This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/22YItsxKYLcgNNKzIexf7AwBkoI.roa File: 22YItsxKYLcgNNKzIexf7AwBkoI.roa (raw, json) Hash identifier: o0O379ObLu85XEWjeGzNjJwnF/cIhXVQ3F8uTxlowzs= Subject key identifier: DB:66:08:B6:CC:4A:60:B7:20:34:D2:B3:21:EC:5F:EC:0C:01:92:82 Certificate issuer: /CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Certificate serial: 019B7A5AE05FD4055125ECBA4D9AA66919B5 Authority key identifier: E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/22YItsxKYLcgNNKzIexf7AwBkoI.roa Signing time: Thu 01 Jan 2026 16:18:54 +0000 ROA not before: Thu 01 Jan 2026 16:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 129.217.0.0/16 maxlen: 16 192.35.63.0/24 maxlen: 24 192.35.64.0/24 maxlen: 24 192.35.66.0/23 maxlen: 23 192.35.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.mft rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e0:5f:d4:05:51:25:ec:ba:4d:9a:a6:69:19:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e53ad9b432bb83d141c480dee78bc35ff47cb72c Validity Not Before: Jan 1 16:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db6608b6cc4a60b72034d2b321ec5fec0c019282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c8:96:61:39:90:9b:70:03:44:85:c8:82:86: 31:53:61:c6:67:54:e1:21:dc:96:88:f1:03:75:1c: 7a:1f:1e:14:5f:90:8a:d4:68:65:bc:84:a0:30:69: f3:74:2c:32:46:c8:60:8b:76:55:90:cc:d7:50:d1: 4a:3d:50:80:b8:fb:47:d9:ef:74:d6:ec:dd:5b:47: 23:1a:26:d3:2a:ed:82:06:56:41:71:ad:54:11:03: 31:0f:a0:66:60:e4:99:b0:d5:52:62:22:81:3d:24: 55:36:e3:93:97:4e:01:f0:82:a7:72:0b:d4:66:4e: 67:fd:27:95:4f:f6:10:c5:9d:21:a1:09:97:fd:a1: 75:e9:8b:4b:13:8b:c1:d6:c8:58:43:2e:78:d1:40: d4:54:d0:fe:98:ba:59:ce:43:57:e7:d7:5c:9e:50: ae:0a:77:0b:4a:bd:14:57:6e:ad:6e:c5:4f:23:1a: 68:be:a7:4d:4b:e6:8a:74:f9:2a:01:5b:87:73:85: 6b:32:6e:1b:1b:46:41:87:98:39:68:4f:f1:d2:c5: 7f:2e:57:cb:fa:c7:61:5f:e2:39:40:2a:00:61:4b: 65:08:c4:9f:b7:37:4f:3a:44:12:00:b3:d3:13:02: 7d:5a:b3:a3:79:d1:ee:62:35:61:ff:cf:9a:24:db: 5d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:66:08:B6:CC:4A:60:B7:20:34:D2:B3:21:EC:5F:EC:0C:01:92:82 X509v3 Authority Key Identifier: keyid:E5:3A:D9:B4:32:BB:83:D1:41:C4:80:DE:E7:8B:C3:5F:F4:7C:B7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5TrZtDK7g9FBxIDe54vDX_R8tyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/22YItsxKYLcgNNKzIexf7AwBkoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e8bd0b-f36d-45f5-b985-09bb5287531b/1/5TrZtDK7g9FBxIDe54vDX_R8tyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.217.0.0/16 