This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/IfIVLKxigngabgfVf7hbWkVZKJk.roa File: IfIVLKxigngabgfVf7hbWkVZKJk.roa (raw, json) Hash identifier: SYIgElzT9Fvi+lNF8/DUi7SqIkbvfGnmGxjms2zRJkk= Subject key identifier: 21:F2:15:2C:AC:62:82:78:1A:6E:07:D5:7F:B8:5B:5A:45:59:28:99 Certificate issuer: /CN=346474a33c051d17152b21322ccf4ff3808b4270 Certificate serial: 019B76EB7D407DACB26BF19CC3C536CAE920 Authority key identifier: 34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/IfIVLKxigngabgfVf7hbWkVZKJk.roa Signing time: Thu 01 Jan 2026 00:18:22 +0000 ROA not before: Thu 01 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215307 IP address blocks: 91.234.11.0/24 maxlen: 24 193.169.128.0/23 maxlen: 24 194.26.67.0/24 maxlen: 24 2a14:1f40::/32 maxlen: 48 2a14:1f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.mft rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:40:7d:ac:b2:6b:f1:9c:c3:c5:36:ca:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=346474a33c051d17152b21322ccf4ff3808b4270 Validity Not Before: Jan 1 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21f2152cac6282781a6e07d57fb85b5a45592899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cf:bc:f6:98:7e:a7:5f:dc:cf:5e:e5:77:e5: 83:6b:59:7f:8d:21:03:f8:19:ff:a1:a2:77:31:22: 31:73:02:01:3c:8d:77:0a:a7:86:62:8b:07:17:bf: 91:22:82:6d:ad:9c:ee:6a:fe:86:f9:0b:8b:29:b1: 7f:99:40:e1:22:36:fa:e9:c4:7f:55:a0:75:e8:70: 26:6d:f0:88:0b:e1:bd:00:09:4c:35:1d:27:ec:61: aa:5c:46:96:e6:bf:46:2c:20:29:77:94:0a:94:f2: 25:99:7d:e9:83:a8:fe:61:b4:01:2b:bb:f9:4d:be: 7a:79:fb:a2:f6:30:04:e6:60:2b:4f:b8:7d:69:f8: d8:0c:98:8c:f7:09:8f:e3:0e:24:3a:b4:f9:d8:87: 7d:99:cc:c1:d5:13:ef:03:11:2c:38:ba:9c:72:22: a3:aa:2d:90:43:2b:4c:b7:a9:aa:47:34:f7:7f:40: de:02:99:59:ea:e4:ae:42:ee:67:f9:a4:4b:e3:fd: 53:7d:da:09:a4:74:16:12:9f:d5:1d:4d:b2:d8:f6: b6:66:08:ef:ba:d9:7f:4b:7a:23:26:c8:67:e1:32: d5:35:72:83:91:60:c3:12:cc:37:7f:41:05:18:eb: e3:6c:3a:8d:7f:c7:f1:4d:34:c8:52:13:18:eb:7a: cf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F2:15:2C:AC:62:82:78:1A:6E:07:D5:7F:B8:5B:5A:45:59:28:99 X509v3 Authority Key Identifier: keyid:34:64:74:A3:3C:05:1D:17:15:2B:21:32:2C:CF:4F:F3:80:8B:42:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGR0ozwFHRcVKyEyLM9P84CLQnA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/IfIVLKxigngabgfVf7hbWkVZKJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2b9a72-6186-4154-ae3b-01521e658e99/1/NGR0ozwFHRcVKyEyLM9P84CLQnA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.11.0/24 