This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/iizT7ljCPFPoblKrQN_-pYAvcWA.roa File: iizT7ljCPFPoblKrQN_-pYAvcWA.roa (raw, json) Hash identifier: 2Sel1Rmop+9+ax8FFWzLYou2UTrk0N/ygJRhxGdLS50= Subject key identifier: 8A:2C:D3:EE:58:C2:3C:53:E8:6E:52:AB:40:DF:FE:A5:80:2F:71:60 Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019B7BA3195E912BC018D83E4713B0B924C5 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/iizT7ljCPFPoblKrQN_-pYAvcWA.roa Signing time: Thu 01 Jan 2026 22:17:24 +0000 ROA not before: Thu 01 Jan 2026 22:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 89.222.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:19:5e:91:2b:c0:18:d8:3e:47:13:b0:b9:24:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Jan 1 22:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a2cd3ee58c23c53e86e52ab40dffea5802f7160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:6b:f0:69:b4:d9:5c:f0:42:ec:cc:d0:22: 43:cc:60:a5:20:22:94:8f:be:ab:ff:20:6f:e3:5d: 80:3a:be:08:ba:27:70:fd:e6:6d:56:9a:d8:63:b4: f8:72:2b:d6:bc:30:a0:fd:35:1a:19:77:74:e8:59: aa:70:e6:89:58:24:68:97:e4:89:7e:cc:ac:88:60: 7d:d9:69:a7:78:e0:70:cd:38:e9:bd:7b:fe:18:d3: 65:66:38:f4:9b:50:0b:37:de:ea:ba:4e:fe:c2:d6: 8f:c5:83:10:cd:59:77:22:27:f4:d2:19:c9:5c:41: 5c:db:f4:10:21:db:c8:50:73:22:7d:7e:09:5b:67: 8a:30:7a:26:4e:75:53:4b:c9:c5:0e:84:b2:11:47: 1d:08:57:92:9b:a9:3c:b3:bf:ca:c3:ec:58:65:a0: af:91:25:19:b6:f4:62:c1:fe:3a:3a:08:a5:b8:73: af:10:ac:ae:3f:be:09:0b:04:a9:3d:04:56:80:a5: 00:5c:1f:be:f0:b4:55:c1:ea:7c:14:a9:2f:52:06: 80:dc:f9:7c:ac:c1:05:08:3a:b2:2a:dd:b4:b3:f5: 7e:be:9d:ce:cb:17:b4:20:ed:fc:63:64:6d:da:b3: 04:85:05:5e:83:9b:74:1f:9f:a6:45:bd:1b:d2:75: f5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2C:D3:EE:58:C2:3C:53:E8:6E:52:AB:40:DF:FE:A5:80:2F:71:60 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/iizT7ljCPFPoblKrQN_-pYAvcWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.92.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:95:9a:5a:96:27:32:5c:af:7b:8b:d2:90:81:3b:e5:0b:84: 1c:4c:c2:94:ed:5e:1b:39:b1:71:ec:00:91:da:a2:1d:c9:ba: 60:9b:ae:5b:a4:9f:83:14:ad:a7:bd:36:ea:19:5a:e9:2e:7d: 60:9b:27:69:ae:73:bd:50:fb:f6:13:79:68:a1:54:14:78:5c: 7e:4c:4e:2c:44:65:24:91:bc:cb:55:81:f5:5f:d7:00:8d:db: 6e:91:0f:4a:db:3a:a4:f5:0c:e3:e7:6d:ab:0e:ac:fe:33:38: 11:87:07:31:7c:85:31:40:af:d7:f8:78:4b:99:06:cd:09:0b: 1b:51:79:57:d4:b3:74:4d:fb:fe:f4:50:31:28:56:f6:bd:8f: 7b:57:88:ed:20:b2:9a:75:59:6f:07:06:d5:17:25:c8:92:28: 39:ce:ca:5e:a6:89:e2:23:ca:5a:98:b3:cb:3b:be:17:b2:bd: 2b:39:62:df:82:04:a2:20:a0:8c:c6:61:6b:33:cb:6c:86:a3: 24:99:87:57:4a:4f:ae:12:13:27:1e:26:31:7a:65:cc:f5:9f: d2:14:be:d5:97:e1:29:d0:79:e4:a0:71:36:fe:6e:40:81:93: f8:bb:3e:46:f1:32:ef:a7:45:9d:6a:1f:3e:a0:27:6a:98:7b: f4:df:26:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7oxlekSvAGNg+RxOwuSTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjYwMTAxMjIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTJjZDNlZTU4YzIzYzUzZTg2ZTUyYWI0MGRmZmVhNTgwMmY3MTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ9r8Gm02VzwQuzM0CJDzGClICKU j76r/yBv412AOr4Iuidw/eZtVprYY7T4civWvDCg/TUaGXd06FmqcOaJWCRol+SJ fsysiGB92WmneOBwzTjpvXv+GNNlZjj0m1ALN97quk7+wtaPxYMQzVl3Iif00hnJ XEFc2/QQIdvIUHMifX4JW2eKMHomTnVTS8nFDoSyEUcdCFeSm6k8s7/Kw+xYZaCv kSUZtvRiwf46OgiluHOvEKyuP74JCwSpPQRWgKUAXB++8LRVwep8FKkvUgaA3Pl8 rMEFCDqyKt20s/V+vp3Oyxe0IO38Y2Rt2rMEhQVeg5t0H5+mRb0b0nX13QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIos0+5YwjxT6G5Sq0Df/qWAL3FgMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvaWl6VDdsakNQRlBvYmxLclFOXy1wWUF2Y1dBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWd5cMA0G CSqGSIb3DQEBCwUAA4IBAQBOlZpalicyXK97i9KQgTvlC4QcTMKU7V4bObFx7ACR 2qIdybpgm65bpJ+DFK2nvTbqGVrpLn1gmydprnO9UPv2E3looVQUeFx+TE4sRGUk kbzLVYH1X9cAjdtukQ9K2zqk9Qzj522rDqz+MzgRhwcxfIUxQK/X+HhLmQbNCQsb UXlX1LN0Tfv+9FAxKFb2vY97V4jtILKadVlvBwbVFyXIkig5zspeponiI8pamLPL O74Xsr0rOWLfggSiIKCMxmFrM8tshqMkmYdXSk+uEhMnHiYxemXM9Z/SFL7Vl+Ep 0HnkoHE2/m5AgZP4uz5G8TLvp0Wdah8+oCdqmHv03yZC -----END CERTIFICATE-----Generated at Fri Jan 9 21:26:43 2026 by rpki-client