This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa File: IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa (raw, json) Hash identifier: 1AFyldkPiOPqEw+6SWUdNjowNkvDINTfUcjnk283dIQ= Subject key identifier: 21:81:80:4F:D2:4E:82:07:60:23:35:B0:E5:9E:90:F8:BB:DA:7E:C5 Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5 Certificate serial: 019B7834C617CAE316B529B33681D03D3F74 Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.198.4.0/24 maxlen: 24 185.198.5.0/24 maxlen: 24 185.198.6.0/24 maxlen: 24 185.198.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c6:17:ca:e3:16:b5:29:b3:36:81:d0:3d:3f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2181804fd24e8207602335b0e59e90f8bbda7ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:4f:7c:f0:37:0b:40:23:ca:11:8a:08:1f: 8c:a0:8d:3a:c1:e2:2c:99:e8:89:9c:e7:ad:9e:0f: 2f:4a:ac:37:c2:cb:71:53:19:42:c8:56:11:6b:a5: b0:57:80:01:72:7b:06:a2:88:eb:78:21:df:75:cf: 8e:a1:eb:da:82:17:2b:0f:64:9e:7c:9d:0c:54:86: a1:f1:db:f2:91:ca:c4:f9:2d:b1:e7:1a:c1:96:11: b1:1f:60:c7:dc:23:f3:e2:5e:d2:d4:24:b4:74:b4: ce:c4:8d:98:42:b7:78:0d:06:50:68:61:ba:97:2b: 53:26:93:aa:ca:bd:b1:a8:98:32:42:d6:f1:0c:88: 69:58:c6:3b:df:45:2b:21:01:c0:eb:2c:5f:f0:fd: 43:4d:85:18:da:06:a6:7a:fe:b8:4d:8d:f2:20:61: bd:68:7f:7e:07:c2:d9:3f:e9:8b:36:0f:aa:e2:65: 09:3a:3a:44:2c:9b:70:de:9a:7e:1c:20:4f:fb:f7: 5d:c2:f0:8a:cf:bf:da:0f:b2:44:09:15:02:41:ae: a7:ac:e7:27:6e:e3:4c:82:b7:cb:a2:a0:3b:4f:89: 65:13:66:36:d9:03:1c:e9:92:b9:3b:6d:4c:cc:4d: 59:56:e3:07:53:13:e8:43:f4:09:0c:e8:ae:4c:93: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:80:4F:D2:4E:82:07:60:23:35:B0:E5:9E:90:F8:BB:DA:7E:C5 X509v3 Authority Key Identifier: keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/IYGAT9JOggdgIzWw5Z6Q-LvafsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.4.0/22 Signature Algorithm: sha256WithRSAEncryption dd:e8:9e:d2:58:27:08:74:c2:80:ff:ef:99:e2:bd:85:4f:1f: 0b:c1:78:44:68:db:9f:cf:d5:73:22:44:50:e8:46:e6:df:24: 6c:5e:2e:c8:77:cc:3a:47:7a:0a:3b:3c:40:5a:eb:b2:bb:22: 05:84:81:99:a4:4e:97:9c:3f:f0:60:e8:80:92:4c:a5:cd:8e: 27:1a:26:fd:47:b0:da:26:89:29:ef:74:59:92:4b:fb:4a:79: 42:08:23:b8:7a:83:12:d5:08:9f:62:48:72:4c:67:39:98:ac: 48:41:59:fa:91:96:36:6e:1b:8d:10:7d:7e:88:a6:48:e6:fc: b3:45:72:f4:9c:19:b2:84:e8:f9:4d:20:90:d4:71:be:bc:2c: ae:4a:bd:08:13:ac:07:0d:bb:d8:d3:a8:a7:42:fa:80:a9:23: bb:29:8c:d3:be:58:ce:84:9e:2f:98:48:8d:bf:a4:7e:24:31: 08:56:4e:1f:4e:0a:1c:fd:26:b1:fd:47:75:63:26:05:ca:5d: 1d:88:89:fc:f8:45:f9:a4:24:bd:7c:07:56:a9:5a:86:e1:d3: 10:ca:ec:02:86:28:c2:b7:21:a8:f7:54:96:8d:73:ca:c8:71: 12:f4:d1:a1:33:8f:8e:8d:0b:ad:35:44:23:95:80:f2:07:4e: 29:54:b2:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMYXyuMWtSmzNoHQPT90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1NTllOWJlMWZiZDFlNjkwOWEwYmU5YTkwYjM4MGY4MjRm YWIxYTUwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTgxODA0ZmQyNGU4MjA3NjAyMzM1YjBlNTllOTBmOGJiZGE3ZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy1PfPA3C0AjyhGKCB+MoI06weIs meiJnOetng8vSqw3wstxUxlCyFYRa6WwV4ABcnsGoojreCHfdc+OoevaghcrD2Se fJ0MVIah8dvykcrE+S2x5xrBlhGxH2DH3CPz4l7S1CS0dLTOxI2YQrd4DQZQaGG6 lytTJpOqyr2xqJgyQtbxDIhpWMY730UrIQHA6yxf8P1DTYUY2gamev64TY3yIGG9 aH9+B8LZP+mLNg+q4mUJOjpELJtw3pp+HCBP+/ddwvCKz7/aD7JECRUCQa6nrOcn buNMgrfLoqA7T4llE2Y22QMc6ZK5O21MzE1ZVuMHUxPoQ/QJDOiuTJNapwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGBgE/SToIHYCM1sOWekPi72n7FMB8GA1UdIwQY MBaAFCVZ6b4fvR5pCaC+mpCzgPgk+rGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQt NGFhYWRhNjVkNzFjLzEvSVlHQVQ5Sk9nZ2RnSXpXdzVaNlEtTHZhZnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy81ZWRkNmYtMmM2NS00NDdkLWJjYWQtNGFhYWRhNjVkNzFj LzEvSlZucHZoLTlIbWtKb0w2YWtMT0EtQ1Q2c2FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucYEMA0G CSqGSIb3DQEBCwUAA4IBAQDd6J7SWCcIdMKA/++Z4r2FTx8LwXhEaNufz9VzIkRQ 6Ebm3yRsXi7Id8w6R3oKOzxAWuuyuyIFhIGZpE6XnD/wYOiAkkylzY4nGib9R7Da Jokp73RZkkv7SnlCCCO4eoMS1QifYkhyTGc5mKxIQVn6kZY2bhuNEH1+iKZI5vyz RXL0nBmyhOj5TSCQ1HG+vCyuSr0IE6wHDbvY06inQvqAqSO7KYzTvljOhJ4vmEiN v6R+JDEIVk4fTgoc/Sax/Ud1YyYFyl0diIn8+EX5pCS9fAdWqVqG4dMQyuwChijC tyGo91SWjXPKyHES9NGhM4+OjQutNUQjlYDyB04pVLJq -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:19 2026 by rpki-client