This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/0i_tJFCQkW4BL4d6bXm4WAypJS8.roa File: 0i_tJFCQkW4BL4d6bXm4WAypJS8.roa (raw, json) Hash identifier: 61MZ18IZL5EgLoB9w4TH7mfQX+7U0VC5x9A0388yn8A= Subject key identifier: D2:2F:ED:24:50:90:91:6E:01:2F:87:7A:6D:79:B8:58:0C:A9:25:2F Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a Certificate serial: 019B7DCB440DFD136D5CEBA4F058397D1E08 Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/0i_tJFCQkW4BL4d6bXm4WAypJS8.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52194 IP address blocks: 212.22.81.0/24 maxlen: 24 212.22.87.0/24 maxlen: 24 212.22.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:44:0d:fd:13:6d:5c:eb:a4:f0:58:39:7d:1e:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d22fed245090916e012f877a6d79b8580ca9252f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1b:a3:21:4d:6e:b6:97:b8:b9:d2:41:ae:2a: 53:ec:bd:e5:b3:47:55:af:f9:cd:79:4a:22:25:00: 9b:41:3b:4e:c5:f1:c4:ff:5e:bd:3a:ab:26:a3:55: 6d:1e:72:ab:05:07:63:e1:97:f8:e7:5c:85:ea:91: a7:db:87:22:46:0d:3a:56:16:2d:72:66:07:5d:47: fe:30:06:4d:3f:ad:7b:f6:b0:1e:57:0d:e3:04:f7: db:6f:12:1d:b8:d9:2f:9b:dc:5b:66:dc:90:b1:ff: 27:a9:9e:9d:07:d9:8e:ee:0d:45:c9:85:43:4a:56: 4a:06:c8:5d:4d:b6:e7:d1:e5:23:eb:39:16:39:f3: fc:07:bc:c6:c9:18:6f:37:01:62:24:fc:f2:38:96: 22:2e:42:12:28:85:e4:76:a9:d5:bc:14:aa:b4:91: e5:5b:70:0a:e0:9f:74:c9:a9:c8:b9:41:cb:77:48: f1:22:a2:1c:86:e8:03:df:5a:60:12:4d:90:c6:a6: c0:a2:fb:b3:ee:be:9c:6d:92:47:27:e0:ef:bc:ec: de:c8:6d:68:50:68:25:b8:7d:c4:7d:f3:42:86:2c: 26:97:be:4d:30:fa:42:b3:1a:2a:fc:04:2c:72:5f: 60:f3:40:a6:d5:47:1f:6b:95:98:7a:3c:fb:e3:38: 9a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2F:ED:24:50:90:91:6E:01:2F:87:7A:6D:79:B8:58:0C:A9:25:2F X509v3 Authority Key Identifier: keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/0i_tJFCQkW4BL4d6bXm4WAypJS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.22.81.0/24 212.22.87.0/24 212.22.95.0/24 Signature Algorithm: sha256WithRSAEncryption 37:e0:83:e2:d3:fd:57:9e:6c:0c:4d:d1:0c:d1:ca:58:20:5f: cc:3a:57:81:80:25:3b:29:e3:3a:04:e5:2d:af:74:6c:bf:38: 0e:ed:85:bb:34:64:96:3d:9f:e6:1d:4e:73:91:01:cf:9d:c8: 84:d6:d3:23:8c:39:6b:d6:56:22:2b:bc:6e:90:7c:ab:24:40: 99:cf:41:4c:88:0c:c0:10:00:18:dd:3a:d8:d6:dd:17:67:46: f1:e2:06:e8:3f:be:b8:86:a0:14:1b:2f:df:d5:0b:27:2a:d9: f4:d3:3e:ff:42:84:33:9f:bb:40:f4:42:6f:f0:05:cd:32:de: 2f:c4:3c:4b:23:05:25:ef:ed:e6:69:de:70:2d:db:bf:d6:e6: f7:db:a5:04:ef:fc:b7:5b:55:2d:ba:4d:b3:8f:f7:b1:ba:25: cb:20:c2:06:11:2b:57:09:a1:c4:a2:9b:6c:e8:a6:42:1e:4e: 35:f3:7d:db:d6:01:d2:a9:78:46:b3:44:9b:d8:2b:0d:73:bf: 1a:c0:95:63:fc:d5:3f:e4:e7:66:0e:67:6a:94:6b:59:ed:ea: c6:80:07:3a:1c:01:9d:37:2f:80:51:ad:99:fc:09:fd:fd:e2: cf:45:bd:6d:3f:06:cb:3f:52:99:99:89:9d:86:62:f1:cf:ef: 24:ae:c1:a4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y0QN/RNtXOuk8Fg5fR4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM2NTM1NWI2NjU1NjRhMjEwYzM1OGM2OGEwMTE3Yjdm YmViOWEwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjJmZWQyNDUwOTA5MTZlMDEyZjg3N2E2ZDc5Yjg1ODBjYTkyNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxujIU1utpe4udJBripT7L3ls0dV r/nNeUoiJQCbQTtOxfHE/169Oqsmo1VtHnKrBQdj4Zf451yF6pGn24ciRg06VhYt cmYHXUf+MAZNP6179rAeVw3jBPfbbxIduNkvm9xbZtyQsf8nqZ6dB9mO7g1FyYVD SlZKBshdTbbn0eUj6zkWOfP8B7zGyRhvNwFiJPzyOJYiLkISKIXkdqnVvBSqtJHl W3AK4J90yanIuUHLd0jxIqIchugD31pgEk2QxqbAovuz7r6cbZJHJ+DvvOzeyG1o UGgluH3EffNChiwml75NMPpCsxoq/AQscl9g80Cm1Ucfa5WYejz74ziaDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNIv7SRQkJFuAS+Hem15uFgMqSUvMB8GA1UdIwQY MBaAFHRjZTVbZlVkohDDWMaKARe3++uaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGIt NmE0ZWNhZjhiM2IxLzEvMGlfdEpGQ1FrVzRCTDRkNmJYbTRXQXlwSlM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi9hZWEzNmQtYmFiZi00NDc0LWE3OGItNmE0ZWNhZjhiM2Ix LzEvZEdObE5WdG1WV1NpRU1OWXhvb0JGN2Y3NjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1BZRAwQA 1BZXAwQA1BZfMA0GCSqGSIb3DQEBCwUAA4IBAQA34IPi0/1XnmwMTdEM0cpYIF/M OleBgCU7KeM6BOUtr3RsvzgO7YW7NGSWPZ/mHU5zkQHPnciE1tMjjDlr1lYiK7xu kHyrJECZz0FMiAzAEAAY3TrY1t0XZ0bx4gboP764hqAUGy/f1QsnKtn00z7/QoQz n7tA9EJv8AXNMt4vxDxLIwUl7+3mad5wLdu/1ub326UE7/y3W1Utuk2zj/exuiXL IMIGEStXCaHEopts6KZCHk41833b1gHSqXhGs0Sb2CsNc78awJVj/NU/5OdmDmdq lGtZ7erGgAc6HAGdNy+AUa2Z/An9/eLPRb1tPwbLP1KZmYmdhmLxz+8krsGk -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:30 2026 by rpki-client