This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ikca8TkXyARfMfeAt-KLIiWe16A.roa File: Ikca8TkXyARfMfeAt-KLIiWe16A.roa (raw, json) Hash identifier: xOjUcH3QnBPVUA22Osx++rufjYRPk1GF+p90qLmHkQ4= Subject key identifier: 22:47:1A:F1:39:17:C8:04:5F:31:F7:80:B7:E2:8B:22:25:9E:D7:A0 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E224317115870D6CCFB4B700715E6 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ikca8TkXyARfMfeAt-KLIiWe16A.roa Signing time: Thu 01 Jan 2026 12:17:47 +0000 ROA not before: Thu 01 Jan 2026 12:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8860 IP address blocks: 45.67.19.0/24 maxlen: 32 185.133.72.0/24 maxlen: 32 185.166.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:22:43:17:11:58:70:d6:cc:fb:4b:70:07:15:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22471af13917c8045f31f780b7e28b22259ed7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:de:59:9f:53:67:74:60:ef:06:8d:36:bb:0f: bc:e6:7d:4a:24:ec:17:35:93:73:49:e5:f1:2b:18: 0a:3b:b7:a4:49:4a:a7:28:55:f5:4f:19:c2:fb:aa: 03:e2:9d:3f:97:fc:87:ad:a5:49:12:98:71:57:53: 13:af:bd:9e:5c:e2:01:97:15:6a:58:6f:71:6d:ab: a1:8f:37:70:c6:d3:14:f1:8f:62:c8:e0:87:25:43: 7f:73:43:ad:ad:0e:62:4a:10:7a:ca:ab:4b:2a:71: 45:f2:7b:3c:54:e9:5e:8a:38:34:ac:1d:a5:78:e4: 68:70:d9:f4:91:9b:94:f9:69:30:a2:ac:dc:3d:3a: d9:41:1e:17:ad:c7:ca:62:bd:f3:4b:22:46:30:f6: 79:35:7b:34:43:3d:9f:2d:cd:04:9c:2f:f4:c6:09: ff:2f:33:a9:a1:cc:8a:10:b7:22:58:33:af:f5:8c: 6d:47:36:2c:53:62:ea:a5:91:8d:af:fb:39:eb:f7: 83:e8:57:0f:9e:cc:67:ac:0b:4f:7c:fe:51:e1:26: da:31:84:7f:0a:1e:84:9d:18:8f:14:d8:91:f1:41: ba:eb:7b:a2:d7:59:72:f6:89:a1:a3:17:50:87:a2: b7:bd:95:de:92:e1:e1:b4:54:71:4b:ed:95:3c:ee: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:47:1A:F1:39:17:C8:04:5F:31:F7:80:B7:E2:8B:22:25:9E:D7:A0 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Ikca8TkXyARfMfeAt-KLIiWe16A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.19.0/24 185.133.72.0/24 185.166.238.0/24 Signature Algorithm: sha256WithRSAEncryption cb:4f:7a:9b:72:70:c5:a2:b6:d9:48:06:cb:11:f6:f8:62:2b: 57:45:4e:60:39:80:bc:da:7b:31:ae:37:dc:9a:d4:be:e1:b7: f3:b5:55:5b:c7:49:4d:ce:bc:e6:7b:aa:d9:e0:9b:f1:66:10: 63:d8:7e:c3:7b:65:ec:2a:a7:ac:00:d4:5a:09:af:4f:c6:c9: 44:b9:a8:5c:d9:c6:2c:22:87:7b:dd:ec:81:bb:7b:84:85:12: fd:41:a6:f7:a7:1b:02:89:c0:47:cd:c1:1e:78:96:e3:e5:3e: 89:d4:c8:89:fc:06:d9:bc:4c:93:15:73:62:af:b3:84:03:7b: 88:5b:46:ed:35:fe:06:b5:33:1e:44:15:ab:85:74:e9:66:77: 8b:46:bc:ef:b9:14:c4:9b:57:98:f3:e9:4b:4a:ff:8e:2e:99: 99:14:a6:ea:2f:74:af:7f:26:39:c0:3d:3b:35:17:e5:8f:68: 95:f2:63:48:6e:0c:4c:9e:a8:fb:dd:99:23:3d:57:70:86:a9: 52:02:7e:62:9e:6b:59:9b:04:ae:eb:ef:49:e1:5c:17:c6:32: fd:5c:ff:4b:56:19:e5:ed:43:58:32:37:48:77:c4:de:44:69: c4:09:38:84:01:9d:6a:e1:b9:57:a6:4f:ec:10:1f:22:7f:18: 94:33:1b:8d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fiJDFxFYcNbM+0twBxXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ3MWFmMTM5MTdjODA0NWYzMWY3ODBiN2UyOGIyMjI1OWVkN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvt5Zn1NndGDvBo02uw+85n1KJOwX NZNzSeXxKxgKO7ekSUqnKFX1TxnC+6oD4p0/l/yHraVJEphxV1MTr72eXOIBlxVq WG9xbauhjzdwxtMU8Y9iyOCHJUN/c0OtrQ5iShB6yqtLKnFF8ns8VOleijg0rB2l eORocNn0kZuU+WkwoqzcPTrZQR4XrcfKYr3zSyJGMPZ5NXs0Qz2fLc0EnC/0xgn/ LzOpocyKELciWDOv9YxtRzYsU2LqpZGNr/s56/eD6FcPnsxnrAtPfP5R4SbaMYR/ Ch6EnRiPFNiR8UG663ui11ly9omhoxdQh6K3vZXekuHhtFRxS+2VPO4N/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCJHGvE5F8gEXzH3gLfiiyIlntegMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvSWtjYThUa1h5QVJmTWZlQXQtS0xJaVdlMTZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALUMTAwQA uYVIAwQAuabuMA0GCSqGSIb3DQEBCwUAA4IBAQDLT3qbcnDForbZSAbLEfb4YitX RU5gOYC82nsxrjfcmtS+4bfztVVbx0lNzrzme6rZ4JvxZhBj2H7De2XsKqesANRa Ca9PxslEuahc2cYsIod73eyBu3uEhRL9Qab3pxsCicBHzcEeeJbj5T6J1MiJ/AbZ vEyTFXNir7OEA3uIW0btNf4GtTMeRBWrhXTpZneLRrzvuRTEm1eY8+lLSv+OLpmZ FKbqL3SvfyY5wD07NRflj2iV8mNIbgxMnqj73ZkjPVdwhqlSAn5inmtZmwSu6+9J 4VwXxjL9XP9LVhnl7UNYMjdId8TeRGnECTiEAZ1q4blXpk/sEB8ifxiUMxuN -----END CERTIFICATE-----Generated at Mon Jan 19 20:22:04 2026 by rpki-client