This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa File: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (raw, json) Hash identifier: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY= Subject key identifier: BA:5F:11:7C:EB:D9:40:58:BB:6F:B8:77:09:86:59:33:20:75:4E:17 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E29A3D15F38D16BE654317D93EFE Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21209 IP address blocks: 213.253.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e2:9a:3d:15:f3:8d:16:be:65:43:17:d9:3e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ba5f117cebd94058bb6fb8770986593320754e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:46:cd:0b:5e:bc:82:13:8d:93:01:06:49: 44:b1:f5:68:c7:8f:7a:5f:be:3e:9b:d0:c5:fe:03: 54:58:ee:b5:db:81:83:31:67:3e:15:be:df:08:5e: da:36:ef:51:eb:a2:bc:87:d1:9a:7e:20:33:6c:d6: 95:10:5b:f0:f6:df:48:0e:14:da:08:1b:bb:e5:84: 25:5f:2a:c6:ca:e4:ee:50:67:0b:92:9b:c5:cd:37: 9e:1c:7d:2f:1e:57:1f:19:87:db:df:9d:6f:40:2f: d2:68:2b:58:bf:4d:16:e8:8f:44:33:53:d0:16:3e: 94:da:56:ce:ac:2c:c0:d5:d0:47:bc:11:13:63:95: 76:7f:4f:30:6a:83:d2:1e:df:d6:4b:8b:ba:7c:08: 5a:24:b4:41:90:6d:eb:e3:3a:f9:15:28:88:cb:84: ad:3c:78:13:1d:4b:33:f2:fa:60:b1:c2:b4:3b:c0: fe:cf:9d:ba:ea:dd:e8:9c:64:d1:f8:5b:d0:4e:f3: 81:93:68:8d:ea:f4:a9:4e:1f:03:9a:9e:c2:34:20: 7f:e0:7e:c6:f6:4e:ea:a1:0f:90:a5:0d:84:8e:05: ad:13:a6:22:3d:22:9e:f7:2c:74:b6:1f:95:13:13: a5:1e:9d:77:cc:cf:d9:cc:21:48:6a:a7:fb:47:36: 1b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:5F:11:7C:EB:D9:40:58:BB:6F:B8:77:09:86:59:33:20:75:4E:17 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.253.215.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:4e:39:03:f1:b8:ff:f1:7d:07:b5:42:0d:ef:e3:d3:fe:df: 59:a0:3d:b6:cb:01:71:c9:f5:8a:f6:cd:1d:31:63:38:44:6f: 70:eb:19:a3:58:3a:7d:aa:8f:5c:5f:39:51:a2:8b:ec:99:c2: 26:73:c5:53:26:bf:77:c4:22:45:7a:7a:a4:68:c8:35:c5:cc: df:6c:46:3c:a1:26:23:0f:f1:52:14:f9:5e:ab:30:76:2d:9f: 90:31:f3:b4:d2:9d:ec:29:cc:03:67:90:e6:0f:4e:ae:43:cb: 3c:58:00:d7:20:ec:f1:00:fd:9f:19:09:56:3f:7c:69:16:ce: 35:94:02:30:77:5c:99:6f:f4:b0:e6:ee:d4:e0:74:e3:77:1b: a4:a7:e1:16:47:85:b8:e2:f6:b0:3d:55:89:ff:f4:60:5f:77: 9a:3f:33:c9:c5:26:b6:22:40:1b:7d:7f:5f:4d:42:6c:f5:54: 34:09:d6:60:f2:45:b4:bf:c0:3d:9a:1a:bd:45:18:a0:46:1d: 81:b3:03:eb:25:cb:02:28:00:4f:e3:d3:fd:c2:86:94:02:f3: 1f:bf:b5:23:40:b5:0b:00:87:20:86:15:5f:cf:e6:a0:ca:ca: 9b:75:a8:b8:b2:61:8e:a8:0e:01:a6:64:93:10:75:9e:75:92: a5:bd:c9:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+KaPRXzjRa+ZUMX2T7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYTVmMTE3Y2ViZDk0MDU4YmI2ZmI4NzcwOTg2NTkzMzIwNzU0ZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIVGzQtevIITjZMBBklEsfVox496 X74+m9DF/gNUWO6124GDMWc+Fb7fCF7aNu9R66K8h9GafiAzbNaVEFvw9t9IDhTa CBu75YQlXyrGyuTuUGcLkpvFzTeeHH0vHlcfGYfb351vQC/SaCtYv00W6I9EM1PQ Fj6U2lbOrCzA1dBHvBETY5V2f08waoPSHt/WS4u6fAhaJLRBkG3r4zr5FSiIy4St PHgTHUsz8vpgscK0O8D+z5266t3onGTR+FvQTvOBk2iN6vSpTh8Dmp7CNCB/4H7G 9k7qoQ+QpQ2EjgWtE6YiPSKe9yx0th+VExOlHp13zM/ZzCFIaqf7RzYbPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLpfEXzr2UBYu2+4dwmGWTMgdU4XMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdWw4UmZPdlpRRmk3YjdoM0NZWlpNeUIxVGhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1f3XMA0G CSqGSIb3DQEBCwUAA4IBAQAcTjkD8bj/8X0HtUIN7+PT/t9ZoD22ywFxyfWK9s0d MWM4RG9w6xmjWDp9qo9cXzlRoovsmcImc8VTJr93xCJFenqkaMg1xczfbEY8oSYj D/FSFPleqzB2LZ+QMfO00p3sKcwDZ5DmD06uQ8s8WADXIOzxAP2fGQlWP3xpFs41 lAIwd1yZb/Sw5u7U4HTjdxukp+EWR4W44vawPVWJ//RgX3eaPzPJxSa2IkAbfX9f TUJs9VQ0CdZg8kW0v8A9mhq9RRigRh2BswPrJcsCKABP49P9woaUAvMfv7UjQLUL AIcghhVfz+agysqbdai4smGOqA4BpmSTEHWedZKlvcmi -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:09 2026 by rpki-client