This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ifuyOvLqaG7XpwNKelmtdgODxvs.roa File: ifuyOvLqaG7XpwNKelmtdgODxvs.roa (raw, json) Hash identifier: pkBeduF3Epzd3F2sUr2GKjlCmAKOIzHWegVmKPAWWRk= Subject key identifier: 89:FB:B2:3A:F2:EA:68:6E:D7:A7:03:4A:7A:59:AD:76:03:83:C6:FB Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAC37EE3D9F1C7B12C3F00A4A89DCD Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ifuyOvLqaG7XpwNKelmtdgODxvs.roa Signing time: Thu 01 Jan 2026 00:17:35 +0000 ROA not before: Thu 01 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 2.56.117.0/24 maxlen: 24 5.180.23.0/24 maxlen: 24 45.9.5.0/24 maxlen: 24 45.9.17.0/24 maxlen: 24 45.66.164.0/24 maxlen: 24 45.82.253.0/24 maxlen: 24 45.88.160.0/22 maxlen: 24 45.136.115.0/24 maxlen: 24 45.149.112.0/24 maxlen: 24 92.118.229.0/24 maxlen: 24 95.214.248.0/24 maxlen: 24 139.28.234.0/23 maxlen: 24 141.98.167.0/24 maxlen: 24 171.22.110.0/23 maxlen: 24 185.161.70.0/24 maxlen: 24 185.166.152.0/24 maxlen: 24 194.36.38.0/24 maxlen: 24 213.59.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c3:7e:e3:d9:f1:c7:b1:2c:3f:00:a4:a8:9d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89fbb23af2ea686ed7a7034a7a59ad760383c6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e8:40:9f:7b:12:74:5e:6e:ce:c2:e7:6e:88: 1b:64:1c:ef:6b:47:60:b2:78:4e:61:15:b7:19:1b: ab:00:77:d7:74:2b:11:f9:84:a6:c8:4c:5e:5f:ae: 94:e3:16:ba:45:dd:e5:81:19:a5:55:e5:de:80:22: 63:42:07:81:0b:81:cf:0a:4c:31:3f:c4:5a:a4:bf: 54:aa:3b:1e:6e:96:05:6b:db:f8:3a:0a:ab:e0:88: a2:0b:ac:e2:f9:83:41:b8:dd:95:bf:da:52:cd:b4: 8e:cc:b7:31:4b:5c:08:89:b3:c5:92:3e:15:14:4d: a8:ca:c1:f8:a1:13:5d:ac:a2:84:e5:ca:30:79:c6: f8:ab:15:c8:a6:7c:da:c6:5f:6b:06:6a:64:31:01: 00:b4:99:64:b6:50:07:fd:b3:80:ad:e2:b3:c6:60: c7:66:6d:75:50:82:dd:14:0d:ab:1b:b6:a3:c4:41: b5:57:69:13:8e:0b:33:57:cd:da:5c:0b:41:24:3a: ef:57:2e:df:57:71:98:49:0b:fd:93:be:95:86:7b: 45:e1:74:f5:9d:3d:64:c3:21:8c:8a:4b:3c:39:20: dd:f4:a8:b9:30:42:6b:c4:5e:ef:6a:5d:d4:64:17: d6:57:46:b9:21:dc:09:ac:77:d4:a9:66:95:7a:fb: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:FB:B2:3A:F2:EA:68:6E:D7:A7:03:4A:7A:59:AD:76:03:83:C6:FB X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ifuyOvLqaG7XpwNKelmtdgODxvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.117.0/24 5.180.23.0/24 45.9.5.0/24 45.9.17.0/24 45.66.164.0/24 45.82.253.0/24 45.88.160.0/22 45.136.115.0/24 