This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa File: IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa (raw, json) Hash identifier: K/zCH1QmxaSRuaMT9yqorVTWzzo7aNiaeZwocJbG5QI= Subject key identifier: 21:14:BE:FB:16:88:17:2B:DF:E2:70:44:20:9A:B1:3B:5F:F7:66:11 Certificate issuer: /CN=6603ed4c78454250116f105eb6961dc29e1dbc6c Certificate serial: 019B7D5AD244657EE956168AF0934E536AB7 Authority key identifier: 66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa Signing time: Fri 02 Jan 2026 06:17:42 +0000 ROA not before: Fri 02 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49266 IP address blocks: 91.207.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d2:44:65:7e:e9:56:16:8a:f0:93:4e:53:6a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6603ed4c78454250116f105eb6961dc29e1dbc6c Validity Not Before: Jan 2 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2114befb1688172bdfe27044209ab13b5ff76611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:23:e6:f2:93:7e:73:c0:48:ae:eb:b3:21:e9: 72:2c:54:90:7f:f2:d3:e9:b1:49:6b:bd:a3:47:49: c5:d8:a2:c0:2d:f7:58:01:46:20:4d:db:24:5a:29: fa:66:84:3a:fc:8d:6b:ea:76:5a:42:22:f2:74:50: 0b:0a:35:c3:e7:e1:84:bc:35:87:38:be:33:64:12: 78:d1:04:4b:7b:24:69:1f:82:f5:17:fd:89:f6:10: e2:e3:6a:9f:70:0b:71:6c:db:bf:a0:bc:66:6d:3e: 5e:3c:81:71:84:00:53:43:e8:23:d2:fb:38:80:bb: 87:53:56:e9:dc:36:1e:10:12:a1:ca:58:05:1f:03: 83:61:15:ca:6b:be:76:c4:6c:a5:06:94:58:99:b2: 6a:27:72:a3:e8:47:f6:a9:74:ba:c1:22:9f:51:9a: 7d:f3:8c:32:6a:68:0a:2d:7c:c0:92:96:09:ed:46: 9c:e3:e7:a3:34:df:e5:60:71:61:4b:e0:59:73:16: f1:39:9d:d8:07:62:76:cb:98:f1:70:99:7f:2f:fb: 34:2c:fc:80:ae:ba:8e:77:e8:6d:72:a7:a6:8c:d8: 32:d2:f6:74:da:ff:a6:d9:61:43:eb:85:2e:d8:dc: b7:b4:a0:76:31:36:ff:77:c2:1b:06:2f:3f:c7:ae: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:14:BE:FB:16:88:17:2B:DF:E2:70:44:20:9A:B1:3B:5F:F7:66:11 X509v3 Authority Key Identifier: keyid:66:03:ED:4C:78:45:42:50:11:6F:10:5E:B6:96:1D:C2:9E:1D:BC:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZgPtTHhFQlARbxBetpYdwp4dvGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/IRS--xaIFyvf4nBEIJqxO1_3ZhE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/44d603-fbf5-459b-a0ba-d2763c007752/1/ZgPtTHhFQlARbxBetpYdwp4dvGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.207.216.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:07:7e:56:8c:67:09:dd:9b:83:d7:4e:b3:68:05:7f:46:4a: 84:c4:d9:f0:53:cb:23:61:01:40:6d:15:5a:60:2b:72:9e:79: cb:8b:10:f6:a9:be:ee:02:be:8b:b3:ac:68:f8:48:ce:1f:e2: f7:4e:77:b9:c3:14:7a:be:d7:bc:75:cd:91:e8:f1:3f:e7:76: 93:2e:d1:06:67:d3:5e:c3:1e:39:14:8d:93:2f:e5:11:94:d1: 9e:72:21:62:69:0d:82:34:ee:d6:14:62:88:af:79:f8:15:d4: 18:86:7a:da:b0:dc:ce:0f:09:98:b8:65:3c:6e:21:19:af:68: c0:d9:2c:2b:ba:bc:86:21:22:5d:0e:3a:33:b9:5c:10:b4:97: e7:9f:b7:46:b7:3a:1c:18:c0:95:07:dc:5e:50:38:c6:e9:f1: 03:1f:8b:f0:9e:7a:e7:4b:5c:65:33:2e:27:93:52:aa:5e:8f: 64:dc:55:55:ee:35:23:74:0c:cb:39:92:32:f0:9b:c4:10:30: a2:33:f0:4e:23:1b:40:e4:3c:4d:ee:9e:67:39:21:ca:d1:61: 51:f6:07:6c:a1:f3:f6:1f:83:c9:51:73:7a:88:98:fa:d0:f6: ef:14:a9:1a:63:71:42:ff:89:4e:b9:c4:2a:c3:2c:97:54:36: dc:ba:83:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WtJEZX7pVhaK8JNOU2q3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MDNlZDRjNzg0NTQyNTAxMTZmMTA1ZWI2OTYxZGMyOWUx ZGJjNmMwHhcNMjYwMTAyMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTE0YmVmYjE2ODgxNzJiZGZlMjcwNDQyMDlhYjEzYjVmZjc2NjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SPm8pN+c8BIruuzIelyLFSQf/LT 6bFJa72jR0nF2KLALfdYAUYgTdskWin6ZoQ6/I1r6nZaQiLydFALCjXD5+GEvDWH OL4zZBJ40QRLeyRpH4L1F/2J9hDi42qfcAtxbNu/oLxmbT5ePIFxhABTQ+gj0vs4 gLuHU1bp3DYeEBKhylgFHwODYRXKa752xGylBpRYmbJqJ3Kj6Ef2qXS6wSKfUZp9 84wyamgKLXzAkpYJ7Uac4+ejNN/lYHFhS+BZcxbxOZ3YB2J2y5jxcJl/L/s0LPyA rrqOd+htcqemjNgy0vZ02v+m2WFD64Uu2Ny3tKB2MTb/d8IbBi8/x66HUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEUvvsWiBcr3+JwRCCasTtf92YRMB8GA1UdIwQY MBaAFGYD7Ux4RUJQEW8QXraWHcKeHbxsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEt ZDI3NjNjMDA3NzUyLzEvSVJTLS14YUlGeXZmNG5CRUlKcXhPMV8zWmhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS80NGQ2MDMtZmJmNS00NTliLWEwYmEtZDI3NjNjMDA3NzUy LzEvWmdQdFRIaEZRbEFSYnhCZXRwWWR3cDRkdkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8/YMA0G CSqGSIb3DQEBCwUAA4IBAQBMB35WjGcJ3ZuD106zaAV/RkqExNnwU8sjYQFAbRVa YCtynnnLixD2qb7uAr6Ls6xo+EjOH+L3Tne5wxR6vte8dc2R6PE/53aTLtEGZ9Ne wx45FI2TL+URlNGeciFiaQ2CNO7WFGKIr3n4FdQYhnrasNzODwmYuGU8biEZr2jA 2SwruryGISJdDjozuVwQtJfnn7dGtzocGMCVB9xeUDjG6fEDH4vwnnrnS1xlMy4n k1KqXo9k3FVV7jUjdAzLOZIy8JvEEDCiM/BOIxtA5DxN7p5nOSHK0WFR9gdsofP2 H4PJUXN6iJj60PbvFKkaY3FC/4lOucQqwyyXVDbcuoNw -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:13 2026 by rpki-client