193.169.128.0/23 194.26.67.0/24 IPv6: 2a14:1f40::/32 Signature Algorithm: sha256WithRSAEncryption 94:0d:09:f8:f7:f1:eb:de:df:d7:c5:a1:b4:16:ff:7c:dd:d2: 15:49:ce:71:36:7b:68:76:ec:2e:f4:92:29:06:40:4b:27:fe: d1:30:05:46:c5:f4:74:0f:6e:b3:0e:32:46:da:9a:89:e7:1e: e5:e0:1e:46:d6:18:00:de:21:94:93:32:3d:cb:71:3f:61:1b: ec:9f:de:12:55:64:ed:d1:54:0a:b3:8e:fd:74:de:f7:85:d4: ff:30:b0:18:cc:0e:aa:e1:33:77:78:9c:4c:29:36:0d:1d:d0: 34:7c:65:fb:b2:61:2f:ac:54:b5:72:1e:5a:cf:1d:c0:c2:d3: c1:b3:c0:c5:09:ac:3c:6d:a3:1a:7b:d9:64:c6:f2:f2:be:8f: df:ad:0f:bf:98:e6:ba:b2:13:e5:f1:5a:4b:fa:71:d6:2a:57: a2:a7:69:1f:6b:17:13:22:2e:fe:d3:8f:1f:49:8c:31:34:0f: 4a:5c:1c:7a:df:bb:72:a3:22:f5:3c:1f:96:ae:9a:ae:04:90: 45:5e:44:c8:50:be:34:57:32:23:a5:cd:49:b1:a6:e3:d6:d9: 0b:e9:5a:56:22:9e:e6:69:85:33:b2:6c:ee:e5:fb:59:d0:6f: 42:04:46:8c:0f:ee:f5:8d:e8:82:b8:49:e8:c8:0a:8a:9e:e3: 68:b7:62:17 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt2631Afayya/Gcw8U2yukgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NjQ3NGEzM2MwNTFkMTcxNTJiMjEzMjJjY2Y0ZmYzODA4 YjQyNzAwHhcNMjYwMTAxMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWYyMTUyY2FjNjI4Mjc4MWE2ZTA3ZDU3ZmI4NWI1YTQ1NTkyODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8+89ph+p1/cz17ld+WDa1l/jSED +Bn/oaJ3MSIxcwIBPI13CqeGYosHF7+RIoJtrZzuav6G+QuLKbF/mUDhIjb66cR/ VaB16HAmbfCIC+G9AAlMNR0n7GGqXEaW5r9GLCApd5QKlPIlmX3pg6j+YbQBK7v5 Tb56efui9jAE5mArT7h9afjYDJiM9wmP4w4kOrT52Id9mczB1RPvAxEsOLqcciKj qi2QQytMt6mqRzT3f0DeAplZ6uSuQu5n+aRL4/1TfdoJpHQWEp/VHU2y2Pa2Zgjv utl/S3ojJshn4TLVNXKDkWDDEsw3f0EFGOvjbDqNf8fxTTTIUhMY63rPmwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFCHyFSysYoJ4Gm4H1X+4W1pFWSiZMB8GA1UdIwQY MBaAFDRkdKM8BR0XFSshMizPT/OAi0JwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2It MDE1MjFlNjU4ZTk5LzEvSWZJVkxLeGlnbmdhYmdmVmY3aGJXa1ZaS0prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8yYjlhNzItNjE4Ni00MTU0LWFlM2ItMDE1MjFlNjU4ZTk5 LzEvTkdSMG96d0ZIUmNWS3lFeUxNOVA4NENMUW5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW+oLAwQB wamAAwQAwhpDMA0EAgACMAcDBQAqFB9AMA0GCSqGSIb3DQEBCwUAA4IBAQCUDQn4 9/Hr3t/XxaG0Fv983dIVSc5xNntoduwu9JIpBkBLJ/7RMAVGxfR0D26zDjJG2pqJ 5x7l4B5G1hgA3iGUkzI9y3E/YRvsn94SVWTt0VQKs479dN73hdT/MLAYzA6q4TN3 eJxMKTYNHdA0fGX7smEvrFS1ch5azx3AwtPBs8DFCaw8baMae9lkxvLyvo/frQ+/ mOa6shPl8VpL+nHWKleip2kfaxcTIi7+048fSYwxNA9KXBx637tyoyL1PB+Wrpqu BJBFXkTIUL40VzIjpc1Jsabj1tkL6VpWIp7maYUzsmzu5ftZ0G9CBEaMD+71jeiC uEnoyAqKnuNot2IX -----END CERTIFICATE-----Generated at Tue Feb 10 02:30:39 2026 by rpki-client