This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa File: Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa (raw, json) Hash identifier: Egal+mT8M6xP1Rl+/8TQk/EbX4bTommbuReOlbLDzcc= Subject key identifier: 21:A7:29:CF:B4:03:A9:D6:26:A4:F9:16:AA:48:F1:53:4B:D6:97:0D Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57 Certificate serial: 019B7F84771C26F67B55E449F50C2A2E5022 Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa Signing time: Fri 02 Jan 2026 16:22:26 +0000 ROA not before: Fri 02 Jan 2026 16:22:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51815 IP address blocks: 91.226.180.0/24 maxlen: 24 194.48.213.0/24 maxlen: 24 2001:67c:5f4::/48 maxlen: 48 2a0a:b780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:77:1c:26:f6:7b:55:e4:49:f5:0c:2a:2e:50:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39557250543e4476af88c4612d4a89531313b57 Validity Not Before: Jan 2 16:22:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21a729cfb403a9d626a4f916aa48f1534bd6970d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:ec:b1:53:8a:6e:3f:bf:18:38:97:fd:dc: fa:a2:da:38:e3:65:c2:00:91:95:f1:81:b9:59:c5: f6:ab:13:41:f4:91:fc:1f:12:4f:ac:11:bb:91:02: 29:b8:17:d0:df:a5:9b:9b:df:7c:89:8c:28:69:29: 61:5e:6a:c3:7c:6b:b7:7c:e0:f5:b2:3c:6e:d9:60: af:02:7b:fd:8d:3d:ef:33:09:24:18:b1:ff:3f:74: c0:8a:c0:37:da:e8:a0:cf:36:22:e1:a4:dd:c7:d8: 76:af:2a:fd:89:60:2a:e3:e7:2a:3f:ac:ca:4c:c9: dc:20:a8:95:e1:64:2a:de:81:0d:06:72:c9:e2:b5: e8:37:03:7b:5f:ea:61:a6:17:bf:50:0c:7f:32:ea: 15:00:16:6e:1f:a3:4a:fd:a4:b4:cc:b1:00:5a:e6: ad:18:23:66:29:80:e6:c1:01:21:ae:c7:38:52:94: 9e:4b:ef:20:63:5a:71:0d:a4:c4:ab:8f:34:15:3b: c4:f8:73:a7:b2:15:65:0b:06:2e:65:2a:16:e8:85: 90:4e:9b:42:a9:07:44:55:f8:3c:11:bd:db:60:3a: 7d:87:dd:15:60:47:07:03:23:ec:df:1b:18:30:2d: b9:b6:d6:48:aa:bd:8a:b0:d7:f7:97:79:a7:e3:1b: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:29:CF:B4:03:A9:D6:26:A4:F9:16:AA:48:F1:53:4B:D6:97:0D X509v3 Authority Key Identifier: keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.226.180.0/24 194.48.213.0/24 IPv6: 2001:67c:5f4::/48 2a0a:b780::/29 Signature Algorithm: sha256WithRSAEncryption 3d:cb:d3:93:d2:b0:b8:7c:26:14:b9:df:00:17:4b:de:1f:77: 09:02:42:94:a5:1c:95:c8:7b:e7:f8:99:96:23:17:1b:87:dc: 66:e0:19:5d:42:ef:bd:d4:e7:1f:9e:31:90:c0:75:af:7c:65: 60:49:f4:37:55:98:db:d7:84:dd:4a:8b:7f:cd:a8:61:37:d7: 79:72:8c:03:1a:28:45:15:2e:4f:87:f1:bc:69:ef:66:b6:6d: e5:83:81:dc:4c:dc:e7:08:ef:4c:9c:38:52:2e:ea:55:87:2b: 63:bd:84:29:d6:a7:6e:fa:4c:c2:1b:32:9b:c5:ef:58:b0:7f: 4d:ab:7d:45:99:7c:02:3b:a4:0b:0e:05:1e:5a:49:f9:c0:ca: 1a:b2:99:d4:3d:3c:4c:aa:cc:6c:e1:7e:8b:d9:7b:80:86:2e: 28:ea:e6:68:3d:5b:56:3a:3a:dc:67:00:bf:71:b1:3f:f2:4a: 27:dd:db:1b:03:b9:e5:8a:4f:27:1c:16:b5:a6:38:d0:a7:05: df:ff:fe:53:31:07:6c:63:bd:15:10:fd:0b:db:7f:04:71:ee: a2:c8:12:74:20:1a:4e:dc:af:71:b0:af:6e:ee:30:ac:85:e5: 90:66:c6:10:fc:c3:ae:55:61:74:54:a6:97:fd:f0:d1:b1:db: 44:38:61:b1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/hHccJvZ7VeRJ9QwqLlAiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzOTU1NzI1MDU0M2U0NDc2YWY4OGM0NjEyZDRhODk1MzEz MTNiNTcwHhcNMjYwMTAyMTYyMjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWE3MjljZmI0MDNhOWQ2MjZhNGY5MTZhYTQ4ZjE1MzRiZDY5NzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oPssVOKbj+/GDiX/dz6oto442XC AJGV8YG5WcX2qxNB9JH8HxJPrBG7kQIpuBfQ36Wbm998iYwoaSlhXmrDfGu3fOD1 sjxu2WCvAnv9jT3vMwkkGLH/P3TAisA32uigzzYi4aTdx9h2ryr9iWAq4+cqP6zK TMncIKiV4WQq3oENBnLJ4rXoNwN7X+phphe/UAx/MuoVABZuH6NK/aS0zLEAWuat GCNmKYDmwQEhrsc4UpSeS+8gY1pxDaTEq480FTvE+HOnshVlCwYuZSoW6IWQTptC qQdEVfg8Eb3bYDp9h90VYEcHAyPs3xsYMC25ttZIqr2KsNf3l3mn4xuhUQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFCGnKc+0A6nWJqT5FqpI8VNL1pcNMB8GA1UdIwQY MBaAFOOVVyUFQ+RHaviMRhLUqJUxMTtXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUt MjA2OTUxOTNhYzA3LzEvSWFjcHo3UURxZFltcFBrV3FranhVMHZXbHcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOWQyNjQtYjk0MS00N2E0LTllYzUtMjA2OTUxOTNhYzA3 LzEvNDVWWEpRVkQ1RWRxLUl4R0V0U29sVEV4TzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW+K0AwQA wjDVMBYEAgACMBADBwAgAQZ8BfQDBQMqCreAMA0GCSqGSIb3DQEBCwUAA4IBAQA9 y9OT0rC4fCYUud8AF0veH3cJAkKUpRyVyHvn+JmWIxcbh9xm4BldQu+91OcfnjGQ wHWvfGVgSfQ3VZjb14TdSot/zahhN9d5cowDGihFFS5Ph/G8ae9mtm3lg4HcTNzn CO9MnDhSLupVhytjvYQp1qdu+kzCGzKbxe9YsH9Nq31FmXwCO6QLDgUeWkn5wMoa spnUPTxMqsxs4X6L2XuAhi4o6uZoPVtWOjrcZwC/cbE/8kon3dsbA7nlik8nHBa1 pjjQpwXf//5TMQdsY70VEP0L238Ece6iyBJ0IBpO3K9xsK9u7jCsheWQZsYQ/MOu VWF0VKaX/fDRsdtEOGGx -----END CERTIFICATE-----Generated at Mon Jan 26 20:27:04 2026 by rpki-client