This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/IVBEKag0frypxKB-vW5lFvDvCAA.roa File: IVBEKag0frypxKB-vW5lFvDvCAA.roa (raw, json) Hash identifier: 447CZkHLo9a1tRRUCz9HzrzeTGwsKjSaaw1dv0lgZHU= Subject key identifier: 21:50:44:29:A8:34:7E:BC:A9:C4:A0:7E:BD:6E:65:16:F0:EF:08:00 Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171 Certificate serial: 019B7FF21009FBFC0CA7B7A2E3255328D328 Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/IVBEKag0frypxKB-vW5lFvDvCAA.roa Signing time: Fri 02 Jan 2026 18:22:08 +0000 ROA not before: Fri 02 Jan 2026 18:22:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51013 IP address blocks: 37.9.168.0/21 maxlen: 24 45.13.137.0/24 maxlen: 24 45.81.41.0/24 maxlen: 24 45.138.184.0/24 maxlen: 24 45.138.185.0/24 maxlen: 24 185.87.12.0/22 maxlen: 24 195.210.28.0/23 maxlen: 24 2a00:4b40::/32 maxlen: 64 2a0e:bb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:10:09:fb:fc:0c:a7:b7:a2:e3:25:53:28:d3:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171 Validity Not Before: Jan 2 18:22:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21504429a8347ebca9c4a07ebd6e6516f0ef0800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c3:4c:a9:bf:54:5a:3a:f7:f0:ee:cc:93:30: 5a:15:01:42:f8:00:ef:67:d9:b7:62:f9:58:dd:47: 44:c2:26:34:96:7b:f7:4d:3e:1d:d0:4d:2b:19:e7: 43:d3:ed:5d:09:e1:42:b7:ef:39:9c:08:ea:5d:70: 1f:3f:7e:b2:30:f3:35:b3:98:de:47:80:81:43:36: ac:74:14:b7:74:5f:6a:e2:30:3a:48:59:b3:80:3c: ce:e4:1d:71:11:2a:86:7a:32:10:02:17:c1:02:85: 0c:52:8d:e0:ec:38:f0:1c:f8:46:27:a0:e4:9d:a1: 12:2a:a2:f7:b8:d9:be:1d:e7:f9:61:50:ea:2a:07: 01:d8:05:3d:05:73:32:de:00:af:31:a8:36:79:3a: 22:a4:95:b5:17:78:2a:21:fe:e4:13:4e:08:46:8e: b9:14:08:0f:6a:04:b6:36:91:76:c7:39:2f:60:1a: 7a:30:05:00:11:c7:f5:48:d1:a0:2e:11:d9:d1:09: 03:68:e3:e4:a5:0c:6d:c3:79:90:19:2f:e5:1f:bc: ea:eb:d1:2c:92:74:d1:f1:c2:d0:ac:ba:fe:8e:7d: d2:c6:72:a3:e1:97:ad:e7:f0:1f:e1:b0:aa:aa:7e: 95:75:e5:dd:59:2b:a8:3a:73:43:4c:99:5c:8f:29: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:50:44:29:A8:34:7E:BC:A9:C4:A0:7E:BD:6E:65:16:F0:EF:08:00 X509v3 Authority Key Identifier: keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/IVBEKag0frypxKB-vW5lFvDvCAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.9.168.0/21 45.13.137.0/24 45.81.41.0/24 45.138.184.0/23 185.87.12.0/22 195.210.28.0/23 IPv6: 2a00:4b40::/32 2a0e:bb40::/48 Signature Algorithm: sha256WithRSAEncryption 