This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa File: Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa (raw, json) Hash identifier: jQK1etd719NMqRMk4bSxLL+vsw1/OQyKrvCRPSvnFfI= Subject key identifier: 1E:5E:B8:5C:66:E1:8C:38:57:48:AF:D1:3F:F9:55:25:11:8A:D7:B4 Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019BDC44E6DA9C612132AC7A30239A30C2BE Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa Signing time: Tue 20 Jan 2026 16:37:41 +0000 ROA not before: Tue 20 Jan 2026 16:37:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22427 IP address blocks: 213.239.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dc:44:e6:da:9c:61:21:32:ac:7a:30:23:9a:30:c2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Jan 20 16:37:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1e5eb85c66e18c385748afd13ff95525118ad7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:72:9e:3f:4e:81:76:9b:e6:33:0b:06:9d:bb: b2:c4:0b:92:16:f2:d3:cb:63:c7:87:a6:4f:20:9a: d2:a0:39:af:85:50:bc:be:65:12:92:05:42:9b:83: 97:ee:22:9f:9d:ca:81:77:27:31:1c:1a:cb:1b:f3: 30:66:e0:4c:a7:b9:9e:8f:9c:ee:77:af:8d:0d:0c: 5a:10:42:cf:0c:f1:90:ff:e9:08:e4:f8:0d:b5:64: 5d:e6:16:7d:cb:10:9d:ed:ef:ee:62:61:f1:a8:d1: c4:20:90:e8:84:43:ba:76:c2:cf:55:f2:0f:47:d6: be:55:30:34:46:02:7c:62:ee:94:32:b1:c7:af:6b: a3:dd:c8:47:23:6e:dd:ef:2d:02:dd:e6:95:99:b5: 23:c2:6d:ff:07:7e:33:ee:a1:6b:9a:57:90:a8:b9: 67:db:9e:dd:6e:54:3e:45:5c:60:a4:c1:20:f0:b0: 16:4b:24:ef:9b:8c:11:5b:03:e7:17:9c:70:47:63: a4:79:ed:1f:62:2a:f7:53:ca:eb:7a:f5:37:36:b3: 76:fa:a9:f8:db:68:62:17:2d:58:74:27:1b:e5:f3: 51:48:02:5c:94:05:fc:f9:c4:e3:97:e3:63:92:3a: 4b:21:fa:50:fd:f8:75:17:71:ed:7f:de:3c:15:45: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5E:B8:5C:66:E1:8C:38:57:48:AF:D1:3F:F9:55:25:11:8A:D7:B4 X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/Hl64XGbhjDhXSK_RP_lVJRGK17Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.239.139.0/24 Signature Algorithm: sha256WithRSAEncryption 11:ea:c2:fb:42:9c:c0:bf:b2:87:94:5c:4f:ac:60:e4:85:8d: e0:26:ba:ea:f4:7e:88:5f:54:fa:63:f1:80:9b:35:5d:d0:a8: f9:0e:7a:c0:88:5f:97:2d:55:99:dd:a8:0a:c6:55:dd:ed:96: e3:ce:3a:18:57:ef:97:27:6a:6f:50:64:bd:86:7c:57:72:d0: bd:37:83:b9:af:31:67:4d:1c:9c:b2:89:09:0a:f0:33:c0:01: c4:50:1b:f7:6f:d9:8b:23:97:02:01:20:33:fb:3c:86:a2:18: 4c:1b:1e:8a:9a:bc:c2:d9:52:de:94:9f:e8:a3:50:e8:70:b6: b6:3e:74:4d:d2:d4:18:86:d2:04:6a:fb:35:82:ff:bd:cf:6d: b8:af:90:e6:ab:a0:a4:0e:b9:d3:2b:10:58:b6:ce:0d:e7:ea: 4d:da:b9:5a:50:d4:05:b3:29:f6:bd:b2:1e:07:68:8d:8d:ea: cf:18:e0:5d:dc:c2:bb:b6:39:0c:ad:27:db:3f:b8:6d:3f:49: a5:81:d8:d4:6a:23:13:17:61:2f:a6:c2:bf:c0:46:d5:d0:06: 5c:e3:72:37:f2:03:8d:f1:f9:ed:ca:62:c8:79:3c:3b:18:8a: 50:48:63:96:bc:5e:e1:6b:64:55:37:c9:62:35:cb:d3:d4:9e: 92:30:77:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvcRObanGEhMqx6MCOaMMK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjYwMTIwMTYzNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZTVlYjg1YzY2ZTE4YzM4NTc0OGFmZDEzZmY5NTUyNTExOGFkN2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3KeP06BdpvmMwsGnbuyxAuSFvLT y2PHh6ZPIJrSoDmvhVC8vmUSkgVCm4OX7iKfncqBdycxHBrLG/MwZuBMp7mej5zu d6+NDQxaEELPDPGQ/+kI5PgNtWRd5hZ9yxCd7e/uYmHxqNHEIJDohEO6dsLPVfIP R9a+VTA0RgJ8Yu6UMrHHr2uj3chHI27d7y0C3eaVmbUjwm3/B34z7qFrmleQqLln 257dblQ+RVxgpMEg8LAWSyTvm4wRWwPnF5xwR2Okee0fYir3U8rrevU3NrN2+qn4 22hiFy1YdCcb5fNRSAJclAX8+cTjl+NjkjpLIfpQ/fh1F3Htf948FUWbvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB5euFxm4Yw4V0iv0T/5VSURite0MB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvSGw2NFhHYmhqRGhYU0tfUlBfbFZKUkdLMTdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e+LMA0G CSqGSIb3DQEBCwUAA4IBAQAR6sL7QpzAv7KHlFxPrGDkhY3gJrrq9H6IX1T6Y/GA mzVd0Kj5DnrAiF+XLVWZ3agKxlXd7ZbjzjoYV++XJ2pvUGS9hnxXctC9N4O5rzFn TRycsokJCvAzwAHEUBv3b9mLI5cCASAz+zyGohhMGx6KmrzC2VLelJ/oo1DocLa2 PnRN0tQYhtIEavs1gv+9z224r5Dmq6CkDrnTKxBYts4N5+pN2rlaUNQFsyn2vbIe B2iNjerPGOBd3MK7tjkMrSfbP7htP0mlgdjUaiMTF2EvpsK/wEbV0AZc43I38gON 8fntymLIeTw7GIpQSGOWvF7ha2RVN8liNcvT1J6SMHdy -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:43 2026 by rpki-client