This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/INUpirlxyhCbq85VbAW6ztdQs4k.roa File: INUpirlxyhCbq85VbAW6ztdQs4k.roa (raw, json) Hash identifier: jkGGZWjPY73Dhwpc13NpoAleBEBZrvWBjPm/O8n+EJ0= Subject key identifier: 20:D5:29:8A:B9:71:CA:10:9B:AB:CE:55:6C:05:BA:CE:D7:50:B3:89 Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Certificate serial: 019B7EA72797E5960C1CA870A508FF9802E9 Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/INUpirlxyhCbq85VbAW6ztdQs4k.roa Signing time: Fri 02 Jan 2026 12:20:42 +0000 ROA not before: Fri 02 Jan 2026 12:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8468 IP address blocks: 212.124.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:27:97:e5:96:0c:1c:a8:70:a5:08:ff:98:02:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813 Validity Not Before: Jan 2 12:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d5298ab971ca109babce556c05baced750b389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:63:0e:26:5b:89:8a:73:40:a8:02:ce:8a:da: 7b:fb:4b:09:2a:b4:b3:81:5d:20:5e:02:6e:d8:ad: 64:8a:3d:f2:54:c4:ba:7b:48:d2:27:22:3c:54:15: 2b:7d:df:17:1f:04:28:5d:65:b9:f7:0c:fa:53:28: 94:df:41:13:2a:3a:cc:5a:07:f2:a1:03:6b:81:60: bd:ef:2a:ab:fa:5c:92:d5:8a:e3:6c:87:74:44:4e: 71:00:5f:31:64:2d:b5:68:bd:2a:a0:25:e3:7c:45: 73:2b:2c:40:f6:c2:45:47:6e:96:8f:0f:18:0d:86: cd:09:00:ec:28:33:9a:b2:86:c8:d8:c9:e8:22:44: 5f:ca:db:de:ca:c6:3d:53:60:e9:a5:c2:37:8c:cc: 88:78:26:a0:ad:13:8e:b6:25:92:f2:62:d6:48:90: 7c:e4:23:81:8d:8c:78:6c:06:7a:86:41:94:3b:5b: f5:dc:11:86:b6:9e:bc:f4:5a:8c:33:54:9e:d6:89: 87:6f:38:1f:de:85:b6:0b:27:dc:91:76:1d:59:57: 31:fd:40:15:4a:43:ae:d3:35:dc:f0:bf:c2:f6:92: 17:56:8a:c9:e4:d4:e5:96:bb:21:b9:d5:90:0e:9d: be:0b:46:d8:fb:51:c9:30:e6:f9:a1:8a:ae:67:d2: b6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D5:29:8A:B9:71:CA:10:9B:AB:CE:55:6C:05:BA:CE:D7:50:B3:89 X509v3 Authority Key Identifier: keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/INUpirlxyhCbq85VbAW6ztdQs4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.124.199.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:fd:16:bb:b8:4b:cd:df:4a:86:24:bc:f9:bd:f2:fd:b7:4a: 40:38:65:51:26:d8:4b:c3:09:b0:e1:19:31:65:65:fc:69:0c: 92:6a:d8:1a:47:df:f5:ba:57:fd:01:ac:95:ca:1a:9e:c6:d7: 91:ea:47:48:2c:18:53:ca:0b:0f:71:eb:57:61:28:e2:52:a0: e3:d8:e4:a5:23:9a:5a:40:24:4a:32:35:b8:d2:4b:17:4d:40: 70:9c:4d:a5:26:11:9c:66:10:e0:c1:e1:bb:ef:19:9b:04:9d: 03:a6:0f:b6:a1:3f:5c:54:27:88:84:d9:66:d0:49:58:cf:52: 3c:db:b6:ae:62:46:29:a3:52:5e:00:33:25:86:ba:f5:b7:7a: 1c:64:f5:7d:78:e1:9e:71:07:15:bb:57:5d:39:13:80:7c:41: af:cb:15:ff:73:b7:c7:d7:93:2c:16:51:7f:a7:eb:c6:2a:3a: 99:94:97:06:bf:3b:c3:06:44:ea:55:f7:bb:66:79:9d:26:fe: c3:e5:9c:16:1f:ea:18:19:e4:fa:53:ee:44:80:21:42:0d:a5: e1:14:6c:ab:4f:58:89:7c:2a:86:d7:5d:1d:3a:2c:ef:c2:25: e1:68:95:17:26:16:f9:e9:8f:f0:56:d2:d6:71:17:c3:a0:65: 95:c9:26:e4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pyeX5ZYMHKhwpQj/mALpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5YzllMDMwNWNmZWQ1Nzk0NDQ4NzMyYThiMGJkODQyNzQ1 MGQ4MTMwHhcNMjYwMTAyMTIyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQ1Mjk4YWI5NzFjYTEwOWJhYmNlNTU2YzA1YmFjZWQ3NTBiMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mMOJluJinNAqALOitp7+0sJKrSz gV0gXgJu2K1kij3yVMS6e0jSJyI8VBUrfd8XHwQoXWW59wz6UyiU30ETKjrMWgfy oQNrgWC97yqr+lyS1YrjbId0RE5xAF8xZC21aL0qoCXjfEVzKyxA9sJFR26Wjw8Y DYbNCQDsKDOasobI2MnoIkRfytveysY9U2DppcI3jMyIeCagrROOtiWS8mLWSJB8 5COBjYx4bAZ6hkGUO1v13BGGtp689FqMM1Se1omHbzgf3oW2CyfckXYdWVcx/UAV SkOu0zXc8L/C9pIXVorJ5NTllrshudWQDp2+C0bY+1HJMOb5oYquZ9K2pQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFCDVKYq5ccoQm6vOVWwFus7XULOJMB8GA1UdIwQY MBaAFPnJ4DBc/tV5REhzKosL2EJ0UNgTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jbmdNRnotMVhsRVNITXFpd3ZZUW5SUTJCTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0 LTJmYmIyMDhhZDE4Mi8xL0lOVXBpcmx4eWhDYnE4NVZiQVc2enRkUXM0ay5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzcvMzYxOTBkLTFjNmMtNDhjNi1hNDE0LTJmYmIyMDhhZDE4 Mi8xLzEtY25nTUZ6LTFYbEVTSE1xaXd2WVFuUlEyQk0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADUfMcw DQYJKoZIhvcNAQELBQADggEBAE79Fru4S83fSoYkvPm98v23SkA4ZVEm2EvDCbDh GTFlZfxpDJJq2BpH3/W6V/0BrJXKGp7G15HqR0gsGFPKCw9x61dhKOJSoOPY5KUj mlpAJEoyNbjSSxdNQHCcTaUmEZxmEODB4bvvGZsEnQOmD7ahP1xUJ4iE2WbQSVjP Ujzbtq5iRimjUl4AMyWGuvW3ehxk9X144Z5xBxW7V105E4B8Qa/LFf9zt8fXkywW UX+n68YqOpmUlwa/O8MGROpV97tmeZ0m/sPlnBYf6hgZ5PpT7kSAIUINpeEUbKtP WIl8KobXXR06LO/CJeFolRcmFvnpj/BW0tZxF8OgZZXJJuQ= -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:46 2026 by rpki-client