This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa File: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (raw, json) Hash identifier: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y= Subject key identifier: 23:56:09:17:1C:36:D5:C4:EE:F9:07:7C:10:0C:43:9E:99:4E:E9:9B Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019B7C1113DB3D02885DB4F1FBDF08556C85 Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa Signing time: Fri 02 Jan 2026 00:17:32 +0000 ROA not before: Fri 02 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 185.167.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:13:db:3d:02:88:5d:b4:f1:fb:df:08:55:6c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Jan 2 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=235609171c36d5c4eef9077c100c439e994ee99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5d:e5:14:d5:4c:9a:2c:34:4f:b0:6e:63:e6: da:5e:88:00:c0:17:c1:40:95:ea:8b:42:64:6f:4b: 83:22:b7:c2:e6:18:ff:a1:0e:5d:eb:0e:0d:96:c6: 8b:b7:10:c8:fd:37:d0:8d:40:b3:5b:e8:f0:fa:3f: 05:f6:ed:3b:51:3d:0f:63:6d:63:f9:5b:3e:b1:b0: 93:3a:2b:de:82:f0:bd:cd:16:6b:c1:fe:65:3b:52: be:12:07:c4:b2:4f:a4:5d:24:ab:21:8f:0d:7f:fe: c8:41:7e:46:62:a9:7e:09:34:aa:9e:51:c2:73:17: 6d:fe:25:47:50:4d:0e:8c:a0:85:85:aa:39:aa:6a: ed:db:d5:d2:2f:d7:3d:19:09:93:bd:c6:12:06:69: f6:5c:ea:41:32:63:dd:ba:4c:37:d1:a9:34:f5:0c: 38:f2:80:a5:e2:e8:fc:e0:ab:a7:b0:35:03:65:91: 22:53:6c:81:74:58:af:d4:30:97:af:1a:7c:20:8e: 42:07:5c:85:b2:8c:d9:97:fd:3c:b2:b8:b7:27:c7: 7c:b1:11:f7:18:5d:11:8e:ab:a2:2a:d5:3f:9e:3e: c6:e6:a8:2f:ad:1b:af:68:a7:22:c3:cf:99:d3:e2: 11:b5:0f:50:72:91:68:bf:e8:72:5b:2c:49:41:37: 4b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:56:09:17:1C:36:D5:C4:EE:F9:07:7C:10:0C:43:9E:99:4E:E9:9B X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.167.234.0/24 Signature Algorithm: sha256WithRSAEncryption 47:09:49:48:6e:5b:d9:a8:bf:4f:26:e4:80:4d:18:0f:a2:6d: 84:aa:27:26:71:4b:3c:e5:3f:87:a4:9f:b0:cd:d5:78:74:a6: c8:b1:5c:ba:48:b1:79:b2:1a:76:16:e7:79:ce:32:bf:47:a3: 3c:e0:45:fe:0d:75:d0:39:8b:6e:d7:35:6d:c5:f8:05:a6:9d: 44:72:7c:1e:a5:07:cc:4a:f8:9b:04:c9:4f:f7:24:05:ce:fb: ea:a4:a9:af:d8:df:db:a7:c2:e8:75:2f:72:8d:cf:fc:04:16: 76:43:13:b3:2f:9f:0c:1f:6c:4a:8a:7f:75:62:f0:37:21:bc: 77:40:83:f3:84:bb:f3:48:9e:13:b0:fd:59:7b:a3:0e:3b:96: 3b:ca:e3:1a:45:bb:b3:c4:0d:e7:e2:be:3c:42:5f:ff:83:4d: 95:49:76:73:f6:b4:3b:9b:d0:91:b6:f9:7b:52:06:fb:7d:d2: b0:32:de:24:a0:83:31:6d:6d:e6:32:94:e8:44:67:c7:01:90: bf:d3:5a:90:8c:ff:41:70:1b:5f:0b:1a:fb:6a:87:e9:c8:98: 7c:e7:9c:d0:3b:93:67:d8:f5:21:5a:9c:de:e6:02:9e:1c:7e: 76:9e:ff:c5:01:fc:dc:48:15:5c:1f:2c:8b:9d:4f:4d:c3:e6: 24:8c:12:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ERPbPQKIXbTx+98IVWyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjYwMTAyMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzU2MDkxNzFjMzZkNWM0ZWVmOTA3N2MxMDBjNDM5ZTk5NGVlOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkF3lFNVMmiw0T7BuY+baXogAwBfB QJXqi0Jkb0uDIrfC5hj/oQ5d6w4NlsaLtxDI/TfQjUCzW+jw+j8F9u07UT0PY21j +Vs+sbCTOivegvC9zRZrwf5lO1K+EgfEsk+kXSSrIY8Nf/7IQX5GYql+CTSqnlHC cxdt/iVHUE0OjKCFhao5qmrt29XSL9c9GQmTvcYSBmn2XOpBMmPdukw30ak09Qw4 8oCl4uj84KunsDUDZZEiU2yBdFiv1DCXrxp8II5CB1yFsozZl/08sri3J8d8sRH3 GF0RjquiKtU/nj7G5qgvrRuvaKciw8+Z0+IRtQ9QcpFov+hyWyxJQTdLRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNWCRccNtXE7vkHfBAMQ56ZTumbMB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvSTFZSkZ4dzIxY1R1LVFkOEVBeERucGxPNlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafqMA0G CSqGSIb3DQEBCwUAA4IBAQBHCUlIblvZqL9PJuSATRgPom2EqicmcUs85T+HpJ+w zdV4dKbIsVy6SLF5shp2Fud5zjK/R6M84EX+DXXQOYtu1zVtxfgFpp1EcnwepQfM SvibBMlP9yQFzvvqpKmv2N/bp8LodS9yjc/8BBZ2QxOzL58MH2xKin91YvA3Ibx3 QIPzhLvzSJ4TsP1Ze6MOO5Y7yuMaRbuzxA3n4r48Ql//g02VSXZz9rQ7m9CRtvl7 Ugb7fdKwMt4koIMxbW3mMpToRGfHAZC/01qQjP9BcBtfCxr7aofpyJh855zQO5Nn 2PUhWpze5gKeHH52nv/FAfzcSBVcHyyLnU9Nw+YkjBJ8 -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:08 2026 by rpki-client