This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ijczCncElROlHI46d-XpTNHadTg.roa File: ijczCncElROlHI46d-XpTNHadTg.roa (raw, json) Hash identifier: KzZMYnuTUZlqE9+oyNnH3CyhXQ+2YyXZupvfcmp4Fcw= Subject key identifier: 8A:37:33:0A:77:04:95:13:A5:1C:8E:3A:77:E5:E9:4C:D1:DA:75:38 Certificate issuer: /CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11 Certificate serial: 019B7BA4E0C9CE6D4169367FF57B06F5B795 Authority key identifier: 22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ijczCncElROlHI46d-XpTNHadTg.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204607 IP address blocks: 85.202.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.mft rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e0:c9:ce:6d:41:69:36:7f:f5:7b:06:f5:b7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2264d8aa1878f9dc1424d2fdade4039e120d5b11 Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a37330a77049513a51c8e3a77e5e94cd1da7538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0e:5d:3a:76:2e:f8:3c:ea:27:25:02:6f:79: e5:8b:61:52:68:6d:b6:1e:97:0d:e5:4d:5b:4f:85: c3:8c:0d:be:7f:6a:06:13:35:82:a9:de:e5:ff:d6: ac:cc:c6:84:3d:2d:63:33:90:f6:25:1a:bb:92:b1: 49:d6:53:fa:2c:f3:b5:0e:fd:03:e9:c5:b8:8e:42: 01:ee:bd:21:93:a6:33:55:01:d6:53:20:a3:21:34: 24:5b:ec:04:33:ba:ba:0d:e5:21:12:6b:5c:e1:dd: 58:24:9e:8a:3f:bb:a3:c3:02:75:b7:23:80:e5:98: 09:04:4e:f8:27:15:82:c0:96:eb:98:30:8e:62:70: 18:73:b0:db:e6:35:d8:6c:62:91:56:ea:b3:2b:b0: 80:43:34:ca:37:c8:5d:b0:d8:f1:fa:c3:f6:e0:0f: bb:e9:df:a1:ba:51:93:f9:ea:e8:02:8a:c2:c2:4b: d5:05:5f:c5:49:8d:d0:c3:8d:68:5c:b4:2c:50:6c: 31:c6:de:91:03:d5:a2:9f:12:54:1f:ed:66:9b:3f: 57:58:7c:4c:3f:15:db:8b:e0:ed:96:8d:d8:35:7e: 15:41:6f:d5:f7:a8:2b:88:f8:13:5c:a2:8c:46:b3: 53:77:a9:96:c6:5e:69:cf:ea:fc:7e:db:83:42:1b: b5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:37:33:0A:77:04:95:13:A5:1C:8E:3A:77:E5:E9:4C:D1:DA:75:38 X509v3 Authority Key Identifier: keyid:22:64:D8:AA:18:78:F9:DC:14:24:D2:FD:AD:E4:03:9E:12:0D:5B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImTYqhh4-dwUJNL9reQDnhINWxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ijczCncElROlHI46d-XpTNHadTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/ac9a4f-5774-4ecc-9c1d-c998f0292135/1/ImTYqhh4-dwUJNL9reQDnhINWxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.202.22.0/24 Signature Algorithm: sha256WithRSAEncryption 17:bd:9d:3c:ca:27:81:e3:a1:70:66:19:75:9d:95:92:a3:6b: 49:5c:83:ab:c8:df:28:99:91:08:b6:98:9c:b4:1c:8b:67:16: 43:15:ad:5c:35:b8:60:f7:2c:ee:72:c1:05:e6:11:ea:19:20: bb:58:84:92:6a:fc:f5:6c:cb:8f:d9:bc:be:3f:e9:ca:b4:46: 77:8f:ee:73:8e:78:74:3d:bf:c9:40:a7:b5:d6:c2:7d:60:b7: 96:86:6f:09:42:e4:b8:19:65:6c:90:a7:c2:67:ff:56:c0:41: 70:c6:dc:64:1c:63:5a:78:5c:8e:97:85:ca:60:58:94:ec:db: fc:6a:ef:4c:48:bc:e8:4b:f8:6e:26:ff:ad:c2:f6:f5:0a:4b: a9:5a:8e:7f:49:b8:84:7b:42:65:08:a4:65:5b:07:58:54:a8: 6a:bd:54:9d:b6:9d:40:b3:c8:fc:32:6a:c6:76:1b:c9:a7:8a: cb:08:1c:d9:b3:f1:54:a0:12:94:66:55:a5:f0:cb:d2:b3:ad: f5:9c:bb:8e:e8:bd:71:56:83:23:31:70:7b:0f:98:bc:41:93: ad:cb:f4:1c:bc:80:cc:6a:2a:e2:1f:e6:00:2e:a4:1b:e2:c8: 50:24:7b:11:42:48:47:8e:cd:11:86:11:5e:74:f0:6c:fb:f0: 08:19:ac:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pODJzm1BaTZ/9XsG9beVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyNjRkOGFhMTg3OGY5ZGMxNDI0ZDJmZGFkZTQwMzllMTIw ZDViMTEwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTM3MzMwYTc3MDQ5NTEzYTUxYzhlM2E3N2U1ZTk0Y2QxZGE3NTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w5dOnYu+DzqJyUCb3nli2FSaG22 HpcN5U1bT4XDjA2+f2oGEzWCqd7l/9aszMaEPS1jM5D2JRq7krFJ1lP6LPO1Dv0D 6cW4jkIB7r0hk6YzVQHWUyCjITQkW+wEM7q6DeUhEmtc4d1YJJ6KP7ujwwJ1tyOA 5ZgJBE74JxWCwJbrmDCOYnAYc7Db5jXYbGKRVuqzK7CAQzTKN8hdsNjx+sP24A+7 6d+hulGT+eroAorCwkvVBV/FSY3Qw41oXLQsUGwxxt6RA9WinxJUH+1mmz9XWHxM PxXbi+Dtlo3YNX4VQW/V96griPgTXKKMRrNTd6mWxl5pz+r8ftuDQhu1mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIo3Mwp3BJUTpRyOOnfl6UzR2nU4MB8GA1UdIwQY MBaAFCJk2KoYePncFCTS/a3kA54SDVsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQt Yzk5OGYwMjkyMTM1LzEvaWpjekNuY0VsUk9sSEk0NmQtWHBUTkhhZFRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9hYzlhNGYtNTc3NC00ZWNjLTljMWQtYzk5OGYwMjkyMTM1 LzEvSW1UWXFoaDQtZHdVSk5MOXJlUURuaElOV3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcoWMA0G CSqGSIb3DQEBCwUAA4IBAQAXvZ08yieB46FwZhl1nZWSo2tJXIOryN8omZEItpic tByLZxZDFa1cNbhg9yzucsEF5hHqGSC7WISSavz1bMuP2by+P+nKtEZ3j+5zjnh0 Pb/JQKe11sJ9YLeWhm8JQuS4GWVskKfCZ/9WwEFwxtxkHGNaeFyOl4XKYFiU7Nv8 au9MSLzoS/huJv+twvb1CkupWo5/SbiEe0JlCKRlWwdYVKhqvVSdtp1As8j8MmrG dhvJp4rLCBzZs/FUoBKUZlWl8MvSs631nLuO6L1xVoMjMXB7D5i8QZOty/QcvIDM airiH+YALqQb4shQJHsRQkhHjs0RhhFedPBs+/AIGaxV -----END CERTIFICATE-----Generated at Sat Jan 10 06:59:44 2026 by rpki-client