This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ixkJaNAkm4gjc40wCSuPnf77wzw.roa File: ixkJaNAkm4gjc40wCSuPnf77wzw.roa (raw, json) Hash identifier: diQI9DI4W+2ELyguSKPWB0DUAvvZo6wQWaokC17DuxU= Subject key identifier: 8B:19:09:68:D0:24:9B:88:23:73:8D:30:09:2B:8F:9D:FE:FB:C3:3C Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EAD43596D1662855C1D72629B2E112 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ixkJaNAkm4gjc40wCSuPnf77wzw.roa Signing time: Thu 01 Jan 2026 00:17:39 +0000 ROA not before: Thu 01 Jan 2026 00:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211114 IP address blocks: 45.8.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 00:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d4:35:96:d1:66:28:55:c1:d7:26:29:b2:e1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b190968d0249b8823738d30092b8f9dfefbc33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4d:c4:ab:3f:0c:d8:83:43:42:f1:ec:8c:01: 7f:94:02:25:2c:0e:ac:30:4e:ae:20:1b:3d:70:65: 13:e2:bd:34:18:67:84:82:d0:ba:41:29:5c:bf:93: 78:b5:d3:cf:2e:d2:4f:4e:7d:b4:e0:70:68:d1:0b: e2:60:8b:37:df:99:19:9d:c4:36:3a:89:24:36:5c: 25:a5:bb:b0:4e:92:3a:c8:53:e0:4a:b8:ac:40:00: d3:ec:41:8d:1f:f9:a0:86:7c:8f:86:3b:75:22:15: 98:4c:52:3a:11:96:c5:fd:29:88:02:4c:06:f9:34: 01:c0:33:67:d2:c6:57:6b:d6:1a:fe:95:0c:6b:96: c1:81:9c:b2:73:15:a4:6a:d7:5f:5e:29:c5:cf:ae: ed:56:be:d6:8f:4d:34:00:4a:93:ad:cd:a1:ea:5c: bf:07:a9:35:ba:4f:50:c6:7b:eb:da:e1:11:bc:94: d9:52:81:89:5d:06:46:6d:31:b2:9c:1e:8e:bd:31: 4b:95:4c:29:f0:55:29:a3:34:fc:98:70:00:10:58: 5d:6e:f7:16:24:46:56:81:03:3b:14:2e:e4:42:6f: c6:17:59:84:1e:55:21:ee:e1:92:85:f6:ff:f9:2b: aa:93:16:95:e6:03:e1:d6:7b:e2:d8:2f:2c:e6:ad: a3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:19:09:68:D0:24:9B:88:23:73:8D:30:09:2B:8F:9D:FE:FB:C3:3C X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ixkJaNAkm4gjc40wCSuPnf77wzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.196.0/24 Signature Algorithm: sha256WithRSAEncryption 68:8f:46:9c:f2:97:b8:56:6d:76:2d:eb:f8:41:1d:1b:0f:3c: 85:81:77:88:bc:02:96:52:6e:c2:2e:ac:cb:f5:28:ea:ef:37: b9:0e:8f:68:c3:f1:55:5e:71:dc:30:68:1d:d0:8d:09:00:21: 35:06:08:52:53:ac:d4:70:8d:05:a5:6f:5e:f8:eb:33:bb:85: 13:97:e4:a5:c5:2b:9a:24:5e:76:da:7a:7c:92:19:b2:ce:38: c0:2b:56:6c:44:7d:c3:36:80:15:d7:9c:a3:9c:b9:a9:8a:e6: a5:31:03:76:c5:61:7e:0e:a1:0a:e1:4f:d3:57:96:39:20:b7: 8d:65:55:25:1b:94:22:9b:8f:5a:9b:28:06:45:d9:23:5d:96: 21:ee:71:ab:bd:00:9c:50:6d:75:8b:fe:e9:02:0d:87:7a:b4: 99:2a:85:ca:f3:7e:b2:6e:3d:71:71:18:ee:e8:64:c1:93:ec: d7:66:65:78:90:0f:38:91:25:32:4f:92:e2:c4:3b:1f:d7:fc: 26:27:3e:b2:41:a0:40:f4:59:86:80:11:b6:0f:47:f3:23:50: 0b:01:b8:1c:4c:59:fe:bf:1c:16:b4:6e:46:1b:7b:89:f5:3b: ef:f7:fd:3a:ab:bc:78:2a:ba:80:8f:c2:53:5b:df:99:2c:18: 5e:16:70:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26tQ1ltFmKFXB1yYpsuESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjE5MDk2OGQwMjQ5Yjg4MjM3MzhkMzAwOTJiOGY5ZGZlZmJjMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU3Eqz8M2INDQvHsjAF/lAIlLA6s ME6uIBs9cGUT4r00GGeEgtC6QSlcv5N4tdPPLtJPTn204HBo0QviYIs335kZncQ2 OokkNlwlpbuwTpI6yFPgSrisQADT7EGNH/mghnyPhjt1IhWYTFI6EZbF/SmIAkwG +TQBwDNn0sZXa9Ya/pUMa5bBgZyycxWkatdfXinFz67tVr7Wj000AEqTrc2h6ly/ B6k1uk9Qxnvr2uERvJTZUoGJXQZGbTGynB6OvTFLlUwp8FUpozT8mHAAEFhdbvcW JEZWgQM7FC7kQm/GF1mEHlUh7uGShfb/+SuqkxaV5gPh1nvi2C8s5q2jcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIsZCWjQJJuII3ONMAkrj53++8M8MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvaXhrSmFOQWttNGdqYzQwd0NTdVBuZjc3d3p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjEMA0G CSqGSIb3DQEBCwUAA4IBAQBoj0ac8pe4Vm12Lev4QR0bDzyFgXeIvAKWUm7CLqzL 9Sjq7ze5Do9ow/FVXnHcMGgd0I0JACE1BghSU6zUcI0FpW9e+Oszu4UTl+SlxSua JF522np8khmyzjjAK1ZsRH3DNoAV15yjnLmpiualMQN2xWF+DqEK4U/TV5Y5ILeN ZVUlG5Qim49amygGRdkjXZYh7nGrvQCcUG11i/7pAg2HerSZKoXK836ybj1xcRju 6GTBk+zXZmV4kA84kSUyT5LixDsf1/wmJz6yQaBA9FmGgBG2D0fzI1ALAbgcTFn+ vxwWtG5GG3uJ9Tvv9/06q7x4KrqAj8JTW9+ZLBheFnCa -----END CERTIFICATE-----Generated at Wed Jan 14 09:32:32 2026 by rpki-client