This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/IjN9w9R69yDRWNftVupxbr7ls4w.roa File: IjN9w9R69yDRWNftVupxbr7ls4w.roa (raw, json) Hash identifier: POnTpPRSP8kUYsMd04EyebP2yODd3r/J3rLB1OAAgGs= Subject key identifier: 22:33:7D:C3:D4:7A:F7:20:D1:58:D7:ED:56:EA:71:6E:BE:E5:B3:8C Certificate issuer: /CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Certificate serial: 019B7DCAFF8D0CE301591D86E0D0B1A1AFB9 Authority key identifier: C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/IjN9w9R69yDRWNftVupxbr7ls4w.roa Signing time: Fri 02 Jan 2026 08:20:14 +0000 ROA not before: Fri 02 Jan 2026 08:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208016 IP address blocks: 45.85.48.0/22 maxlen: 22 2a0e:b680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.mft rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ff:8d:0c:e3:01:59:1d:86:e0:d0:b1:a1:af:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c76a265ca8ad7273a8a130a1763283d2ff1b4dda Validity Not Before: Jan 2 08:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22337dc3d47af720d158d7ed56ea716ebee5b38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:18:6c:ad:ac:36:21:53:c8:c7:67:02:5a:d8: b3:0e:3a:fc:4b:37:ba:e9:0f:0f:e0:ed:24:8a:7c: 4a:d9:0a:f2:19:57:a0:b7:de:07:91:37:86:f5:42: 53:92:90:9f:5f:97:dc:de:44:21:4d:0f:d1:52:7d: 81:a5:95:03:2f:90:8a:6f:9d:83:ce:94:48:bf:26: 15:97:7c:30:ec:c1:dc:36:0b:bb:23:b2:68:3b:fb: e8:15:39:60:8b:33:c8:6b:ea:f9:b6:73:68:11:b6: a1:63:e0:61:5b:df:b8:ec:a0:37:b6:6e:4e:ee:64: 3e:e0:1f:c5:b6:55:e8:c6:e7:cd:bc:09:3b:62:4d: fb:2e:85:5b:a4:8c:39:76:59:c8:2d:76:d3:0a:ff: bf:0a:a5:af:a4:c5:cb:0f:03:1c:69:83:8a:a4:4a: d9:f4:b8:eb:2e:bf:72:e4:45:92:b2:78:c3:ac:16: e3:b8:2d:76:7b:fe:c2:3e:a5:34:0a:22:1b:dc:84: b8:da:2a:97:ec:f0:1d:34:80:4f:97:28:d0:12:6f: 3e:60:96:9a:1c:6d:f3:2d:9d:d5:55:da:9a:df:c1: 35:96:52:94:c5:d8:cd:d3:21:e8:0d:53:49:00:03: 8d:1e:54:cc:29:5d:5d:8b:e0:0a:ca:db:92:a0:b1: db:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:7D:C3:D4:7A:F7:20:D1:58:D7:ED:56:EA:71:6E:BE:E5:B3:8C X509v3 Authority Key Identifier: keyid:C7:6A:26:5C:A8:AD:72:73:A8:A1:30:A1:76:32:83:D2:FF:1B:4D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2omXKitcnOooTChdjKD0v8bTdo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/IjN9w9R69yDRWNftVupxbr7ls4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/02c254-36bf-4c8c-98d9-7e9837a9228c/1/x2omXKitcnOooTChdjKD0v8bTdo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.48.0/22 