This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IkRylWhfabPImB059ot71lt9gE0.roa File: IkRylWhfabPImB059ot71lt9gE0.roa (raw, json) Hash identifier: SWs2wDzJjE6EPx05wiOSIfifXMoY+e3TEScCbPZrDsU= Subject key identifier: 22:44:72:95:68:5F:69:B3:C8:98:1D:39:F6:8B:7B:D6:5B:7D:80:4D Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783449EF302FC0A73BFE4AF9D4535F8A Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IkRylWhfabPImB059ot71lt9gE0.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 192.71.155.0/24 maxlen: 24 192.176.176.0/21 maxlen: 24 193.180.174.0/24 maxlen: 24 193.180.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 18:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:49:ef:30:2f:c0:a7:3b:fe:4a:f9:d4:53:5f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22447295685f69b3c8981d39f68b7bd65b7d804d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:45:0f:4b:38:56:ae:90:d3:2d:f1:72:cc:35: 6c:98:7e:34:bd:39:7b:7b:8b:6a:c6:96:1a:e1:77: eb:a2:13:6b:6f:f9:63:64:e8:04:33:d1:53:3c:6c: a4:eb:c0:f3:65:7d:01:b8:4f:7b:c0:24:5d:dc:e9: 56:d9:95:2d:b1:7c:f5:f3:45:63:35:43:dc:e2:10: fe:51:1f:d1:2c:74:f0:25:a4:c8:bd:16:d3:f9:aa: 13:b9:e0:bb:bb:83:4a:e3:24:1d:9b:2e:a7:19:91: bf:77:54:17:e0:55:e4:f3:52:1e:a6:12:89:ad:ac: de:ef:ec:69:64:f5:d4:69:70:3e:1c:50:8a:22:c2: 21:8f:6b:bd:0b:ed:37:47:bf:a3:ba:07:96:22:e8: 5f:79:86:be:5f:01:1d:cd:c8:ed:20:94:3c:42:6a: be:3a:3f:7b:1e:ee:05:28:12:e4:17:f3:ef:2b:e4: d3:55:2e:d4:fe:bb:cb:ae:e8:8b:7c:82:dc:98:32: 64:46:40:8e:74:62:a6:41:15:f1:41:70:bd:8e:a5: 22:2c:4e:64:f3:4b:88:a1:12:3d:44:eb:c8:56:c1: 26:76:43:72:f3:d3:1b:c7:a7:69:6e:f1:5e:28:37: b3:67:50:37:dc:01:41:a7:e6:a0:84:76:a3:b7:ab: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:44:72:95:68:5F:69:B3:C8:98:1D:39:F6:8B:7B:D6:5B:7D:80:4D X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/IkRylWhfabPImB059ot71lt9gE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.71.155.0/24 192.176.176.0/21 193.180.174.0/24 193.180.255.0/24 Signature Algorithm: sha256WithRSAEncryption ca:61:36:de:63:6d:74:7f:62:ed:01:a6:a1:b3:ee:b0:2d:07: f9:12:ce:dc:a2:66:34:ed:f3:56:47:99:29:a3:db:b3:54:c1: e7:68:de:3e:29:19:1b:05:90:0c:bf:85:be:44:63:54:fb:7c: fb:c4:d9:29:6c:8a:93:ab:9f:e9:51:fe:0d:61:4a:97:22:71: fd:94:30:c9:53:4b:73:a1:39:2d:d0:b5:36:f0:35:a4:39:1f: 2a:08:28:c0:fd:60:0f:a3:80:89:b9:d2:fb:d4:d1:a1:a1:6e: d6:ad:26:8e:ce:91:a8:32:d4:d3:e0:17:94:34:9e:69:51:b6: cc:6e:5c:30:88:b9:10:07:14:77:f8:23:23:44:28:57:78:5d: dc:17:18:fe:87:c3:1a:02:d0:e0:7e:81:d4:2a:bc:69:82:a7: 07:f1:03:34:dc:50:43:19:81:a5:01:bf:f2:5b:43:ca:1e:1d: 11:e0:70:79:d2:94:68:e9:73:b2:3e:8f:fd:4b:de:44:91:dc: 64:84:4d:34:0c:51:60:35:46:7d:e1:2a:c4:d0:de:21:7b:a1: 6d:bf:ce:05:da:0d:85:60:46:a3:9a:6b:bd:ef:90:08:7f:4d: b6:5d:f8:21:55:ec:ae:2d:87:cb:66:19:5b:3f:8d:e4:0f:d0: 29:5b:0c:c6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4NEnvMC/Apzv+SvnUU1+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjQ0NzI5NTY4NWY2OWIzYzg5ODFkMzlmNjhiN2JkNjViN2Q4MDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkUPSzhWrpDTLfFyzDVsmH40vTl7 e4tqxpYa4XfrohNrb/ljZOgEM9FTPGyk68DzZX0BuE97wCRd3OlW2ZUtsXz180Vj NUPc4hD+UR/RLHTwJaTIvRbT+aoTueC7u4NK4yQdmy6nGZG/d1QX4FXk81IephKJ raze7+xpZPXUaXA+HFCKIsIhj2u9C+03R7+jugeWIuhfeYa+XwEdzcjtIJQ8Qmq+ Oj97Hu4FKBLkF/PvK+TTVS7U/rvLruiLfILcmDJkRkCOdGKmQRXxQXC9jqUiLE5k 80uIoRI9ROvIVsEmdkNy89Mbx6dpbvFeKDezZ1A33AFBp+aghHajt6tfxwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCJEcpVoX2mzyJgdOfaLe9ZbfYBNMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvSWtSeWxXaGZhYlBJbUIwNTlvdDcxbHQ5Z0UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwEebAwQD wLCwAwQAwbSuAwQAwbT/MA0GCSqGSIb3DQEBCwUAA4IBAQDKYTbeY210f2LtAaah s+6wLQf5Es7comY07fNWR5kpo9uzVMHnaN4+KRkbBZAMv4W+RGNU+3z7xNkpbIqT q5/pUf4NYUqXInH9lDDJU0tzoTkt0LU28DWkOR8qCCjA/WAPo4CJudL71NGhoW7W rSaOzpGoMtTT4BeUNJ5pUbbMblwwiLkQBxR3+CMjRChXeF3cFxj+h8MaAtDgfoHU KrxpgqcH8QM03FBDGYGlAb/yW0PKHh0R4HB50pRo6XOyPo/9S95EkdxkhE00DFFg NUZ94SrE0N4he6Ftv84F2g2FYEajmmu975AIf022XfghVeyuLYfLZhlbP43kD9Ap WwzG -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:27 2026 by rpki-client