This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IYFjZMyX75vcbYBiUGhcoTj06OE.roa File: IYFjZMyX75vcbYBiUGhcoTj06OE.roa (raw, json) Hash identifier: 2m6xqJ+0I2p8u2+OHUa5q2p4RjQvlV0vgo6ryJlt/uQ= Subject key identifier: 21:81:63:64:CC:97:EF:9B:DC:6D:80:62:50:68:5C:A1:38:F4:E8:E1 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D5B7D7C6E335FA1AF9E7D5A94AD45 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IYFjZMyX75vcbYBiUGhcoTj06OE.roa Signing time: Fri 02 Jan 2026 06:20:28 +0000 ROA not before: Fri 02 Jan 2026 06:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210740 IP address blocks: 194.32.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:5b:7d:7c:6e:33:5f:a1:af:9e:7d:5a:94:ad:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21816364cc97ef9bdc6d806250685ca138f4e8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:41:1e:f1:c4:92:b0:80:50:d3:2b:53:0b:57: c7:5e:4b:10:1b:2b:0a:b7:ff:fc:c9:69:a7:11:2e: f7:0b:9a:ba:ea:56:3c:9a:41:2a:23:0e:12:07:04: b4:0c:94:69:fd:6f:9c:fd:93:b2:6d:e1:75:3e:bb: c8:4c:0f:5b:45:a1:92:57:12:d4:48:50:af:c3:b6: 7b:6d:94:8f:92:51:6a:c0:69:a9:1f:c7:aa:13:04: ee:49:2d:8c:14:58:ef:41:11:17:23:a5:92:35:cd: 8f:44:61:a5:8e:ec:2b:3b:ac:47:c6:14:51:a3:40: 9c:19:45:da:e1:4d:ec:2f:f1:b8:6f:c8:51:82:f5: fe:fa:65:e8:44:7e:8d:b4:c2:40:a1:2c:fb:7b:be: 78:98:e4:aa:24:15:eb:54:c6:da:de:be:ca:48:21: d9:80:0b:0d:1f:90:89:ac:f6:5e:8d:87:4f:70:d3: 3c:9d:73:0c:3c:41:f4:1f:7b:5e:1a:49:20:dc:f5: 1c:56:c7:33:c1:1d:29:5a:d9:b3:46:5b:ef:cd:0e: a9:5e:dd:d5:74:83:5b:4d:b0:d5:c1:ae:66:45:0b: 08:3f:7f:94:40:a9:da:0a:57:5a:cc:ba:17:db:30: e7:b2:df:1a:c0:04:68:22:54:9e:79:13:6e:47:34: b6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:81:63:64:CC:97:EF:9B:DC:6D:80:62:50:68:5C:A1:38:F4:E8:E1 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/IYFjZMyX75vcbYBiUGhcoTj06OE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.121.0/24 Signature Algorithm: sha256WithRSAEncryption 79:de:fb:93:6a:43:cd:dc:d5:fa:a3:d1:cd:04:2c:e7:73:6d: c0:34:b8:e4:ee:1e:1f:d1:c4:a4:2a:41:d4:0f:5d:51:f6:49: 22:20:49:1f:83:df:bd:82:10:ca:39:cb:80:d6:36:83:d7:bf: cc:38:ef:61:ec:21:80:c9:08:4b:0b:d8:77:98:7a:82:e0:84: 6e:ca:6c:d3:d7:08:b1:cf:2a:8b:69:84:5e:2e:5c:83:29:e4: c2:48:66:e0:74:3d:82:79:25:96:4c:cb:f2:48:46:70:0a:e2: b6:7a:18:73:8e:99:34:f9:0e:09:6d:82:54:fe:82:20:26:31: 88:14:5b:85:11:d6:c1:63:28:11:ad:16:4a:82:43:35:55:91: 9f:18:a9:b7:8e:77:43:45:3f:d4:e9:f5:dc:e6:66:c2:ca:47: 84:48:0a:b1:1f:5f:82:98:13:88:6a:cd:76:9e:37:cc:7e:4c: f8:30:0a:2c:bc:e7:76:42:8a:5c:e6:78:71:0c:47:0d:8f:b8: b1:65:09:77:fe:d4:ca:90:7a:b2:e6:8a:8c:c4:6e:c4:c0:a2: da:51:a3:27:d2:0c:01:59:a6:26:91:e2:97:32:37:9b:e4:86: 85:1c:90:e4:aa:9a:7c:59:8a:b4:11:2e:80:82:9c:c8:73:39: a7:8f:e8:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVt9fG4zX6Gvnn1alK1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTgxNjM2NGNjOTdlZjliZGM2ZDgwNjI1MDY4NWNhMTM4ZjRlOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0Ee8cSSsIBQ0ytTC1fHXksQGysK t//8yWmnES73C5q66lY8mkEqIw4SBwS0DJRp/W+c/ZOybeF1PrvITA9bRaGSVxLU SFCvw7Z7bZSPklFqwGmpH8eqEwTuSS2MFFjvQREXI6WSNc2PRGGljuwrO6xHxhRR o0CcGUXa4U3sL/G4b8hRgvX++mXoRH6NtMJAoSz7e754mOSqJBXrVMba3r7KSCHZ gAsNH5CJrPZejYdPcNM8nXMMPEH0H3teGkkg3PUcVsczwR0pWtmzRlvvzQ6pXt3V dINbTbDVwa5mRQsIP3+UQKnaCldazLoX2zDnst8awARoIlSeeRNuRzS2AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGBY2TMl++b3G2AYlBoXKE49OjhMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvSVlGalpNeVg3NXZjYllCaVVHaGNvVGowNk9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiB5MA0G CSqGSIb3DQEBCwUAA4IBAQB53vuTakPN3NX6o9HNBCznc23ANLjk7h4f0cSkKkHU D11R9kkiIEkfg9+9ghDKOcuA1jaD17/MOO9h7CGAyQhLC9h3mHqC4IRuymzT1wix zyqLaYReLlyDKeTCSGbgdD2CeSWWTMvySEZwCuK2ehhzjpk0+Q4JbYJU/oIgJjGI FFuFEdbBYygRrRZKgkM1VZGfGKm3jndDRT/U6fXc5mbCykeESAqxH1+CmBOIas12 njfMfkz4MAosvOd2Qopc5nhxDEcNj7ixZQl3/tTKkHqy5oqMxG7EwKLaUaMn0gwB WaYmkeKXMjeb5IaFHJDkqpp8WYq0ES6AgpzIczmnj+gc -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:15 2026 by rpki-client