This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Ich_5F2Gm39VT7wUX4jx207Ce_0.roa File: Ich_5F2Gm39VT7wUX4jx207Ce_0.roa (raw, json) Hash identifier: 1ApqjSxxZ63SiL5sP5Qc2UrpLtZEbvgSaJBrVN5Omb4= Subject key identifier: 21:C8:7F:E4:5D:86:9B:7F:55:4F:BC:14:5F:88:F1:DB:4E:C2:7B:FD Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAFAA6AC0090C6C1181F50A4AC6687 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Ich_5F2Gm39VT7wUX4jx207Ce_0.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200740 IP address blocks: 159.255.34.0/23 maxlen: 24 159.255.36.0/23 maxlen: 24 159.255.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fa:a6:ac:00:90:c6:c1:18:1f:50:a4:ac:66:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21c87fe45d869b7f554fbc145f88f1db4ec27bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ea:58:37:15:a4:26:e3:c1:bd:07:c8:74:76: 85:a9:e8:2c:a9:74:8f:98:84:8d:39:25:34:d5:9e: c5:02:72:9e:b3:bb:ed:02:12:49:b1:b4:f1:46:71: 6f:ff:e8:4c:dd:ff:74:28:3c:3a:cb:0f:4c:84:64: 33:33:0e:07:51:d9:dc:51:8d:d5:c9:f2:32:69:2b: 9f:4a:d7:81:a3:52:5d:29:d5:c0:21:42:74:52:08: 72:40:8b:89:d5:44:39:7b:84:c8:97:80:9b:8a:d1: cb:ba:c4:ce:1b:61:c3:19:9f:7c:2d:46:e2:4c:f0: 58:19:ce:fc:b4:95:54:d9:fb:b5:31:21:9a:87:70: 87:ef:b4:e1:dc:e1:3e:d9:a6:5c:62:28:80:34:95: ba:31:06:73:6f:84:27:f7:74:71:15:c9:6c:bd:73: d2:b8:ac:03:89:3a:fd:5a:31:ad:a5:07:85:aa:3e: 89:36:62:98:f1:00:aa:27:7c:85:11:c9:93:06:f6: aa:75:ef:e2:78:ee:0f:83:5d:a2:93:94:3c:90:df: 0d:99:14:04:99:21:e7:fc:4a:81:fe:b0:e8:da:93: a8:cf:9e:2c:fe:a3:a6:91:23:34:f2:06:ad:b4:a4: e2:5b:48:8e:d1:be:31:32:12:14:d3:61:45:20:92: 9c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C8:7F:E4:5D:86:9B:7F:55:4F:BC:14:5F:88:F1:DB:4E:C2:7B:FD X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Ich_5F2Gm39VT7wUX4jx207Ce_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.34.0-159.255.39.255 Signature Algorithm: sha256WithRSAEncryption 6d:b9:a5:a0:9c:b1:86:b3:5b:9a:40:bc:ac:76:c0:ba:ed:0f: 0c:ab:38:2f:c5:04:df:9b:4d:d2:e3:38:d6:32:94:76:c6:91: e9:23:20:7d:e8:a3:89:4e:0f:37:e7:7f:fd:27:37:a2:14:ed: 69:df:ce:ef:2a:d7:32:25:cb:d3:4b:05:aa:5e:26:57:51:96: b4:1f:97:b1:56:dd:2e:06:24:3a:e8:54:76:0e:ca:13:94:7e: 86:d1:4d:45:e4:bf:96:15:6f:90:67:86:e7:be:18:f3:86:c3: 62:e3:93:e8:3b:2c:20:5e:4d:40:4e:b0:3e:1c:3e:60:f9:6d: ef:91:1b:74:c4:0c:b2:89:fb:e2:dd:a1:8b:fc:00:b3:64:21: 64:80:f6:3d:47:94:6f:4e:81:7a:7e:f9:d8:c6:f3:1b:3c:89: 57:4a:0a:59:4c:17:f6:6a:09:bc:4b:95:3d:eb:1f:9a:b1:7a: b3:5a:c9:4a:84:73:03:b1:80:4a:9e:08:9d:00:ce:79:f8:9e: 0f:5b:20:af:94:b0:7e:69:06:b5:03:ee:52:b2:38:39:44:00: e8:99:4c:2c:f6:58:00:03:ae:31:4e:a4:36:7d:ac:53:0e:d7: 2c:ea:dd:18:be:db:4d:15:ca:3d:6c:b0:cd:80:49:af:d0:65: 4a:d2:f8:e0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26vqmrACQxsEYH1CkrGaHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWM4N2ZlNDVkODY5YjdmNTU0ZmJjMTQ1Zjg4ZjFkYjRlYzI3YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoepYNxWkJuPBvQfIdHaFqegsqXSP mISNOSU01Z7FAnKes7vtAhJJsbTxRnFv/+hM3f90KDw6yw9MhGQzMw4HUdncUY3V yfIyaSufSteBo1JdKdXAIUJ0UghyQIuJ1UQ5e4TIl4CbitHLusTOG2HDGZ98LUbi TPBYGc78tJVU2fu1MSGah3CH77Th3OE+2aZcYiiANJW6MQZzb4Qn93RxFclsvXPS uKwDiTr9WjGtpQeFqj6JNmKY8QCqJ3yFEcmTBvaqde/ieO4Pg12ik5Q8kN8NmRQE mSHn/EqB/rDo2pOoz54s/qOmkSM08gattKTiW0iO0b4xMhIU02FFIJKcNwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCHIf+Rdhpt/VU+8FF+I8dtOwnv9MB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvSWNoXzVGMkdtMzlWVDd3VVg0angyMDdDZV8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGf/yID BAOf/yAwDQYJKoZIhvcNAQELBQADggEBAG25paCcsYazW5pAvKx2wLrtDwyrOC/F BN+bTdLjONYylHbGkekjIH3oo4lODzfnf/0nN6IU7Wnfzu8q1zIly9NLBapeJldR lrQfl7FW3S4GJDroVHYOyhOUfobRTUXkv5YVb5Bnhue+GPOGw2Ljk+g7LCBeTUBO sD4cPmD5be+RG3TEDLKJ++LdoYv8ALNkIWSA9j1HlG9OgXp++djG8xs8iVdKCllM F/ZqCbxLlT3rH5qxerNayUqEcwOxgEqeCJ0Aznn4ng9bIK+UsH5pBrUD7lKyODlE AOiZTCz2WAADrjFOpDZ9rFMO1yzq3Ri+200Vyj1ssM2ASa/QZUrS+OA= -----END CERTIFICATE-----Generated at Wed Jan 21 22:39:03 2026 by rpki-client