This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/siijlzcaOK1Xr_LAzezi2WNerPI.roa File: siijlzcaOK1Xr_LAzezi2WNerPI.roa (raw, json) Hash identifier: +sY6FsyrrT9rOrx9vZur3Gtf26R0eLbR2NeS5U8Yo3U= Subject key identifier: B2:28:A3:97:37:1A:38:AD:57:AF:F2:C0:CD:EC:E2:D9:63:5E:AC:F2 Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F845D0D671B8F41E62A2BAD47424E50 Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/siijlzcaOK1Xr_LAzezi2WNerPI.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31085 IP address blocks: 212.252.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5d:0d:67:1b:8f:41:e6:2a:2b:ad:47:42:4e:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b228a397371a38ad57aff2c0cdece2d9635eacf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:4d:02:c4:59:58:98:dc:44:3c:2c:80:bb: 83:2c:e8:6c:e8:ad:f3:ab:c4:31:6e:4d:3f:6a:5c: 9b:56:40:74:7f:6b:51:69:8b:bd:d1:a3:0b:b8:87: c2:5b:c3:c4:a4:af:fe:cd:94:c2:d8:0d:09:5c:4a: 05:3a:27:78:01:cf:02:b0:a2:7b:ce:d4:94:92:54: 41:35:df:b3:23:4a:67:2c:9c:f5:4a:f1:4d:9f:07: 39:ef:36:47:9e:fc:a4:ca:16:a6:8c:24:fc:8b:68: 81:36:6c:9a:61:fd:a1:97:96:a3:88:14:6c:c1:63: a0:f4:22:33:27:c2:45:36:e2:02:b4:51:47:7a:9b: 7d:0a:5b:bf:14:85:6a:3a:43:22:1c:db:95:65:43: 74:47:ba:9c:a2:f8:64:a9:ec:e5:e3:c6:06:3c:b1: 7b:69:12:7b:dc:a6:1e:f1:d9:0a:41:28:64:e2:c9: e1:74:9e:ff:08:4c:c5:db:1b:d3:b7:1d:a4:b1:99: 98:65:6b:ca:48:6e:de:0a:77:b9:d8:6e:e6:e7:30: 47:25:16:93:35:fd:f3:9d:83:9c:a0:81:a0:20:1c: ea:24:3e:e4:f4:8d:04:f1:66:82:83:e7:0e:9d:43: 3e:ce:7b:92:39:bf:fb:20:71:c8:e4:f7:b9:b7:4a: fa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:A3:97:37:1A:38:AD:57:AF:F2:C0:CD:EC:E2:D9:63:5E:AC:F2 X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/siijlzcaOK1Xr_LAzezi2WNerPI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.252.192.0/24 Signature Algorithm: sha256WithRSAEncryption 07:64:34:5b:50:77:0b:ff:d4:b2:65:20:f5:46:e6:50:f6:46: 83:43:8c:4d:f3:2f:e4:3a:85:2f:05:fa:34:ee:0c:df:35:23: ec:c6:5f:fc:97:d6:34:6c:d8:d5:69:c1:10:91:b8:1a:b8:c8: 27:bf:fc:7b:8c:77:a3:20:5b:b6:85:a3:aa:a5:60:85:2c:a8: cf:a8:99:c9:1d:d6:12:d7:66:40:64:4f:cf:76:d6:ac:6a:78: 49:57:c1:e9:99:30:6f:ce:8a:20:1a:39:de:ec:bf:35:53:77: 1a:d3:56:70:6d:7f:06:f1:ef:af:a0:bc:dc:f1:0a:de:24:f1: a8:ec:cb:67:0f:78:80:ef:1d:56:c2:4c:67:40:81:2d:7f:33: 14:42:00:f0:57:f2:a6:15:71:35:ef:00:6a:c0:67:e0:e9:8b: bc:a5:fb:6b:79:2e:ce:31:ef:e0:f8:f4:ad:5f:6f:ed:fd:95: 84:a5:43:7e:41:6b:7c:4f:7c:7c:d9:bb:24:03:54:5c:cb:53: a4:2e:f6:06:27:65:6d:d1:92:bb:03:44:03:18:11:b5:b0:b2: 80:9f:f4:d1:9b:4d:13:58:fa:21:40:04:12:24:57:dc:4c:28: a2:e6:c6:3e:23:5c:db:58:ec:62:24:0c:a8:8c:39:51:36:0d: e1:ff:6e:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hF0NZxuPQeYqK61HQk5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjI4YTM5NzM3MWEzOGFkNTdhZmYyYzBjZGVjZTJkOTYzNWVhY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwANNAsRZWJjcRDwsgLuDLOhs6K3z q8Qxbk0/alybVkB0f2tRaYu90aMLuIfCW8PEpK/+zZTC2A0JXEoFOid4Ac8CsKJ7 ztSUklRBNd+zI0pnLJz1SvFNnwc57zZHnvykyhamjCT8i2iBNmyaYf2hl5ajiBRs wWOg9CIzJ8JFNuICtFFHept9Clu/FIVqOkMiHNuVZUN0R7qcovhkqezl48YGPLF7 aRJ73KYe8dkKQShk4snhdJ7/CEzF2xvTtx2ksZmYZWvKSG7eCne52G7m5zBHJRaT Nf3znYOcoIGgIBzqJD7k9I0E8WaCg+cOnUM+znuSOb/7IHHI5Pe5t0r62QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLIoo5c3GjitV6/ywM3s4tljXqzyMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvc2lpamx6Y2FPSzFYcl9MQXplemkyV05lclBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1PzAMA0G CSqGSIb3DQEBCwUAA4IBAQAHZDRbUHcL/9SyZSD1RuZQ9kaDQ4xN8y/kOoUvBfo0 7gzfNSPsxl/8l9Y0bNjVacEQkbgauMgnv/x7jHejIFu2haOqpWCFLKjPqJnJHdYS 12ZAZE/PdtasanhJV8HpmTBvzoogGjne7L81U3ca01ZwbX8G8e+voLzc8QreJPGo 7MtnD3iA7x1WwkxnQIEtfzMUQgDwV/KmFXE17wBqwGfg6Yu8pftreS7OMe/g+PSt X2/t/ZWEpUN+QWt8T3x82bskA1Rcy1OkLvYGJ2Vt0ZK7A0QDGBG1sLKAn/TRm00T WPohQAQSJFfcTCii5sY+I1zbWOxiJAyojDlRNg3h/26V -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:06 2026 by rpki-client