This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ixD-Arj77LHgfX3zc7lJeNIlCF0.roa File: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (raw, json) Hash identifier: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI= Subject key identifier: 8B:10:FE:02:B8:FB:EC:B1:E0:7D:7D:F3:73:B9:49:78:D2:25:08:5D Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 019B7C7FC0CD9A976823B3012A99BC4AD839 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ixD-Arj77LHgfX3zc7lJeNIlCF0.roa Signing time: Fri 02 Jan 2026 02:18:25 +0000 ROA not before: Fri 02 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55410 IP address blocks: 31.171.156.0/24 maxlen: 24 31.171.157.0/24 maxlen: 24 31.171.158.0/24 maxlen: 24 31.171.159.0/24 maxlen: 24 65.38.101.0/24 maxlen: 24 65.38.113.0/24 maxlen: 24 65.79.182.0/24 maxlen: 24 66.179.58.0/24 maxlen: 24 66.179.85.0/24 maxlen: 24 66.179.151.0/24 maxlen: 24 67.217.229.0/24 maxlen: 24 167.160.99.0/24 maxlen: 24 167.160.100.0/24 maxlen: 24 167.160.101.0/24 maxlen: 24 167.160.102.0/24 maxlen: 24 167.160.103.0/24 maxlen: 24 167.160.104.0/24 maxlen: 24 167.160.105.0/24 maxlen: 24 167.160.106.0/24 maxlen: 24 167.160.107.0/24 maxlen: 24 167.160.108.0/24 maxlen: 24 167.160.109.0/24 maxlen: 24 167.160.110.0/24 maxlen: 24 167.160.111.0/24 maxlen: 24 167.160.112.0/24 maxlen: 24 167.160.113.0/24 maxlen: 24 167.160.114.0/24 maxlen: 24 167.160.115.0/24 maxlen: 24 167.160.116.0/24 maxlen: 24 167.160.117.0/24 maxlen: 24 216.183.116.0/24 maxlen: 24 216.183.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c0:cd:9a:97:68:23:b3:01:2a:99:bc:4a:d8:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Jan 2 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b10fe02b8fbecb1e07d7df373b94978d225085d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:06:3f:bc:82:30:1f:34:4a:8a:d9:d9:96:8c: 1a:1c:a5:3d:3d:3f:d6:98:bf:0e:d9:3c:2c:ad:ea: 99:4c:9e:60:99:10:30:81:bf:3b:1c:e5:63:07:10: c8:7c:c0:3b:23:ac:25:18:b5:56:b9:40:9e:c2:c2: 82:c4:ca:a4:30:df:23:20:b6:29:43:05:f9:46:ba: 0a:71:b0:f2:47:94:8d:38:ad:1e:8c:00:3d:38:3a: 05:32:28:7c:50:91:85:62:68:f0:8a:34:a2:48:90: f9:af:ba:89:41:76:a4:54:4f:9b:95:40:87:75:9d: 6e:e0:c6:24:9b:e8:bb:5b:32:1f:4b:ba:f2:09:dd: 8e:5d:bd:82:f4:2a:6b:8d:16:43:9f:ce:d2:fb:26: a7:5a:8a:06:8b:9a:09:41:bd:fc:d5:99:5e:05:78: 8f:0a:eb:b1:4c:84:5d:f6:97:5b:1b:00:c6:f9:3d: 93:e7:f7:f8:34:cb:8e:27:4b:bd:3c:4f:3f:ec:d3: 33:61:16:2d:44:bd:72:fb:72:de:23:e0:e7:8f:b2: 08:76:f5:e4:55:7f:d9:64:3e:c5:55:27:10:cb:c4: d5:b2:ad:c7:db:76:8f:01:ae:7e:fc:61:43:2c:ae: e9:5a:c8:58:71:83:5b:7c:78:6d:15:d2:0b:bc:57: