This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/_V4_YA4wR5SE7qpfb2hnztoRewk.roa File: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (raw, json) Hash identifier: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM= Subject key identifier: FD:5E:3F:60:0E:30:47:94:84:EE:AA:5F:6F:68:67:CE:DA:11:7B:09 Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019B7EA6864A9CC472AA9EF81376072D4470 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/_V4_YA4wR5SE7qpfb2hnztoRewk.roa Signing time: Fri 02 Jan 2026 12:20:01 +0000 ROA not before: Fri 02 Jan 2026 12:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 213.193.209.0/24 maxlen: 24 213.193.212.0/24 maxlen: 24 213.193.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:86:4a:9c:c4:72:aa:9e:f8:13:76:07:2d:44:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Jan 2 12:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd5e3f600e30479484eeaa5f6f6867ceda117b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b7:bd:56:6e:17:92:0f:4c:93:dc:4f:d0:1f: da:15:a1:e6:c7:48:9b:94:ab:56:d7:66:b8:be:46: 48:fe:af:b0:ca:2a:37:cd:78:45:7f:8f:72:3d:72: 7c:34:c3:1a:d3:a2:1f:31:69:c5:26:01:fb:bc:02: 58:63:30:60:bd:71:6d:ed:82:fe:82:12:ba:76:8b: db:4d:26:06:9d:60:a0:1a:69:b5:93:4a:50:53:a7: 05:84:00:6e:76:27:77:73:0b:2e:01:c8:2c:0a:11: 3e:84:5f:9a:84:cc:df:d1:bb:e9:fc:3d:19:d0:23: 57:28:2d:0b:57:0a:c8:05:3c:19:ca:de:c2:15:48: da:2b:24:cd:bc:10:d9:f5:f3:8e:c8:d2:39:fb:6b: 3a:7a:a0:7d:7b:49:4e:79:0b:7a:e9:09:54:fc:8d: c8:9b:9b:a8:0f:b8:57:b4:b4:53:64:10:e0:6f:00: 1e:19:ec:64:b4:5e:80:4f:5b:75:d2:d5:9b:e9:62: a2:3f:e2:fc:9b:a8:7c:24:30:0a:58:82:f3:c7:ae: ad:4d:2e:b9:27:15:fa:4b:60:fd:3b:ac:3c:c3:7e: d4:8f:5f:99:f2:b8:e0:91:dd:91:9e:46:c1:f0:5f: 47:73:39:8d:53:25:64:a1:f2:a8:d1:05:c6:51:b8: 73:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5E:3F:60:0E:30:47:94:84:EE:AA:5F:6F:68:67:CE:DA:11:7B:09 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/_V4_YA4wR5SE7qpfb2hnztoRewk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.193.209.0/24 213.193.212.0/24 213.193.232.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ba:d0:06:59:5e:41:04:d5:db:41:78:4c:75:9a:9d:d1:1e: 34:9d:40:32:52:4a:45:28:ed:57:5d:10:cc:08:57:e2:87:e1: 75:16:14:68:a2:95:30:49:22:e0:c7:35:e7:09:06:ae:53:6b: 0f:ff:9d:d1:67:e5:1a:e3:a2:d5:fd:5f:99:78:55:31:fe:86: cf:a7:a9:d4:8f:18:60:48:86:ba:80:cb:de:11:3b:8b:9c:e0: e8:e0:af:f2:b3:f5:c1:b3:ce:9d:9f:d9:1c:39:ea:15:b1:ea: 38:b6:31:36:0e:f5:93:c8:fc:38:8a:7d:a5:7f:73:44:9a:25: 39:0f:52:f8:21:dd:a0:32:fb:ff:0d:c9:73:25:9e:66:e4:44: 03:7c:30:5b:d9:7c:50:1d:c9:09:a4:6c:29:3d:48:d8:9a:2b: 68:27:a7:6a:06:0b:95:50:a2:df:ee:1c:18:c7:c6:c3:fc:cd: 5f:44:4f:10:46:bb:4a:f6:a3:ca:0a:03:fc:ee:18:f2:37:12: 44:58:14:0c:bc:66:f9:e2:c4:49:99:93:c0:67:c9:62:24:30: 31:2a:2a:4d:50:26:df:7f:90:fa:a5:9e:7e:57:b4:19:e9:e5: a8:26:95:01:16:e7:5c:b2:40:51:8a:77:49:b0:f0:79:dd:b7: c8:5e:a5:5b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+poZKnMRyqp74E3YHLURwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjYwMTAyMTIyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDVlM2Y2MDBlMzA0Nzk0ODRlZWFhNWY2ZjY4NjdjZWRhMTE3YjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbe9Vm4Xkg9Mk9xP0B/aFaHmx0ib lKtW12a4vkZI/q+wyio3zXhFf49yPXJ8NMMa06IfMWnFJgH7vAJYYzBgvXFt7YL+ ghK6dovbTSYGnWCgGmm1k0pQU6cFhABudid3cwsuAcgsChE+hF+ahMzf0bvp/D0Z 0CNXKC0LVwrIBTwZyt7CFUjaKyTNvBDZ9fOOyNI5+2s6eqB9e0lOeQt66QlU/I3I m5uoD7hXtLRTZBDgbwAeGexktF6AT1t10tWb6WKiP+L8m6h8JDAKWILzx66tTS65 JxX6S2D9O6w8w37Uj1+Z8rjgkd2RnkbB8F9HczmNUyVkofKo0QXGUbhz0wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFP1eP2AOMEeUhO6qX29oZ87aEXsJMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvX1Y0X1lBNHdSNVNFN3FwZmIyaG56dG9SZXdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1cHRAwQA 1cHUAwQA1cHoMA0GCSqGSIb3DQEBCwUAA4IBAQAFutAGWV5BBNXbQXhMdZqd0R40 nUAyUkpFKO1XXRDMCFfih+F1FhRoopUwSSLgxzXnCQauU2sP/53RZ+Ua46LV/V+Z eFUx/obPp6nUjxhgSIa6gMveETuLnODo4K/ys/XBs86dn9kcOeoVseo4tjE2DvWT yPw4in2lf3NEmiU5D1L4Id2gMvv/DclzJZ5m5EQDfDBb2XxQHckJpGwpPUjYmito J6dqBguVUKLf7hwYx8bD/M1fRE8QRrtK9qPKCgP87hjyNxJEWBQMvGb54sRJmZPA Z8liJDAxKipNUCbff5D6pZ5+V7QZ6eWoJpUBFudcskBRindJsPB53bfIXqVb -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:19 2026 by rpki-client