This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa File: 1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa (raw, json) Hash identifier: RPMjT2FQ9x0V2uqd3ChoSH8foN5RoM/gd5M/7fF5CR0= Subject key identifier: D4:AD:22:D9:7C:86:29:DE:C1:8B:8A:B0:DC:94:97:BF:EE:ED:DE:EA Certificate issuer: /CN=0bbad1b925e0e563db85d41d270705d71840a588 Certificate serial: 019B7D5CD15C5DC78FA7584DB4BDD3B24DEE Authority key identifier: 0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49490 IP address blocks: 213.217.8.0/24 maxlen: 24 2a12:d980::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.mft rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d1:5c:5d:c7:8f:a7:58:4d:b4:bd:d3:b2:4d:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbad1b925e0e563db85d41d270705d71840a588 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4ad22d97c8629dec18b8ab0dc9497bfeeeddeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:82:fc:7d:aa:07:bd:02:fc:00:d5:b4:af: 8f:8a:0e:fe:a0:a5:2e:36:7e:f9:99:b6:7c:15:21: 4b:3a:53:df:2c:75:d2:b3:91:f7:c4:43:fb:7d:e0: ee:00:92:a5:a0:5d:da:cc:39:d7:38:58:a8:a5:a7: a2:97:d6:3f:c2:e5:3a:0a:8f:d0:d3:b3:5c:78:42: b3:48:f7:3b:35:ca:ab:6c:bf:14:c1:17:f7:b8:17: fc:b8:3e:40:03:59:4a:09:ab:13:25:95:7c:50:f0: 7e:35:23:07:9c:21:b0:3f:c9:a0:fe:dd:da:9e:d7: 31:a2:94:6b:97:02:24:30:e9:c6:5d:d8:b8:4a:32: 93:25:a0:38:b6:aa:81:0d:5a:81:d6:99:fc:19:ea: fd:9a:61:3c:c0:23:af:41:08:5a:d9:8f:67:f3:39: a0:5b:cf:0e:68:14:9e:20:b7:0e:b8:56:fa:93:47: bb:b0:e3:ee:98:0d:e4:7e:ae:26:64:65:4d:58:55: 0f:04:bc:94:1e:af:85:49:d0:24:59:80:34:f2:27: 8c:ad:88:cb:20:80:d1:de:2a:a0:30:d3:8b:dc:e4: 62:14:26:2a:9b:67:b2:88:b1:0e:c7:a2:6f:a2:17: e0:a3:59:f0:2e:95:e2:fe:99:3d:f6:b0:b6:e2:71: b7:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AD:22:D9:7C:86:29:DE:C1:8B:8A:B0:DC:94:97:BF:EE:ED:DE:EA X509v3 Authority Key Identifier: keyid:0B:BA:D1:B9:25:E0:E5:63:DB:85:D4:1D:27:07:05:D7:18:40:A5:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7rRuSXg5WPbhdQdJwcF1xhApYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/1K0i2XyGKd7Bi4qw3JSXv-7t3uo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/22d9b3-fa0b-4cf0-9740-2f7fd1f0e9c3/1/C7rRuSXg5WPbhdQdJwcF1xhApYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.217.8.0/24 IPv6: 2a12:d980::/32 Signature Algorithm: sha256WithRSAEncryption 27:48:9b:5d:88:07:db:bb:83:59:93:c4:9d:d6:7e:92:37:e4: 8a:ce:b5:59:c6:7a:43:e0:96:54:3c:0b:12:f1:f2:b8:7c:93: 12:fb:77:cc:b0:b8:a0:2b:e3:c7:57:1b:4a:34:9a:ea:17:00: 16:bb:cf:b3:77:00:bc:80:ff:1a:b3:b0:2d:3b:93:08:5c:57: 30:50:68:b7:ed:24:bd:1b:e7:06:00:3b:cb:80:d5:9d:b3:98: 90:2e:53:ae:ca:9d:63:17:8b:33:59:5a:47:36:47:5f:5f:b5: 40:28:5b:91:15:56:d4:99:c7:6b:52:b0:e5:51:f3:a7:d7:7b: 32:fa:a0:38:f3:c2:b2:af:b2:85:c0:8d:27:5c:00:9d:fd:a0: 9f:61:ed:55:45:4a:ad:07:53:0e:7a:7b:94:10:ad:47:4a:37: 86:c0:4f:16:2f:18:a9:54:f5:c5:36:2e:0e:a0:ab:dc:5e:9c: 69:8c:94:00:b2:6b:f3:2c:dc:ef:88:2e:b7:b3:88:3f:17:b5: 6e:dc:33:c0:2f:36:8f:49:5b:3d:f0:a6:45:f6:0f:6a:e2:ca: 01:87:2d:ed:ce:62:74:22:3d:a2:0a:f6:a1:b8:67:67:5e:df: 8c:31:11:f9:9e:22:e7:18:98:a1:7f:2c:47:8b:13:03:b9:1f: 3f:db:8a:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XNFcXcePp1hNtL3Tsk3uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmFkMWI5MjVlMGU1NjNkYjg1ZDQxZDI3MDcwNWQ3MTg0 MGE1ODgwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGFkMjJkOTdjODYyOWRlYzE4YjhhYjBkYzk0OTdiZmVlZWRkZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBqC/H2qB70C/ADVtK+Pig7+oKUu Nn75mbZ8FSFLOlPfLHXSs5H3xEP7feDuAJKloF3azDnXOFiopaeil9Y/wuU6Co/Q 07NceEKzSPc7NcqrbL8UwRf3uBf8uD5AA1lKCasTJZV8UPB+NSMHnCGwP8mg/t3a ntcxopRrlwIkMOnGXdi4SjKTJaA4tqqBDVqB1pn8Ger9mmE8wCOvQQha2Y9n8zmg W88OaBSeILcOuFb6k0e7sOPumA3kfq4mZGVNWFUPBLyUHq+FSdAkWYA08ieMrYjL IIDR3iqgMNOL3ORiFCYqm2eyiLEOx6Jvohfgo1nwLpXi/pk99rC24nG3hQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNStItl8hinewYuKsNyUl7/u7d7qMB8GA1UdIwQY MBaAFAu60bkl4OVj24XUHScHBdcYQKWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAt MmY3ZmQxZjBlOWMzLzEvMUswaTJYeUdLZDdCaTRxdzNKU1h2LTd0M3VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yMmQ5YjMtZmEwYi00Y2YwLTk3NDAtMmY3ZmQxZjBlOWMz LzEvQzdyUnVTWGc1V1BiaGRRZEp3Y0YxeGhBcFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQA1dkIMA0E AgACMAcDBQAqEtmAMA0GCSqGSIb3DQEBCwUAA4IBAQAnSJtdiAfbu4NZk8Sd1n6S N+SKzrVZxnpD4JZUPAsS8fK4fJMS+3fMsLigK+PHVxtKNJrqFwAWu8+zdwC8gP8a s7AtO5MIXFcwUGi37SS9G+cGADvLgNWds5iQLlOuyp1jF4szWVpHNkdfX7VAKFuR FVbUmcdrUrDlUfOn13sy+qA488Kyr7KFwI0nXACd/aCfYe1VRUqtB1MOenuUEK1H SjeGwE8WLxipVPXFNi4OoKvcXpxpjJQAsmvzLNzviC63s4g/F7Vu3DPALzaPSVs9 8KZF9g9q4soBhy3tzmJ0Ij2iCvahuGdnXt+MMRH5niLnGJihfyxHixMDuR8/24rm -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:01 2026 by rpki-client