This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/19XE1MZt9El05XiFyoyirSQO8Og.roa File: 19XE1MZt9El05XiFyoyirSQO8Og.roa (raw, json) Hash identifier: K0GnyCrTYbCy5svSya9FNfUCSmfyBQup99xOtC538KA= Subject key identifier: D7:D5:C4:D4:C6:6D:F4:49:74:E5:78:85:CA:8C:A2:AD:24:0E:F0:E8 Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Certificate serial: 019B7F833CF0C6476734A37CA9381734611D Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/19XE1MZt9El05XiFyoyirSQO8Og.roa Signing time: Fri 02 Jan 2026 16:21:05 +0000 ROA not before: Fri 02 Jan 2026 16:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204019 IP address blocks: 213.199.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:3c:f0:c6:47:67:34:a3:7c:a9:38:17:34:61:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff Validity Not Before: Jan 2 16:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7d5c4d4c66df44974e57885ca8ca2ad240ef0e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8f:1a:55:52:09:a3:2b:05:c7:ca:bd:f8:ef: c1:17:a8:84:ec:94:84:5b:75:6f:2a:02:86:a8:1f: 68:0a:6c:9a:e6:07:96:17:a1:d3:63:81:fd:44:47: 08:a3:a0:27:ac:67:9d:0b:80:73:2c:b4:ef:26:b2: 86:2b:3b:a6:c7:c6:b4:b4:c9:fc:69:69:0b:91:ba: bc:ce:de:d3:75:4a:f1:fb:7c:a6:32:51:c5:f8:61: 64:ed:d6:a5:94:4b:b7:85:d9:ee:d9:dc:ba:7c:c5: fb:18:8e:c2:9a:a3:a3:93:02:c6:a0:91:24:9c:28: e2:0a:42:68:a6:1a:04:5b:07:c2:6b:82:05:67:69: b0:14:4f:d1:f1:f4:56:41:b4:cf:9f:1a:b2:bb:4f: 5e:20:bc:04:76:2c:30:4d:99:20:c0:be:cc:a8:a0: 53:05:0e:74:95:21:1c:e3:11:2d:74:9d:08:db:2d: 4b:b1:38:eb:76:f5:52:89:f6:41:70:a0:be:bd:2f: 81:bd:18:df:0a:67:0f:93:22:c7:a0:51:46:e5:ae: da:33:7f:f4:37:03:4f:a4:c7:5b:40:f9:fc:a7:bd: 83:9a:c1:9d:3d:25:65:21:f1:05:c6:b8:18:43:1a: c2:8d:fb:d2:b3:00:24:0d:be:77:95:3a:71:9e:0e: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D5:C4:D4:C6:6D:F4:49:74:E5:78:85:CA:8C:A2:AD:24:0E:F0:E8 X509v3 Authority Key Identifier: keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/19XE1MZt9El05XiFyoyirSQO8Og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.199.208.0/24 Signature Algorithm: sha256WithRSAEncryption 03:af:47:c9:0e:10:3f:31:78:dc:ce:61:24:0d:45:76:c7:bb: ce:ba:f2:fe:6b:07:ad:d3:52:9d:99:3a:f5:70:67:b9:47:b4: b0:c5:d7:97:c1:ac:bc:b7:02:b2:55:9c:3f:55:3e:d1:92:90: cf:14:95:f1:a3:8a:b5:52:c4:b9:9a:1f:bd:b4:67:df:ed:1e: 02:17:53:1e:9c:dd:3a:69:db:f4:d6:3a:08:70:a2:6e:04:20: 87:ec:2a:10:2f:67:52:11:f9:f1:6f:fd:03:03:f6:1e:ae:b4: 69:67:22:6a:52:5b:4d:f7:c2:7b:0d:07:42:40:7b:78:c2:5a: 44:ea:b7:f7:a3:2f:a0:8b:94:3d:09:30:10:82:11:7f:e7:f6: 2b:cf:0f:8f:c4:a9:92:66:f5:a7:bf:8e:a5:25:2d:25:13:74: 17:ff:0d:bd:0c:a7:71:08:44:c6:1c:83:5c:c4:3f:da:1c:95: 3d:63:8f:ee:bd:c0:97:38:9c:49:31:77:e4:4d:e1:65:97:70: 53:43:f7:39:75:68:d9:22:37:64:e7:2b:25:7b:1e:85:e1:70: b8:d4:86:96:ce:04:f2:a3:ba:d8:04:9e:b8:c8:42:34:b4:09: 0c:ab:8e:a7:df:35:92:9e:e5:80:f0:35:da:e4:1d:e5:3e:64: e2:62:77:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gzzwxkdnNKN8qTgXNGEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz NmFiZmYwHhcNMjYwMTAyMTYyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2Q1YzRkNGM2NmRmNDQ5NzRlNTc4ODVjYThjYTJhZDI0MGVmMGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA348aVVIJoysFx8q9+O/BF6iE7JSE W3VvKgKGqB9oCmya5geWF6HTY4H9REcIo6AnrGedC4BzLLTvJrKGKzumx8a0tMn8 aWkLkbq8zt7TdUrx+3ymMlHF+GFk7dallEu3hdnu2dy6fMX7GI7CmqOjkwLGoJEk nCjiCkJophoEWwfCa4IFZ2mwFE/R8fRWQbTPnxqyu09eILwEdiwwTZkgwL7MqKBT BQ50lSEc4xEtdJ0I2y1LsTjrdvVSifZBcKC+vS+BvRjfCmcPkyLHoFFG5a7aM3/0 NwNPpMdbQPn8p72DmsGdPSVlIfEFxrgYQxrCjfvSswAkDb53lTpxng51BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfVxNTGbfRJdOV4hcqMoq0kDvDoMB8GA1UdIwQY MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt YWZmOTJjMTZkOGUzLzEvMTlYRTFNWnQ5RWwwNVhpRnlveWlyU1FPOE9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cfQMA0G CSqGSIb3DQEBCwUAA4IBAQADr0fJDhA/MXjczmEkDUV2x7vOuvL+awet01KdmTr1 cGe5R7SwxdeXway8twKyVZw/VT7RkpDPFJXxo4q1UsS5mh+9tGff7R4CF1MenN06 adv01joIcKJuBCCH7CoQL2dSEfnxb/0DA/YerrRpZyJqUltN98J7DQdCQHt4wlpE 6rf3oy+gi5Q9CTAQghF/5/Yrzw+PxKmSZvWnv46lJS0lE3QX/w29DKdxCETGHINc xD/aHJU9Y4/uvcCXOJxJMXfkTeFll3BTQ/c5dWjZIjdk5yslex6F4XC41IaWzgTy o7rYBJ64yEI0tAkMq46n3zWSnuWA8DXa5B3lPmTiYnew -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:47 2026 by rpki-client