This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/izwpWJIyx4HE2YxyzOrTT0rhAcc.roa File: izwpWJIyx4HE2YxyzOrTT0rhAcc.roa (raw, json) Hash identifier: 14rs+ObtaKzQYWUEYtm1pOCmMtvAGmxIp264VEkw7Hw= Subject key identifier: 8B:3C:29:58:92:32:C7:81:C4:D9:8C:72:CC:EA:D3:4F:4A:E1:01:C7 Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E390A9E27CF86465F6ABC919404B5BB Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/izwpWJIyx4HE2YxyzOrTT0rhAcc.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51352 IP address blocks: 85.142.151.0/24 maxlen: 24 85.142.154.0/23 maxlen: 23 85.143.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:0a:9e:27:cf:86:46:5f:6a:bc:91:94:04:b5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b3c29589232c781c4d98c72ccead34f4ae101c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b9:a9:55:0d:fb:89:6c:dc:2b:4a:78:dc:df: 90:84:0d:b4:b5:d8:be:fc:d5:56:b7:6d:ef:07:5f: c6:a4:9b:c7:f4:22:8c:98:b2:32:86:0a:d8:d3:22: c8:26:51:59:aa:25:a9:46:4e:fb:b2:86:1a:9f:27: 36:bf:f2:68:0d:9f:84:cb:69:ed:81:f9:6d:a7:84: ca:d9:ae:c9:a4:08:03:ae:fa:08:77:42:e4:71:2a: 79:9d:95:b2:68:d7:08:68:41:87:15:3b:f3:17:bd: 9d:88:26:32:b7:0c:7a:39:b9:25:d4:90:0c:d7:0e: 8c:c4:a5:93:f3:0c:70:39:7c:05:c4:d3:85:7e:70: d0:ac:7c:8d:1c:10:29:44:12:6a:ac:4f:89:81:46: c1:fd:7f:6f:e5:e8:69:b3:9d:14:ee:20:ce:41:02: 01:1b:cf:41:2d:e8:38:86:0e:99:43:c6:53:4f:3b: 1e:7e:40:ca:2b:6e:6b:11:7b:01:a8:83:b8:9f:1d: 1c:c4:a0:9a:4a:1c:1c:79:49:91:69:4d:b2:49:c8: 38:f7:df:2f:c1:74:ee:ca:d1:08:f4:1f:b6:ba:64: b3:27:d6:75:ed:d8:18:3c:39:eb:84:60:21:88:f1: f1:8d:3a:49:da:11:72:0c:ec:1e:12:71:6c:92:d4: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3C:29:58:92:32:C7:81:C4:D9:8C:72:CC:EA:D3:4F:4A:E1:01:C7 X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/izwpWJIyx4HE2YxyzOrTT0rhAcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.142.151.0/24 85.142.154.0/23 85.143.88.0/21 Signature Algorithm: sha256WithRSAEncryption 1e:e4:cd:6b:91:34:44:7c:0f:c6:a4:ed:06:b6:7b:27:ba:ae: 49:b5:a1:ad:27:a8:bc:85:01:d3:ad:d1:f3:d5:fc:90:74:f9: 22:39:53:cf:ad:0d:23:51:8f:ab:eb:3a:a1:48:9b:33:0f:9e: b4:1c:4a:30:c9:19:3b:ce:53:40:67:4a:cd:25:d6:66:26:7d: 2f:1f:cc:02:36:3c:d7:d4:4f:37:48:ec:9d:59:d7:99:f9:91: 91:03:b0:7a:0e:55:12:af:5b:a7:57:ac:a8:a8:10:f2:6b:5d: 7e:b7:a3:ae:f7:f3:2d:c1:20:1f:83:2f:1f:fa:6b:0e:08:87: 99:96:cf:c8:36:5c:20:36:d7:d7:78:fa:82:97:ff:c3:b3:fb: 2c:3b:b9:8a:17:de:fb:cb:ac:b6:a8:41:38:de:d6:13:f9:1a: d8:db:b2:c9:9b:57:b1:14:5f:76:a6:a5:3e:e1:66:f8:84:e0: 0f:76:97:6f:c3:be:f6:34:9a:13:49:1b:e3:55:f7:67:82:df: e9:db:e5:e6:ba:03:44:86:e3:7d:4d:85:8c:5e:e0:9a:a6:bc: 5b:3f:1a:b0:df:0f:8a:79:93:b8:c4:54:0c:5c:94:79:16:56: 2f:97:58:1d:2e:6b:4b:f6:ee:8b:65:9f:1e:be:1f:2c:d1:fe: 32:e1:a6:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OQqeJ8+GRl9qvJGUBLW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjNjMjk1ODkyMzJjNzgxYzRkOThjNzJjY2VhZDM0ZjRhZTEwMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrmpVQ37iWzcK0p43N+QhA20tdi+ /NVWt23vB1/GpJvH9CKMmLIyhgrY0yLIJlFZqiWpRk77soYanyc2v/JoDZ+Ey2nt gfltp4TK2a7JpAgDrvoId0LkcSp5nZWyaNcIaEGHFTvzF72diCYytwx6Obkl1JAM 1w6MxKWT8wxwOXwFxNOFfnDQrHyNHBApRBJqrE+JgUbB/X9v5ehps50U7iDOQQIB G89BLeg4hg6ZQ8ZTTzsefkDKK25rEXsBqIO4nx0cxKCaShwceUmRaU2yScg4998v wXTuytEI9B+2umSzJ9Z17dgYPDnrhGAhiPHxjTpJ2hFyDOweEnFsktQupwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFIs8KViSMseBxNmMcszq009K4QHHMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvaXp3cFdKSXl4NEhFMll4eXpPclRUMHJoQWNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVY6XAwQB VY6aAwQDVY9YMA0GCSqGSIb3DQEBCwUAA4IBAQAe5M1rkTREfA/GpO0Gtnsnuq5J taGtJ6i8hQHTrdHz1fyQdPkiOVPPrQ0jUY+r6zqhSJszD560HEowyRk7zlNAZ0rN JdZmJn0vH8wCNjzX1E83SOydWdeZ+ZGRA7B6DlUSr1unV6yoqBDya11+t6Ou9/Mt wSAfgy8f+msOCIeZls/INlwgNtfXePqCl//Ds/ssO7mKF977y6y2qEE43tYT+RrY 27LJm1exFF92pqU+4Wb4hOAPdpdvw772NJoTSRvjVfdngt/p2+XmugNEhuN9TYWM XuCaprxbPxqw3w+KeZO4xFQMXJR5FlYvl1gdLmtL9u6LZZ8evh8s0f4y4aZK -----END CERTIFICATE-----Generated at Mon Jan 26 04:55:16 2026 by rpki-client