This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IKUlXX36PRI-b0MvK4jQMYgtgJk.roa File: IKUlXX36PRI-b0MvK4jQMYgtgJk.roa (raw, json) Hash identifier: e2FOYXHZFp298OO/vXD/LX32qTU2zMkd0XpeoXn/sdo= Subject key identifier: 20:A5:25:5D:7D:FA:3D:12:3E:6F:43:2F:2B:88:D0:31:88:2D:80:99 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83B7476C8E1A1FCAC44FBF0F23C037 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IKUlXX36PRI-b0MvK4jQMYgtgJk.roa Signing time: Fri 02 Jan 2026 16:21:37 +0000 ROA not before: Fri 02 Jan 2026 16:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207288 IP address blocks: 141.101.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b7:47:6c:8e:1a:1f:ca:c4:4f:bf:0f:23:c0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a5255d7dfa3d123e6f432f2b88d031882d8099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:69:69:51:be:e7:fb:f9:a3:7d:1f:5f:a4: 53:9f:4e:9d:62:4a:fc:85:ce:9b:2d:12:5d:e5:4c: f0:21:b4:8b:cb:df:b4:4b:a0:a9:8d:95:a2:aa:ee: 3d:12:b0:39:da:07:a4:ce:4e:15:a1:1d:92:0a:4d: e5:cb:d6:e6:3f:66:96:f4:51:86:10:4a:68:79:3c: be:d0:f1:20:34:63:b2:ed:eb:bf:19:e4:ba:74:41: 2b:43:72:56:1e:c9:dc:3f:8b:92:19:1e:0d:51:88: 29:b5:d0:f4:da:35:15:5a:0d:46:d0:fa:92:f4:f2: 60:8b:60:19:88:d9:11:22:a8:4d:ba:c5:6f:9e:d3: 3a:f0:4f:6a:62:5d:e6:1b:e6:78:39:0e:2e:c3:7f: 1e:9a:8b:2b:18:12:39:44:b7:ed:2d:d6:ab:e3:21: 58:ba:bc:a7:aa:6e:54:99:5b:56:d5:97:94:4e:a5: 29:f0:94:cb:d2:0b:fe:94:b7:69:cb:16:dc:d1:1d: 74:af:5a:95:ce:ac:eb:46:46:b2:38:1a:d2:2a:5d: 34:64:9c:2d:3a:8b:df:80:c0:0e:26:1e:91:f4:13: d8:86:d6:23:a9:4b:0f:5a:14:cb:a5:53:8d:4c:36: da:e4:62:9c:2b:cc:05:90:eb:7d:5d:26:e7:ac:4b: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:25:5D:7D:FA:3D:12:3E:6F:43:2F:2B:88:D0:31:88:2D:80:99 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IKUlXX36PRI-b0MvK4jQMYgtgJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.101.223.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:3e:d9:04:5a:8f:1a:e7:55:7b:20:67:19:b5:dc:60:fe:87: aa:8b:2e:f6:d3:0b:e4:30:a2:aa:e6:79:d1:0f:46:3f:54:97: 7a:a7:70:2a:17:52:45:7a:c8:74:b8:1d:ae:cc:d0:18:94:15: 1e:70:6d:95:2d:d7:62:81:c4:7b:14:f3:84:d6:e8:fc:a8:7b: fb:7f:ab:6d:5b:82:cc:c1:cd:b6:35:25:81:d0:00:30:01:7d: 81:c0:a0:8d:b4:88:52:c9:cc:2a:23:13:a4:75:ff:40:3b:1d: 6f:e5:c0:7b:95:bb:5d:cf:39:f0:4d:5d:f4:1f:33:90:14:e4: a5:71:85:97:76:55:7e:94:8a:df:dd:66:af:c0:fc:66:bf:b6: c7:d2:c8:5b:04:a4:c5:fb:92:da:68:f9:2f:81:dd:79:d4:17: 78:ee:9d:42:05:bc:39:64:ca:12:02:69:66:9f:78:0f:54:26: 8e:7b:c0:a1:41:a5:f0:b1:2b:ba:b2:fc:d4:5f:7d:71:d1:d9: 6b:27:89:f9:e2:a3:8b:75:7c:22:9a:9d:2d:a2:cf:7f:b0:cd: f4:35:33:fc:70:c4:90:7b:4d:98:b7:9f:22:9c:56:8c:2f:a7: b0:9e:28:10:04:4c:d8:3f:50:a8:32:9a:30:15:7e:b0:0c:3c: 19:20:67:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7dHbI4aH8rET78PI8A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGE1MjU1ZDdkZmEzZDEyM2U2ZjQzMmYyYjg4ZDAzMTg4MmQ4MDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq95paVG+5/v5o30fX6RTn06dYkr8 hc6bLRJd5UzwIbSLy9+0S6CpjZWiqu49ErA52gekzk4VoR2SCk3ly9bmP2aW9FGG EEpoeTy+0PEgNGOy7eu/GeS6dEErQ3JWHsncP4uSGR4NUYgptdD02jUVWg1G0PqS 9PJgi2AZiNkRIqhNusVvntM68E9qYl3mG+Z4OQ4uw38emosrGBI5RLftLdar4yFY urynqm5UmVtW1ZeUTqUp8JTL0gv+lLdpyxbc0R10r1qVzqzrRkayOBrSKl00ZJwt OovfgMAOJh6R9BPYhtYjqUsPWhTLpVONTDba5GKcK8wFkOt9XSbnrEvhfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCClJV19+j0SPm9DLyuI0DGILYCZMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvSUtVbFhYMzZQUkktYjBNdks0alFNWWd0Z0prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWXfMA0G CSqGSIb3DQEBCwUAA4IBAQAaPtkEWo8a51V7IGcZtdxg/oeqiy720wvkMKKq5nnR D0Y/VJd6p3AqF1JFesh0uB2uzNAYlBUecG2VLddigcR7FPOE1uj8qHv7f6ttW4LM wc22NSWB0AAwAX2BwKCNtIhSycwqIxOkdf9AOx1v5cB7lbtdzznwTV30HzOQFOSl cYWXdlV+lIrf3WavwPxmv7bH0shbBKTF+5LaaPkvgd151Bd47p1CBbw5ZMoSAmlm n3gPVCaOe8ChQaXwsSu6svzUX31x0dlrJ4n54qOLdXwimp0tos9/sM30NTP8cMSQ e02Yt58inFaML6ewnigQBEzYP1CoMpowFX6wDDwZIGcJ -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:37 2026 by rpki-client