This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/IjJLAumVqZms6Q6t1sUNu9hcdcU.roa File: IjJLAumVqZms6Q6t1sUNu9hcdcU.roa (raw, json) Hash identifier: FiezcugxBkSJwlJY68mGDzdaBaGe4t/V3htWiCfxtgw= Subject key identifier: 22:32:4B:02:E9:95:A9:99:AC:E9:0E:AD:D6:C5:0D:BB:D8:5C:75:C5 Certificate issuer: /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2 Certificate serial: 019B7C11A2317911FB909290D9C583F8231B Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/IjJLAumVqZms6Q6t1sUNu9hcdcU.roa Signing time: Fri 02 Jan 2026 00:18:09 +0000 ROA not before: Fri 02 Jan 2026 00:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209004 IP address blocks: 45.11.72.0/22 maxlen: 24 45.11.72.0/23 maxlen: 24 45.11.72.0/24 maxlen: 24 45.11.73.0/24 maxlen: 24 45.11.74.0/23 maxlen: 23 45.11.74.0/24 maxlen: 24 45.11.75.0/24 maxlen: 24 2a0e:6700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:a2:31:79:11:fb:90:92:90:d9:c5:83:f8:23:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2 Validity Not Before: Jan 2 00:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22324b02e995a999ace90eadd6c50dbbd85c75c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:36:60:7d:65:2d:ad:d9:37:e9:2e:20:94: 61:74:af:ba:dc:e7:02:31:27:dd:8a:22:78:ae:d2: db:c8:e3:60:78:15:67:1a:d0:0a:af:72:52:f5:96: a4:6c:15:60:a3:05:17:d2:32:d2:62:a5:20:a6:ef: db:3b:ac:f7:20:69:38:ca:9f:98:eb:71:34:a7:06: 7d:13:db:e3:82:16:00:76:b3:ea:cf:c3:66:86:f9: 65:33:40:53:2b:3d:98:d0:8b:fa:a1:a6:18:52:2b: 5b:5f:af:46:ef:96:38:23:4a:72:ad:13:dd:38:bf: 16:5d:f6:e2:30:83:ce:f6:ba:72:b5:bf:fd:dc:9f: ec:e6:1d:58:89:e1:67:6e:00:1b:c8:f3:73:16:ad: 24:6a:d1:cb:33:2d:2b:95:5e:45:9b:df:ed:62:09: 7f:2e:53:60:07:02:a5:f4:c0:7d:d0:e8:82:96:ec: 04:c8:af:f6:df:88:47:ec:70:3e:7d:ac:8f:c7:2b: 96:e1:4b:88:a0:25:3b:58:e6:67:87:61:8d:c9:a9: 45:82:f8:b0:5d:32:7a:c7:51:60:24:66:2a:96:08: 1c:ad:16:15:a0:6c:66:f1:7a:6f:42:a4:4f:df:25: d5:32:7c:e6:3d:d2:7f:41:34:0a:eb:75:2c:52:ab: b6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:4B:02:E9:95:A9:99:AC:E9:0E:AD:D6:C5:0D:BB:D8:5C:75:C5 X509v3 Authority Key Identifier: keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/IjJLAumVqZms6Q6t1sUNu9hcdcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.72.0/22 IPv6: 2a0e:6700::/29 Signature Algorithm: sha256WithRSAEncryption cb:2c:b4:12:16:3a:9f:bb:04:39:bd:3b:f8:3e:a4:36:8b:f6: fe:4f:ef:9a:e8:6e:d7:d6:58:41:1d:04:1b:72:e5:e1:70:83: 9a:8b:fa:26:51:dd:6d:0e:0d:dc:1e:28:59:37:20:44:b1:ff: 4a:ff:bd:68:56:1f:83:92:95:9b:61:f4:cb:00:94:1b:d6:b9: a6:90:5b:29:5d:92:cc:37:43:31:b3:cd:66:a0:ab:de:38:7e: ff:bf:28:fb:71:ab:9e:dd:0e:95:5e:5f:91:40:ab:7e:e7:f0: 6c:f7:3a:98:18:35:17:8a:2e:7c:bc:bd:a1:cd:19:2a:61:fd: 3e:af:de:8f:d0:ff:27:a4:9a:27:dc:d2:d4:01:3b:5c:a8:68: e0:04:d5:4d:22:e4:c3:03:cd:24:0a:be:c3:ba:18:00:f3:39: 36:d0:ee:c4:55:17:e8:fd:1e:e3:fc:fc:f5:7a:d4:37:dc:03: 8d:1a:72:10:9a:2c:a7:f3:ba:4e:4a:29:df:8b:b7:7f:f1:a4: 20:54:11:27:2d:ee:47:58:04:c1:0f:2d:ab:ce:c5:b8:4c:71: 07:42:19:66:1f:19:de:4b:c8:0c:a2:05:5b:5e:5f:b3:e2:d5: d1:7c:6a:a7:ed:52:8d:ca:97:a3:59:d3:d8:02:4f:05:4e:37: 89:f6:19:74 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EaIxeRH7kJKQ2cWD+CMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZmIzYTZiN2ZjMjhlODY3NGU2MTFjYjA5ODA3NmYwZTRj NTU3YzIwHhcNMjYwMTAyMDAxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjMyNGIwMmU5OTVhOTk5YWNlOTBlYWRkNmM1MGRiYmQ4NWM3NWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhA2YH1lLa3ZN+kuIJRhdK+63OcC MSfdiiJ4rtLbyONgeBVnGtAKr3JS9ZakbBVgowUX0jLSYqUgpu/bO6z3IGk4yp+Y 63E0pwZ9E9vjghYAdrPqz8NmhvllM0BTKz2Y0Iv6oaYYUitbX69G75Y4I0pyrRPd OL8WXfbiMIPO9rpytb/93J/s5h1YieFnbgAbyPNzFq0katHLMy0rlV5Fm9/tYgl/ LlNgBwKl9MB90OiCluwEyK/234hH7HA+fayPxyuW4UuIoCU7WOZnh2GNyalFgviw XTJ6x1FgJGYqlggcrRYVoGxm8XpvQqRP3yXVMnzmPdJ/QTQK63UsUqu2RwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCIySwLplamZrOkOrdbFDbvYXHXFMB8GA1UdIwQY MBaAFHT7Omt/wo6GdOYRywmAdvDkxVfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAt NzgyYzc4MGU3YzFjLzEvSWpKTEF1bVZxWm1zNlE2dDFzVU51OWhjZGNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYTBmNTUtNTc3NC00NWRlLWE2YzAtNzgyYzc4MGU3YzFj LzEvZFBzNmEzX0Nqb1owNWhITENZQjI4T1RGVjhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQtIMA0E AgACMAcDBQMqDmcAMA0GCSqGSIb3DQEBCwUAA4IBAQDLLLQSFjqfuwQ5vTv4PqQ2 i/b+T++a6G7X1lhBHQQbcuXhcIOai/omUd1tDg3cHihZNyBEsf9K/71oVh+DkpWb YfTLAJQb1rmmkFspXZLMN0Mxs81moKveOH7/vyj7caue3Q6VXl+RQKt+5/Bs9zqY GDUXii58vL2hzRkqYf0+r96P0P8npJon3NLUATtcqGjgBNVNIuTDA80kCr7DuhgA 8zk20O7EVRfo/R7j/Pz1etQ33AONGnIQmiyn87pOSinfi7d/8aQgVBEnLe5HWATB Dy2rzsW4THEHQhlmHxneS8gMogVbXl+z4tXRfGqn7VKNypejWdPYAk8FTjeJ9hl0 -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:22 2026 by rpki-client