx8FmmVJBc9BHJGMtQJO+RIPFVS6cHV7AWcDNiZuRPccJr5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFpbNAGz+VpQ2AYWpYmwEYPYnD/MB8GA1UdIwQY MBaAFMThDHy//XSIqWoC1ckS+fklZLtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUt NDU4YmY1OTY4ZGQxLzEvSVdsczBBYlA1V2xEWUJoYWxpYkFSZzlpY1A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC80ZGIwYjEtNTk0NS00YTlkLWEwODUtNDU4YmY1OTY4ZGQx LzEveE9FTWZMXzlkSWlwYWdMVnlSTDUtU1ZrdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/N8MA0G CSqGSIb3DQEBCwUAA4IBAQAzQ8NM1ghsme/cS14XaMDafy9WQOvB6voAh+eM6Xt2 jmMVQJoBlhvHNLAw4HsRAPB0CUMFH2MkGBov/WDZn5K84A2Z3UppsgwMs+Nhfc9b spap2cgtUzCHVZQ1cQOhog0AId5o2qwPgsuJkR2nPgttfUEVTT9zR7O3yglSwQ2k 10HmgQh8HXva4/YXAt6yo4tSdyl2aVZdVnrL0XpBPpbJDJgWFtwom+AjMfVgnb4I Z2fnb30DBrBKn9wkay+kGxrl72lY+9uncu+i2swLo0BL0Vs8GbyM3pHfwSQmWdP6 05AzkARAYFEw/aFCWJDEuwKpetywxOdDJCtKjTRGPpbz -----END CERTIFICATE-----Generated at Tue Jan 20 12:10:10 2026 by rpki-client