45.149.112.0/24 92.118.229.0/24 95.214.248.0/24 139.28.234.0/23 141.98.167.0/24 171.22.110.0/23 185.161.70.0/24 185.166.152.0/24 194.36.38.0/24 213.59.112.0/24 Signature Algorithm: sha256WithRSAEncryption 93:89:05:ca:02:2b:20:ca:89:4a:41:36:50:41:c2:fe:90:87: fb:cc:6f:09:2d:06:79:5c:b4:c9:ea:20:66:09:d4:c4:d9:8a: 2c:92:13:1b:f8:58:1c:ec:ef:84:b8:10:e4:c1:11:f3:5f:4d: 6f:69:56:7b:fa:62:49:9d:78:e9:49:8f:c3:12:4c:f5:cd:06: 30:eb:06:b4:da:2c:23:19:05:d3:80:3a:97:80:28:c7:93:20: db:2b:fd:f6:52:52:10:98:8a:79:c9:31:7f:fc:3c:63:8d:d2: 8a:a3:62:bb:e9:08:e4:5a:4e:d3:02:8d:2d:1a:8d:90:58:e4: f3:e3:ac:c9:4f:3e:c3:c4:63:06:c4:5f:49:91:6b:aa:b0:4d: ac:5c:52:25:d8:da:9e:c9:ef:2b:09:8a:f4:f0:c1:a4:e6:c9: a9:00:7b:8f:d0:49:1a:ae:66:db:75:51:ba:f4:cc:83:63:9d: d6:a0:32:fc:26:17:73:32:3a:b4:ad:14:a2:2f:dc:89:fd:8a: 40:7d:fd:51:af:96:a5:f0:6a:d4:67:41:51:e3:cb:4e:5a:fb: bc:86:bd:6f:e3:e0:75:41:a2:13:72:eb:73:b9:fe:a0:d5:19: 39:1e:fe:a7:53:40:4e:2c:00:7b:99:0c:f5:c0:99:82:52:80: 9d:6f:38:29 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt26sN+49nxx7EsPwCkqJ3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWZiYjIzYWYyZWE2ODZlZDdhNzAzNGE3YTU5YWQ3NjAzODNjNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArehAn3sSdF5uzsLnbogbZBzva0dg snhOYRW3GRurAHfXdCsR+YSmyExeX66U4xa6Rd3lgRmlVeXegCJjQgeBC4HPCkwx P8RapL9UqjsebpYFa9v4Ogqr4IiiC6zi+YNBuN2Vv9pSzbSOzLcxS1wIibPFkj4V FE2oysH4oRNdrKKE5cowecb4qxXIpnzaxl9rBmpkMQEAtJlktlAH/bOAreKzxmDH Zm11UILdFA2rG7ajxEG1V2kTjgszV83aXAtBJDrvVy7fV3GYSQv9k76VhntF4XT1 nT1kwyGMiks8OSDd9Ki5MEJrxF7val3UZBfWV0a5IdwJrHfUqWaVevsixQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFIn7sjry6mhu16cDSnpZrXYDg8b7MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvaWZ1eU92THFhRzdYcHdOS2VsbXRkZ09EeHZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAAI4dQME AAW0FwMEAC0JBQMEAC0JEQMEAC1CpAMEAC1S/QMEAi1YoAMEAC2IcwMEAC2VcAME AFx25QMEAF/W+AMEAYsc6gMEAI1ipwMEAasWbgMEALmhRgMEALmmmAMEAMIkJgME ANU7cDANBgkqhkiG9w0BAQsFAAOCAQEAk4kFygIrIMqJSkE2UEHC/pCH+8xvCS0G eVy0yeogZgnUxNmKLJITG/hYHOzvhLgQ5MER819Nb2lWe/piSZ146UmPwxJM9c0G MOsGtNosIxkF04A6l4Aox5Mg2yv99lJSEJiKeckxf/w8Y43SiqNiu+kI5FpO0wKN LRqNkFjk8+OsyU8+w8RjBsRfSZFrqrBNrFxSJdjansnvKwmK9PDBpObJqQB7j9BJ Gq5m23VRuvTMg2Od1qAy/CYXczI6tK0Uoi/cif2KQH39Ua+WpfBq1GdBUePLTlr7 vIa9b+PgdUGiE3Lrc7n+oNUZOR7+p1NATiwAe5kM9cCZglKAnW84KQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:18 2026 by rpki-client