a0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:10:FE:02:B8:FB:EC:B1:E0:7D:7D:F3:73:B9:49:78:D2:25:08:5D X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/ixD-Arj77LHgfX3zc7lJeNIlCF0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.171.156.0/22 65.38.101.0/24 65.38.113.0/24 65.79.182.0/24 66.179.58.0/24 66.179.85.0/24 66.179.151.0/24 67.217.229.0/24 167.160.99.0-167.160.117.255 216.183.116.0/24 216.183.121.0/24 Signature Algorithm: sha256WithRSAEncryption 67:9b:9a:14:b8:76:22:9f:48:1f:97:93:c9:b6:96:78:da:d6: 08:2b:05:a0:b2:1d:ab:ff:fc:07:b4:e5:4a:a4:96:a2:c1:99: 59:69:94:a3:8f:ce:ca:62:b4:dc:74:c3:8b:b7:72:ca:6f:74: ac:65:d6:19:ba:6f:9e:8b:83:0d:ad:8f:b5:a3:ec:27:90:17: ed:73:8f:35:07:da:b3:09:46:12:b4:2c:e9:2e:2b:3d:28:d9: bd:b0:74:a3:5f:56:d5:b1:5b:6b:ef:e0:65:40:fc:a2:00:34: 42:df:7e:85:f2:79:d8:85:3b:73:29:ec:93:fc:4e:1e:be:d6: f8:70:b3:db:53:52:c8:66:2c:7b:bb:77:7f:5d:8f:91:53:90: 93:c2:0a:f6:66:6c:ed:fe:ea:12:5b:15:ee:9b:b5:2f:38:2f: aa:3c:f8:a5:6e:d6:19:44:fd:68:9b:ef:eb:e5:9a:86:1a:c5: f6:aa:bd:47:af:f0:48:32:43:fd:3e:27:7f:67:13:da:14:bd: 81:2c:5d:8c:e4:50:1c:df:85:98:3c:d3:e6:ac:f1:61:bd:f2: a3:0b:4b:ff:13:33:fe:5d:7b:89:6a:97:67:b2:57:b8:24:89: a2:22:08:00:8c:51:22:48:68:da:b9:8b:7c:26:a3:72:21:ee: 84:57:f0:f7 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZt8f8DNmpdoI7MBKpm8Stg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwMTAyMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjEwZmUwMmI4ZmJlY2IxZTA3ZDdkZjM3M2I5NDk3OGQyMjUwODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gY/vIIwHzRKitnZlowaHKU9PT/W mL8O2TwsreqZTJ5gmRAwgb87HOVjBxDIfMA7I6wlGLVWuUCewsKCxMqkMN8jILYp QwX5RroKcbDyR5SNOK0ejAA9ODoFMih8UJGFYmjwijSiSJD5r7qJQXakVE+blUCH dZ1u4MYkm+i7WzIfS7ryCd2OXb2C9CprjRZDn87S+yanWooGi5oJQb381ZleBXiP CuuxTIRd9pdbGwDG+T2T5/f4NMuOJ0u9PE8/7NMzYRYtRL1y+3LeI+Dnj7IIdvXk VX/ZZD7FVScQy8TVsq3H23aPAa5+/GFDLK7pWshYcYNbfHhtFdILvFeguQIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFIsQ/gK4++yx4H1983O5SXjSJQhdMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEvaXhELUFyajc3TEhnZlgzemM3bEplTklsQ0YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQCH6ucAwQA QSZlAwQAQSZxAwQAQU+2AwQAQrM6AwQAQrNVAwQAQrOXAwQAQ9nlMAwDBACnoGMD BAGnoHQDBADYt3QDBADYt3kwDQYJKoZIhvcNAQELBQADggEBAGebmhS4diKfSB+X k8m2lnja1ggrBaCyHav//Ae05UqklqLBmVlplKOPzspitNx0w4u3cspvdKxl1hm6 b56Lgw2tj7Wj7CeQF+1zjzUH2rMJRhK0LOkuKz0o2b2wdKNfVtWxW2vv4GVA/KIA NELffoXyediFO3Mp7JP8Th6+1vhws9tTUshmLHu7d39dj5FTkJPCCvZmbO3+6hJb Fe6btS84L6o8+KVu1hlE/Wib7+vlmoYaxfaqvUev8EgyQ/0+J39nE9oUvYEsXYzk UBzfhZg80+as8WG98qMLS/8TM/5de4lql2eyV7gkiaIiCACMUSJIaNq5i3wmo3Ih 7oRX8Pc= -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:31 2026 by rpki-client