This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa File: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (raw, json) Hash identifier: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU= Subject key identifier: 22:22:0E:A8:40:B6:8B:C2:A7:DE:9C:07:76:C3:6E:78:94:22:5F:CA Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Certificate serial: 019B7C11D526307F11B0417D0B6ADBEE59D8 Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa Signing time: Fri 02 Jan 2026 00:18:21 +0000 ROA not before: Fri 02 Jan 2026 00:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44592 IP address blocks: 185.70.45.0/24 maxlen: 24 185.70.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d5:26:30:7f:11:b0:41:7d:0b:6a:db:ee:59:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Validity Not Before: Jan 2 00:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22220ea840b68bc2a7de9c0776c36e7894225fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:45:e6:b2:68:97:13:37:51:3d:3d:be:79: 41:e6:ec:2d:fe:e9:50:19:7a:88:e7:f8:7f:e1:cd: 50:56:cc:68:1e:1b:69:04:45:a3:36:3e:1e:2d:cd: 67:f8:66:e5:1c:f4:27:d0:0d:be:8f:7d:a0:50:a5: 50:06:91:38:ec:de:64:47:74:5e:c2:2f:be:3d:00: 29:23:aa:a3:e6:e5:8f:f2:23:c6:a5:ba:b1:01:51: 57:37:17:c6:38:18:e7:f4:09:16:3d:78:66:49:2b: 39:f7:93:4b:d1:f4:57:7d:3a:cc:26:85:55:4b:92: 6b:b1:33:b3:62:b5:39:27:3f:cd:4d:4e:06:ff:58: 72:17:72:ba:82:a5:45:b3:5d:62:8d:40:03:e7:a7: ef:4f:c7:54:bc:89:c5:3f:e6:60:08:d0:19:b0:c7: 77:fd:2d:4d:94:80:c6:95:f1:d6:22:be:8b:99:3f: b1:42:54:14:d2:93:67:03:6e:3e:22:ec:c1:c6:bf: 7b:1f:1b:f0:d1:96:63:97:15:17:44:d8:b4:5e:e3: 79:20:54:99:d5:73:47:03:83:d1:e6:74:fa:36:80: 19:6c:24:89:fd:a4:dc:78:5c:eb:cb:ba:ff:ed:29: ca:23:c1:2b:b8:42:17:0d:7f:25:2c:54:61:00:ac: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:0E:A8:40:B6:8B:C2:A7:DE:9C:07:76:C3:6E:78:94:22:5F:CA X509v3 Authority Key Identifier: keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.70.45.0-185.70.46.255 Signature Algorithm: sha256WithRSAEncryption bd:c4:87:f5:05:da:da:83:fe:ac:12:bc:d2:9f:4e:b7:1a:e9: 61:5a:54:3d:42:b1:6d:9b:f0:35:73:1c:9f:04:bf:d3:ec:ac: 51:8a:a6:b7:31:40:a6:43:fb:6d:93:cc:63:b1:66:35:30:2c: e7:73:21:94:7e:f2:f2:45:ab:77:98:3e:e9:d8:93:e9:a3:46: 62:7d:ed:3c:81:aa:20:5f:79:35:dd:86:1f:8f:6b:8a:17:e4: eb:63:6d:ba:d7:73:11:4f:93:9e:49:48:94:c9:c9:7a:0e:90: c8:a0:cf:ce:e7:87:21:80:44:4d:b5:c4:3e:23:15:5b:4d:2f: 11:53:de:a6:ba:bb:0d:d0:57:0b:66:43:fe:57:42:1b:79:ab: 36:4f:7b:88:49:12:e4:36:7b:de:6c:fd:76:13:d6:68:fe:6d: f6:17:ab:d0:da:2f:04:7c:7c:20:4c:80:38:eb:2b:4b:b5:26: 86:db:de:f9:ce:c6:da:3e:88:74:8d:5e:6b:f2:ea:e3:c1:97: 34:03:5b:a2:f7:1b:2c:53:8d:e1:a6:9f:45:f4:66:8e:e0:fa: 56:df:b9:70:1d:91:4a:06:c8:6e:88:21:af:ef:26:b1:7c:c6: a5:39:c4:d6:f6:93:96:a6:2f:e3:a1:a5:5a:14:c2:c6:44:e4: 02:7b:7a:1a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8EdUmMH8RsEF9C2rb7lnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYThjNmU5MzA4YmIwMDA4MzEwMDE3MWUwMGRiYjYxNDBm NGY1ODAwHhcNMjYwMTAyMDAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjIyMGVhODQwYjY4YmMyYTdkZTljMDc3NmMzNmU3ODk0MjI1ZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseFF5rJolxM3UT09vnlB5uwt/ulQ GXqI5/h/4c1QVsxoHhtpBEWjNj4eLc1n+GblHPQn0A2+j32gUKVQBpE47N5kR3Re wi++PQApI6qj5uWP8iPGpbqxAVFXNxfGOBjn9AkWPXhmSSs595NL0fRXfTrMJoVV S5JrsTOzYrU5Jz/NTU4G/1hyF3K6gqVFs11ijUAD56fvT8dUvInFP+ZgCNAZsMd3 /S1NlIDGlfHWIr6LmT+xQlQU0pNnA24+IuzBxr97Hxvw0ZZjlxUXRNi0XuN5IFSZ 1XNHA4PR5nT6NoAZbCSJ/aTceFzry7r/7SnKI8EruEIXDX8lLFRhAKwL9QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFCIiDqhAtovCp96cB3bDbniUIl/KMB8GA1UdIwQY MBaAFBCoxukwi7AAgxABceANu2FA9PWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYt NmI0OTdiMmMwYjM4LzEvSWlJT3FFQzJpOEtuM3B3SGRzTnVlSlFpWDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYtNmI0OTdiMmMwYjM4 LzEvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5Ri0D BAC5Ri4wDQYJKoZIhvcNAQELBQADggEBAL3Eh/UF2tqD/qwSvNKfTrca6WFaVD1C sW2b8DVzHJ8Ev9PsrFGKprcxQKZD+22TzGOxZjUwLOdzIZR+8vJFq3eYPunYk+mj RmJ97TyBqiBfeTXdhh+Pa4oX5OtjbbrXcxFPk55JSJTJyXoOkMigz87nhyGARE21 xD4jFVtNLxFT3qa6uw3QVwtmQ/5XQht5qzZPe4hJEuQ2e95s/XYT1mj+bfYXq9Da LwR8fCBMgDjrK0u1Jobb3vnOxto+iHSNXmvy6uPBlzQDW6L3GyxTjeGmn0X0Zo7g +lbfuXAdkUoGyG6IIa/vJrF8xqU5xNb2k5amL+OhpVoUwsZE5AJ7eho= -----END CERTIFICATE-----Generated at Mon Jan 19 17:50:28 2026 by rpki-client