This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/il-df2VTO8APi2xR9Hqlx_UJPQc.roa File: il-df2VTO8APi2xR9Hqlx_UJPQc.roa (raw, json) Hash identifier: 6fv3FP+587nQ1f5A1a5cKxyo33Tjy8X4rme7NWiHnh4= Subject key identifier: 8A:5F:9D:7F:65:53:3B:C0:0F:8B:6C:51:F4:7A:A5:C7:F5:09:3D:07 Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019B7D5D2D8EEE47AE66AC42DA8488CDE6E4 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/il-df2VTO8APi2xR9Hqlx_UJPQc.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63150 IP address blocks: 77.93.89.0/24 maxlen: 24 77.93.90.0/24 maxlen: 24 2a14:7dc0:200::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2d:8e:ee:47:ae:66:ac:42:da:84:88:cd:e6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a5f9d7f65533bc00f8b6c51f47aa5c7f5093d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:f8:36:65:79:ab:1a:73:7f:f6:11:5d:a1: 8e:cc:ff:16:47:71:0f:95:ad:3d:64:5a:f2:01:d8: 67:81:4b:6b:b1:18:dd:90:56:47:22:16:9e:a7:a5: 30:c7:b8:b3:a8:a9:a6:f4:69:1e:0a:18:b6:2a:af: ba:20:84:ee:df:6c:7c:09:70:91:e4:ee:d4:de:a5: 27:0d:1f:4f:ca:f9:fe:ca:55:c3:3f:d5:d7:6c:d3: 23:f3:24:b9:58:db:43:c0:37:bd:86:46:39:40:ff: 30:4e:ba:0b:cd:4b:4b:aa:cb:4c:c5:10:5e:c4:9b: a0:0f:84:2a:42:d4:25:af:db:74:1d:b8:50:74:6f: 45:6e:af:6e:87:c5:a8:96:5b:1d:89:16:40:a1:4a: 60:68:e0:ab:3d:8a:54:53:f7:ee:95:79:93:19:32: f5:30:ef:d1:55:4b:23:fa:e8:a9:e1:4f:28:06:ba: cb:d2:78:18:85:02:75:7c:a8:62:3d:75:23:54:0b: b6:83:9c:e0:b5:97:4d:2e:14:1f:2f:2f:2e:d7:3b: e8:7a:c5:42:2f:33:78:0e:fa:cd:20:cf:47:8a:3b: 66:66:8c:e0:e2:8d:5e:b4:98:7c:df:02:1d:85:e8: f0:ce:82:36:fa:3d:88:f7:b1:8c:64:a5:b1:6c:08: c7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5F:9D:7F:65:53:3B:C0:0F:8B:6C:51:F4:7A:A5:C7:F5:09:3D:07 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/il-df2VTO8APi2xR9Hqlx_UJPQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.93.89.0-77.93.90.255 IPv6: 2a14:7dc0:200::/40 Signature Algorithm: sha256WithRSAEncryption 00:c5:81:0c:bd:30:3d:04:73:ea:c6:26:e2:b5:c6:4e:88:10: a7:39:8f:86:05:1c:1f:c0:e5:f0:8a:d7:2c:4d:08:d7:e6:a4: b4:d3:7d:34:50:f4:f4:1f:fc:49:26:ec:8f:e4:92:59:2e:0e: 8f:de:cf:c1:d0:4d:35:f1:87:35:72:a6:3b:f4:91:f8:5d:f9: 5e:1e:b8:0e:7c:13:4c:9e:25:6a:73:cb:f7:f0:2a:6d:9f:b0: 15:10:a9:0c:32:ff:97:df:a9:a3:b8:a7:52:68:91:cc:b7:af: 6c:9e:5d:bc:a6:89:8a:69:5d:59:24:44:4a:cb:1e:cb:a9:10: 71:0d:39:e4:b9:1c:ec:d9:16:7e:d4:a7:50:ac:f0:dd:3d:0c: 3a:44:b3:9d:48:c7:46:ce:ca:97:a5:c0:2f:b1:01:20:20:47: 7d:9a:29:d4:a5:48:b2:50:2d:1b:cc:8b:d0:3b:a5:03:be:ad: 1d:8f:ba:fb:a6:68:0f:e9:03:47:9c:da:53:63:16:d2:70:8e: 21:5c:74:5d:96:08:87:9f:69:75:23:b7:0a:ea:9e:bd:83:64: 1b:cd:13:64:98:25:91:80:98:1e:41:67:a7:6a:41:dc:bd:c1: d5:4d:dc:67:9a:c9:9f:73:f9:a7:fd:58:22:f6:e6:6e:97:2b: 7b:34:c7:a2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XS2O7keuZqxC2oSIzebkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTVmOWQ3ZjY1NTMzYmMwMGY4YjZjNTFmNDdhYTVjN2Y1MDkzZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zn4NmV5qxpzf/YRXaGOzP8WR3EP la09ZFryAdhngUtrsRjdkFZHIhaep6Uwx7izqKmm9GkeChi2Kq+6IITu32x8CXCR 5O7U3qUnDR9Pyvn+ylXDP9XXbNMj8yS5WNtDwDe9hkY5QP8wTroLzUtLqstMxRBe xJugD4QqQtQlr9t0HbhQdG9Fbq9uh8WollsdiRZAoUpgaOCrPYpUU/fulXmTGTL1 MO/RVUsj+uip4U8oBrrL0ngYhQJ1fKhiPXUjVAu2g5zgtZdNLhQfLy8u1zvoesVC LzN4DvrNIM9HijtmZozg4o1etJh83wIdhejwzoI2+j2I97GMZKWxbAjHKQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFIpfnX9lUzvAD4tsUfR6pcf1CT0HMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvaWwtZGYyVlRPOEFQaTJ4UjlIcWx4X1VKUFFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBABNXVkD BABNXVowDgQCAAIwCAMGACoUfcACMA0GCSqGSIb3DQEBCwUAA4IBAQAAxYEMvTA9 BHPqxibitcZOiBCnOY+GBRwfwOXwitcsTQjX5qS00300UPT0H/xJJuyP5JJZLg6P 3s/B0E018Yc1cqY79JH4XfleHrgOfBNMniVqc8v38Cptn7AVEKkMMv+X36mjuKdS aJHMt69snl28pomKaV1ZJERKyx7LqRBxDTnkuRzs2RZ+1KdQrPDdPQw6RLOdSMdG zsqXpcAvsQEgIEd9minUpUiyUC0bzIvQO6UDvq0dj7r7pmgP6QNHnNpTYxbScI4h XHRdlgiHn2l1I7cK6p69g2QbzRNkmCWRgJgeQWenakHcvcHVTdxnmsmfc/mn/Vgi 9uZulyt7NMei -----END CERTIFICATE-----Generated at Wed Jan 14 12:54:42 2026 by rpki-client