This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/if-VQzAEEHcFp3TZKhhgWI5D5bw.roa File: if-VQzAEEHcFp3TZKhhgWI5D5bw.roa (raw, json) Hash identifier: nl8xVJVOCcvyMOMhcrpH2LV6/NjkAUby/MhTzUlVi+A= Subject key identifier: 89:FF:95:43:30:04:10:77:05:A7:74:D9:2A:18:60:58:8E:43:E5:BC Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F1590DE0E9AFE1B00BAB6755BEFB025 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/if-VQzAEEHcFp3TZKhhgWI5D5bw.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 852 IP address blocks: 2.22.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:90:de:0e:9a:fe:1b:00:ba:b6:75:5b:ef:b0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89ff95433004107705a774d92a1860588e43e5bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0d:a6:57:3e:16:5c:47:f5:42:21:a4:64:72: e4:8e:ee:d6:c0:9d:8a:2a:e2:ce:f3:20:fe:bf:3c: c6:21:3a:d2:37:6b:c8:68:9f:e5:41:36:be:29:ea: cb:5b:0e:64:7a:64:2a:66:71:3f:1c:af:7d:e8:c0: 81:7a:ff:7f:30:53:e7:6f:c0:70:29:8e:39:2e:13: 1a:91:0f:1e:4e:fb:c6:ed:1f:34:1e:ce:fd:1c:9d: 4f:df:a4:5b:41:ec:00:8d:64:28:2b:46:c0:91:35: fa:8f:90:c0:fe:45:28:54:e7:5a:77:77:43:6e:cf: b7:82:05:a1:56:95:d1:42:8e:e0:87:cc:b6:7e:f8: ad:74:26:c9:21:eb:d3:0e:6d:4e:c6:59:68:75:73: f2:72:b6:7f:fb:fb:b4:20:f5:8a:ae:da:58:ff:ff: f2:d0:bb:f2:93:08:a6:fc:1f:26:7d:4e:63:8f:02: 96:f8:52:f4:7c:b6:9f:61:b8:8b:2e:86:81:38:a2: b8:ef:5b:4f:e4:bd:d6:5d:c4:72:5f:3e:ee:df:71: de:6f:b3:9c:fc:45:ce:b7:75:42:97:c4:c4:e8:b9: 59:72:af:12:ff:dc:27:8f:c1:7f:19:ef:06:21:e1: 25:e7:48:23:d0:4e:3b:6b:c7:20:d6:9b:72:25:4b: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FF:95:43:30:04:10:77:05:A7:74:D9:2A:18:60:58:8E:43:E5:BC X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/if-VQzAEEHcFp3TZKhhgWI5D5bw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.22.72.0/22 Signature Algorithm: sha256WithRSAEncryption 09:b2:8a:ef:5f:0b:86:13:11:50:e8:90:e9:3b:39:bf:73:2e: e0:15:88:7a:77:08:ad:cf:ec:fa:9e:5b:7c:d3:50:3c:1e:8f: fa:4f:ce:51:1a:7e:f2:d6:92:a2:2f:33:58:f4:22:32:bd:6c: 58:6f:e8:1f:af:1b:a1:af:00:6c:9e:29:69:7d:86:c8:b9:3d: 0b:a6:1d:ae:b7:d0:d0:f6:a6:85:61:21:b5:3a:cc:0b:1b:e7: db:e3:1c:8a:da:38:7e:b1:03:2e:ad:8a:1c:91:cd:bb:8e:2b: 83:ae:a7:54:2f:2c:90:cc:c0:f5:c6:7d:1d:89:b4:72:13:56: 65:9e:30:a4:e5:95:a1:34:ba:7b:8f:92:b2:e8:bb:8a:5b:9c: c9:91:1d:2e:34:a1:b5:a3:e3:1d:65:e9:24:c8:46:60:0f:fe: f6:58:dd:7a:c0:58:9b:d8:72:0b:ef:1a:82:06:26:87:80:87: 0e:d9:f5:66:fe:51:47:1e:a7:42:71:3e:e5:f5:d7:1c:ee:2e: 51:0f:81:1e:9e:1a:2c:7a:f9:a6:4f:54:72:60:2d:97:70:bf: 94:2c:5d:e6:63:45:c2:3a:3a:91:11:f5:0a:79:1c:e4:12:2c: 45:83:6a:62:88:a2:9f:e2:9b:72:ab:20:0d:70:db:0f:3a:8f: 69:92:c8:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZDeDpr+GwC6tnVb77AlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWZmOTU0MzMwMDQxMDc3MDVhNzc0ZDkyYTE4NjA1ODhlNDNlNWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw2mVz4WXEf1QiGkZHLkju7WwJ2K KuLO8yD+vzzGITrSN2vIaJ/lQTa+KerLWw5kemQqZnE/HK996MCBev9/MFPnb8Bw KY45LhMakQ8eTvvG7R80Hs79HJ1P36RbQewAjWQoK0bAkTX6j5DA/kUoVOdad3dD bs+3ggWhVpXRQo7gh8y2fvitdCbJIevTDm1OxllodXPycrZ/+/u0IPWKrtpY///y 0Lvykwim/B8mfU5jjwKW+FL0fLafYbiLLoaBOKK471tP5L3WXcRyXz7u33Heb7Oc /EXOt3VCl8TE6LlZcq8S/9wnj8F/Ge8GIeEl50gj0E47a8cg1ptyJUtzGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIn/lUMwBBB3Bad02SoYYFiOQ+W8MB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvaWYtVlF6QUVFSGNGcDNUWktoaGdXSTVENWJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAhZIMA0G CSqGSIb3DQEBCwUAA4IBAQAJsorvXwuGExFQ6JDpOzm/cy7gFYh6dwitz+z6nlt8 01A8Ho/6T85RGn7y1pKiLzNY9CIyvWxYb+gfrxuhrwBsnilpfYbIuT0Lph2ut9DQ 9qaFYSG1OswLG+fb4xyK2jh+sQMurYockc27jiuDrqdULyyQzMD1xn0dibRyE1Zl njCk5ZWhNLp7j5Ky6LuKW5zJkR0uNKG1o+MdZekkyEZgD/72WN16wFib2HIL7xqC BiaHgIcO2fVm/lFHHqdCcT7l9dcc7i5RD4EenhosevmmT1RyYC2XcL+ULF3mY0XC OjqREfUKeRzkEixFg2piiKKf4ptyqyANcNsPOo9pkshh -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:43 2026 by rpki-client