This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa File: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (raw, json) Hash identifier: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE= Subject key identifier: 89:30:34:D0:F8:67:C2:73:5A:2A:B2:1D:6F:B4:9F:F8:13:85:35:65 Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392 Certificate serial: 019B79ECA969690CE3E218254C59FDE86E07 Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64080 IP address blocks: 91.226.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:a9:69:69:0c:e3:e2:18:25:4c:59:fd:e8:6e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392 Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=893034d0f867c2735a2ab21d6fb49ff813853565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:bd:26:47:d0:b1:05:ef:d4:99:28:b2:24: 5b:31:46:75:4e:ea:85:25:15:6e:23:1e:0d:50:51: 8e:f3:7d:ec:1f:fb:d9:f9:d9:a0:7b:63:a9:2b:b9: f4:1b:56:62:0d:81:d5:91:3d:80:7e:44:e4:54:bc: 28:ab:93:70:00:70:e8:f3:1d:25:ab:d2:27:5e:aa: a5:7a:c9:d7:4e:f0:af:b0:37:4e:18:57:aa:15:f0: 3f:a4:19:77:92:71:49:93:c8:ec:71:a5:8e:31:bc: ce:dc:b2:59:eb:28:f6:c7:71:bd:84:23:89:1c:b2: c5:df:77:da:49:e8:d2:20:16:ac:75:7b:6c:9a:4a: b9:40:55:71:25:48:f1:98:3f:69:11:14:fb:f0:8c: 28:d7:f8:76:5e:e4:9a:ec:c1:34:5e:e0:da:61:61: 8f:2f:a8:58:e2:64:27:91:3e:77:32:54:71:55:0b: 31:e0:46:46:b3:d7:25:5f:0a:2e:1a:ac:67:b9:56: 92:6d:36:db:4d:72:60:65:17:f9:66:8e:e2:49:6c: 26:9e:be:7e:17:0a:ff:da:b6:22:25:a8:52:cd:ba: 98:c0:b1:b8:6a:67:c4:c5:90:d4:d2:a5:fa:96:4d: 82:9d:97:c6:05:cf:97:40:5a:9a:8f:fe:49:55:4e: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:30:34:D0:F8:67:C2:73:5A:2A:B2:1D:6F:B4:9F:F8:13:85:35:65 X509v3 Authority Key Identifier: keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.97.0/24 Signature Algorithm: sha256WithRSAEncryption 84:2a:ba:31:b5:8b:11:fa:ef:3d:01:bc:fb:0a:ef:f5:7c:57: a0:35:31:72:c9:f4:67:21:68:7d:0d:f3:26:42:76:58:41:06: bd:14:b2:c1:db:5f:e4:61:85:03:20:c7:6d:d5:f0:67:66:da: 69:53:20:33:e2:e4:42:d5:13:42:f7:77:99:e3:39:15:3b:6e: cf:17:ed:02:0b:73:9e:a9:0a:9e:7c:57:08:24:15:d0:cf:e4: 06:cb:32:e4:25:b5:5e:36:25:6d:13:45:32:d5:86:d0:6c:dd: 7f:c4:cb:43:ee:fd:87:37:6f:b8:5d:13:00:26:de:ae:54:00: 6c:cf:be:d7:94:85:32:3c:26:9c:6b:e2:aa:53:ae:b6:6a:0f: e1:d1:6d:7f:28:de:09:01:01:9a:df:24:cf:33:86:e5:c4:f4: dc:2c:56:70:9e:dd:5c:36:53:12:c9:96:08:a5:16:d1:39:be: 7b:44:69:04:f0:33:0c:e6:d4:29:bc:d1:e5:43:86:e6:04:39: 6f:7c:c9:84:09:62:4d:df:4b:57:e3:75:87:fc:47:b0:3a:d6: dd:60:70:7d:49:df:ba:1b:ca:39:c9:2c:2a:ed:ae:6b:91:72: e2:68:94:82:c9:14:4b:51:7a:e8:40:06:74:73:2a:91:16:0f: 89:30:d4:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KlpaQzj4hglTFn96G4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkMzcwYTQ4YjU5ZmI4MTE0OTVmMTFjNDk3MzQ0ODJmMjJi MWEzOTIwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTMwMzRkMGY4NjdjMjczNWEyYWIyMWQ2ZmI0OWZmODEzODUzNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+69JkfQsQXv1JkosiRbMUZ1TuqF JRVuIx4NUFGO833sH/vZ+dmge2OpK7n0G1ZiDYHVkT2AfkTkVLwoq5NwAHDo8x0l q9InXqqlesnXTvCvsDdOGFeqFfA/pBl3knFJk8jscaWOMbzO3LJZ6yj2x3G9hCOJ HLLF33faSejSIBasdXtsmkq5QFVxJUjxmD9pERT78Iwo1/h2XuSa7ME0XuDaYWGP L6hY4mQnkT53MlRxVQsx4EZGs9clXwouGqxnuVaSbTbbTXJgZRf5Zo7iSWwmnr5+ Fwr/2rYiJahSzbqYwLG4amfExZDU0qX6lk2CnZfGBc+XQFqaj/5JVU4dzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIkwNND4Z8JzWiqyHW+0n/gThTVlMB8GA1UdIwQY MBaAFF03Cki1n7gRSV8RxJc0SC8isaOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2Ut ZTI3MjAxMzAyNmI0LzEvaVRBMDBQaG53bk5hS3JJZGI3U2YtQk9GTldVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS83MDg1OGEtNjM5NS00MDJkLTlhY2UtZTI3MjAxMzAyNmI0 LzEvWFRjS1NMV2Z1QkZKWHhIRWx6UklMeUt4bzVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+JhMA0G CSqGSIb3DQEBCwUAA4IBAQCEKroxtYsR+u89Abz7Cu/1fFegNTFyyfRnIWh9DfMm QnZYQQa9FLLB21/kYYUDIMdt1fBnZtppUyAz4uRC1RNC93eZ4zkVO27PF+0CC3Oe qQqefFcIJBXQz+QGyzLkJbVeNiVtE0Uy1YbQbN1/xMtD7v2HN2+4XRMAJt6uVABs z77XlIUyPCaca+KqU662ag/h0W1/KN4JAQGa3yTPM4blxPTcLFZwnt1cNlMSyZYI pRbROb57RGkE8DMM5tQpvNHlQ4bmBDlvfMmECWJN30tX43WH/EewOtbdYHB9Sd+6 G8o5ySwq7a5rkXLiaJSCyRRLUXroQAZ0cyqRFg+JMNSX -----END CERTIFICATE-----Generated at Wed Jan 21 22:40:05 2026 by rpki-client