This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/iVDK6PCtMfpuZKgZWoFycnHMVRw.roa File: iVDK6PCtMfpuZKgZWoFycnHMVRw.roa (raw, json) Hash identifier: GeJfT/LpcdK0hbYcqcrlMnAuUaNLyo2x8WoLR5cuzUY= Subject key identifier: 89:50:CA:E8:F0:AD:31:FA:6E:64:A8:19:5A:81:72:72:71:CC:55:1C Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019B77C72B17F91B361731E032945ACF3CB1 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/iVDK6PCtMfpuZKgZWoFycnHMVRw.roa Signing time: Thu 01 Jan 2026 04:18:19 +0000 ROA not before: Thu 01 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398343 IP address blocks: 91.149.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:2b:17:f9:1b:36:17:31:e0:32:94:5a:cf:3c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Jan 1 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8950cae8f0ad31fa6e64a8195a81727271cc551c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:e3:dc:3a:df:3d:b9:68:2d:57:7f:09:33: d0:0b:c9:da:2e:e6:87:4a:e3:e8:59:fe:d8:41:1a: 9b:09:4f:d1:5d:0c:a6:98:39:65:53:43:9d:ea:46: e1:9c:82:80:a8:56:fd:45:d2:cb:7a:de:a8:52:10: 39:32:52:18:ac:cc:87:c1:5f:f0:cf:f1:4f:33:1e: 27:83:b9:9b:dd:58:02:c5:21:d8:c7:4f:05:7d:fd: f9:40:3d:0a:15:b8:b7:d6:e9:8b:ff:91:8a:c4:04: 9a:fb:41:a7:30:79:b1:99:38:c7:40:b8:62:8a:41: af:bd:99:18:8c:28:40:83:1b:42:8d:4f:40:d0:99: c1:d2:92:b1:dc:de:73:75:0f:ea:00:18:3d:17:a6: 32:43:f8:63:63:d4:0b:4d:24:50:ee:b3:63:f6:e5: c7:5a:f1:0a:4e:d3:06:b8:26:ee:10:43:ae:cb:db: d2:1c:28:5d:a1:11:fa:74:bb:d5:c7:10:88:22:1b: b1:c6:8f:6d:a5:46:d3:e6:79:4a:07:59:61:6a:01: cf:66:b4:e3:ed:3d:dc:d4:36:eb:43:e1:1e:c8:21: fd:2e:ca:ff:88:34:17:9e:a1:93:cc:40:27:53:b4: cd:ee:e9:b4:94:98:cd:ce:fc:32:69:e8:51:9b:b5: b9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:50:CA:E8:F0:AD:31:FA:6E:64:A8:19:5A:81:72:72:71:CC:55:1C X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/iVDK6PCtMfpuZKgZWoFycnHMVRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.221.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:58:7e:a8:4e:55:12:05:7e:96:41:fa:21:6d:7a:f8:51:19: 2f:ab:23:1b:8b:c3:61:25:36:f6:b9:4e:55:12:f8:8d:a3:74: 46:80:cf:8a:e7:f7:68:fa:4d:96:a7:c8:07:c4:34:3e:94:fd: 80:d2:0a:77:de:20:8f:f8:dd:88:56:50:a0:17:de:98:ce:5a: 5b:01:98:6d:58:d4:d9:9c:ee:c3:25:bf:23:cc:b0:29:b6:65: 82:de:b7:35:61:ad:dc:f3:07:c6:3e:5d:b0:89:80:ef:60:91: a5:80:13:fb:0b:8d:dc:85:3e:11:85:86:b5:99:a8:49:60:82: b2:68:42:79:13:94:73:d6:2d:87:19:16:fa:83:b4:e5:61:6b: 02:05:c3:1a:4e:a1:23:f7:a5:6d:0c:aa:11:92:7e:8f:cd:38: 5b:10:18:86:04:03:63:80:a4:07:03:30:63:be:d9:26:b8:cf: fc:d8:53:ab:8d:d2:9a:35:24:8d:d0:a7:3f:2d:f8:fe:1d:30: 34:23:f9:9b:d5:5a:96:68:60:c6:3a:10:13:b6:56:cd:5f:25: 58:54:8e:88:2e:61:33:81:2d:84:19:c0:dc:5f:cd:96:0c:70: c4:95:bf:8e:26:e4:0c:df:0a:f8:7f:93:1e:d9:1b:a3:75:5c: 23:a4:4f:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xysX+Rs2FzHgMpRazzyxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjYwMTAxMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTUwY2FlOGYwYWQzMWZhNmU2NGE4MTk1YTgxNzI3MjcxY2M1NTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6vj3DrfPbloLVd/CTPQC8naLuaH SuPoWf7YQRqbCU/RXQymmDllU0Od6kbhnIKAqFb9RdLLet6oUhA5MlIYrMyHwV/w z/FPMx4ng7mb3VgCxSHYx08Fff35QD0KFbi31umL/5GKxASa+0GnMHmxmTjHQLhi ikGvvZkYjChAgxtCjU9A0JnB0pKx3N5zdQ/qABg9F6YyQ/hjY9QLTSRQ7rNj9uXH WvEKTtMGuCbuEEOuy9vSHChdoRH6dLvVxxCIIhuxxo9tpUbT5nlKB1lhagHPZrTj 7T3c1DbrQ+EeyCH9Lsr/iDQXnqGTzEAnU7TN7um0lJjNzvwyaehRm7W5LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlQyujwrTH6bmSoGVqBcnJxzFUcMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvaVZESzZQQ3RNZnB1WktnWldvRnljbkhNVlJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XdMA0G CSqGSIb3DQEBCwUAA4IBAQAbWH6oTlUSBX6WQfohbXr4URkvqyMbi8NhJTb2uU5V EviNo3RGgM+K5/do+k2Wp8gHxDQ+lP2A0gp33iCP+N2IVlCgF96YzlpbAZhtWNTZ nO7DJb8jzLAptmWC3rc1Ya3c8wfGPl2wiYDvYJGlgBP7C43chT4RhYa1mahJYIKy aEJ5E5Rz1i2HGRb6g7TlYWsCBcMaTqEj96VtDKoRkn6PzThbEBiGBANjgKQHAzBj vtkmuM/82FOrjdKaNSSN0Kc/Lfj+HTA0I/mb1VqWaGDGOhATtlbNXyVYVI6ILmEz gS2EGcDcX82WDHDElb+OJuQM3wr4f5Me2RujdVwjpE/l -----END CERTIFICATE-----Generated at Wed Jan 21 07:35:03 2026 by rpki-client