This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/iHgy-cY5JLZuxwAspedo7BRq0XE.roa File: iHgy-cY5JLZuxwAspedo7BRq0XE.roa (raw, json) Hash identifier: CzxZm+EZ5iAzwQjn2H71bairCL9WtlqzHpkTnMH01W8= Subject key identifier: 88:78:32:F9:C6:39:24:B6:6E:C7:00:2C:A5:E7:68:EC:14:6A:D1:71 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019B7C808BD5C7A9D102E1932812C4578CEB Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/iHgy-cY5JLZuxwAspedo7BRq0XE.roa Signing time: Fri 02 Jan 2026 02:19:17 +0000 ROA not before: Fri 02 Jan 2026 02:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214927 IP address blocks: 94.232.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:8b:d5:c7:a9:d1:02:e1:93:28:12:c4:57:8c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 2 02:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=887832f9c63924b66ec7002ca5e768ec146ad171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6e:bd:67:92:a7:74:86:52:f5:b0:26:d5:07: 38:03:94:03:13:a4:b6:fb:c8:4c:1f:d0:0e:38:5d: 1c:ed:96:13:bf:ee:43:d2:a7:06:d3:01:fd:ef:45: fb:3e:43:49:44:27:8f:02:8c:50:6b:18:ce:b5:ac: 0e:ca:df:7a:c9:99:27:52:50:62:73:ce:f1:77:77: e2:ad:bb:76:95:55:03:88:4a:87:b8:a1:15:71:0a: c2:c3:ab:d2:a8:b2:f6:b9:7f:b9:13:8b:ff:81:fc: 56:ef:00:e2:25:80:54:51:a1:23:f9:f4:ff:5d:8b: ed:a9:79:38:d4:bf:04:39:18:8f:4c:05:a3:00:85: 38:06:82:f1:62:fb:4e:86:d4:50:43:ab:c4:92:6a: 44:77:f3:8d:56:4f:38:2c:5e:df:07:b3:fd:1a:2a: bd:cc:0e:b2:80:1a:db:41:d7:60:9a:08:1c:94:23: 74:03:2e:b6:ce:dc:26:e8:db:93:04:75:d6:09:19: 3e:f9:08:4d:30:80:38:0f:eb:ef:17:1c:25:22:45: b7:0f:1a:60:52:b6:03:03:29:5a:e1:9a:60:6d:d7: a5:05:63:9c:b1:1f:ca:6f:e8:9a:27:cf:1d:59:42: b2:07:84:16:c1:53:3d:79:44:26:c0:63:dc:71:ff: b0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:78:32:F9:C6:39:24:B6:6E:C7:00:2C:A5:E7:68:EC:14:6A:D1:71 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/iHgy-cY5JLZuxwAspedo7BRq0XE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.232.249.0/24 Signature Algorithm: sha256WithRSAEncryption 34:3e:7a:99:45:8c:0c:89:21:d3:10:9e:0d:8e:ac:57:67:72: e4:eb:2b:1f:19:d9:4f:d8:47:f8:33:b0:68:90:34:54:04:ea: 3c:a1:96:78:65:79:cc:30:78:6a:39:35:e9:94:84:34:fb:7a: 15:fa:bd:e0:7a:d4:5e:c0:ed:db:e9:01:ae:55:f6:a0:50:1d: 29:e1:54:13:fa:c7:2e:ca:4b:15:73:be:d1:2a:c3:86:03:1f: 0f:a5:b3:65:98:15:ec:e7:85:c6:d4:ed:64:54:d1:54:19:55: 65:93:80:fd:68:06:8f:19:72:19:28:5b:cb:f0:c1:1d:6e:f5: 52:12:e2:15:ee:a3:0c:8d:8e:22:84:03:6c:a2:13:c7:a0:ea: 7e:e6:59:73:55:91:5a:54:2e:47:7a:dc:83:bb:34:8f:c3:05: 69:d5:89:f6:1c:d1:6a:de:c0:7b:8e:38:0e:fd:de:fd:e3:f4: d5:0f:16:4b:02:b2:d0:df:3d:b2:37:d8:0e:c7:ad:b7:ce:ce: d0:73:4a:b9:f3:8e:0c:ed:b8:9e:65:6b:fa:6e:72:ff:61:40: 15:a1:52:75:5d:d8:b0:43:f8:8a:5b:56:57:a9:4c:78:a4:f5: a6:60:f6:a0:35:e5:53:d3:2c:48:68:6b:6b:73:c0:c5:5a:70: e0:80:f3:4b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIvVx6nRAuGTKBLEV4zrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTAyMDIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODc4MzJmOWM2MzkyNGI2NmVjNzAwMmNhNWU3NjhlYzE0NmFkMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym69Z5KndIZS9bAm1Qc4A5QDE6S2 +8hMH9AOOF0c7ZYTv+5D0qcG0wH970X7PkNJRCePAoxQaxjOtawOyt96yZknUlBi c87xd3firbt2lVUDiEqHuKEVcQrCw6vSqLL2uX+5E4v/gfxW7wDiJYBUUaEj+fT/ XYvtqXk41L8EORiPTAWjAIU4BoLxYvtOhtRQQ6vEkmpEd/ONVk84LF7fB7P9Giq9 zA6ygBrbQddgmggclCN0Ay62ztwm6NuTBHXWCRk++QhNMIA4D+vvFxwlIkW3Dxpg UrYDAyla4ZpgbdelBWOcsR/Kb+iaJ88dWUKyB4QWwVM9eUQmwGPccf+w6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIh4MvnGOSS2bscALKXnaOwUatFxMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvaUhneS1jWTVKTFp1eHdBc3BlZG83QlJxMFhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuj5MA0G CSqGSIb3DQEBCwUAA4IBAQA0PnqZRYwMiSHTEJ4NjqxXZ3Lk6ysfGdlP2Ef4M7Bo kDRUBOo8oZZ4ZXnMMHhqOTXplIQ0+3oV+r3getRewO3b6QGuVfagUB0p4VQT+scu yksVc77RKsOGAx8PpbNlmBXs54XG1O1kVNFUGVVlk4D9aAaPGXIZKFvL8MEdbvVS EuIV7qMMjY4ihANsohPHoOp+5llzVZFaVC5HetyDuzSPwwVp1Yn2HNFq3sB7jjgO /d794/TVDxZLArLQ3z2yN9gOx623zs7Qc0q5844M7bieZWv6bnL/YUAVoVJ1Xdiw Q/iKW1ZXqUx4pPWmYPagNeVT0yxIaGtrc8DFWnDggPNL -----END CERTIFICATE-----Generated at Tue Jan 20 06:04:29 2026 by rpki-client