This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/iEJQwLdxS0IxuOaEeOzSHydGpSo.roa File: iEJQwLdxS0IxuOaEeOzSHydGpSo.roa (raw, json) Hash identifier: Xj6y/UERT3eVvhXQlqkmNoZn9cVGobnGl6x9D/dBts8= Subject key identifier: 88:42:50:C0:B7:71:4B:42:31:B8:E6:84:78:EC:D2:1F:27:46:A5:2A Certificate issuer: /CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007 Certificate serial: 019B783536AB762B5BC58D67B0B4781B643E Authority key identifier: D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/iEJQwLdxS0IxuOaEeOzSHydGpSo.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198022 IP address blocks: 45.143.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.mft rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:36:ab:76:2b:5b:c5:8d:67:b0:b4:78:1b:64:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d24482331fe3761de53a99bd37c8fd6a6f9fa007 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=884250c0b7714b4231b8e68478ecd21f2746a52a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:17:f9:2d:39:79:55:ac:cb:e9:a1:af:72:61: 32:9a:2b:d0:ba:23:86:9e:25:79:56:23:b4:ce:1b: c4:95:65:6d:5e:c9:d3:76:dc:da:c2:30:ba:b2:59: 06:5a:05:d1:06:ff:70:69:d3:18:ac:3e:31:a6:7e: f6:ba:8d:a7:a9:38:45:c0:3e:5f:7c:e5:bd:06:93: 6e:12:54:9d:ec:e9:c4:65:16:05:e5:5b:2c:9b:69: 90:3c:ba:a8:fc:a7:92:86:c6:4d:36:92:bd:81:88: de:58:8d:bc:82:cd:63:71:ef:8f:9b:88:b7:5c:02: a8:28:57:95:71:65:00:85:66:36:a4:a5:66:5d:1a: fb:b6:33:29:fd:50:33:9a:27:a9:a5:7f:a2:ac:6d: 2e:33:f1:7e:c1:1a:52:9b:76:22:d4:e6:6a:f4:0e: e3:13:d9:99:52:e2:2c:4b:07:d9:5b:38:38:3b:78: 59:38:5f:3f:1e:92:b8:04:8f:23:51:24:ac:95:74: 63:a0:d7:fb:e2:a2:8a:2f:e6:6a:cb:d9:28:61:33: 4e:38:06:2c:76:6c:b9:29:79:5c:f7:47:ab:2d:f2: 22:dc:01:0e:41:0e:98:13:f6:db:88:9f:73:82:ac: 67:57:a7:fc:d3:c4:21:be:94:f6:a8:8a:7c:f2:42: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:42:50:C0:B7:71:4B:42:31:B8:E6:84:78:EC:D2:1F:27:46:A5:2A X509v3 Authority Key Identifier: keyid:D2:44:82:33:1F:E3:76:1D:E5:3A:99:BD:37:C8:FD:6A:6F:9F:A0:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kSCMx_jdh3lOpm9N8j9am-foAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/iEJQwLdxS0IxuOaEeOzSHydGpSo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/25b61b-37e9-4408-acc1-87c03cdd7f9f/1/0kSCMx_jdh3lOpm9N8j9am-foAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.184.0/22 Signature Algorithm: sha256WithRSAEncryption 11:27:09:ba:1a:0d:2e:91:55:cf:09:2c:7c:0c:29:19:d9:62: 54:f1:86:02:48:02:7c:cd:2e:6a:d1:6b:6f:25:2c:c3:c5:56: af:8a:da:9c:d9:a1:1c:90:d6:d6:58:f5:2c:cb:cd:ba:3c:15: 48:2d:a9:1d:df:25:17:86:98:a9:93:d1:87:64:c5:7e:2b:69: 4e:a4:01:9c:6d:8f:a4:79:54:ea:2f:49:9d:bc:dc:88:55:db: 09:45:4f:d3:32:0d:46:9d:33:98:ef:0f:c5:8f:67:7c:5b:3c: 6b:10:45:32:67:17:c7:74:95:23:a9:4e:05:0e:4d:4d:bb:01: fa:3d:b4:18:dc:0f:8d:06:bc:21:96:00:42:c1:96:65:fd:2a: d1:6e:22:38:2f:ef:98:5d:16:17:6a:94:2a:50:e9:c3:b4:5c: 0e:2c:af:73:b8:2d:ee:ed:27:ef:92:7d:35:b5:7a:b9:98:cf: 17:c6:0a:e1:9d:7d:9b:8f:4d:e3:55:7e:be:37:4a:d8:53:8d: 16:53:1b:28:19:ef:58:44:07:f7:40:49:d2:b2:1b:cd:33:83: 91:30:5d:62:43:b5:91:c7:86:5a:51:b0:2d:78:c9:16:0f:83: d1:cb:83:aa:aa:01:1c:8d:78:cd:a3:a5:ea:c1:0d:79:4c:48: 05:f7:12:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTarditbxY1nsLR4G2Q+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDQ4MjMzMWZlMzc2MWRlNTNhOTliZDM3YzhmZDZhNmY5 ZmEwMDcwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODQyNTBjMGI3NzE0YjQyMzFiOGU2ODQ3OGVjZDIxZjI3NDZhNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhf5LTl5VazL6aGvcmEymivQuiOG niV5ViO0zhvElWVtXsnTdtzawjC6slkGWgXRBv9wadMYrD4xpn72uo2nqThFwD5f fOW9BpNuElSd7OnEZRYF5Vssm2mQPLqo/KeShsZNNpK9gYjeWI28gs1jce+Pm4i3 XAKoKFeVcWUAhWY2pKVmXRr7tjMp/VAzmieppX+irG0uM/F+wRpSm3Yi1OZq9A7j E9mZUuIsSwfZWzg4O3hZOF8/HpK4BI8jUSSslXRjoNf74qKKL+Zqy9koYTNOOAYs dmy5KXlc90erLfIi3AEOQQ6YE/bbiJ9zgqxnV6f808QhvpT2qIp88kLjoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIhCUMC3cUtCMbjmhHjs0h8nRqUqMB8GA1UdIwQY MBaAFNJEgjMf43Yd5TqZvTfI/Wpvn6AHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yNWI2MWItMzdlOS00NDA4LWFjYzEt ODdjMDNjZGQ3ZjlmLzEvaUVKUXdMZHhTMEl4dU9hRWVPelNIeWRHcFNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yNWI2MWItMzdlOS00NDA4LWFjYzEtODdjMDNjZGQ3Zjlm LzEvMGtTQ014X2pkaDNsT3BtOU44ajlhbS1mb0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY+4MA0G CSqGSIb3DQEBCwUAA4IBAQARJwm6Gg0ukVXPCSx8DCkZ2WJU8YYCSAJ8zS5q0Wtv JSzDxVavitqc2aEckNbWWPUsy826PBVILakd3yUXhpipk9GHZMV+K2lOpAGcbY+k eVTqL0mdvNyIVdsJRU/TMg1GnTOY7w/Fj2d8WzxrEEUyZxfHdJUjqU4FDk1NuwH6 PbQY3A+NBrwhlgBCwZZl/SrRbiI4L++YXRYXapQqUOnDtFwOLK9zuC3u7Sfvkn01 tXq5mM8XxgrhnX2bj03jVX6+N0rYU40WUxsoGe9YRAf3QEnSshvNM4ORMF1iQ7WR x4ZaUbAteMkWD4PRy4OqqgEcjXjNo6XqwQ15TEgF9xIy -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:49 2026 by rpki-client