This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/1iXcw_VtwzC503OBHl7UPQ9wk40.roa File: 1iXcw_VtwzC503OBHl7UPQ9wk40.roa (raw, json) Hash identifier: 5en0UIq6KKHB2vB53mKduFH/pH1FkmbIGnryOKNRjmw= Subject key identifier: D6:25:DC:C3:F5:6D:C3:30:B9:D3:73:81:1E:5E:D4:3D:0F:70:93:8D Certificate issuer: /CN=8ab606cea79b5abe81683a63379b39289b2cab93 Certificate serial: 019B7EA6D5E6186C545B697B7C69541E7D82 Authority key identifier: 8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/1iXcw_VtwzC503OBHl7UPQ9wk40.roa Signing time: Fri 02 Jan 2026 12:20:21 +0000 ROA not before: Fri 02 Jan 2026 12:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 185.162.56.0/22 maxlen: 22 2a0a:8000::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.mft rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d5:e6:18:6c:54:5b:69:7b:7c:69:54:1e:7d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ab606cea79b5abe81683a63379b39289b2cab93 Validity Not Before: Jan 2 12:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d625dcc3f56dc330b9d373811e5ed43d0f70938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:cc:52:a6:1e:26:ff:38:b5:1f:af:f7:8a: f1:7a:c5:fa:29:5c:c0:b7:d2:b8:54:70:74:14:e9: 97:9a:e8:f8:71:65:f9:e9:4d:3b:d2:f7:e5:f2:a2: fb:e4:d7:3b:cd:97:9c:88:71:1e:1f:cd:f2:6f:0e: 67:03:f9:00:bd:2b:d7:83:67:8d:3f:c9:dd:6d:73: 79:af:68:f9:85:e1:79:fb:62:b5:a2:8b:15:10:a8: b6:27:58:cb:10:63:44:ca:1b:84:63:12:a3:a5:bc: 38:06:22:89:14:06:30:20:5c:1e:e4:88:56:02:32: a3:55:bf:d4:4a:8b:78:5a:49:2f:66:db:5f:54:c1: 09:a8:5a:71:44:fc:46:31:2e:ad:a2:c5:61:0f:0c: 74:34:87:a0:77:44:4d:ed:87:17:f6:ca:9b:ec:ad: c2:5d:07:77:2f:77:c3:5c:7e:83:24:18:d0:01:b7: 07:6d:33:1f:1b:53:bf:31:20:c5:08:bd:e8:8f:05: 84:d8:cf:95:c8:f1:8d:88:32:e8:72:08:15:8a:d3: cc:e2:3c:01:bf:95:7d:ac:44:11:92:13:50:18:9b: 54:0c:1f:dc:81:f8:50:30:87:25:d8:42:a1:21:52: 42:37:f7:5f:57:40:26:44:9a:9e:00:c1:43:a2:53: 54:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:25:DC:C3:F5:6D:C3:30:B9:D3:73:81:1E:5E:D4:3D:0F:70:93:8D X509v3 Authority Key Identifier: keyid:8A:B6:06:CE:A7:9B:5A:BE:81:68:3A:63:37:9B:39:28:9B:2C:AB:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irYGzqebWr6BaDpjN5s5KJssq5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/1iXcw_VtwzC503OBHl7UPQ9wk40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/83f631-8977-4d2e-8523-888c07f2153f/1/irYGzqebWr6BaDpjN5s5KJssq5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.162.56.0/22 IPv6: 