This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/1N-RfUNK7TJOADuEd5LwU0pc9dA.roa File: 1N-RfUNK7TJOADuEd5LwU0pc9dA.roa (raw, json) Hash identifier: giwWtGGz0qJdTRyYsC2mxOvkudQ3rDLs13BtvMl+IcU= Subject key identifier: D4:DF:91:7D:43:4A:ED:32:4E:00:3B:84:77:92:F0:53:4A:5C:F5:D0 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C8078FB5788595810BD8D9ADC4A55A3 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/1N-RfUNK7TJOADuEd5LwU0pc9dA.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9094 IP address blocks: 213.9.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:78:fb:57:88:59:58:10:bd:8d:9a:dc:4a:55:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4df917d434aed324e003b847792f0534a5cf5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:73:85:b3:fa:e3:1a:a7:f0:c0:ce:dd:52: 06:fa:b4:b0:39:05:8a:77:28:8e:0a:a0:fc:94:a4: 0d:dd:2d:2a:35:27:5a:f1:4a:40:dd:f2:f8:15:97: de:72:86:54:71:d5:0b:32:2d:d2:07:85:bf:05:ef: 6a:cb:d0:4f:4a:7e:64:af:74:62:7b:db:f9:3e:b2: f5:8b:67:99:69:22:c0:d2:33:73:21:d4:8f:1d:d5: 58:7e:26:1d:d0:bf:a2:e6:01:51:f9:50:06:6e:ce: e5:ae:7f:25:c3:16:0a:f5:4a:db:b1:8e:37:5a:68: 14:0f:11:28:64:c5:ac:30:0f:62:67:d9:8b:76:a1: a1:eb:e6:e7:63:5e:de:08:70:4b:33:c9:0c:39:eb: 22:34:71:82:6a:24:fb:36:a9:85:71:2c:2b:db:37: 1d:11:66:05:6b:db:a7:02:9d:df:7a:6b:d0:bb:54: f1:05:6e:47:7a:4a:fa:0a:88:a6:c8:ba:53:23:8a: 79:6a:32:0a:c0:7f:92:24:cc:7e:e9:e8:4b:b2:7b: b1:96:f9:9a:b5:08:fc:cf:fe:ed:23:e9:98:c8:e4: 81:e0:8a:1b:c7:be:ea:fa:77:79:a4:0b:f6:25:fc: 27:4f:09:74:be:e8:92:65:a9:f9:27:5e:e0:ec:04: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:91:7D:43:4A:ED:32:4E:00:3B:84:77:92:F0:53:4A:5C:F5:D0 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/1N-RfUNK7TJOADuEd5LwU0pc9dA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.9.243.0/24 Signature Algorithm: sha256WithRSAEncryption 44:de:71:19:50:af:2d:50:8e:8d:61:48:07:cc:6c:6f:9e:0a: 8e:32:cc:e0:4d:eb:b0:ff:d1:09:52:16:a1:33:7e:63:55:3f: a1:a8:2a:a5:6e:02:51:f4:95:96:a9:50:4a:17:19:d5:17:a3: a0:f1:27:c1:41:1d:4d:1c:4d:c1:8c:0b:46:34:f7:5a:17:c6: 77:44:04:2a:b4:19:6d:81:33:ed:a1:08:c6:04:d6:fe:07:f8: a4:8c:c6:df:cd:ac:28:f1:fd:6a:e8:a4:82:03:7d:ec:5f:17: aa:07:6e:a8:41:8e:f5:18:19:14:60:fb:eb:06:07:65:95:88: a7:63:f2:c7:4f:b1:ef:5b:c6:95:01:19:fe:85:cc:de:54:02: d1:cd:60:59:d2:79:df:4b:19:93:b7:63:48:fc:37:b4:5b:49: e4:4e:61:3a:73:cd:ba:1a:d9:ea:21:e0:13:31:58:57:f2:b6: 26:75:ae:7e:e8:0d:ad:8b:9b:38:98:13:e3:70:ad:d1:cc:f2: 1d:8b:97:69:5b:f5:d1:82:a9:bf:61:90:dc:d0:87:d6:c0:2d: 12:40:81:a2:00:aa:1e:c1:16:05:01:90:19:f5:5e:99:a1:e9: 2a:89:a5:c8:ec:ed:b1:a4:84:2c:16:22:53:81:0e:b0:6a:04: 23:26:df:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHj7V4hZWBC9jZrcSlWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGRmOTE3ZDQzNGFlZDMyNGUwMDNiODQ3NzkyZjA1MzRhNWNmNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZpzhbP64xqn8MDO3VIG+rSwOQWK dyiOCqD8lKQN3S0qNSda8UpA3fL4FZfecoZUcdULMi3SB4W/Be9qy9BPSn5kr3Ri e9v5PrL1i2eZaSLA0jNzIdSPHdVYfiYd0L+i5gFR+VAGbs7lrn8lwxYK9UrbsY43 WmgUDxEoZMWsMA9iZ9mLdqGh6+bnY17eCHBLM8kMOesiNHGCaiT7NqmFcSwr2zcd EWYFa9unAp3femvQu1TxBW5Hekr6CoimyLpTI4p5ajIKwH+SJMx+6ehLsnuxlvma tQj8z/7tI+mYyOSB4Iobx77q+nd5pAv2JfwnTwl0vuiSZan5J17g7ATKHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTfkX1DSu0yTgA7hHeS8FNKXPXQMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvMU4tUmZVTks3VEpPQUR1RWQ1THdVMHBjOWRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1QnzMA0G CSqGSIb3DQEBCwUAA4IBAQBE3nEZUK8tUI6NYUgHzGxvngqOMszgTeuw/9EJUhah M35jVT+hqCqlbgJR9JWWqVBKFxnVF6Og8SfBQR1NHE3BjAtGNPdaF8Z3RAQqtBlt gTPtoQjGBNb+B/ikjMbfzawo8f1q6KSCA33sXxeqB26oQY71GBkUYPvrBgdllYin Y/LHT7HvW8aVARn+hczeVALRzWBZ0nnfSxmTt2NI/De0W0nkTmE6c826GtnqIeAT MVhX8rYmda5+6A2ti5s4mBPjcK3RzPIdi5dpW/XRgqm/YZDc0IfWwC0SQIGiAKoe wRYFAZAZ9V6ZoekqiaXI7O2xpIQsFiJTgQ6wagQjJt9D -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:53 2026 by rpki-client