IPv6: 2a0e:b680::/29 Signature Algorithm: sha256WithRSAEncryption 3b:14:b8:7e:46:e4:b5:59:c3:ef:71:80:80:87:c4:3a:bc:5d: f6:88:0b:61:3b:7c:0d:9c:f0:d8:e8:28:f6:0b:e0:eb:3e:4c: 26:e5:1a:e4:5e:24:fe:2e:0e:cc:b1:c7:9b:3d:62:a1:f9:ac: e1:b4:5b:ad:38:48:0f:5d:0c:3c:f9:60:3d:5b:cf:3d:e8:d8: 74:b8:cf:9c:81:e1:2f:0d:6f:a9:5b:ec:6e:5f:ee:25:bc:96: b1:f8:4f:72:e5:ab:02:c5:29:05:09:18:5c:83:b6:69:b5:34: 12:8a:12:f3:17:4a:5e:ef:ce:df:7d:3b:5a:e1:d0:d0:68:cf: 42:29:81:71:ff:d0:34:bc:69:e6:f5:00:6a:30:de:f0:96:57: 85:76:75:60:3e:a2:94:cd:93:37:f8:67:8e:ed:02:01:b3:82: 2c:13:33:25:82:a5:ac:c0:00:8a:9e:e0:70:ef:82:9a:c2:31: c5:9a:6b:6a:f2:96:d8:c1:3b:e1:d8:77:fb:85:51:2e:8c:d3: f5:03:47:c0:03:dd:41:7c:69:04:a6:59:47:d1:22:4e:ca:7a: 29:54:f8:53:c5:7e:b8:f3:8d:89:e0:a3:de:4c:d2:9b:5f:c0: ea:17:6f:cf:b5:cd:43:97:67:06:63:41:2d:97:3e:4d:a3:a6: 5c:f3:e2:66 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yv+NDOMBWR2G4NCxoa+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NmEyNjVjYThhZDcyNzNhOGExMzBhMTc2MzI4M2QyZmYx YjRkZGEwHhcNMjYwMTAyMDgyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjMzN2RjM2Q0N2FmNzIwZDE1OGQ3ZWQ1NmVhNzE2ZWJlZTViMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBhsraw2IVPIx2cCWtizDjr8Sze6 6Q8P4O0kinxK2QryGVegt94HkTeG9UJTkpCfX5fc3kQhTQ/RUn2BpZUDL5CKb52D zpRIvyYVl3ww7MHcNgu7I7JoO/voFTlgizPIa+r5tnNoEbahY+BhW9+47KA3tm5O 7mQ+4B/FtlXoxufNvAk7Yk37LoVbpIw5dlnILXbTCv+/CqWvpMXLDwMcaYOKpErZ 9LjrLr9y5EWSsnjDrBbjuC12e/7CPqU0CiIb3IS42iqX7PAdNIBPlyjQEm8+YJaa HG3zLZ3VVdqa38E1llKUxdjN0yHoDVNJAAONHlTMKV1di+AKytuSoLHbrwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCIzfcPUevcg0VjX7VbqcW6+5bOMMB8GA1UdIwQY MBaAFMdqJlyorXJzqKEwoXYyg9L/G03aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDkt N2U5ODM3YTkyMjhjLzEvSWpOOXc5UjY5eURSV05mdFZ1cHhicjdsczR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wMmMyNTQtMzZiZi00YzhjLTk4ZDktN2U5ODM3YTkyMjhj LzEveDJvbVhLaXRjbk9vb1RDaGRqS0QwdjhiVGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVUwMA0E AgACMAcDBQMqDraAMA0GCSqGSIb3DQEBCwUAA4IBAQA7FLh+RuS1WcPvcYCAh8Q6 vF32iAthO3wNnPDY6Cj2C+DrPkwm5RrkXiT+Lg7MscebPWKh+azhtFutOEgPXQw8 +WA9W8896Nh0uM+cgeEvDW+pW+xuX+4lvJax+E9y5asCxSkFCRhcg7ZptTQSihLz F0pe787ffTta4dDQaM9CKYFx/9A0vGnm9QBqMN7wlleFdnVgPqKUzZM3+GeO7QIB s4IsEzMlgqWswACKnuBw74KawjHFmmtq8pbYwTvh2Hf7hVEujNP1A0fAA91BfGkE pllH0SJOynopVPhTxX64842J4KPeTNKbX8DqF2/Ptc1Dl2cGY0Etlz5No6Zc8+Jm -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:38 2026 by rpki-client