This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/iJzZtljWIar5Fy83XWae5YmptnU.roa File: iJzZtljWIar5Fy83XWae5YmptnU.roa (raw, json) Hash identifier: J8Td44gvEJyFMk2Q3nnnz2KQYHmuhOMCV+hhX1uovQ4= Subject key identifier: 88:9C:D9:B6:58:D6:21:AA:F9:17:2F:37:5D:66:9E:E5:89:A9:B6:75 Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7 Certificate serial: 019B7EA49F7B230DC855D79F94FF1D58030E Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/iJzZtljWIar5Fy83XWae5YmptnU.roa Signing time: Fri 02 Jan 2026 12:17:56 +0000 ROA not before: Fri 02 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50134 IP address blocks: 194.246.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:9f:7b:23:0d:c8:55:d7:9f:94:ff:1d:58:03:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7 Validity Not Before: Jan 2 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=889cd9b658d621aaf9172f375d669ee589a9b675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:d4:12:3b:72:8a:da:b6:9f:a1:74:88:51: cf:b1:e1:68:04:61:34:7f:e2:4a:dc:b6:e0:4c:d6: 6e:9b:db:ee:9a:b1:c2:75:46:78:5c:85:ca:ef:68: 55:ec:17:a5:31:66:70:07:7e:b0:54:05:07:82:13: 74:40:97:e6:b5:00:6a:ba:13:a6:fa:96:a7:32:38: 31:9a:1f:7f:a1:c2:d3:59:56:fd:a9:8d:25:b0:00: f8:43:0a:ff:62:a7:11:a1:ef:51:df:45:67:22:9e: 00:0d:53:21:a4:c4:5b:e1:d6:9b:90:fa:e3:76:04: 6e:4c:c8:5f:fe:8c:b8:34:6a:5d:2c:a8:84:c9:b6: f0:be:ef:0c:4c:e7:ab:b4:64:2c:da:0d:07:99:11: 3a:fc:b4:40:57:70:53:bc:06:93:3b:89:14:e8:7a: 8a:7c:8e:38:c9:de:e1:84:47:6a:87:fd:19:1e:d6: 6f:90:b6:3f:c4:14:ea:fc:61:bc:8a:6d:44:32:c1: 2a:9c:b8:03:e2:6f:53:c9:c7:27:75:de:ac:04:1d: 3a:36:f8:86:0c:21:84:b5:d0:c4:e8:20:20:ef:82: 85:b4:f7:2e:a7:09:a0:12:f0:d6:6f:2d:1e:9e:c4: 29:9f:4e:ce:c6:15:33:21:42:33:ae:40:61:4d:51: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:9C:D9:B6:58:D6:21:AA:F9:17:2F:37:5D:66:9E:E5:89:A9:B6:75 X509v3 Authority Key Identifier: keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/iJzZtljWIar5Fy83XWae5YmptnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.76.0/24 Signature Algorithm: sha256WithRSAEncryption 93:22:db:42:c5:5a:32:da:9e:1a:8a:7f:48:2b:9f:d9:7e:ab: 68:fd:87:31:0e:2b:1d:0b:f6:dc:f4:4c:dd:dc:2a:04:41:29: 73:b4:1e:e0:2b:64:72:66:ed:52:56:88:0a:bb:f7:98:85:ed: 20:45:99:1c:ec:67:a1:f6:1e:5c:de:ae:35:8d:78:c6:ad:58: 55:e1:72:43:95:3b:76:1c:c0:e0:62:f6:4d:c4:01:34:c4:f7: ca:0d:10:91:90:1e:41:4d:5e:08:21:ad:54:2a:e0:aa:ed:1b: 8a:c9:9e:42:99:bb:e7:e2:c2:18:b8:87:b0:ab:29:2e:cd:ed: b1:d0:6a:b0:23:f1:e1:1d:19:d0:fe:cc:bd:60:68:1f:2a:1e: e3:7b:97:59:f6:d0:87:7b:cf:f7:a0:26:6b:dc:92:b8:3e:7f: 13:b5:ad:54:1e:87:1d:51:ef:08:21:dc:6f:e6:1d:69:04:69: f5:84:82:38:35:0a:54:9a:fe:7a:8a:ab:36:7c:dd:36:f0:3f: e2:91:27:95:d0:a3:b3:d6:87:f9:ce:84:f5:08:09:39:ea:e8: 0a:65:a0:56:9c:ea:cf:ed:be:b0:ff:08:2e:e4:82:91:89:ae: 52:45:07:4e:e6:c9:75:cf:8d:ac:5b:16:5f:04:66:00:b5:99: 59:df:bf:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pJ97Iw3IVdeflP8dWAMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYTQyNDk3OTcwZDY1NTQxZGRiMTU5NjU4ZTNiMGE2ZTJm NTE2YjcwHhcNMjYwMTAyMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODljZDliNjU4ZDYyMWFhZjkxNzJmMzc1ZDY2OWVlNTg5YTliNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv17UEjtyitq2n6F0iFHPseFoBGE0 f+JK3LbgTNZum9vumrHCdUZ4XIXK72hV7BelMWZwB36wVAUHghN0QJfmtQBquhOm +panMjgxmh9/ocLTWVb9qY0lsAD4Qwr/YqcRoe9R30VnIp4ADVMhpMRb4dabkPrj dgRuTMhf/oy4NGpdLKiEybbwvu8MTOertGQs2g0HmRE6/LRAV3BTvAaTO4kU6HqK fI44yd7hhEdqh/0ZHtZvkLY/xBTq/GG8im1EMsEqnLgD4m9Tyccndd6sBB06NviG DCGEtdDE6CAg74KFtPcupwmgEvDWby0ensQpn07OxhUzIUIzrkBhTVEHTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIic2bZY1iGq+RcvN11mnuWJqbZ1MB8GA1UdIwQY MBaAFCOkJJeXDWVUHdsVlljjsKbi9Ra3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iYTI4NTctYzA5OC00NGQyLTljMDEt ZTcyMGZlYjEwMTAzLzEvaUp6WnRsaldJYXI1Rnk4M1hXYWU1WW1wdG5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iYTI4NTctYzA5OC00NGQyLTljMDEtZTcyMGZlYjEwMTAz LzEvSTZRa2w1Y05aVlFkMnhXV1dPT3dwdUwxRnJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvZMMA0G CSqGSIb3DQEBCwUAA4IBAQCTIttCxVoy2p4ain9IK5/Zfqto/YcxDisdC/bc9Ezd 3CoEQSlztB7gK2RyZu1SVogKu/eYhe0gRZkc7Geh9h5c3q41jXjGrVhV4XJDlTt2 HMDgYvZNxAE0xPfKDRCRkB5BTV4IIa1UKuCq7RuKyZ5Cmbvn4sIYuIewqykuze2x 0GqwI/HhHRnQ/sy9YGgfKh7je5dZ9tCHe8/3oCZr3JK4Pn8Tta1UHocdUe8IIdxv 5h1pBGn1hII4NQpUmv56iqs2fN028D/ikSeV0KOz1of5zoT1CAk56ugKZaBWnOrP 7b6w/wgu5IKRia5SRQdO5sl1z42sWxZfBGYAtZlZ37/O -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:17 2026 by rpki-client