192.35.63.0-192.35.64.255 192.35.66.0-192.35.71.255 Signature Algorithm: sha256WithRSAEncryption 16:0c:77:55:97:52:f5:83:93:68:43:6c:b2:ad:60:70:60:0b: 21:c2:5d:db:dc:e3:d7:54:97:ef:5b:fe:df:47:6d:b3:bc:c0: 9a:b3:29:36:e6:f0:79:62:a7:49:27:0d:be:8a:34:53:b3:8e: c3:bc:f5:c3:18:55:0b:ef:12:ac:99:4a:36:9e:a5:6a:3f:fa: 47:dd:41:2b:d0:df:c2:84:b2:8c:b8:26:b6:b6:28:60:51:54: 20:05:47:da:ae:69:90:88:16:16:67:b3:8d:4c:90:c8:77:b0: b9:86:3b:c7:39:33:81:d6:50:f6:32:98:80:1e:60:24:ed:74: 7a:07:a2:6d:5d:e7:2b:d4:2b:d1:a9:82:b5:36:cf:41:65:19: 37:28:ca:f2:32:b3:54:fd:e9:f3:5e:f8:b6:4a:97:ff:f7:88: 4b:ad:8f:63:98:ca:e2:83:56:a3:8f:cd:ba:8d:80:4c:67:16: 07:d2:2d:cb:ae:63:79:e5:fa:13:1c:83:28:f9:53:54:a1:27: 0b:d2:0e:ae:1b:30:68:16:75:b9:79:63:aa:e8:91:64:bc:56: 72:13:bf:5d:68:81:74:6e:c7:0d:d0:8d:4a:83:d1:7e:0d:74: d2:39:b0:38:eb:b1:e7:2b:d7:82:fa:02:0f:e7:f0:3d:b6:af: 11:86:59:4c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WuBf1AVRJey6TZqmaRm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1M2FkOWI0MzJiYjgzZDE0MWM0ODBkZWU3OGJjMzVmZjQ3 Y2I3MmMwHhcNMjYwMTAxMTYxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjY2MDhiNmNjNGE2MGI3MjAzNGQyYjMyMWVjNWZlYzBjMDE5MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkciWYTmQm3ADRIXIgoYxU2HGZ1Th IdyWiPEDdRx6Hx4UX5CK1GhlvISgMGnzdCwyRshgi3ZVkMzXUNFKPVCAuPtH2e90 1uzdW0cjGibTKu2CBlZBca1UEQMxD6BmYOSZsNVSYiKBPSRVNuOTl04B8IKncgvU Zk5n/SeVT/YQxZ0hoQmX/aF16YtLE4vB1shYQy540UDUVND+mLpZzkNX59dcnlCu CncLSr0UV26tbsVPIxpovqdNS+aKdPkqAVuHc4VrMm4bG0ZBh5g5aE/x0sV/LlfL +sdhX+I5QCoAYUtlCMSftzdPOkQSALPTEwJ9WrOjedHuYjVh/8+aJNtdEQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNtmCLbMSmC3IDTSsyHsX+wMAZKCMB8GA1UdIwQY MBaAFOU62bQyu4PRQcSA3ueLw1/0fLcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUt MDliYjUyODc1MzFiLzEvMjJZSXRzeEtZTGNnTk5LeklleGY3QXdCa29JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lOGJkMGItZjM2ZC00NWY1LWI5ODUtMDliYjUyODc1MzFi LzEvNVRyWnRESzdnOUZCeElEZTU0dkRYX1I4dHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMAgdkwDAME AMAjPwMEAMAjQDAMAwQBwCNCAwQDwCNAMA0GCSqGSIb3DQEBCwUAA4IBAQAWDHdV l1L1g5NoQ2yyrWBwYAshwl3b3OPXVJfvW/7fR22zvMCasyk25vB5YqdJJw2+ijRT s47DvPXDGFUL7xKsmUo2nqVqP/pH3UEr0N/ChLKMuCa2tihgUVQgBUfarmmQiBYW Z7ONTJDId7C5hjvHOTOB1lD2MpiAHmAk7XR6B6JtXecr1CvRqYK1Ns9BZRk3KMry MrNU/enzXvi2Spf/94hLrY9jmMrig1ajj826jYBMZxYH0i3LrmN55foTHIMo+VNU oScL0g6uGzBoFnW5eWOq6JFkvFZyE79daIF0bscN0I1Kg9F+DXTSObA467HnK9eC +gIP5/A9tq8RhllM -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:39 2026 by rpki-client