This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/iuITZHgDGqsS4DJrT4QfGRfLmXE.roa File: iuITZHgDGqsS4DJrT4QfGRfLmXE.roa (raw, json) Hash identifier: fVRfv2or89WX0xzZk/shtCx6ccH1MSfEUDt1qC4R8eo= Subject key identifier: 8A:E2:13:64:78:03:1A:AB:12:E0:32:6B:4F:84:1F:19:17:CB:99:71 Certificate issuer: /CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c Certificate serial: 019B797F2AFD489A0AA65E135524BD10EBB5 Authority key identifier: 80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/iuITZHgDGqsS4DJrT4QfGRfLmXE.roa Signing time: Thu 01 Jan 2026 12:18:55 +0000 ROA not before: Thu 01 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45035 IP address blocks: 195.60.178.0/24 maxlen: 24 195.60.179.0/24 maxlen: 24 195.158.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.mft rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:2a:fd:48:9a:0a:a6:5e:13:55:24:bd:10:eb:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80c72eaebc20461c31cf942e4e155f07b8a03c7c Validity Not Before: Jan 1 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ae2136478031aab12e0326b4f841f1917cb9971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:c1:79:2f:56:9d:3a:53:17:53:00:aa:8b: 47:ec:f5:43:b7:27:e3:0f:65:32:38:df:40:85:a7: d2:c3:59:0f:b5:39:c5:9f:79:f5:f3:01:91:5b:a5: b2:e6:c9:1d:b3:53:e7:01:bb:6c:2f:b9:ef:8a:bd: 68:51:4d:96:3d:ee:6f:d2:b9:90:f3:90:4c:bd:b1: 3f:96:d0:3f:78:ca:60:da:53:28:bb:85:cf:9f:20: 4a:18:cb:60:73:27:be:7b:cd:34:fa:48:76:80:71: fa:85:26:4f:b0:d0:1c:54:69:7a:f6:9b:14:59:73: 24:81:b6:58:b5:d9:f0:e1:c1:12:dd:59:be:84:ec: 3a:3a:46:f9:be:58:f5:f3:db:2b:40:73:1e:35:b4: 9d:09:cc:56:2c:0b:31:ac:89:14:d6:1d:f5:68:59: cb:16:de:9e:cc:c0:74:1c:40:64:5c:f7:bd:a6:5a: 54:97:b1:6e:62:82:b4:53:81:9a:a3:69:45:a3:b3: 6e:f2:7c:93:43:aa:fa:bf:14:42:86:7b:07:70:84: 56:2c:4d:ff:18:e6:77:44:cf:34:ea:99:38:c1:3e: c4:18:06:c9:07:45:17:40:03:43:43:65:f8:a2:68: e1:a4:9f:be:25:80:be:85:38:73:26:09:70:30:87: 69:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E2:13:64:78:03:1A:AB:12:E0:32:6B:4F:84:1F:19:17:CB:99:71 X509v3 Authority Key Identifier: keyid:80:C7:2E:AE:BC:20:46:1C:31:CF:94:2E:4E:15:5F:07:B8:A0:3C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMcurrwgRhwxz5QuThVfB7igPHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/iuITZHgDGqsS4DJrT4QfGRfLmXE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f4b1a1-fe88-4450-bd32-d0c83be40185/1/gMcurrwgRhwxz5QuThVfB7igPHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.178.0/23 