This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/ItR6CRPu83lK7tVQInzLsRt65Jo.roa File: ItR6CRPu83lK7tVQInzLsRt65Jo.roa (raw, json) Hash identifier: vD8XJRFUip9GJ/EdOg9qt9npHOk91SrLwj8LFH9qFQ8= Subject key identifier: 22:D4:7A:09:13:EE:F3:79:4A:EE:D5:50:22:7C:CB:B1:1B:7A:E4:9A Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Certificate serial: 019B7F83B7C2E8923B0BEFC664DB7B72E467 Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/ItR6CRPu83lK7tVQInzLsRt65Jo.roa Signing time: Fri 02 Jan 2026 16:21:37 +0000 ROA not before: Fri 02 Jan 2026 16:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 5.102.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:b7:c2:e8:92:3b:0b:ef:c6:64:db:7b:72:e4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02 Validity Not Before: Jan 2 16:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22d47a0913eef3794aeed550227ccbb11b7ae49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:93:bf:b4:03:9a:35:3a:0d:a5:c0:94:a5:d3: bb:58:be:64:74:6c:34:70:08:ba:4f:cf:65:38:d1: cf:36:a2:cb:0b:0a:20:7a:ee:c9:e9:87:9f:7e:c7: 30:92:8f:d9:a6:63:be:79:20:98:d2:69:fd:a8:9b: 6c:94:b1:7a:f0:e0:ce:2c:a7:65:1d:3d:15:ec:6f: e2:28:65:8b:f1:e5:7a:95:5a:a4:da:fc:e6:cc:c1: 4a:79:b0:b4:c5:85:38:c8:2b:ed:03:5c:5c:21:3a: 0b:9d:02:ef:5d:38:27:94:d7:f9:8d:98:68:54:3e: ae:d8:8e:a6:2e:d9:49:a1:5d:84:06:d9:90:bf:34: ac:55:6c:50:0e:3b:8c:cb:84:33:ed:52:29:9e:a2: cd:58:f5:e5:91:33:85:5d:58:d5:e3:b8:64:73:f9: 1d:57:57:0b:de:90:2b:c4:07:cf:71:db:25:72:9b: 73:76:ef:fe:85:98:23:31:41:40:89:34:1a:fd:95: 25:5c:29:c2:c5:c5:b9:c3:74:23:b6:52:4a:62:d6: 41:69:fb:e0:36:d5:99:79:56:05:c3:04:80:89:84: 75:54:54:36:bd:0b:04:d7:aa:be:aa:3d:97:b6:20: 8d:aa:18:70:5d:c2:59:2e:8d:72:47:1a:0a:bf:a3: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D4:7A:09:13:EE:F3:79:4A:EE:D5:50:22:7C:CB:B1:1B:7A:E4:9A X509v3 Authority Key Identifier: keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/ItR6CRPu83lK7tVQInzLsRt65Jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.102.39.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f2:6c:ce:ef:53:3f:b6:93:4b:39:93:2e:15:18:4c:a7:3c: da:8b:8b:ca:d0:ce:7d:a0:cb:14:ac:e2:eb:89:e4:4b:de:93: f3:ff:07:d6:29:47:92:11:4b:29:79:3f:07:49:87:37:c0:0e: 0d:8d:65:b2:48:ec:18:42:50:b3:80:02:7b:0b:0b:43:e1:19: 15:e9:64:a3:4d:04:96:49:14:da:98:e2:a5:9c:3e:9c:06:e9: 4e:f6:4e:95:38:db:54:10:d5:b7:70:3b:93:38:bb:42:fb:49: 43:7f:8e:ae:31:20:3e:9e:ce:91:8f:9a:39:34:73:ac:e9:30: fc:29:82:31:ab:8b:84:85:8f:bd:61:d5:24:7e:3b:49:3e:0d: f0:f3:62:61:ae:d0:11:ec:cd:7c:41:ff:e7:ac:4e:e2:18:a9: ac:2c:fe:d6:93:fa:3e:63:e2:9f:75:74:82:1e:d4:18:50:38: c9:67:33:4f:a2:2e:ef:05:53:53:4b:5b:e8:83:d3:01:8a:87: ff:ad:6e:06:06:28:93:b6:6a:82:89:c7:c4:a8:4d:ea:28:e7: d5:c7:b6:31:e2:a0:ee:3f:0e:ee:ce:53:15:72:8b:a2:15:59: ea:06:71:1e:8c:6a:7d:40:de:2e:64:15:2a:f7:c1:e7:42:a2: 8e:af:cf:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g7fC6JI7C+/GZNt7cuRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3 MGVjMDIwHhcNMjYwMTAyMTYyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmQ0N2EwOTEzZWVmMzc5NGFlZWQ1NTAyMjdjY2JiMTFiN2FlNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25O/tAOaNToNpcCUpdO7WL5kdGw0 cAi6T89lONHPNqLLCwogeu7J6Yeffscwko/ZpmO+eSCY0mn9qJtslLF68ODOLKdl HT0V7G/iKGWL8eV6lVqk2vzmzMFKebC0xYU4yCvtA1xcIToLnQLvXTgnlNf5jZho VD6u2I6mLtlJoV2EBtmQvzSsVWxQDjuMy4Qz7VIpnqLNWPXlkTOFXVjV47hkc/kd V1cL3pArxAfPcdslcptzdu/+hZgjMUFAiTQa/ZUlXCnCxcW5w3QjtlJKYtZBafvg NtWZeVYFwwSAiYR1VFQ2vQsE16q+qj2XtiCNqhhwXcJZLo1yRxoKv6M1nQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCLUegkT7vN5Su7VUCJ8y7EbeuSaMB8GA1UdIwQY MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt OGQyMTg2NjUwMjdkLzEvSXRSNkNSUHU4M2xLN3RWUUluekxzUnQ2NUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWYnMA0G CSqGSIb3DQEBCwUAA4IBAQBS8mzO71M/tpNLOZMuFRhMpzzai4vK0M59oMsUrOLr ieRL3pPz/wfWKUeSEUspeT8HSYc3wA4NjWWySOwYQlCzgAJ7CwtD4RkV6WSjTQSW SRTamOKlnD6cBulO9k6VONtUENW3cDuTOLtC+0lDf46uMSA+ns6Rj5o5NHOs6TD8 KYIxq4uEhY+9YdUkfjtJPg3w82JhrtAR7M18Qf/nrE7iGKmsLP7Wk/o+Y+KfdXSC HtQYUDjJZzNPoi7vBVNTS1vog9MBiof/rW4GBiiTtmqCicfEqE3qKOfVx7Yx4qDu Pw7uzlMVcouiFVnqBnEejGp9QN4uZBUq98HnQqKOr8/C -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:59 2026 by rpki-client