This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Is5Jt-hxYeR-OmdYo9i7a81dXr0.roa File: Is5Jt-hxYeR-OmdYo9i7a81dXr0.roa (raw, json) Hash identifier: 41ulb46zbqn4aGoKVrWt41Bwb3xrEOtcL3jeu6lrdds= Subject key identifier: 22:CE:49:B7:E8:71:61:E4:7E:3A:67:58:A3:D8:BB:6B:CD:5D:5E:BD Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7759033AF36D87AD5EBFB44F2351366A Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Is5Jt-hxYeR-OmdYo9i7a81dXr0.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 84.55.12.0/24 maxlen: 24 84.55.13.0/24 maxlen: 24 84.55.20.0/24 maxlen: 24 95.173.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:03:3a:f3:6d:87:ad:5e:bf:b4:4f:23:51:36:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22ce49b7e87161e47e3a6758a3d8bb6bcd5d5ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:d2:68:a5:a0:87:d9:91:bb:39:09:30:e3: 5c:e6:1e:8f:9f:4d:05:53:7d:59:05:19:44:32:30: 9f:2b:63:0d:1f:58:0e:1d:bf:5a:f3:3a:9a:14:e0: ec:bd:92:41:c5:37:96:88:a4:c5:25:81:07:b4:5e: ca:a9:e7:5c:da:e0:a7:db:9c:33:d6:59:c0:d0:ae: f4:67:5b:c1:f3:be:73:1e:e6:69:37:a9:09:da:ba: 00:41:74:b4:46:0f:a9:71:82:3f:6d:b3:bb:85:90: f3:52:45:e1:f5:05:31:a5:7d:6a:dd:9f:e4:d3:f2: e1:27:9a:43:43:81:09:8d:b1:2c:12:9e:32:90:02: 00:26:b6:36:b3:19:ef:57:ec:56:89:bd:35:fc:db: 56:c6:46:db:14:3a:15:d3:96:7e:e5:ea:cb:a6:17: c5:fc:8a:b9:6f:90:fc:88:5e:f5:89:97:9f:a0:02: 7b:02:cd:56:3a:1f:cc:c2:a3:38:9d:d7:1b:5e:3e: af:a5:e2:a5:51:a4:ce:d4:f9:db:b4:02:16:c6:3b: 05:e1:f6:87:2b:71:7a:7f:06:f8:63:c9:dc:3b:2c: 97:f5:a8:b5:8e:35:d7:c6:80:8b:b7:b5:b2:1c:60: 08:e4:dd:80:b1:02:a6:6e:95:17:7b:e8:64:ef:bb: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CE:49:B7:E8:71:61:E4:7E:3A:67:58:A3:D8:BB:6B:CD:5D:5E:BD X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/Is5Jt-hxYeR-OmdYo9i7a81dXr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.12.0/23 84.55.20.0/24 95.173.56.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:5f:a5:57:83:14:be:fa:e5:15:05:fc:1b:48:4d:40:5f:98: f0:68:f1:b6:36:c2:c1:1b:a7:40:ad:01:6a:66:0f:9b:ce:55: ae:9f:26:70:06:88:2b:67:ff:26:b5:95:9f:80:f0:87:35:e8: 96:8d:83:1b:fb:ef:f0:c0:32:80:54:b4:ce:86:19:02:62:42: 5a:70:b5:06:97:c4:08:27:ee:a3:16:84:40:46:41:17:cd:44: fe:0d:eb:b9:7b:51:87:16:6b:52:f0:ae:74:c2:c1:fe:4e:c2: b6:3f:68:63:d2:64:84:7a:9c:d8:fb:c3:12:35:6c:bc:e9:16: 89:21:6e:e4:57:6b:79:b3:61:ef:23:c6:14:65:03:e5:e6:cd: 06:0f:14:27:10:7f:44:c5:45:8a:e0:07:13:79:5e:52:32:84: a4:d5:d7:eb:6b:51:4c:92:17:9d:c8:32:fa:a0:df:1a:45:0d: 44:a3:2f:6b:09:84:ea:d9:a0:9f:58:c3:45:d0:40:75:e3:dd: 16:d3:90:eb:72:0a:93:16:8c:99:dc:d3:c0:f0:51:cb:23:d7: da:ec:7f:c8:95:1e:e5:f5:6e:75:07:53:53:41:87:63:24:bc: 51:2d:61:f6:72:55:81:c1:1c:18:e8:9a:29:4d:dd:6a:9c:76: 43:a0:5c:22 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WQM6822HrV6/tE8jUTZqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmNlNDliN2U4NzE2MWU0N2UzYTY3NThhM2Q4YmI2YmNkNWQ1ZWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFzSaKWgh9mRuzkJMONc5h6Pn00F U31ZBRlEMjCfK2MNH1gOHb9a8zqaFODsvZJBxTeWiKTFJYEHtF7Kqedc2uCn25wz 1lnA0K70Z1vB875zHuZpN6kJ2roAQXS0Rg+pcYI/bbO7hZDzUkXh9QUxpX1q3Z/k 0/LhJ5pDQ4EJjbEsEp4ykAIAJrY2sxnvV+xWib01/NtWxkbbFDoV05Z+5erLphfF /Iq5b5D8iF71iZefoAJ7As1WOh/MwqM4ndcbXj6vpeKlUaTO1PnbtAIWxjsF4faH K3F6fwb4Y8ncOyyX9ai1jjXXxoCLt7WyHGAI5N2AsQKmbpUXe+hk77upoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCLOSbfocWHkfjpnWKPYu2vNXV69MB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvSXM1SnQtaHhZZVItT21kWW85aTdhODFkWHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBVDcMAwQA VDcUAwQAX604MA0GCSqGSIb3DQEBCwUAA4IBAQAKX6VXgxS++uUVBfwbSE1AX5jw aPG2NsLBG6dArQFqZg+bzlWunyZwBogrZ/8mtZWfgPCHNeiWjYMb++/wwDKAVLTO hhkCYkJacLUGl8QIJ+6jFoRARkEXzUT+Deu5e1GHFmtS8K50wsH+TsK2P2hj0mSE epzY+8MSNWy86RaJIW7kV2t5s2HvI8YUZQPl5s0GDxQnEH9ExUWK4AcTeV5SMoSk 1dfra1FMkhedyDL6oN8aRQ1Eoy9rCYTq2aCfWMNF0EB1490W05DrcgqTFoyZ3NPA 8FHLI9fa7H/IlR7l9W51B1NTQYdjJLxRLWH2clWBwRwY6JopTd1qnHZDoFwi -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:15 2026 by rpki-client