This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IRZBsU4Ps_fr_-ZNt5-L6WXL9q0.roa File: IRZBsU4Ps_fr_-ZNt5-L6WXL9q0.roa (raw, json) Hash identifier: w2E70YXc5crzdJbfVCcm40iG0BwDpbNfvFKUd8DfhP4= Subject key identifier: 21:16:41:B1:4E:0F:B3:F7:EB:FF:E6:4D:B7:9F:8B:E9:65:CB:F6:AD Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA773C9F6F86EA6ABE452CC35B58BF3 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IRZBsU4Ps_fr_-ZNt5-L6WXL9q0.roa Signing time: Fri 02 Jan 2026 12:21:01 +0000 ROA not before: Fri 02 Jan 2026 12:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41691 IP address blocks: 81.22.192.0/24 maxlen: 24 87.117.128.0/21 maxlen: 21 87.117.132.0/24 maxlen: 24 87.117.136.0/23 maxlen: 23 87.117.138.0/24 maxlen: 24 87.117.140.0/22 maxlen: 22 87.117.146.0/23 maxlen: 23 87.117.148.0/23 maxlen: 23 89.221.192.0/22 maxlen: 22 89.221.197.0/24 maxlen: 24 89.221.205.0/24 maxlen: 24 109.172.48.0/22 maxlen: 22 109.172.52.0/23 maxlen: 23 109.172.72.0/23 maxlen: 23 109.172.102.0/23 maxlen: 23 109.172.104.0/22 maxlen: 22 109.172.118.0/23 maxlen: 23 2a02:25e0:f00::/40 maxlen: 40 2a02:25e0:7700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:73:c9:f6:f8:6e:a6:ab:e4:52:cc:35:b5:8b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=211641b14e0fb3f7ebffe64db79f8be965cbf6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:3b:a6:df:7f:2a:58:f7:5f:5c:fa:4d:8e: 43:81:c1:87:b8:25:06:93:d4:0a:db:c6:41:06:b0: d4:d7:21:65:12:15:29:a6:4c:8b:7e:9b:e9:93:e4: 1b:d8:86:ff:6d:fc:20:3e:0f:38:b5:d7:db:37:50: a4:a3:93:8c:2b:92:fd:de:56:75:fd:98:27:46:4a: 62:63:23:7f:83:8e:d9:fc:19:44:55:d1:fa:e0:45: 1d:6e:e2:5e:6a:74:4e:ae:6c:38:3b:f9:a7:f4:ee: c9:24:f2:bc:d2:83:39:97:23:0e:73:d1:bf:83:c8: 2b:29:f8:ed:47:6e:a1:1e:4d:d9:56:0e:b7:3b:92: 04:99:e2:bd:f3:a5:9e:b8:9b:66:40:2d:59:b6:53: bc:f5:da:b3:0a:0e:3b:71:df:1f:8a:bc:0e:f4:e6: 12:96:60:b2:55:26:85:97:29:16:75:00:2b:28:7d: 57:4d:ba:ff:66:53:5d:97:98:eb:9b:15:94:5c:5a: 7d:ca:60:be:0d:d2:7e:51:f8:79:02:e6:da:32:c1: cf:c4:c9:b3:77:c9:e9:aa:e5:00:86:08:a5:8f:8c: 67:dc:b6:f9:70:ac:3c:0b:1d:82:40:7b:99:eb:4e: 50:47:02:1b:71:31:44:45:87:34:76:ad:f0:b7:d7: 5f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:16:41:B1:4E:0F:B3:F7:EB:FF:E6:4D:B7:9F:8B:E9:65:CB:F6:AD X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/IRZBsU4Ps_fr_-ZNt5-L6WXL9q0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.22.192.0/24 87.117.128.0-87.117.138.255 87.117.140.0/22 87.117.146.0-87.117.149.255 