7a:a3:3e:35:b4:8d:6b:a8:11:dc:80:68:3b:3a:e9:46:36:50: c5:e9:42:44:0e:b7:72:fc:fc:eb:ae:49:f3:1a:af:b3:f9:24: b4:5a:ac:0b:59:4f:39:2b:b4:03:44:57:c9:de:ca:b5:74:ce: 0e:5e:2f:e2:8f:79:37:9f:a2:8f:ec:a7:42:a0:f4:bd:2d:0f: 7b:0b:7b:b9:ef:fa:76:17:00:f2:19:ec:de:1e:3d:d9:cd:b7: c5:18:93:4b:fe:8f:88:69:1c:6c:bd:37:9b:cd:24:bb:a8:d4: 95:72:da:a5:65:fe:d3:8e:f3:1c:08:35:d2:12:b8:5d:52:b1: 5a:7b:e8:e1:d3:ef:ab:61:06:57:83:5c:d6:65:ff:f2:47:25: b4:04:87:13:cd:ba:ef:f1:d6:18:ae:59:eb:30:92:77:26:0c: 1d:cd:2e:19:2c:59:01:dc:92:8b:6f:ee:61:64:8b:35:33:d9: fa:0f:8c:dc:bf:5e:77:77:a0:d2:57:42:ea:ad:ec:d9:00:12: fe:f8:42:91:ee:94:89:b0:62:c2:1e:68:86:b9:06:5f:c9:77: 17:d7:71:9e:39:e0:cf:16:40:2e:53:e1:f4:2d:e1:ad:1f:30: 2f:cb:e9:c6:79:4c:d1:b2:f5:e1:89:44:b1:a2:84:88:5e:26: cf:64:e4:e9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt/8hAJ+/wMp7ei4yVTKNMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTllMDJmMDQ2ZTFiZmI1OTI3ZmU3MzFmZjcyNWU0Njk1 OTkxNzEwHhcNMjYwMTAyMTgyMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTUwNDQyOWE4MzQ3ZWJjYTljNGEwN2ViZDZlNjUxNmYwZWYwODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMNMqb9UWjr38O7MkzBaFQFC+ADv Z9m3YvlY3UdEwiY0lnv3TT4d0E0rGedD0+1dCeFCt+85nAjqXXAfP36yMPM1s5je R4CBQzasdBS3dF9q4jA6SFmzgDzO5B1xESqGejIQAhfBAoUMUo3g7DjwHPhGJ6Dk naESKqL3uNm+Hef5YVDqKgcB2AU9BXMy3gCvMag2eToipJW1F3gqIf7kE04IRo65 FAgPagS2NpF2xzkvYBp6MAUAEcf1SNGgLhHZ0QkDaOPkpQxtw3mQGS/lH7zq69Es knTR8cLQrLr+jn3SxnKj4Zet5/Af4bCqqn6VdeXdWSuoOnNDTJlcjyl3TQIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFCFQRCmoNH68qcSgfr1uZRbw7wgAMB8GA1UdIwQY MBaAFEQZ4C8Ebhv7WSf+cx/3JeRpWZFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTct ZjliNzgzNmYyMzkxLzEvSVZCRUthZzBmcnlweEtCLXZXNWxGdkR2Q0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZGU2NjUtYTdlMy00NDBiLTkzYTctZjliNzgzNmYyMzkx LzEvUkJuZ0x3UnVHX3RaSl81ekhfY2w1R2xaa1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQDJQmoAwQA LQ2JAwQALVEpAwQBLYq4AwQCuVcMAwQBw9IcMBYEAgACMBADBQAqAEtAAwcAKg67 QAAAMA0GCSqGSIb3DQEBCwUAA4IBAQB6oz41tI1rqBHcgGg7OulGNlDF6UJEDrdy /PzrrknzGq+z+SS0WqwLWU85K7QDRFfJ3sq1dM4OXi/ij3k3n6KP7KdCoPS9LQ97 C3u57/p2FwDyGezeHj3ZzbfFGJNL/o+IaRxsvTebzSS7qNSVctqlZf7TjvMcCDXS ErhdUrFae+jh0++rYQZXg1zWZf/yRyW0BIcTzbrv8dYYrlnrMJJ3JgwdzS4ZLFkB 3JKLb+5hZIs1M9n6D4zcv153d6DSV0LqrezZABL++EKR7pSJsGLCHmiGuQZfyXcX 13GeOeDPFkAuU+H0LeGtHzAvy+nGeUzRsvXhiUSxooSIXibPZOTp -----END CERTIFICATE-----Generated at Mon Jan 26 16:57:53 2026 by rpki-client