This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iNRF7P5uweaERbVVY8NT9erg7bk.roa File: iNRF7P5uweaERbVVY8NT9erg7bk.roa (raw, json) Hash identifier: mJIGkirTNS/n+LvwM9VPvM0Kz4zlOh5mrrEW86lMv24= Subject key identifier: 88:D4:45:EC:FE:6E:C1:E6:84:45:B5:55:63:C3:53:F5:EA:E0:ED:B9 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B7758EBFDEAF871AA953BC507DEF1F00D Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iNRF7P5uweaERbVVY8NT9erg7bk.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15503 IP address blocks: 213.216.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:eb:fd:ea:f8:71:aa:95:3b:c5:07:de:f1:f0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88d445ecfe6ec1e68445b55563c353f5eae0edb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:26:bd:b5:f4:d3:29:f8:34:17:66:71:f0:49: c0:a8:b9:4f:13:60:83:41:e3:1e:20:2e:10:17:46: 9e:58:06:71:09:42:a0:bf:15:5b:28:4e:2a:ee:0a: 79:7a:3c:9c:e0:d2:82:70:33:c2:7a:ad:d0:fb:43: f3:2e:11:b4:49:fc:ac:d2:6a:be:d1:6b:a4:2f:11: c4:9d:31:1d:97:f6:1f:23:3f:d7:bd:fe:63:8a:1c: aa:7d:08:0c:2b:27:e6:1f:64:e9:96:07:0d:e9:60: bc:f1:0c:9a:b6:29:49:41:77:bb:79:49:67:e0:b6: 18:a2:7d:9a:f4:f0:6b:e6:b3:f7:71:29:17:84:91: 7b:d9:0c:3e:74:c6:f9:47:5c:f6:6b:73:45:ec:91: ff:6c:84:d8:f4:80:f6:27:c8:27:f7:ce:2b:04:b1: be:f6:01:c9:52:99:d3:b6:80:6c:c2:31:a7:55:3d: cf:de:3d:2e:1b:74:3c:91:16:a0:2e:22:56:90:d1: 6f:85:92:97:49:44:bf:cc:4b:74:2b:70:74:f4:a5: 2f:0d:1a:24:fb:59:69:6e:2f:13:cf:00:f4:d3:48: 30:5d:14:83:20:9c:c3:8d:6d:62:77:e7:b4:ea:73: d7:11:aa:6d:74:ef:5d:2d:46:9a:6b:79:8c:f8:59: d4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D4:45:EC:FE:6E:C1:E6:84:45:B5:55:63:C3:53:F5:EA:E0:ED:B9 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iNRF7P5uweaERbVVY8NT9erg7bk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.216.65.0/24 Signature Algorithm: sha256WithRSAEncryption 95:87:d3:b3:f4:12:3c:cb:5e:64:88:74:58:96:cf:4b:af:c1: d7:e7:eb:44:65:9d:7a:4e:b4:c0:4d:91:18:c0:e5:81:df:56: 1c:f9:08:1b:c7:a0:29:c6:69:11:0a:ad:cf:61:ac:5b:91:d6: 4f:a9:0a:0d:f2:12:45:92:62:39:b2:8e:1a:4c:f7:7f:04:f0: f5:dd:3f:78:76:6c:fa:99:47:93:c6:d9:f3:11:4f:88:78:a9: 66:cc:ff:e1:f3:91:7c:c9:fb:31:20:f8:4f:13:c7:b6:74:79: 17:d0:40:8f:e2:9a:1b:3e:1d:0c:d0:3f:cb:8d:5e:ec:18:2f: e7:fd:70:7e:e3:79:6e:b1:bc:0a:2d:ec:99:65:65:b5:a2:63: 3c:71:66:44:29:ab:b6:a7:2e:09:e5:d0:fe:25:4b:8d:39:48: 5a:da:5d:44:b7:5d:47:77:43:ad:c9:35:7f:9b:89:75:4b:9f: 90:3a:81:ff:d7:84:2d:07:25:e7:b6:03:b0:3d:1d:98:99:15: 83:5e:20:e4:93:cd:ac:d1:fe:48:5b:13:54:00:9d:f9:ad:e4: 12:c6:6f:b2:83:c0:e4:55:77:bd:fa:46:56:ac:0f:f3:3e:4a: 59:a5:69:80:cb:8d:9d:f1:7e:c3:5e:85:5d:99:7b:2b:d4:41: aa:e3:63:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOv96vhxqpU7xQfe8fANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGQ0NDVlY2ZlNmVjMWU2ODQ0NWI1NTU2M2MzNTNmNWVhZTBlZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkia9tfTTKfg0F2Zx8EnAqLlPE2CD QeMeIC4QF0aeWAZxCUKgvxVbKE4q7gp5ejyc4NKCcDPCeq3Q+0PzLhG0Sfys0mq+ 0WukLxHEnTEdl/YfIz/Xvf5jihyqfQgMKyfmH2TplgcN6WC88QyatilJQXe7eUln 4LYYon2a9PBr5rP3cSkXhJF72Qw+dMb5R1z2a3NF7JH/bITY9ID2J8gn984rBLG+ 9gHJUpnTtoBswjGnVT3P3j0uG3Q8kRagLiJWkNFvhZKXSUS/zEt0K3B09KUvDRok +1lpbi8TzwD000gwXRSDIJzDjW1id+e06nPXEaptdO9dLUaaa3mM+FnUpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjURez+bsHmhEW1VWPDU/Xq4O25MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvaU5SRjdQNXV3ZWFFUmJWVlk4TlQ5ZXJnN2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1dhBMA0G CSqGSIb3DQEBCwUAA4IBAQCVh9Oz9BI8y15kiHRYls9Lr8HX5+tEZZ16TrTATZEY wOWB31Yc+Qgbx6ApxmkRCq3PYaxbkdZPqQoN8hJFkmI5so4aTPd/BPD13T94dmz6 mUeTxtnzEU+IeKlmzP/h85F8yfsxIPhPE8e2dHkX0ECP4pobPh0M0D/LjV7sGC/n /XB+43lusbwKLeyZZWW1omM8cWZEKau2py4J5dD+JUuNOUha2l1Et11Hd0OtyTV/ m4l1S5+QOoH/14QtByXntgOwPR2YmRWDXiDkk82s0f5IWxNUAJ35reQSxm+yg8Dk VXe9+kZWrA/zPkpZpWmAy42d8X7DXoVdmXsr1EGq42MJ -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:51 2026 by rpki-client