This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/IAASM0Ruq96-Ti1zW8jdb6jyCHc.roa File: IAASM0Ruq96-Ti1zW8jdb6jyCHc.roa (raw, json) Hash identifier: 0oHK09iDUYZ196neqPQ73BexJ0/D3+O1DuYLkxrO8bs= Subject key identifier: 20:00:12:33:44:6E:AB:DE:BE:4E:2D:73:5B:C8:DD:6F:A8:F2:08:77 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111AACA7EA87E4EA46FADEC61342BD Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/IAASM0Ruq96-Ti1zW8jdb6jyCHc.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 87.239.249.0/24 maxlen: 24 87.239.252.0/24 maxlen: 24 107.181.147.0/24 maxlen: 24 107.181.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1a:ac:a7:ea:87:e4:ea:46:fa:de:c6:13:42:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20001233446eabdebe4e2d735bc8dd6fa8f20877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4d:04:c0:4b:3c:88:5f:2c:f6:4e:bf:05:d0: 9f:60:4f:18:ab:79:aa:8c:06:0e:dc:25:5b:6c:ce: 78:9e:d5:86:c3:a6:bd:b4:f2:de:84:12:85:d5:14: cf:f3:9d:46:d3:8f:68:61:85:08:6e:ec:f2:20:b3: 81:2a:53:5e:89:ca:89:fb:b0:43:62:b0:74:83:ae: 3e:96:df:3a:22:81:20:7a:83:1c:21:13:ea:06:0f: 7a:5d:bb:6c:a9:b8:b5:c2:b3:a1:c4:e1:c0:0d:e2: 5c:92:d1:ea:13:8a:90:c0:be:a3:94:35:c0:bb:d4: 1b:6a:1d:0d:2c:69:31:57:01:f9:1b:6c:09:29:25: 7d:2b:55:0c:3d:07:ad:68:63:b5:71:be:20:bc:9d: ea:6e:ef:75:0d:23:18:e1:14:0e:3b:e4:41:8d:89: 07:62:e4:2b:65:48:83:b6:5a:65:c4:7c:57:9f:2a: 89:30:b2:fa:bc:6e:3a:3a:3d:d9:b9:fc:c9:55:38: 60:15:f5:ae:58:c5:53:6f:83:e7:3c:de:d2:e3:4b: d6:f6:c0:a8:82:2d:50:f6:d5:78:34:88:7d:b2:2f: 76:cd:24:0a:6d:b5:5d:c1:32:3b:7b:ad:81:df:b2: 5b:3c:97:44:72:bf:01:e7:38:89:0b:74:15:07:44: 9d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:12:33:44:6E:AB:DE:BE:4E:2D:73:5B:C8:DD:6F:A8:F2:08:77 X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/IAASM0Ruq96-Ti1zW8jdb6jyCHc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.249.0/24 87.239.252.0/24 107.181.147.0/24 107.181.151.0/24 Signature Algorithm: sha256WithRSAEncryption 27:b3:51:b8:e2:85:0a:15:90:e9:7f:47:2d:46:cf:9d:ab:45: bb:49:82:17:f4:0e:be:12:34:f0:1d:a1:6e:55:04:32:ec:43: de:3b:35:e5:ec:29:f4:48:69:bf:c9:6a:fb:8d:66:0e:ca:7e: 03:58:d6:fb:87:b8:04:e7:4a:e9:78:66:67:3d:fc:60:6a:19: cc:23:53:b2:f8:6f:44:91:b6:f4:a2:9d:e5:23:9f:a6:99:75: 80:2e:59:b4:04:27:a4:13:6e:0a:48:45:b9:3c:b9:00:6e:24: 8e:8a:ed:2a:53:9c:eb:7a:e7:ef:85:a7:d8:f4:0c:09:3e:8d: 6f:cb:7e:b9:d3:0e:a5:5f:5c:95:19:11:23:5f:4a:b3:8d:ff: 61:2b:2d:b1:93:ab:fe:39:a9:14:75:93:ed:e2:76:a4:50:42: 48:7b:e5:9f:46:83:d0:16:7b:59:b0:44:f4:2f:a0:1d:da:83: a7:8f:2a:84:fd:98:b5:61:bd:e2:55:76:28:78:b5:13:db:26: 8e:39:01:6f:3c:07:88:d6:44:ed:6c:31:fc:38:da:e1:b3:b5: 13:5e:c2:70:bc:35:01:47:cd:22:59:1c:a3:76:4c:28:ae:9e: 36:aa:7b:1e:8e:94:d2:83:c5:78:95:5d:bf:d0:ee:e3:ce:0d: 13:96:4e:3d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ERqsp+qH5OpG+t7GE0K9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDAwMTIzMzQ0NmVhYmRlYmU0ZTJkNzM1YmM4ZGQ2ZmE4ZjIwODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyk0EwEs8iF8s9k6/BdCfYE8Yq3mq jAYO3CVbbM54ntWGw6a9tPLehBKF1RTP851G049oYYUIbuzyILOBKlNeicqJ+7BD YrB0g64+lt86IoEgeoMcIRPqBg96Xbtsqbi1wrOhxOHADeJcktHqE4qQwL6jlDXA u9Qbah0NLGkxVwH5G2wJKSV9K1UMPQetaGO1cb4gvJ3qbu91DSMY4RQOO+RBjYkH YuQrZUiDtlplxHxXnyqJMLL6vG46Oj3ZufzJVThgFfWuWMVTb4PnPN7S40vW9sCo gi1Q9tV4NIh9si92zSQKbbVdwTI7e62B37JbPJdEcr8B5ziJC3QVB0Sd9wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCAAEjNEbqvevk4tc1vI3W+o8gh3MB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvSUFBU00wUnVxOTYtVGkxelc4amRiNmp5Q0hjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAV+/5AwQA V+/8AwQAa7WTAwQAa7WXMA0GCSqGSIb3DQEBCwUAA4IBAQAns1G44oUKFZDpf0ct Rs+dq0W7SYIX9A6+EjTwHaFuVQQy7EPeOzXl7Cn0SGm/yWr7jWYOyn4DWNb7h7gE 50rpeGZnPfxgahnMI1Oy+G9Ekbb0op3lI5+mmXWALlm0BCekE24KSEW5PLkAbiSO iu0qU5zreufvhafY9AwJPo1vy3650w6lX1yVGREjX0qzjf9hKy2xk6v+OakUdZPt 4nakUEJIe+WfRoPQFntZsET0L6Ad2oOnjyqE/Zi1Yb3iVXYoeLUT2yaOOQFvPAeI 1kTtbDH8ONrhs7UTXsJwvDUBR80iWRyjdkworp42qnsejpTSg8V4lV2/0O7jzg0T lk49 -----END CERTIFICATE-----Generated at Wed Jan 21 15:05:03 2026 by rpki-client