2a0a:8000::/29 Signature Algorithm: sha256WithRSAEncryption 99:3d:9a:31:84:17:01:4b:98:90:88:69:8f:d9:7b:3d:21:7a: d5:bb:8a:dc:54:a6:cf:c2:52:70:50:f7:55:25:cc:7c:bc:62: b9:5f:ce:7c:e4:6d:d0:23:c4:e9:c8:73:f1:3b:d7:95:ab:7d: 91:9c:2e:a9:bd:83:f5:e7:1f:61:42:4d:b7:bf:8e:76:61:01: 30:54:3b:9f:0e:dc:8b:79:70:9a:b8:a6:67:12:2e:cb:3b:01: a7:4f:1d:12:db:6c:50:fb:3a:42:3b:41:3c:a1:d4:53:2d:78: 90:7a:5f:97:7b:0c:f1:2e:e2:bf:a0:de:72:1b:b8:09:df:e8: 5c:95:bd:8c:6b:4a:3c:58:b8:ee:f9:f9:bd:ef:bd:fc:d5:85: b1:73:58:c6:4c:8e:d7:e6:bf:76:58:e2:23:fc:e3:50:ec:3b: 3f:5f:38:7b:8a:14:c6:7a:72:89:c6:73:a8:e8:5a:28:e7:8c: b4:00:94:f4:90:f3:7a:e6:b2:8f:a5:f2:3e:4c:c9:fc:aa:86: 8a:e6:2e:f0:c1:2c:6d:a1:9c:7d:6f:40:e7:44:14:4e:34:fd: ca:33:3f:59:45:11:5f:4d:99:35:dd:8d:97:47:bd:41:ce:04: 9f:11:2a:5e:2c:8d:94:ba:2e:a3:74:0d:a8:eb:74:3e:e9:5e: 95:eb:0a:8f -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ptXmGGxUW2l7fGlUHn2CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYjYwNmNlYTc5YjVhYmU4MTY4M2E2MzM3OWIzOTI4OWIy Y2FiOTMwHhcNMjYwMTAyMTIyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjI1ZGNjM2Y1NmRjMzMwYjlkMzczODExZTVlZDQzZDBmNzA5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0nMUqYeJv84tR+v94rxesX6KVzA t9K4VHB0FOmXmuj4cWX56U070vfl8qL75Nc7zZeciHEeH83ybw5nA/kAvSvXg2eN P8ndbXN5r2j5heF5+2K1oosVEKi2J1jLEGNEyhuEYxKjpbw4BiKJFAYwIFwe5IhW AjKjVb/USot4WkkvZttfVMEJqFpxRPxGMS6tosVhDwx0NIegd0RN7YcX9sqb7K3C XQd3L3fDXH6DJBjQAbcHbTMfG1O/MSDFCL3ojwWE2M+VyPGNiDLocggVitPM4jwB v5V9rEQRkhNQGJtUDB/cgfhQMIcl2EKhIVJCN/dfV0AmRJqeAMFDolNUhQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNYl3MP1bcMwudNzgR5e1D0PcJONMB8GA1UdIwQY MBaAFIq2Bs6nm1q+gWg6YzebOSibLKuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMt ODg4YzA3ZjIxNTNmLzEvMWlYY3dfVnR3ekM1MDNPQkhsN1VQUTl3azQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi84M2Y2MzEtODk3Ny00ZDJlLTg1MjMtODg4YzA3ZjIxNTNm LzEvaXJZR3pxZWJXcjZCYURwak41czVLSnNzcTVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuaI4MA0E AgACMAcDBQMqCoAAMA0GCSqGSIb3DQEBCwUAA4IBAQCZPZoxhBcBS5iQiGmP2Xs9 IXrVu4rcVKbPwlJwUPdVJcx8vGK5X8585G3QI8TpyHPxO9eVq32RnC6pvYP15x9h Qk23v452YQEwVDufDtyLeXCauKZnEi7LOwGnTx0S22xQ+zpCO0E8odRTLXiQel+X ewzxLuK/oN5yG7gJ3+hclb2Ma0o8WLju+fm977381YWxc1jGTI7X5r92WOIj/ONQ 7Ds/Xzh7ihTGenKJxnOo6Foo54y0AJT0kPN65rKPpfI+TMn8qoaK5i7wwSxtoZx9 b0DnRBRONP3KMz9ZRRFfTZk13Y2XR71BzgSfESpeLI2Uui6jdA2o63Q+6V6V6wqP -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:14 2026 by rpki-client