This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/IKu2yGBkoazXpkiiazb1p4jf3OI.roa File: IKu2yGBkoazXpkiiazb1p4jf3OI.roa (raw, json) Hash identifier: sGPG+CicCuj6ii9AJ1UODtX4hYRlCD8JM7C2FLI0Fac= Subject key identifier: 20:AB:B6:C8:60:64:A1:AC:D7:A6:48:A2:6B:36:F5:A7:88:DF:DC:E2 Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Certificate serial: 019B7AC9057F4E49800E916B36D9C349CF69 Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/IKu2yGBkoazXpkiiazb1p4jf3OI.roa Signing time: Thu 01 Jan 2026 18:19:13 +0000 ROA not before: Thu 01 Jan 2026 18:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52125 IP address blocks: 46.19.70.0/24 maxlen: 24 94.198.222.0/24 maxlen: 24 185.166.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:05:7f:4e:49:80:0e:91:6b:36:d9:c3:49:cf:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f Validity Not Before: Jan 1 18:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20abb6c86064a1acd7a648a26b36f5a788dfdce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:b7:a2:88:19:8e:ff:62:97:30:35:0e:7e: 0d:cb:0c:24:57:ab:f2:38:7a:eb:19:93:6e:16:16: 22:92:82:85:60:88:f8:71:03:87:3b:cb:4e:16:7a: 4b:45:0b:7f:52:22:e4:64:27:7c:95:a1:7e:93:95: 51:8f:a0:47:58:7e:39:54:c0:14:33:72:89:2d:44: 90:63:d7:5b:32:0a:4f:a6:38:cb:64:e7:08:2d:a4: 7a:c8:5d:81:94:fb:c0:3d:84:2e:10:84:65:97:dd: 75:06:d5:02:ea:d7:58:7a:4b:a4:05:61:f2:0e:47: f0:74:2d:c3:2e:02:9b:15:fa:23:66:82:00:67:27: b1:2d:c7:5b:ba:d1:fb:73:fd:3f:7d:f1:de:2e:90: e9:db:97:b7:d1:f4:f7:22:b0:21:9a:32:c2:e4:94: 38:f1:a6:83:1c:d4:da:ad:e0:98:15:7c:60:0d:72: ef:61:06:8d:85:d4:42:01:1b:ed:e0:14:77:96:45: 36:8f:84:2b:c3:09:7e:cc:9e:7f:c7:4b:83:9f:55: 2c:6e:2e:f7:b2:49:bf:08:7f:71:78:16:34:f5:e3: 84:8d:58:ef:cf:84:80:43:82:a0:6f:a7:37:1a:43: 94:6d:eb:05:3d:3a:4d:ca:46:75:39:96:cc:18:8e: 76:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AB:B6:C8:60:64:A1:AC:D7:A6:48:A2:6B:36:F5:A7:88:DF:DC:E2 X509v3 Authority Key Identifier: keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/IKu2yGBkoazXpkiiazb1p4jf3OI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.70.0/24 94.198.222.0/24 185.166.198.0/24 Signature Algorithm: sha256WithRSAEncryption 65:e7:e2:a6:06:e7:ff:9a:40:be:7b:3e:3e:b8:22:a1:3c:06: 32:7a:51:12:c9:6e:3a:73:d3:48:67:34:da:a4:89:67:2f:01: 6b:09:20:b2:80:7b:6c:bf:1f:fd:69:48:4e:00:f8:13:e7:15: 47:74:1b:e6:d1:93:31:ea:e5:8f:95:b1:36:30:83:f2:1d:34: f8:7e:6c:50:92:63:fb:27:38:78:54:5e:53:fe:7a:20:ff:52: 43:ca:e2:de:c5:b7:ed:0c:2b:ef:a4:55:45:30:13:b6:d6:9e: a2:5a:67:e7:7b:94:b3:e9:1f:d8:b1:13:f8:bc:62:81:7a:8d: 36:73:64:d4:dc:cc:35:c9:8e:80:4a:0e:f7:89:80:24:a8:ee: a6:99:36:b3:5c:5f:86:81:b8:39:1c:56:78:4b:f5:2e:89:5a: 91:12:f4:f7:5a:d2:79:9b:3c:b2:e6:2a:40:93:92:6c:c9:dc: 8a:77:31:98:d0:24:27:a9:e3:2f:e8:16:9f:2f:6f:df:e1:3e: 1d:e3:4b:5f:97:1d:3c:17:18:45:d5:f7:61:d5:72:69:11:ef: 1e:ff:3c:3c:90:86:c2:86:ce:86:39:a9:26:a1:0b:6f:f6:e4: 90:47:2c:18:a1:39:79:1f:fe:29:10:90:1a:9b:d9:77:2a:46: e9:40:11:eb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yQV/TkmADpFrNtnDSc9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2 NGIyMGYwHhcNMjYwMTAxMTgxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGFiYjZjODYwNjRhMWFjZDdhNjQ4YTI2YjM2ZjVhNzg4ZGZkY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybS3oogZjv9ilzA1Dn4NywwkV6vy OHrrGZNuFhYikoKFYIj4cQOHO8tOFnpLRQt/UiLkZCd8laF+k5VRj6BHWH45VMAU M3KJLUSQY9dbMgpPpjjLZOcILaR6yF2BlPvAPYQuEIRll911BtUC6tdYekukBWHy DkfwdC3DLgKbFfojZoIAZyexLcdbutH7c/0/ffHeLpDp25e30fT3IrAhmjLC5JQ4 8aaDHNTareCYFXxgDXLvYQaNhdRCARvt4BR3lkU2j4Qrwwl+zJ5/x0uDn1Usbi73 skm/CH9xeBY09eOEjVjvz4SAQ4Kgb6c3GkOUbesFPTpNykZ1OZbMGI52HwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCCrtshgZKGs16ZIoms29aeI39ziMB8GA1UdIwQY MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct NDkwNTI0M2JjODI4LzEvSUt1MnlHQmtvYXpYcGtpaWF6YjFwNGpmM09JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4 LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALhNGAwQA XsbeAwQAuabGMA0GCSqGSIb3DQEBCwUAA4IBAQBl5+KmBuf/mkC+ez4+uCKhPAYy elESyW46c9NIZzTapIlnLwFrCSCygHtsvx/9aUhOAPgT5xVHdBvm0ZMx6uWPlbE2 MIPyHTT4fmxQkmP7Jzh4VF5T/nog/1JDyuLexbftDCvvpFVFMBO21p6iWmfne5Sz 6R/YsRP4vGKBeo02c2TU3Mw1yY6ASg73iYAkqO6mmTazXF+Ggbg5HFZ4S/UuiVqR EvT3WtJ5mzyy5ipAk5JsydyKdzGY0CQnqeMv6BafL2/f4T4d40tflx08FxhF1fdh 1XJpEe8e/zw8kIbChs6GOakmoQtv9uSQRywYoTl5H/4pEJAam9l3KkbpQBHr -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:48 2026 by rpki-client