This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/ilf77_-o9-q6za7MOsqeG7F-F18.roa File: ilf77_-o9-q6za7MOsqeG7F-F18.roa (raw, json) Hash identifier: QcXY77GP6oWSI7llT54vOOPgAvyMn7s0Et6LlhSw/kk= Subject key identifier: 8A:57:FB:EF:FF:A8:F7:EA:BA:CD:AE:CC:3A:CA:9E:1B:B1:7E:17:5F Certificate issuer: /CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Certificate serial: 019B7C804160A250FED6A9D10D061F9ABBE2 Authority key identifier: 84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/ilf77_-o9-q6za7MOsqeG7F-F18.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29684 IP address blocks: 91.223.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.mft rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:41:60:a2:50:fe:d6:a9:d1:0d:06:1f:9a:bb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8407f0063ee9af31d87cfe65b9bc193eb42c8969 Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a57fbefffa8f7eabacdaecc3aca9e1bb17e175f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:be:9b:f9:33:1c:98:ab:83:23:0a:ac:6c: 35:e8:10:2b:37:60:84:69:e5:40:57:4f:88:15:2f: 53:37:b0:22:b1:3c:9a:e7:5a:a4:d6:38:60:bc:9a: 0a:99:01:f4:8b:44:59:b9:b8:1a:08:6f:18:19:5c: 03:30:f3:e7:34:86:11:fe:09:f9:fe:43:be:56:6c: d5:29:1c:70:05:4e:80:fc:3f:d0:d9:35:ee:14:6c: 8a:0f:c9:d3:18:d7:d9:dd:78:e5:de:11:30:81:a7: 7d:41:68:b9:82:78:0c:f2:85:e6:c3:32:7c:f2:e2: 70:00:ff:a5:dc:fe:df:f2:0d:f9:de:a5:c8:18:38: f4:0d:c1:67:1f:b9:37:64:76:53:38:eb:a8:b5:c2: 11:2f:3e:8b:96:22:36:8b:9c:a7:e5:08:e0:4c:5f: 2e:67:db:57:89:11:aa:4b:5d:d9:21:32:66:ba:aa: 60:8e:d4:46:40:f5:79:3d:0e:1c:db:89:da:3c:90: 96:e7:e1:6f:e5:53:fa:83:1c:38:6d:b7:98:26:d1: c2:3c:2e:54:6f:1b:d3:3d:99:f4:45:85:88:cc:b0: 14:5a:8a:e9:c5:40:50:8c:cc:8a:e8:1f:68:4a:64: 1a:e4:a3:9f:c8:b1:32:32:9d:53:9a:ee:18:41:2e: 05:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:57:FB:EF:FF:A8:F7:EA:BA:CD:AE:CC:3A:CA:9E:1B:B1:7E:17:5F X509v3 Authority Key Identifier: keyid:84:07:F0:06:3E:E9:AF:31:D8:7C:FE:65:B9:BC:19:3E:B4:2C:89:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAfwBj7przHYfP5lubwZPrQsiWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/ilf77_-o9-q6za7MOsqeG7F-F18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/657c59-e3b9-404f-afab-e1efcf2ed0a7/1/hAfwBj7przHYfP5lubwZPrQsiWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.210.0/24 Signature Algorithm: sha256WithRSAEncryption 10:22:f2:f6:b9:d5:ef:de:be:6d:06:03:91:e5:67:84:f0:f8: 8e:81:f0:06:13:57:3c:d0:f7:48:d9:dd:5c:d1:62:25:a3:c9: f0:d0:a9:f7:e7:8a:66:5e:d5:32:3d:50:8e:d9:9e:2b:cc:c3: fd:b5:7f:e7:0c:c8:72:3a:27:a7:c6:eb:f8:88:a0:6b:aa:9e: 68:cf:46:dc:bd:c2:4b:c9:3a:54:3f:a6:d3:ab:53:7b:f3:20: 29:85:67:b0:e3:93:9f:1b:b0:65:cc:aa:eb:6d:a7:97:44:8e: aa:75:06:de:51:3a:40:a6:89:ad:b7:14:d8:22:20:ca:bf:97: ad:b1:7f:4e:f6:b3:c9:fe:74:9f:00:a2:8f:08:04:28:7f:6f: df:52:83:98:e6:e2:e9:6f:5f:25:98:7c:e2:7a:1b:a4:c3:4d: 2b:75:6f:55:4f:c3:ef:92:47:11:5e:17:0a:85:86:91:44:35: 0f:d8:07:a1:33:e3:ee:c9:c9:c6:6b:8d:d8:b1:d9:32:da:14: b3:a9:8b:74:32:8d:d7:49:7a:be:72:61:0f:74:0e:12:3d:d6: 0b:ee:cc:47:9e:be:be:ea:24:b9:74:71:ed:1f:55:11:66:6c: 86:51:7f:61:43:2a:46:cd:f2:8b:0d:98:3b:87:f1:2c:9a:42: 38:9c:aa:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEFgolD+1qnRDQYfmrviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDdmMDA2M2VlOWFmMzFkODdjZmU2NWI5YmMxOTNlYjQy Yzg5NjkwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTU3ZmJlZmZmYThmN2VhYmFjZGFlY2MzYWNhOWUxYmIxN2UxNzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVK+m/kzHJirgyMKrGw16BArN2CE aeVAV0+IFS9TN7AisTya51qk1jhgvJoKmQH0i0RZubgaCG8YGVwDMPPnNIYR/gn5 /kO+VmzVKRxwBU6A/D/Q2TXuFGyKD8nTGNfZ3Xjl3hEwgad9QWi5gngM8oXmwzJ8 8uJwAP+l3P7f8g353qXIGDj0DcFnH7k3ZHZTOOuotcIRLz6LliI2i5yn5QjgTF8u Z9tXiRGqS13ZITJmuqpgjtRGQPV5PQ4c24naPJCW5+Fv5VP6gxw4bbeYJtHCPC5U bxvTPZn0RYWIzLAUWorpxUBQjMyK6B9oSmQa5KOfyLEyMp1Tmu4YQS4FIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIpX++//qPfqus2uzDrKnhuxfhdfMB8GA1UdIwQY MBaAFIQH8AY+6a8x2Hz+Zbm8GT60LIlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWIt ZTFlZmNmMmVkMGE3LzEvaWxmNzdfLW85LXE2emE3TU9zcWVHN0YtRjE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NTdjNTktZTNiOS00MDRmLWFmYWItZTFlZmNmMmVkMGE3 LzEvaEFmd0JqN3ByekhZZlA1bHVid1pQclFzaVdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/SMA0G CSqGSIb3DQEBCwUAA4IBAQAQIvL2udXv3r5tBgOR5WeE8PiOgfAGE1c80PdI2d1c 0WIlo8nw0Kn354pmXtUyPVCO2Z4rzMP9tX/nDMhyOienxuv4iKBrqp5oz0bcvcJL yTpUP6bTq1N78yAphWew45OfG7BlzKrrbaeXRI6qdQbeUTpApomttxTYIiDKv5et sX9O9rPJ/nSfAKKPCAQof2/fUoOY5uLpb18lmHziehukw00rdW9VT8PvkkcRXhcK hYaRRDUP2AehM+PuycnGa43Ysdky2hSzqYt0Mo3XSXq+cmEPdA4SPdYL7sxHnr6+ 6iS5dHHtH1URZmyGUX9hQypGzfKLDZg7h/EsmkI4nKor -----END CERTIFICATE-----Generated at Tue Jan 20 07:46:03 2026 by rpki-client