This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ETKpQOj6OTuNPXTp1i_iB6iLDJY.roa File: ETKpQOj6OTuNPXTp1i_iB6iLDJY.roa (raw, json) Hash identifier: oL+8JKtbsi8ZoMkkG6i545NLOcvXQnKT9FOD68h1HXk= Subject key identifier: 11:32:A9:40:E8:FA:39:3B:8D:3D:74:E9:D6:2F:E2:07:A8:8B:0C:96 Certificate issuer: /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656 Certificate serial: 019B76EAFB24B0AED438982E60218E849314 Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ETKpQOj6OTuNPXTp1i_iB6iLDJY.roa Signing time: Thu 01 Jan 2026 00:17:49 +0000 ROA not before: Thu 01 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50758 IP address blocks: 46.31.160.0/21 maxlen: 24 213.190.12.0/24 maxlen: 24 213.190.13.0/24 maxlen: 24 2a0a:2a40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fb:24:b0:ae:d4:38:98:2e:60:21:8e:84:93:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656 Validity Not Before: Jan 1 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1132a940e8fa393b8d3d74e9d62fe207a88b0c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:87:5c:5c:e8:98:b9:6f:5a:f6:97:06:b5:74: 4a:8e:89:b2:e6:f2:14:6e:df:86:92:81:7b:bf:0d: 23:aa:09:bc:00:d8:cc:2b:fb:36:36:4c:01:4c:52: 81:56:bb:62:42:2d:38:df:d9:a2:1f:43:71:2d:45: 9d:b8:08:d3:0f:f4:57:9d:5f:f9:b5:fa:81:74:12: ab:21:f6:5d:9c:7d:4d:41:f4:46:f6:28:21:6c:82: 71:37:36:aa:9a:46:ea:3d:5f:32:5c:42:d8:78:bf: 24:e2:f3:b8:02:93:b9:18:7e:f6:31:a8:f5:34:80: f7:22:61:f6:ff:de:91:97:ba:b6:f4:ba:b3:d8:35: 69:3c:b2:fb:33:a5:d7:94:bf:d5:19:22:af:00:49: 57:fd:ea:c3:33:b5:08:b8:72:07:c3:94:a9:7f:76: ea:b7:ee:68:ae:9d:a6:73:9e:9a:63:f8:c7:8b:8e: 8e:54:73:b2:b6:0c:c8:95:d8:8f:23:05:f5:e0:98: ef:48:f5:ee:08:bb:85:f7:6e:88:0a:29:30:e6:c4: f3:81:eb:d3:35:4b:6b:d7:77:95:63:36:7f:a1:93: 6a:9a:43:08:5e:9c:1a:fc:7f:4c:4a:36:1c:9f:16: e1:19:ba:b4:9c:69:c8:fc:e7:72:e4:76:1e:38:3c: c2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:32:A9:40:E8:FA:39:3B:8D:3D:74:E9:D6:2F:E2:07:A8:8B:0C:96 X509v3 Authority Key Identifier: keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/ETKpQOj6OTuNPXTp1i_iB6iLDJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.160.0/21 213.190.12.0/23 IPv6: 2a0a:2a40::/29 Signature Algorithm: sha256WithRSAEncryption 2a:45:b6:cd:9e:23:49:71:ca:dd:0c:57:f4:c5:f2:25:f1:c6: b8:99:db:a8:f1:ee:1f:62:34:9b:c9:07:30:54:06:e1:14:f7: 69:aa:e7:54:8a:89:30:25:aa:e0:72:87:74:e9:0d:5b:76:a1: df:10:ae:74:00:27:63:f6:4b:b3:3b:88:c3:de:b2:fb:95:9c: 70:0d:80:36:07:8f:20:55:17:1b:b5:64:cf:90:95:6f:b2:d3: 02:37:0d:fa:5e:5a:10:e1:6f:c0:f1:d9:c8:ce:cf:3e:2a:9a: c3:d4:52:c0:1c:4c:fc:97:57:23:2f:e8:79:0c:58:9c:e1:18: 80:2c:af:13:97:a9:87:72:3c:ee:da:ac:03:f3:7b:20:9c:eb: f3:e8:ea:e4:c8:5d:ce:16:02:2f:8d:13:aa:13:c6:d6:19:4a: b9:a6:4f:2b:0a:24:d5:74:7e:37:99:3f:ea:b1:24:96:9f:4f: 0b:6e:64:ec:95:6a:b2:60:08:df:c9:00:25:d9:e8:ea:e9:52: 61:0b:81:ff:b1:59:02:2e:47:05:dc:80:98:e9:47:a1:50:67: de:d9:7f:1c:e7:01:0e:41:ce:53:4e:79:67:9f:6a:02:61:ee: 44:c8:d5:9d:3a:a7:06:d9:dd:6d:f2:18:95:32:bb:22:df:f3: 38:64:78:5d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26vsksK7UOJguYCGOhJMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZDlhMTc3YmI1ZGZiNmVhYmU0Y2FkNzlkZWY4ZjhiMDA1 ZGY2NTYwHhcNMjYwMTAxMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTMyYTk0MGU4ZmEzOTNiOGQzZDc0ZTlkNjJmZTIwN2E4OGIwYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4dcXOiYuW9a9pcGtXRKjomy5vIU bt+GkoF7vw0jqgm8ANjMK/s2NkwBTFKBVrtiQi0439miH0NxLUWduAjTD/RXnV/5 tfqBdBKrIfZdnH1NQfRG9ighbIJxNzaqmkbqPV8yXELYeL8k4vO4ApO5GH72Maj1 NID3ImH2/96Rl7q29Lqz2DVpPLL7M6XXlL/VGSKvAElX/erDM7UIuHIHw5Spf3bq t+5orp2mc56aY/jHi46OVHOytgzIldiPIwX14JjvSPXuCLuF926ICikw5sTzgevT NUtr13eVYzZ/oZNqmkMIXpwa/H9MSjYcnxbhGbq0nGnI/Ody5HYeODzCrQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBEyqUDo+jk7jT106dYv4geoiwyWMB8GA1UdIwQY MBaAFDvZoXe7Xftuq+TK153vj4sAXfZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUt ZTM4MDMwYjY5ZDVhLzEvRVRLcFFPajZPVHVOUFhUcDFpX2lCNmlMREpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9jMGQ0NjctZjYyYS00MTljLWJlODUtZTM4MDMwYjY5ZDVh LzEvTzltaGQ3dGQtMjZyNU1yWG5lLVBpd0JkOWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLh+gAwQB 1b4MMA0EAgACMAcDBQMqCipAMA0GCSqGSIb3DQEBCwUAA4IBAQAqRbbNniNJccrd DFf0xfIl8ca4mduo8e4fYjSbyQcwVAbhFPdpqudUiokwJargcod06Q1bdqHfEK50 ACdj9kuzO4jD3rL7lZxwDYA2B48gVRcbtWTPkJVvstMCNw36XloQ4W/A8dnIzs8+ KprD1FLAHEz8l1cjL+h5DFic4RiALK8Tl6mHcjzu2qwD83sgnOvz6OrkyF3OFgIv jROqE8bWGUq5pk8rCiTVdH43mT/qsSSWn08LbmTslWqyYAjfyQAl2ejq6VJhC4H/ sVkCLkcF3ICY6UehUGfe2X8c5wEOQc5TTnlnn2oCYe5EyNWdOqcG2d1t8hiVMrsi 3/M4ZHhd -----END CERTIFICATE-----Generated at Mon Jan 26 12:23:37 2026 by rpki-client