This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/ikhZPuNFB8TYzV9iARQ45_sL-xY.roa File: ikhZPuNFB8TYzV9iARQ45_sL-xY.roa (raw, json) Hash identifier: nilbi5jmsnD7f7iYCwJkWEwiH79gM1wBIWzSk6xYrZM= Subject key identifier: 8A:48:59:3E:E3:45:07:C4:D8:CD:5F:62:01:14:38:E7:FB:0B:FB:16 Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668 Certificate serial: 019B7C124123366785C210C4C539E0A4E2D3 Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/ikhZPuNFB8TYzV9iARQ45_sL-xY.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 91.212.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:41:23:36:67:85:c2:10:c4:c5:39:e0:a4:e2:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a48593ee34507c4d8cd5f62011438e7fb0bfb16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:79:1b:33:90:2d:c4:d4:96:a5:de:a4:0e: 06:6d:f2:b5:4c:1a:a7:25:40:51:e8:33:62:59:99: fc:6d:98:1b:a3:43:81:da:ca:8d:2c:b9:95:5c:ff: d9:38:73:73:55:cd:ff:8c:a6:b6:07:57:a6:b1:bc: bc:9f:71:55:d2:af:97:f8:76:6d:96:d5:89:dc:e8: 47:75:ff:f6:c5:b2:26:e2:79:42:80:49:64:19:b3: f6:db:9f:15:94:d8:62:1a:e8:7b:76:61:fa:0a:85: 4e:88:84:b5:e0:66:90:47:96:96:84:bd:0e:c6:fa: 1a:8d:64:b7:97:22:64:fa:47:9e:99:55:f9:d4:ee: 07:db:43:d2:b5:01:00:29:0d:4f:bc:01:90:4e:b1: 45:b7:32:1d:52:41:68:97:0f:db:5e:1f:e5:31:10: e8:cc:48:64:b9:be:9b:5f:81:77:13:87:85:dd:74: c6:39:d1:a8:b7:25:9b:8e:54:50:5a:ba:15:c7:de: da:9a:23:40:2a:8b:7c:40:19:0d:fc:87:34:8f:40: 6a:71:2a:55:6c:09:e2:0f:ac:92:c7:35:29:44:3d: d9:48:e7:39:09:81:85:4d:b1:23:40:68:b8:b8:d4: ef:da:9d:9b:40:61:40:14:bd:14:7b:5a:87:22:1b: cd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:48:59:3E:E3:45:07:C4:D8:CD:5F:62:01:14:38:E7:FB:0B:FB:16 X509v3 Authority Key Identifier: keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/ikhZPuNFB8TYzV9iARQ45_sL-xY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.174.0/24 Signature Algorithm: sha256WithRSAEncryption b1:2d:5f:55:19:5f:3e:3f:dc:48:2f:98:a4:36:db:9d:55:9e: 6e:a1:7f:15:ca:5c:1d:80:65:d7:2a:fd:23:6c:6a:a0:63:52: c3:d0:dd:95:8f:35:bd:60:33:29:3d:17:19:01:c3:8b:16:15: 56:07:b9:5f:e8:09:d7:1d:c4:7f:65:e4:aa:7c:ba:ef:87:a2: 27:e8:92:3d:98:d4:9d:53:66:5b:09:6e:57:59:62:07:18:d6: e0:cb:3b:de:28:6a:7e:56:9e:a1:13:c7:1f:ec:59:21:bd:ba: 96:5e:ae:0b:d0:ae:bf:19:5d:e9:9f:c5:11:7d:87:d7:7e:87: 30:31:b5:f0:e1:c5:90:7e:1a:f3:a1:dc:aa:2e:25:57:36:57: 10:bf:37:bd:3f:bb:ca:97:f4:2c:02:8f:37:36:81:fc:0d:f1: ad:53:7b:3d:bd:c9:9f:5a:80:53:93:71:78:7b:23:62:10:2b: d0:07:8a:5b:8c:77:36:9b:53:6e:2b:c2:f8:1d:d0:3f:0c:dd: 15:43:76:81:c7:0b:82:f1:f9:b5:96:0b:bd:f7:8c:3d:84:f6: f0:9a:e2:e2:f2:59:3f:20:19:37:8b:1e:a4:ff:32:37:01:8c: 12:6f:c3:d3:09:04:b1:13:03:e7:41:36:d2:35:91:5e:12:df: 4d:f3:7e:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EkEjNmeFwhDExTngpOLTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyYjRhNjhmNmFmZjdlMDY4MGI2ZjE1NDQzMGNlZTc0YTUw M2I2NjgwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTQ4NTkzZWUzNDUwN2M0ZDhjZDVmNjIwMTE0MzhlN2ZiMGJmYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAt5GzOQLcTUlqXepA4GbfK1TBqn JUBR6DNiWZn8bZgbo0OB2sqNLLmVXP/ZOHNzVc3/jKa2B1emsby8n3FV0q+X+HZt ltWJ3OhHdf/2xbIm4nlCgElkGbP2258VlNhiGuh7dmH6CoVOiIS14GaQR5aWhL0O xvoajWS3lyJk+keemVX51O4H20PStQEAKQ1PvAGQTrFFtzIdUkFolw/bXh/lMRDo zEhkub6bX4F3E4eF3XTGOdGotyWbjlRQWroVx97amiNAKot8QBkN/Ic0j0BqcSpV bAniD6ySxzUpRD3ZSOc5CYGFTbEjQGi4uNTv2p2bQGFAFL0Ue1qHIhvNowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpIWT7jRQfE2M1fYgEUOOf7C/sWMB8GA1UdIwQY MBaAFFK0po9q/34GgLbxVEMM7nSlA7ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYt MGQyYzJmZTQ5ZmRhLzEvaWtoWlB1TkZCOFRZelY5aUFSUTQ1X3NMLXhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYtMGQyYzJmZTQ5ZmRh LzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SuMA0G CSqGSIb3DQEBCwUAA4IBAQCxLV9VGV8+P9xIL5ikNtudVZ5uoX8VylwdgGXXKv0j bGqgY1LD0N2VjzW9YDMpPRcZAcOLFhVWB7lf6AnXHcR/ZeSqfLrvh6In6JI9mNSd U2ZbCW5XWWIHGNbgyzveKGp+Vp6hE8cf7FkhvbqWXq4L0K6/GV3pn8URfYfXfocw MbXw4cWQfhrzodyqLiVXNlcQvze9P7vKl/QsAo83NoH8DfGtU3s9vcmfWoBTk3F4 eyNiECvQB4pbjHc2m1NuK8L4HdA/DN0VQ3aBxwuC8fm1lgu994w9hPbwmuLi8lk/ IBk3ix6k/zI3AYwSb8PTCQSxEwPnQTbSNZFeEt9N834A -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:24 2026 by rpki-client