195.158.234.0/23 Signature Algorithm: sha256WithRSAEncryption 75:95:e4:cc:e6:b3:f8:a7:0b:9d:b5:48:1c:82:e1:52:f1:2b: dc:fb:38:f4:1f:cf:78:42:40:a6:f1:41:01:1b:c0:5d:48:8e: 3f:3d:57:d1:84:c9:99:c4:46:56:d1:67:a5:22:72:f0:87:87: 5c:7c:19:a8:15:be:f4:76:9a:2b:7c:55:f8:74:65:5b:94:ac: f2:b4:f4:16:e0:e3:09:10:98:e3:12:d5:d0:32:df:75:f7:1b: cc:30:fd:d7:41:39:1d:29:38:25:26:92:8d:23:3f:fd:b9:e1: 9b:82:9e:0b:e1:39:f0:c9:0b:4e:5f:0d:5c:00:7a:98:a8:ef: 6c:27:11:49:9b:2d:88:aa:02:97:b0:3e:99:6d:1f:68:6c:8a: 8e:05:65:6b:5a:de:bd:73:04:b6:d9:19:14:16:ce:1b:9d:6e: 33:47:f6:b0:c5:16:6b:11:b0:d5:da:a7:39:4a:d0:ca:c6:71: 69:07:67:07:de:2a:a8:62:eb:df:21:13:b9:f8:73:e2:17:0d: 38:1f:15:a1:56:bc:fe:d5:c8:cb:6e:8e:c4:ca:e4:1e:20:3a: d1:76:3b:aa:5f:8d:5f:ae:85:cc:4d:bb:71:cc:f6:0c:99:9b: 02:57:5d:f8:98:23:24:d9:fa:5b:e8:8a:6d:ee:61:21:b0:3c: 43:54:7f:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fyr9SJoKpl4TVSS9EOu1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYzcyZWFlYmMyMDQ2MWMzMWNmOTQyZTRlMTU1ZjA3Yjhh MDNjN2MwHhcNMjYwMTAxMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWUyMTM2NDc4MDMxYWFiMTJlMDMyNmI0Zjg0MWYxOTE3Y2I5OTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2//BeS9WnTpTF1MAqotH7PVDtyfj D2UyON9AhafSw1kPtTnFn3n18wGRW6Wy5skds1PnAbtsL7nvir1oUU2WPe5v0rmQ 85BMvbE/ltA/eMpg2lMou4XPnyBKGMtgcye+e800+kh2gHH6hSZPsNAcVGl69psU WXMkgbZYtdnw4cES3Vm+hOw6Okb5vlj189srQHMeNbSdCcxWLAsxrIkU1h31aFnL Ft6ezMB0HEBkXPe9plpUl7FuYoK0U4Gao2lFo7Nu8nyTQ6r6vxRChnsHcIRWLE3/ GOZ3RM806pk4wT7EGAbJB0UXQANDQ2X4omjhpJ++JYC+hThzJglwMIdp+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIriE2R4AxqrEuAya0+EHxkXy5lxMB8GA1UdIwQY MBaAFIDHLq68IEYcMc+ULk4VXwe4oDx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzIt ZDBjODNiZTQwMTg1LzEvaXVJVFpIZ0RHcXNTNERKclQ0UWZHUmZMbVhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mNGIxYTEtZmU4OC00NDUwLWJkMzItZDBjODNiZTQwMTg1 LzEvZ01jdXJyd2dSaHd4ejVRdVRoVmZCN2lnUEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwzyyAwQB w57qMA0GCSqGSIb3DQEBCwUAA4IBAQB1leTM5rP4pwudtUgcguFS8Svc+zj0H894 QkCm8UEBG8BdSI4/PVfRhMmZxEZW0WelInLwh4dcfBmoFb70dporfFX4dGVblKzy tPQW4OMJEJjjEtXQMt919xvMMP3XQTkdKTglJpKNIz/9ueGbgp4L4TnwyQtOXw1c AHqYqO9sJxFJmy2IqgKXsD6ZbR9obIqOBWVrWt69cwS22RkUFs4bnW4zR/awxRZr EbDV2qc5StDKxnFpB2cH3iqoYuvfIRO5+HPiFw04HxWhVrz+1cjLbo7EyuQeIDrR djuqX41froXMTbtxzPYMmZsCV134mCMk2fpb6Ipt7mEhsDxDVH/7 -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:44 2026 by rpki-client