This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IrcqEf2weI7mCKphpCOgyoMUvnc.roa File: IrcqEf2weI7mCKphpCOgyoMUvnc.roa (raw, json) Hash identifier: x7ymO1eAFaawSSLk9vTfr0nlyg3MuhR79x0RufjCbYI= Subject key identifier: 22:B7:2A:11:FD:B0:78:8E:E6:08:AA:61:A4:23:A0:CA:83:14:BE:77 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F159D5389AF7BD9FE624E0B81B5A150 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IrcqEf2weI7mCKphpCOgyoMUvnc.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15897 IP address blocks: 2.18.4.0/22 maxlen: 22 2.22.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9d:53:89:af:7b:d9:fe:62:4e:0b:81:b5:a1:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22b72a11fdb0788ee608aa61a423a0ca8314be77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:68:cb:a7:b0:2a:91:d5:16:c7:fb:4a:06:b8: c0:7d:ae:84:d0:1a:ef:9a:ce:f5:0b:91:19:37:75: 18:58:7f:65:cd:a3:96:61:16:09:50:2e:98:f6:dd: 0d:fd:a9:63:96:17:96:78:49:06:a6:33:09:15:02: 7a:26:69:c1:d9:0b:1d:68:7e:ea:7e:f3:a4:a1:37: 8e:c0:7b:c4:68:a5:56:24:4f:04:c7:88:e3:58:67: 5e:11:33:15:ac:c2:d0:8a:31:61:8a:fd:95:ec:8e: 91:be:b3:6b:7e:d8:d8:3c:f7:52:d0:20:c4:c3:e3: 00:66:8c:2b:8c:3d:fe:45:b5:9c:9e:20:91:e0:d5: f0:c9:82:14:d1:ef:f2:a2:59:c4:4e:e9:56:c5:4a: c2:85:fe:b1:6d:99:4c:b7:3a:b1:e7:63:8a:0a:a4: 8c:74:88:e3:46:e9:9c:4c:49:40:95:80:6b:8c:08: 63:ae:62:c1:b6:39:84:16:a5:f6:c7:7c:fe:9b:c3: 68:bc:b2:67:d3:60:4f:d3:6f:53:ea:3e:0f:27:1a: a2:f6:78:82:37:fd:84:bd:05:01:51:0f:ba:6a:03: 3f:6f:56:49:98:ab:16:a0:de:da:d9:87:e6:15:62: 95:f1:b2:f6:f4:33:9a:bb:6e:dd:e8:34:cf:98:4e: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B7:2A:11:FD:B0:78:8E:E6:08:AA:61:A4:23:A0:CA:83:14:BE:77 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/IrcqEf2weI7mCKphpCOgyoMUvnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.18.4.0/22 2.22.168.0/22 Signature Algorithm: sha256WithRSAEncryption 74:3c:17:ac:0f:f2:53:20:99:56:5f:6c:87:ce:e2:51:ff:29: 98:56:55:ca:41:93:61:2f:52:89:fc:45:b9:01:f1:f2:8b:c0: 6d:d6:d0:fb:92:c8:cc:59:85:00:e5:37:43:f6:80:98:b7:c4: 4d:86:f8:25:9b:00:9c:88:ae:ec:dd:92:8f:1e:ea:e0:2f:3c: 27:a1:64:f8:54:6b:c4:db:d8:ac:c8:2c:59:69:3e:42:ac:2a: dc:ba:dd:11:9b:8e:65:f2:07:18:58:17:be:a9:87:a9:38:ec: 2c:78:76:69:b0:b5:9f:9a:53:fd:cf:a5:0b:af:8d:9d:a6:88: dd:24:4a:68:95:fc:ee:43:1e:fd:59:af:12:8a:63:d2:cc:36: 75:b8:d9:f4:59:30:af:78:a0:9c:76:2d:95:91:2f:7b:68:1f: 60:dd:30:0b:da:a9:fc:cf:93:16:d0:1c:a7:1e:22:5f:f8:be: 68:a6:d3:36:e0:d2:0f:a8:99:9a:c7:0d:97:0b:48:44:0c:9e: 07:8d:ce:92:fe:35:b8:26:df:e9:74:2c:2c:72:29:60:c1:4b: 4c:be:b2:c1:85:8e:10:23:1c:fd:52:36:2c:0c:7f:d5:e2:5f: 2f:37:5c:9b:f0:2c:56:eb:ca:ad:1e:d0:b4:0d:76:c2:93:15: a6:60:62:3a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZ1Tia972f5iTguBtaFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmI3MmExMWZkYjA3ODhlZTYwOGFhNjFhNDIzYTBjYTgzMTRiZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GjLp7AqkdUWx/tKBrjAfa6E0Brv ms71C5EZN3UYWH9lzaOWYRYJUC6Y9t0N/aljlheWeEkGpjMJFQJ6JmnB2QsdaH7q fvOkoTeOwHvEaKVWJE8Ex4jjWGdeETMVrMLQijFhiv2V7I6RvrNrftjYPPdS0CDE w+MAZowrjD3+RbWcniCR4NXwyYIU0e/yolnETulWxUrChf6xbZlMtzqx52OKCqSM dIjjRumcTElAlYBrjAhjrmLBtjmEFqX2x3z+m8NovLJn02BP029T6j4PJxqi9niC N/2EvQUBUQ+6agM/b1ZJmKsWoN7a2YfmFWKV8bL29DOau27d6DTPmE4aZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCK3KhH9sHiO5giqYaQjoMqDFL53MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvSXJjcUVmMndlSTdtQ0twaHBDT2d5b01Vdm5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCAhIEAwQC AhaoMA0GCSqGSIb3DQEBCwUAA4IBAQB0PBesD/JTIJlWX2yHzuJR/ymYVlXKQZNh L1KJ/EW5AfHyi8Bt1tD7ksjMWYUA5TdD9oCYt8RNhvglmwCciK7s3ZKPHurgLzwn oWT4VGvE29isyCxZaT5CrCrcut0Rm45l8gcYWBe+qYepOOwseHZpsLWfmlP9z6UL r42dpojdJEpolfzuQx79Wa8SimPSzDZ1uNn0WTCveKCcdi2VkS97aB9g3TAL2qn8 z5MW0BynHiJf+L5optM24NIPqJmaxw2XC0hEDJ4Hjc6S/jW4Jt/pdCwscilgwUtM vrLBhY4QIxz9UjYsDH/V4l8vN1yb8CxW68qtHtC0DXbCkxWmYGI6 -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:38 2026 by rpki-client