This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iz-s1SV_V4AaMH-6-vZcdBe9_28.roa File: iz-s1SV_V4AaMH-6-vZcdBe9_28.roa (raw, json) Hash identifier: AFIMSomYZRZ7dduGJLch69mRqRFbHaPPEtg9WN6niUo= Subject key identifier: 8B:3F:AC:D5:25:7F:57:80:1A:30:7F:BA:FA:F6:5C:74:17:BD:FF:6F Certificate issuer: /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012 Certificate serial: 019B7F139A7D4FEC645E4A07D8A2CE58958D Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iz-s1SV_V4AaMH-6-vZcdBe9_28.roa Signing time: Fri 02 Jan 2026 14:19:09 +0000 ROA not before: Fri 02 Jan 2026 14:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204995 IP address blocks: 45.13.220.0/22 maxlen: 24 45.13.220.0/24 maxlen: 24 185.184.8.0/24 maxlen: 24 185.184.9.0/24 maxlen: 24 185.184.10.0/24 maxlen: 24 185.184.11.0/24 maxlen: 24 2a0b:2180:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.mft rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9a:7d:4f:ec:64:5e:4a:07:d8:a2:ce:58:95:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012 Validity Not Before: Jan 2 14:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b3facd5257f57801a307fbafaf65c7417bdff6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:40:56:ae:2d:66:0c:d6:b0:ed:6c:b4:b2: d8:6a:c5:0a:cd:9e:9d:85:35:9c:cc:66:82:c3:77: 81:86:6a:6a:48:78:80:ad:d4:9d:23:4b:f9:a8:70: 9c:09:8c:2a:97:53:d4:99:c6:af:76:86:3e:70:2c: 33:a2:28:8f:06:c7:14:dc:70:e4:ec:44:c0:2f:8f: c3:cb:35:67:2f:e0:32:89:cf:9e:e4:09:4d:16:25: 75:be:a3:43:fc:54:f7:a3:24:b9:3b:5c:14:d5:27: 37:7e:8a:e4:41:6a:18:cd:b9:e8:72:8d:c2:1f:9d: d4:0a:70:45:c4:a1:af:70:e3:88:cf:7b:1b:7a:c2: 01:52:72:4b:6e:f6:f5:f1:54:1e:9e:58:ad:c8:41: 2d:c9:3a:25:35:2a:e0:56:ab:fe:c7:c3:7d:76:c6: 5c:ea:1e:16:d5:74:38:3a:cd:3d:7c:fd:1b:84:ff: f8:ce:54:a2:6c:93:36:82:d4:05:29:32:f5:4e:f0: 2f:bd:4d:e7:d9:e0:7f:4f:b6:b4:bb:52:c4:cf:3d: fb:dd:ce:b3:a8:d3:86:1c:e1:bc:0c:e2:e7:9c:9f: 9f:fc:b5:f3:79:5d:ee:b8:dd:09:5f:80:ae:b3:56: 68:52:dd:50:f5:ed:71:a0:07:95:bc:92:c2:f2:7b: cb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3F:AC:D5:25:7F:57:80:1A:30:7F:BA:FA:F6:5C:74:17:BD:FF:6F X509v3 Authority Key Identifier: keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iz-s1SV_V4AaMH-6-vZcdBe9_28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.220.0/22 185.184.8.0/22 IPv6: 2a0b:2180:1::/48 Signature Algorithm: sha256WithRSAEncryption 0d:98:df:56:ad:c2:64:75:8f:ca:6a:db:38:98:a5:9f:c6:9b: d0:73:e7:d7:8b:a0:bd:7d:cf:86:96:13:79:bc:33:f2:12:bf: 16:f5:98:ef:71:08:af:23:58:d3:f4:23:39:8c:78:01:dd:99: 55:bd:02:6d:46:fc:32:db:19:4c:14:3b:f5:71:c9:27:65:2c: b3:9d:d0:a7:e5:e6:12:f1:5f:08:4f:dd:f1:1b:ae:65:10:85: 87:7d:73:65:38:f2:1b:0a:cb:5a:13:78:86:38:ca:5e:cc:79: d7:f2:72:91:4d:d3:37:1b:85:ff:34:6e:40:71:d6:78:1a:84: 0b:64:fc:e1:ac:42:ef:fb:ed:24:a7:14:96:8e:7f:8b:ec:62: 93:ef:b3:93:34:20:84:55:2b:de:07:8d:56:66:8f:24:16:f7: 85:ee:56:68:01:2d:46:1d:12:78:5a:46:08:75:85:71:4c:ec: aa:e7:30:c8:ae:e0:73:b9:db:83:e5:18:f3:8b:d6:5f:5b:bc: ba:40:13:4b:fa:b1:80:24:1a:ae:82:ad:1f:7a:00:46:39:c6: 0b:a5:db:8c:f0:4d:a2:59:ca:05:01:7c:65:2e:56:9b:f7:77: 11:9d:cc:42:c5:2a:b2:6a:ad:4a:c1:a6:66:5f:b8:cf:74:19: 1e:ee:e4:e2 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/E5p9T+xkXkoH2KLOWJWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl MDcwMTIwHhcNMjYwMTAyMTQxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjNmYWNkNTI1N2Y1NzgwMWEzMDdmYmFmYWY2NWM3NDE3YmRmZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzVAVq4tZgzWsO1stLLYasUKzZ6d hTWczGaCw3eBhmpqSHiArdSdI0v5qHCcCYwql1PUmcavdoY+cCwzoiiPBscU3HDk 7ETAL4/DyzVnL+Ayic+e5AlNFiV1vqND/FT3oyS5O1wU1Sc3forkQWoYzbnoco3C H53UCnBFxKGvcOOIz3sbesIBUnJLbvb18VQenlityEEtyTolNSrgVqv+x8N9dsZc 6h4W1XQ4Os09fP0bhP/4zlSibJM2gtQFKTL1TvAvvU3n2eB/T7a0u1LEzz373c6z qNOGHOG8DOLnnJ+f/LXzeV3uuN0JX4Cus1ZoUt1Q9e1xoAeVvJLC8nvLUQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIs/rNUlf1eAGjB/uvr2XHQXvf9vMB8GA1UdIwQY MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt ZjY1NDFmNzc4NTg1LzEvaXotczFTVl9WNEFhTUgtNi12WmNkQmU5XzI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1 LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCLQ3cAwQC ubgIMA8EAgACMAkDBwAqCyGAAAEwDQYJKoZIhvcNAQELBQADggEBAA2Y31atwmR1 j8pq2ziYpZ/Gm9Bz59eLoL19z4aWE3m8M/ISvxb1mO9xCK8jWNP0IzmMeAHdmVW9 Am1G/DLbGUwUO/VxySdlLLOd0Kfl5hLxXwhP3fEbrmUQhYd9c2U48hsKy1oTeIY4 yl7MedfycpFN0zcbhf80bkBx1ngahAtk/OGsQu/77SSnFJaOf4vsYpPvs5M0IIRV K94HjVZmjyQW94XuVmgBLUYdEnhaRgh1hXFM7KrnMMiu4HO524PlGPOL1l9bvLpA E0v6sYAkGq6CrR96AEY5xgul24zwTaJZygUBfGUuVpv3dxGdzELFKrJqrUrBpmZf uM90GR7u5OI= -----END CERTIFICATE-----Generated at Sat Jan 3 06:27:43 2026 by rpki-client