This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/P8JH6OtwnAcRCI_WtbVsia3-A3I.roa File: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (raw, json) Hash identifier: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8= Subject key identifier: 3F:C2:47:E8:EB:70:9C:07:11:08:8F:D6:B5:B5:6C:89:AD:FE:03:72 Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019B7EA6869BC37DCFD40CD00368CB678648 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/P8JH6OtwnAcRCI_WtbVsia3-A3I.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48729 IP address blocks: 213.193.209.0/24 maxlen: 24 213.193.212.0/24 maxlen: 24 213.193.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:86:9b:c3:7d:cf:d4:0c:d0:03:68:cb:67:86:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fc247e8eb709c0711088fd6b5b56c89adfe0372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:d6:25:c8:46:d7:2b:c7:87:0f:5c:b1:c9: d1:05:b4:85:88:6c:27:ee:f2:ea:c2:73:e3:7f:64: 82:cc:09:5b:39:09:c0:4f:d6:d3:24:b1:52:63:e9: 3c:4e:0c:58:17:bd:1f:f7:1c:db:85:c6:46:12:8f: ba:07:59:08:af:ac:b4:3f:be:49:ac:cb:08:70:72: dd:5e:4d:db:0c:b9:be:3e:aa:99:e7:fd:24:0e:ae: 23:a6:28:63:76:c3:a8:d4:eb:b7:75:23:b0:d3:08: 38:10:2f:8c:f9:b4:bb:29:20:fb:de:74:94:7d:40: 3a:0a:30:d0:c9:dc:d7:8b:c1:be:f8:cd:a4:85:04: 7b:64:42:ab:25:d5:2a:07:82:48:0c:01:76:14:39: 78:85:fb:36:42:b1:75:51:2b:b9:ea:b7:f6:4b:ee: a7:fd:32:12:17:58:1d:8f:29:bb:6d:9c:15:66:08: 0d:66:63:c3:82:5a:b3:e7:cc:6e:5d:e0:15:e4:ea: 81:d2:ad:2f:8b:12:cf:92:90:ee:03:ed:1c:3c:bd: 34:cb:66:35:7f:d1:db:55:95:47:0f:11:83:f9:45: f0:86:10:60:18:08:46:0d:51:0b:05:d9:29:f7:12: 09:0d:2c:45:c2:55:af:03:a9:17:d9:93:34:36:66: 46:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:C2:47:E8:EB:70:9C:07:11:08:8F:D6:B5:B5:6C:89:AD:FE:03:72 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/P8JH6OtwnAcRCI_WtbVsia3-A3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.193.209.0/24 213.193.212.0/24 213.193.232.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:44:91:e5:cd:d5:b8:6a:5e:af:a3:14:e1:08:70:63:e2:43: d0:07:46:70:80:ed:72:c0:21:84:60:1e:1a:a5:b0:5f:03:4b: 70:4e:b8:98:0f:83:a1:b1:2a:22:13:ca:c0:0a:0d:4b:65:a2: bc:6c:fc:0f:8c:4f:c6:9f:d9:90:8a:36:9b:d4:d3:29:63:41: 8e:a0:67:63:f7:79:cf:72:5c:9e:66:a1:51:f4:a2:42:17:b8: 57:c8:c7:d3:aa:fe:39:2e:4e:08:9b:06:8d:de:b8:d8:dd:f1: cc:ff:cf:f8:90:a1:c5:ee:67:86:52:38:4a:cf:9d:2a:94:f0: 72:3c:2a:28:72:41:d7:ed:74:28:d0:46:35:46:54:ab:ce:27: bd:ed:7d:15:44:7d:4d:e2:40:59:17:2f:9f:b9:1f:04:90:90: 4c:55:75:0f:88:2a:c0:0b:00:9f:58:19:41:e6:c7:92:ea:a9: 47:8f:e8:05:a4:31:af:8e:bd:a6:ef:b6:04:84:5e:8b:d8:11: 66:5d:4a:f1:c5:48:67:4e:0e:64:23:79:9e:f7:0a:25:34:8a: 4f:72:f2:2b:79:b1:e1:42:49:5a:19:98:20:d3:b2:33:9f:f4: 85:b9:15:27:9f:bb:60:08:a4:10:a7:e2:d2:5a:27:02:ae:f0: f3:47:b9:58 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+poabw33P1AzQA2jLZ4ZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmMyNDdlOGViNzA5YzA3MTEwODhmZDZiNWI1NmM4OWFkZmUwMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNrWJchG1yvHhw9cscnRBbSFiGwn 7vLqwnPjf2SCzAlbOQnAT9bTJLFSY+k8TgxYF70f9xzbhcZGEo+6B1kIr6y0P75J rMsIcHLdXk3bDLm+PqqZ5/0kDq4jpihjdsOo1Ou3dSOw0wg4EC+M+bS7KSD73nSU fUA6CjDQydzXi8G++M2khQR7ZEKrJdUqB4JIDAF2FDl4hfs2QrF1USu56rf2S+6n /TISF1gdjym7bZwVZggNZmPDglqz58xuXeAV5OqB0q0vixLPkpDuA+0cPL00y2Y1 f9HbVZVHDxGD+UXwhhBgGAhGDVELBdkp9xIJDSxFwlWvA6kX2ZM0NmZGlQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD/CR+jrcJwHEQiP1rW1bImt/gNyMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvUDhKSDZPdHduQWNSQ0lfV3RiVnNpYTMtQTNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1cHRAwQA 1cHUAwQA1cHoMA0GCSqGSIb3DQEBCwUAA4IBAQB6RJHlzdW4al6voxThCHBj4kPQ B0ZwgO1ywCGEYB4apbBfA0twTriYD4OhsSoiE8rACg1LZaK8bPwPjE/Gn9mQijab 1NMpY0GOoGdj93nPclyeZqFR9KJCF7hXyMfTqv45Lk4ImwaN3rjY3fHM/8/4kKHF 7meGUjhKz50qlPByPCoockHX7XQo0EY1RlSrzie97X0VRH1N4kBZFy+fuR8EkJBM VXUPiCrACwCfWBlB5seS6qlHj+gFpDGvjr2m77YEhF6L2BFmXUrxxUhnTg5kI3me 9wolNIpPcvIrebHhQklaGZgg07Izn/SFuRUnn7tgCKQQp+LSWicCrvDzR7lY -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:39 2026 by rpki-client