This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa File: IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa (raw, json) Hash identifier: gWtrWAgCkkNaCw5NffP1SoSfwcuzZCjsZNyKpfkfVrs= Subject key identifier: 20:A3:3F:3A:3C:91:4A:80:50:7F:DA:1F:C7:F6:49:EE:A0:CC:3C:16 Certificate issuer: /CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Certificate serial: 019B7DCA1D663CA8C5D1AB764C0C317F8AFC Authority key identifier: D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa Signing time: Fri 02 Jan 2026 08:19:16 +0000 ROA not before: Fri 02 Jan 2026 08:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 185.180.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.mft rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:1d:66:3c:a8:c5:d1:ab:76:4c:0c:31:7f:8a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d38cd9440552e7dab9cd5631d4ab872451535b7a Validity Not Before: Jan 2 08:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20a33f3a3c914a80507fda1fc7f649eea0cc3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:83:45:7b:f1:ea:57:1c:b9:98:eb:9f:7e:48: 6e:39:8f:50:56:a9:46:30:88:68:17:8e:25:cd:2e: 59:90:15:f3:ac:1d:26:3d:0a:80:5d:fe:81:6e:86: 94:3f:42:11:b2:ca:5f:eb:8a:82:be:57:30:b8:e5: c9:cf:43:01:a8:2d:fe:cd:4c:20:93:29:ca:50:fe: 30:1f:ae:b2:e4:de:f0:f4:dc:17:c4:6c:33:9f:44: 74:0d:39:4b:bb:57:c2:89:36:07:35:e3:4c:d5:97: d6:e5:9d:8d:3b:32:af:11:df:fb:13:00:9d:cb:a3: 1d:94:a0:58:84:87:4c:1a:cb:7a:1f:62:0b:76:4d: db:c1:7b:54:b5:de:46:5d:bb:b6:89:97:69:00:a5: 8d:03:e2:14:ce:eb:97:59:d3:ec:d2:80:8b:25:a7: c1:1e:bd:8a:20:a2:9a:be:d1:62:67:29:04:48:5e: 69:82:df:a4:1a:b7:61:75:85:ae:c7:b9:68:2b:9b: ab:ab:20:4e:85:0e:0e:00:d7:de:fb:c9:40:37:5a: 69:33:22:6f:44:ea:89:67:55:95:8c:99:a9:28:68: 17:60:d0:77:c0:db:a4:d4:ed:17:0c:55:d4:03:62: 14:69:ad:32:6e:76:87:49:4f:5f:03:04:92:40:de: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A3:3F:3A:3C:91:4A:80:50:7F:DA:1F:C7:F6:49:EE:A0:CC:3C:16 X509v3 Authority Key Identifier: keyid:D3:8C:D9:44:05:52:E7:DA:B9:CD:56:31:D4:AB:87:24:51:53:5B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04zZRAVS59q5zVYx1KuHJFFTW3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/IKM_OjyRSoBQf9ofx_ZJ7qDMPBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4c3160-de12-4929-a483-7c65a852f092/1/04zZRAVS59q5zVYx1KuHJFFTW3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.180.144.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:66:7b:a9:39:cd:35:08:fd:8c:23:69:e6:0d:8d:99:61:7f: 6f:21:24:62:1f:52:6e:e7:27:7d:85:b3:69:5e:50:31:86:3e: 12:fe:39:31:db:50:4f:20:4f:ad:18:13:25:b9:86:2f:c7:35: c3:a8:78:2e:f1:06:c4:20:12:e5:1b:42:a7:95:e9:4b:5d:65: 6d:eb:f0:30:9c:d9:1b:60:75:00:9f:71:26:d3:7a:d0:18:e5: ec:83:40:d4:6b:82:63:fa:72:10:2f:ad:69:3a:c3:aa:2b:1b: bb:fc:93:5e:86:8d:bc:72:5f:3c:a9:f9:ec:65:24:12:af:65: d7:ee:00:bb:00:9b:c4:8b:c0:61:e5:36:1a:57:ee:19:23:fd: ec:47:66:9d:d6:a5:b1:83:28:dc:41:80:8d:32:d4:a3:84:23: e4:77:88:5e:4f:3a:fc:52:0f:bf:2a:65:19:6b:34:01:eb:59: c3:a3:63:8c:17:2b:89:f8:af:11:3e:32:8c:d6:9c:1f:f9:40: 2b:47:16:04:3c:52:45:16:b3:d2:d7:7e:42:ec:32:97:d5:ef: 8c:32:9c:8b:46:27:c6:a6:69:5c:81:59:b8:44:91:dd:cb:38: de:f4:e0:86:44:90:cf:5d:34:2b:bc:32:83:47:a2:65:5c:ca: 39:75:13:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yh1mPKjF0at2TAwxf4r8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzOGNkOTQ0MDU1MmU3ZGFiOWNkNTYzMWQ0YWI4NzI0NTE1 MzViN2EwHhcNMjYwMTAyMDgxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGEzM2YzYTNjOTE0YTgwNTA3ZmRhMWZjN2Y2NDllZWEwY2MzYzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjINFe/HqVxy5mOuffkhuOY9QVqlG MIhoF44lzS5ZkBXzrB0mPQqAXf6BboaUP0IRsspf64qCvlcwuOXJz0MBqC3+zUwg kynKUP4wH66y5N7w9NwXxGwzn0R0DTlLu1fCiTYHNeNM1ZfW5Z2NOzKvEd/7EwCd y6MdlKBYhIdMGst6H2ILdk3bwXtUtd5GXbu2iZdpAKWNA+IUzuuXWdPs0oCLJafB Hr2KIKKavtFiZykESF5pgt+kGrdhdYWux7loK5urqyBOhQ4OANfe+8lAN1ppMyJv ROqJZ1WVjJmpKGgXYNB3wNuk1O0XDFXUA2IUaa0ybnaHSU9fAwSSQN79mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCCjPzo8kUqAUH/aH8f2Se6gzDwWMB8GA1UdIwQY MBaAFNOM2UQFUufauc1WMdSrhyRRU1t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMt N2M2NWE4NTJmMDkyLzEvSUtNX09qeVJTb0JRZjlvZnhfWko3cURNUEJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80YzMxNjAtZGUxMi00OTI5LWE0ODMtN2M2NWE4NTJmMDky LzEvMDR6WlJBVlM1OXE1elZZeDFLdUhKRkZUVzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubSQMA0G CSqGSIb3DQEBCwUAA4IBAQCcZnupOc01CP2MI2nmDY2ZYX9vISRiH1Ju5yd9hbNp XlAxhj4S/jkx21BPIE+tGBMluYYvxzXDqHgu8QbEIBLlG0KnlelLXWVt6/AwnNkb YHUAn3Em03rQGOXsg0DUa4Jj+nIQL61pOsOqKxu7/JNeho28cl88qfnsZSQSr2XX 7gC7AJvEi8Bh5TYaV+4ZI/3sR2ad1qWxgyjcQYCNMtSjhCPkd4heTzr8Ug+/KmUZ azQB61nDo2OMFyuJ+K8RPjKM1pwf+UArRxYEPFJFFrPS135C7DKX1e+MMpyLRifG pmlcgVm4RJHdyzje9OCGRJDPXTQrvDKDR6JlXMo5dRMU -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:29 2026 by rpki-client