This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/IseXGFrOHh1SrFUGwBGdimL1xPE.roa File: IseXGFrOHh1SrFUGwBGdimL1xPE.roa (raw, json) Hash identifier: QRfGT54r8WrtHwlE62/eFdNxhXQLn2BRJl4Hpjv4kZA= Subject key identifier: 22:C7:97:18:5A:CE:1E:1D:52:AC:55:06:C0:11:9D:8A:62:F5:C4:F1 Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af Certificate serial: 019B79EC258FC798259C8DC9B2BA248DFBAD Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/IseXGFrOHh1SrFUGwBGdimL1xPE.roa Signing time: Thu 01 Jan 2026 14:17:57 +0000 ROA not before: Thu 01 Jan 2026 14:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41249 IP address blocks: 91.227.128.0/24 maxlen: 24 91.227.129.0/24 maxlen: 24 2001:67c:2260::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:25:8f:c7:98:25:9c:8d:c9:b2:ba:24:8d:fb:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af Validity Not Before: Jan 1 14:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22c797185ace1e1d52ac5506c0119d8a62f5c4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:15:96:c0:7a:ea:2e:f0:55:d1:7b:bd:73:93: 19:c1:6b:1f:4d:26:30:3a:a1:e9:1f:07:fc:07:5a: 2d:ea:67:e8:ed:be:69:d2:c5:62:62:24:4c:13:cc: 44:99:89:ba:51:92:04:bc:40:3b:4e:da:14:51:3e: ad:d1:5d:67:b1:19:9e:9c:a2:2b:84:bb:c3:40:3a: a8:72:54:dd:b5:9f:db:4c:dd:42:31:23:7e:3c:f6: 1a:76:91:d1:aa:5b:8d:56:55:7b:f5:93:f7:12:eb: c7:1e:e1:83:a7:01:fd:51:56:f9:04:d8:72:f3:d0: 90:1d:3f:a5:85:03:db:ec:63:db:ae:45:6d:ba:f6: 48:5c:68:e7:f8:5f:ab:9a:b4:ce:9c:66:a3:cd:ae: 87:3e:4d:a5:31:5c:b5:c9:24:32:f5:a8:30:af:cd: 91:c7:11:56:9c:1e:1d:54:72:2c:2d:2b:d6:9d:96: 0a:34:2c:57:d4:5f:99:d0:70:2f:cc:93:65:e3:3c: 02:ad:5e:23:71:d8:eb:bd:1e:0d:ef:8b:20:a2:f1: 79:bf:54:77:d6:bc:c4:2f:25:d2:c1:07:84:30:07: 07:19:87:99:ab:fb:9c:c2:ad:95:8e:1a:04:ad:e6: 5d:03:43:02:25:8d:62:fe:f6:f5:62:e8:e5:08:75: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C7:97:18:5A:CE:1E:1D:52:AC:55:06:C0:11:9D:8A:62:F5:C4:F1 X509v3 Authority Key Identifier: keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/IseXGFrOHh1SrFUGwBGdimL1xPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.227.128.0/23 IPv6: 2001:67c:2260::/48 Signature Algorithm: sha256WithRSAEncryption 0a:1c:17:d6:5e:d1:69:5f:58:4a:4f:8d:57:4a:d7:ce:d3:78: e1:2b:3d:1d:dd:1c:ef:c6:9a:b0:b3:d3:60:33:d1:a4:ae:44: 71:04:a7:e8:43:27:47:41:95:c0:c6:80:ec:24:26:14:0f:fe: a9:ad:32:d8:8c:2e:d8:2e:0f:ad:80:d9:4e:8f:35:e0:e2:a8: c7:8d:8c:78:88:63:30:a6:82:b0:60:55:62:6b:89:0a:84:4d: 7d:ea:65:84:52:47:e1:7f:d4:52:b8:be:28:e8:06:de:45:30: 72:64:e6:64:d2:22:58:c6:8a:cf:a2:ce:dc:c0:c4:55:85:56: 48:8e:d5:f5:36:bd:45:97:8f:3d:3c:b9:5c:1b:63:7f:9d:e0: 5e:8c:e4:a9:52:8e:ed:dd:75:9c:66:ac:37:0b:e9:d4:b0:5e: 0d:09:70:df:a7:68:d0:89:8d:bf:d6:71:48:25:8a:de:4f:47: d2:78:37:3b:6f:f9:56:d4:66:52:ec:2c:80:72:a3:f1:54:38: ad:59:a7:7b:cc:ff:10:4f:f2:8c:a8:bc:d3:31:1b:34:dd:11: 36:8c:8a:63:43:32:97:b0:4a:b5:a5:75:a7:24:7d:69:25:31: cb:fe:71:1f:a6:10:3e:5a:e3:bc:06:7a:5f:40:fc:37:aa:2d: 74:36:40:ac -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57CWPx5glnI3JsrokjfutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy YTg1YWYwHhcNMjYwMTAxMTQxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmM3OTcxODVhY2UxZTFkNTJhYzU1MDZjMDExOWQ4YTYyZjVjNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBWWwHrqLvBV0Xu9c5MZwWsfTSYw OqHpHwf8B1ot6mfo7b5p0sViYiRME8xEmYm6UZIEvEA7TtoUUT6t0V1nsRmenKIr hLvDQDqoclTdtZ/bTN1CMSN+PPYadpHRqluNVlV79ZP3EuvHHuGDpwH9UVb5BNhy 89CQHT+lhQPb7GPbrkVtuvZIXGjn+F+rmrTOnGajza6HPk2lMVy1ySQy9agwr82R xxFWnB4dVHIsLSvWnZYKNCxX1F+Z0HAvzJNl4zwCrV4jcdjrvR4N74sgovF5v1R3 1rzELyXSwQeEMAcHGYeZq/ucwq2VjhoEreZdA0MCJY1i/vb1YujlCHWOpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFCLHlxhazh4dUqxVBsARnYpi9cTxMB8GA1UdIwQY MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt NGRiOTg0ZTFjODMxLzEvSXNlWEdGck9IaDFTckZVR3dCR2RpbUwxeFBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+OAMA8E AgACMAkDBwAgAQZ8ImAwDQYJKoZIhvcNAQELBQADggEBAAocF9Ze0WlfWEpPjVdK 187TeOErPR3dHO/GmrCz02Az0aSuRHEEp+hDJ0dBlcDGgOwkJhQP/qmtMtiMLtgu D62A2U6PNeDiqMeNjHiIYzCmgrBgVWJriQqETX3qZYRSR+F/1FK4vijoBt5FMHJk 5mTSIljGis+iztzAxFWFVkiO1fU2vUWXjz08uVwbY3+d4F6M5KlSju3ddZxmrDcL 6dSwXg0JcN+naNCJjb/WcUglit5PR9J4Nztv+VbUZlLsLIByo/FUOK1Zp3vM/xBP 8oyovNMxGzTdETaMimNDMpewSrWldackfWklMcv+cR+mED5a47wGel9A/DeqLXQ2 QKw= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:04 2026 by rpki-client