This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/IVaGwYE-xSWos9-zj2HpODEJhqg.roa File: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (raw, json) Hash identifier: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s= Subject key identifier: 21:56:86:C1:81:3E:C5:25:A8:B3:DF:B3:8F:61:E9:38:31:09:86:A8 Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac Certificate serial: 019B7C1255AAEB9385131666F0038A010064 Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/IVaGwYE-xSWos9-zj2HpODEJhqg.roa Signing time: Fri 02 Jan 2026 00:18:54 +0000 ROA not before: Fri 02 Jan 2026 00:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49981 IP address blocks: 195.191.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:55:aa:eb:93:85:13:16:66:f0:03:8a:01:00:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac Validity Not Before: Jan 2 00:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=215686c1813ec525a8b3dfb38f61e938310986a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:20:9d:b0:62:a6:30:67:56:08:cd:5d:d5:fe: d1:7c:28:80:c5:51:aa:3d:dc:57:f2:a5:e3:b1:e8: f7:dd:e3:19:9a:6d:6a:f0:01:02:85:2a:92:c6:dd: b1:18:ff:a1:db:2a:cc:33:d7:cd:42:f9:a4:c9:ab: 2c:e0:6a:76:76:5d:bb:d7:06:05:ef:bc:97:c6:fe: 4b:49:e2:9c:41:0a:b3:ad:b9:f8:c0:de:ac:fd:58: cc:f0:75:51:0a:38:30:54:d1:e3:6d:65:fb:b2:4c: 8e:c4:8f:94:1d:e3:67:dc:da:e2:2a:c8:45:f8:59: dd:34:b3:f9:24:06:7a:b7:01:20:24:1e:45:c3:d4: a9:12:0c:75:fd:67:e3:91:61:5d:5b:f8:89:dc:fe: 12:4b:1d:6e:c8:0c:34:71:70:d2:40:a0:51:2d:61: f6:d0:8e:7a:01:bc:3f:68:ee:7d:1f:b5:9e:73:49: 5a:16:7f:43:14:66:57:ce:79:5f:aa:ef:2e:57:f5: 37:4c:21:2c:50:f2:65:6d:fb:6e:ac:ed:42:d2:b4: 11:b7:f3:a9:26:d8:db:42:4e:b4:72:bf:8e:c6:3e: 71:cc:5e:9f:1a:05:f8:02:49:33:c2:8c:ad:a5:7b: d7:df:79:33:b7:a7:f1:17:a3:fd:80:40:ba:c4:12: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:86:C1:81:3E:C5:25:A8:B3:DF:B3:8F:61:E9:38:31:09:86:A8 X509v3 Authority Key Identifier: keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/IVaGwYE-xSWos9-zj2HpODEJhqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.112.0/23 Signature Algorithm: sha256WithRSAEncryption ac:c4:de:5a:eb:36:80:72:4f:bc:c9:21:ff:63:5c:de:97:13: af:5b:15:fd:f2:50:e8:8f:cc:49:0d:3e:ce:de:a1:76:16:5d: a0:05:bf:57:26:c1:fd:68:66:b1:16:e9:0f:6f:96:06:0f:88: 88:32:3b:53:87:c7:c4:55:c6:72:40:ab:d7:bf:2d:35:93:85: 12:b2:67:2c:59:d2:e4:75:ff:eb:35:57:74:b9:95:58:7e:8b: c8:99:8e:74:b2:9d:13:59:72:27:75:38:54:46:15:34:02:79: 9b:a2:dc:74:29:f0:e3:8b:c8:9e:55:54:17:18:9d:84:2c:92: 5e:9f:22:0a:43:f3:e7:52:67:3d:2a:ab:23:c4:47:9b:d0:aa: 59:e7:27:99:89:bf:4e:f2:5f:34:2e:37:71:cc:a5:2e:f0:c8: 99:85:5b:5e:9e:df:de:7c:42:1f:09:f6:ea:c7:39:2c:3b:c1: bb:e5:dd:82:e2:66:46:bc:2e:4c:cd:95:e2:d9:3c:ab:0d:cd: ad:17:7f:0c:8c:75:e4:28:26:ed:b9:a1:0a:fe:55:51:84:24: 52:13:5e:6d:de:83:34:38:46:10:a8:26:e3:d8:8f:95:93:9c: 3d:76:99:93:fb:79:82:7c:2a:36:7a:0a:d6:06:15:d4:19:24: 7a:6c:d7:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ElWq65OFExZm8AOKAQBkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MThhNWY0ODE1NTI2ZTFlOTI1MTBkMzY0OGViZGEwY2Ri YmMyYWMwHhcNMjYwMTAyMDAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTU2ODZjMTgxM2VjNTI1YThiM2RmYjM4ZjYxZTkzODMxMDk4NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniCdsGKmMGdWCM1d1f7RfCiAxVGq PdxX8qXjsej33eMZmm1q8AEChSqSxt2xGP+h2yrMM9fNQvmkyass4Gp2dl271wYF 77yXxv5LSeKcQQqzrbn4wN6s/VjM8HVRCjgwVNHjbWX7skyOxI+UHeNn3NriKshF +FndNLP5JAZ6twEgJB5Fw9SpEgx1/WfjkWFdW/iJ3P4SSx1uyAw0cXDSQKBRLWH2 0I56Abw/aO59H7Wec0laFn9DFGZXznlfqu8uV/U3TCEsUPJlbfturO1C0rQRt/Op JtjbQk60cr+Oxj5xzF6fGgX4AkkzwoytpXvX33kzt6fxF6P9gEC6xBK2AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFWhsGBPsUlqLPfs49h6TgxCYaoMB8GA1UdIwQY MBaAFLkYpfSBVSbh6SUQ02SOvaDNu8KsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3Njkt YThmOTBkNDVlYTY3LzEvSVZhR3dZRS14U1dvczktemoySHBPREVKaHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8zYzI5M2EtMTU5MS00Njg1LTg3NjktYThmOTBkNDVlYTY3 LzEvdVJpbDlJRlZKdUhwSlJEVFpJNjlvTTI3d3F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79wMA0G CSqGSIb3DQEBCwUAA4IBAQCsxN5a6zaAck+8ySH/Y1zelxOvWxX98lDoj8xJDT7O 3qF2Fl2gBb9XJsH9aGaxFukPb5YGD4iIMjtTh8fEVcZyQKvXvy01k4USsmcsWdLk df/rNVd0uZVYfovImY50sp0TWXIndThURhU0Anmbotx0KfDji8ieVVQXGJ2ELJJe nyIKQ/PnUmc9KqsjxEeb0KpZ5yeZib9O8l80LjdxzKUu8MiZhVtent/efEIfCfbq xzksO8G75d2C4mZGvC5MzZXi2TyrDc2tF38MjHXkKCbtuaEK/lVRhCRSE15t3oM0 OEYQqCbj2I+Vk5w9dpmT+3mCfCo2egrWBhXUGSR6bNdW -----END CERTIFICATE-----Generated at Mon Jan 19 17:33:00 2026 by rpki-client