This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/irYWO3kJz_rcFwaqyf5huqlSCSw.roa File: irYWO3kJz_rcFwaqyf5huqlSCSw.roa (raw, json) Hash identifier: KZxHIcL6FEANPpJUtW9mBwLh6jmuMtz4pQKVhu4Rgc8= Subject key identifier: 8A:B6:16:3B:79:09:CF:FA:DC:17:06:AA:C9:FE:61:BA:A9:52:09:2C Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83BDE0C90253BF9E31D3FF7087CEDC Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/irYWO3kJz_rcFwaqyf5huqlSCSw.roa Signing time: Fri 02 Jan 2026 16:21:38 +0000 ROA not before: Fri 02 Jan 2026 16:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210829 IP address blocks: 37.230.140.0/24 maxlen: 24 37.230.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:bd:e0:c9:02:53:bf:9e:31:d3:ff:70:87:ce:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab6163b7909cffadc1706aac9fe61baa952092c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:87:44:79:07:12:ad:1c:44:d0:61:d9:53:92: 2c:9e:a3:cb:c6:ac:21:97:e3:dc:a8:27:f9:b7:bd: e0:35:0e:42:b4:d8:25:e0:83:1b:73:19:58:44:4f: ee:06:b8:3c:8c:3f:c3:39:c0:fb:2f:09:80:7d:36: f6:21:69:80:84:67:5a:1a:4e:69:3d:7d:80:b7:9c: d9:b4:79:c8:e1:df:55:01:56:1f:86:43:9d:3e:3d: 87:c8:28:e7:aa:30:7e:b5:7a:fe:cc:16:cc:bc:9f: d8:8d:c9:1f:c5:e9:a9:30:3b:5b:fe:8e:28:a8:68: 7f:b5:0a:78:8b:e7:6e:50:60:bc:dd:73:67:5d:38: 1a:85:ce:f5:45:7b:4c:69:83:02:37:c8:ef:dc:dc: c3:18:f1:06:b8:5d:e1:03:bc:f9:70:73:10:06:d0: a7:16:56:f2:6a:45:04:45:48:0d:dc:12:a9:1f:74: 93:2f:16:2e:ef:5c:24:23:ac:e9:2b:89:5a:dc:14: 66:e5:e7:6d:ad:bb:4f:86:c4:ae:14:3b:12:d1:40: 90:2d:fc:a1:a9:5a:5a:0b:9e:79:07:9b:27:b6:93: 26:07:2b:03:5d:8d:cb:3b:70:45:e1:62:57:28:c1: b7:c5:a1:2d:f5:d4:71:57:12:5b:46:91:72:15:fd: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B6:16:3B:79:09:CF:FA:DC:17:06:AA:C9:FE:61:BA:A9:52:09:2C X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/irYWO3kJz_rcFwaqyf5huqlSCSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.140.0/24 37.230.229.0/24 Signature Algorithm: sha256WithRSAEncryption 39:17:67:dd:7a:c4:a9:9c:9b:b3:bb:b4:62:0a:c3:9a:be:ad: b0:42:54:55:f9:e7:de:0a:5d:06:1c:db:d2:6f:39:eb:70:86: 9e:80:42:c0:e0:2c:b0:81:f0:fe:32:dd:f0:f6:21:92:1d:91: f8:30:b0:5d:ae:f4:be:18:61:0b:fa:90:46:9b:3c:6e:f7:cf: da:6f:c0:e6:84:0b:06:3f:17:a9:56:85:ad:4a:ba:cb:76:65: c8:b1:72:bf:30:a6:43:c1:c2:01:12:e6:da:01:87:df:5b:e5: 95:14:e2:70:b9:7e:1f:0e:f2:3e:17:4a:cf:0e:24:8c:22:11: 36:78:ec:ac:49:14:5e:e9:85:49:13:4b:36:35:50:28:bc:09: d7:95:81:72:11:b8:02:6e:58:b9:92:ca:96:4e:20:0c:8c:8a: 87:c8:81:bb:67:cd:d0:a4:29:f6:8e:c3:48:87:dc:c8:f5:8c: e2:a3:e6:1f:a4:95:0b:ed:7f:20:49:f9:e2:dd:59:18:bc:4f: b6:48:3c:7a:55:a9:ef:44:b0:27:4a:81:f7:49:e5:dc:46:60: 8e:23:8f:b1:fe:85:6c:97:9c:d3:10:99:3b:91:91:71:9a:70: de:66:0c:17:bc:8d:b2:61:2f:0d:40:ad:ac:a3:f1:de:84:0d: c9:45:c7:4f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g73gyQJTv54x0/9wh87cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWI2MTYzYjc5MDljZmZhZGMxNzA2YWFjOWZlNjFiYWE5NTIwOTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4dEeQcSrRxE0GHZU5IsnqPLxqwh l+PcqCf5t73gNQ5CtNgl4IMbcxlYRE/uBrg8jD/DOcD7LwmAfTb2IWmAhGdaGk5p PX2At5zZtHnI4d9VAVYfhkOdPj2HyCjnqjB+tXr+zBbMvJ/YjckfxempMDtb/o4o qGh/tQp4i+duUGC83XNnXTgahc71RXtMaYMCN8jv3NzDGPEGuF3hA7z5cHMQBtCn FlbyakUERUgN3BKpH3STLxYu71wkI6zpK4la3BRm5edtrbtPhsSuFDsS0UCQLfyh qVpaC555B5sntpMmBysDXY3LO3BF4WJXKMG3xaEt9dRxVxJbRpFyFf3MwwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIq2Fjt5Cc/63BcGqsn+YbqpUgksMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvaXJZV08za0p6X3JjRndhcXlmNWh1cWxTQ1N3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJeaMAwQA JeblMA0GCSqGSIb3DQEBCwUAA4IBAQA5F2fdesSpnJuzu7RiCsOavq2wQlRV+efe Cl0GHNvSbznrcIaegELA4CywgfD+Mt3w9iGSHZH4MLBdrvS+GGEL+pBGmzxu98/a b8DmhAsGPxepVoWtSrrLdmXIsXK/MKZDwcIBEubaAYffW+WVFOJwuX4fDvI+F0rP DiSMIhE2eOysSRRe6YVJE0s2NVAovAnXlYFyEbgCbli5ksqWTiAMjIqHyIG7Z83Q pCn2jsNIh9zI9Yzio+YfpJUL7X8gSfni3VkYvE+2SDx6VanvRLAnSoH3SeXcRmCO I4+x/oVsl5zTEJk7kZFxmnDeZgwXvI2yYS8NQK2so/HehA3JRcdP -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:25 2026 by rpki-client