89.221.192.0/22 89.221.197.0/24 89.221.205.0/24 109.172.48.0-109.172.53.255 109.172.72.0/23 109.172.102.0-109.172.107.255 109.172.118.0/23 IPv6: 2a02:25e0:f00::/40 2a02:25e0:7700::/40 Signature Algorithm: sha256WithRSAEncryption 32:d1:3f:ee:c9:00:49:ad:1f:42:97:3f:64:da:33:c1:92:f4: 38:eb:00:1f:b9:a4:4d:fd:a8:96:6d:8b:5a:bc:d8:45:45:ac: 30:59:9b:8c:90:b9:64:0d:e0:82:4d:14:2b:a8:ad:66:75:e7: 23:4f:b1:10:dc:f0:6a:bb:f7:c9:6b:d6:6e:ff:87:cb:ba:88: 3c:c4:ef:c7:32:60:73:6e:03:15:c7:9d:54:21:42:bd:fc:37: 62:b0:3e:88:57:5d:a9:05:50:07:39:3c:cb:ad:be:3a:80:d6: a3:31:f6:24:ab:49:2d:3d:ef:71:35:ba:0e:d1:b5:53:98:60: 69:bf:62:6a:1d:3a:ff:08:19:21:f5:87:4e:1b:1c:12:0e:96: aa:31:66:a7:e5:77:2b:65:36:2a:1e:37:af:d6:b8:44:07:39: 26:23:c3:08:46:95:7e:5e:bc:4a:4a:1b:aa:b9:37:25:16:64: c0:e4:b3:07:f5:a8:42:46:3e:6f:2e:86:68:dc:ef:5d:5a:52: db:71:c8:d6:c5:86:68:97:15:25:e3:e8:4d:b6:f9:04:e9:00: c5:a2:49:d3:f9:fd:31:8e:87:db:bd:54:b2:31:21:43:47:5f: 0f:d2:82:c0:d3:20:ca:51:c0:ff:26:ee:ad:dc:b1:00:59:de: a4:18:6e:f8 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgISAZt+p3PJ9vhupqvkUsw1tYvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTE2NDFiMTRlMGZiM2Y3ZWJmZmU2NGRiNzlmOGJlOTY1Y2JmNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr47pt9/Klj3X1z6TY5DgcGHuCUG k9QK28ZBBrDU1yFlEhUppkyLfpvpk+Qb2Ib/bfwgPg84tdfbN1Cko5OMK5L93lZ1 /ZgnRkpiYyN/g47Z/BlEVdH64EUdbuJeanROrmw4O/mn9O7JJPK80oM5lyMOc9G/ g8grKfjtR26hHk3ZVg63O5IEmeK986WeuJtmQC1ZtlO89dqzCg47cd8firwO9OYS lmCyVSaFlykWdQArKH1XTbr/ZlNdl5jrmxWUXFp9ymC+DdJ+Ufh5AubaMsHPxMmz d8npquUAhgilj4xn3Lb5cKw8Cx2CQHuZ605QRwIbcTFERYc0dq3wt9df9QIDAQAB o4ICgDCCAnwwHQYDVR0OBBYEFCEWQbFOD7P36//mTbefi+lly/atMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvSVJaQnNVNFBzX2ZyXy1aTnQ1LUw2V1hMOXEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGVBggrBgEFBQcBBwEB/wSBhTCBgjBoBAIAATBiAwQAURbA MAwDBAdXdYADBABXdYoDBAJXdYwwDAMEAVd1kgMEAVd1lAMEAlndwAMEAFndxQME AFndzTAMAwQEbawwAwQBbaw0AwQBbaxIMAwDBAFtrGYDBAJtrGgDBAFtrHYwFgQC AAIwEAMGACoCJeAPAwYAKgIl4HcwDQYJKoZIhvcNAQELBQADggEBADLRP+7JAEmt H0KXP2TaM8GS9DjrAB+5pE39qJZti1q82EVFrDBZm4yQuWQN4IJNFCuorWZ15yNP sRDc8Gq798lr1m7/h8u6iDzE78cyYHNuAxXHnVQhQr38N2KwPohXXakFUAc5PMut vjqA1qMx9iSrSS0973E1ug7RtVOYYGm/YmodOv8IGSH1h04bHBIOlqoxZqfldytl NioeN6/WuEQHOSYjwwhGlX5evEpKG6q5NyUWZMDkswf1qEJGPm8uhmjc711aUttx yNbFhmiXFSXj6E22+QTpAMWiSdP5/TGOh9u9VLIxIUNHXw/SgsDTIMpRwP8m7q3c sQBZ3qQYbvg= -----END CERTIFICATE-----Generated at Fri Jan 2 21:42:14 2026 by rpki-client