This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/PrsnZ-IEBEB2ESdFkpvSZlXdbj4.roa File: PrsnZ-IEBEB2ESdFkpvSZlXdbj4.roa (raw, json) Hash identifier: 00EaG3/DL87W1Q9d8sgB5UffnCBSpq+IkvKtAw1IPxA= Subject key identifier: 3E:BB:27:67:E2:04:04:40:76:11:27:45:92:9B:D2:66:55:DD:6E:3E Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807FB60C088ED06BE410FB0B9A482D Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/PrsnZ-IEBEB2ESdFkpvSZlXdbj4.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202097 IP address blocks: 213.192.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7f:b6:0c:08:8e:d0:6b:e4:10:fb:0b:9a:48:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ebb2767e204044076112745929bd26655dd6e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3c:f6:47:06:3d:c4:1c:b1:b8:0a:1a:ca:df: 48:42:fa:c8:fb:1e:8d:3c:70:57:59:40:de:5a:7e: d8:d4:cd:26:fe:42:d2:cf:3c:c1:79:e8:35:38:49: de:ee:70:07:73:c6:0e:40:53:e3:46:77:1a:83:0b: 48:8d:b8:7c:2e:d2:19:1c:e6:cb:75:71:e5:63:01: 44:a7:4f:e6:07:82:77:0a:cf:01:ef:d9:30:59:29: e9:fc:40:20:5a:ad:87:bc:01:82:ab:27:59:38:49: aa:b4:d5:53:1f:39:07:69:5d:40:7c:e4:f8:8f:da: 74:d3:e2:26:4c:54:68:b6:40:57:8b:2c:a4:26:4f: 56:c0:bc:0e:27:b8:cd:97:cd:ba:2e:6d:b5:91:60: c7:bf:b3:c6:77:b8:9a:6a:ef:b3:7e:fa:c8:86:3f: b5:4b:dc:9e:e4:aa:69:f0:be:d7:6c:58:04:ef:d7: 86:fc:85:14:74:8e:d0:83:51:f9:66:ee:c1:36:07: a9:b2:9b:74:46:13:d9:83:f3:ef:8c:f6:28:69:dd: 7f:00:d3:1a:84:d8:73:74:cd:a9:d3:45:f5:b6:dc: 09:2c:d5:ee:19:0d:45:cc:24:12:48:65:34:95:73: 87:05:25:b6:d8:47:d0:05:0f:d9:37:aa:8d:05:cf: 91:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:BB:27:67:E2:04:04:40:76:11:27:45:92:9B:D2:66:55:DD:6E:3E X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/PrsnZ-IEBEB2ESdFkpvSZlXdbj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.192.243.0/24 Signature Algorithm: sha256WithRSAEncryption 17:23:b7:f1:c5:a8:99:91:5c:f5:37:34:c9:bf:1e:60:a3:67: f0:09:0f:5d:0b:cf:c9:72:6b:c8:f3:74:f7:1d:b3:11:1f:bd: 03:4e:6f:87:19:6a:e5:3a:7d:bf:7c:ba:8c:47:fb:d1:0c:75: 44:cc:91:fd:eb:c4:5a:bd:13:8c:03:4a:05:3e:96:a8:a4:d4: cb:b7:5b:4a:cd:66:06:83:f7:3a:dd:f7:3e:09:d2:56:ed:9f: d9:05:1b:69:4a:15:d4:0e:7f:e3:58:04:de:01:ec:2b:c5:01: d9:26:b5:8e:89:33:61:bb:db:2e:aa:6a:5a:45:2c:a9:fb:eb: 9b:35:ef:15:45:3a:3d:17:fa:5c:05:e4:22:2c:be:b4:c6:fa: 36:54:00:63:4a:34:3f:a4:c5:95:90:0f:cc:6c:b9:d7:fa:d8: 86:a2:30:96:e9:03:9c:8c:92:e0:5b:e5:13:c7:55:3e:cf:58: f7:e4:8c:92:fd:11:73:7c:f9:68:fc:92:51:94:78:ce:9d:4d: 8c:a2:b3:e4:20:ee:f2:60:31:a5:df:0e:0a:53:36:c9:f0:5c: 43:1b:d0:e1:35:ac:d2:00:d0:92:74:75:aa:cc:e7:65:4d:c2: f0:95:0e:06:e7:fa:6e:f3:a9:33:11:b4:d2:90:2d:11:d4:32: 84:a7:5c:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gH+2DAiO0GvkEPsLmkgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWJiMjc2N2UyMDQwNDQwNzYxMTI3NDU5MjliZDI2NjU1ZGQ2ZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDz2RwY9xByxuAoayt9IQvrI+x6N PHBXWUDeWn7Y1M0m/kLSzzzBeeg1OEne7nAHc8YOQFPjRncagwtIjbh8LtIZHObL dXHlYwFEp0/mB4J3Cs8B79kwWSnp/EAgWq2HvAGCqydZOEmqtNVTHzkHaV1AfOT4 j9p00+ImTFRotkBXiyykJk9WwLwOJ7jNl826Lm21kWDHv7PGd7iaau+zfvrIhj+1 S9ye5Kpp8L7XbFgE79eG/IUUdI7Qg1H5Zu7BNgepspt0RhPZg/PvjPYoad1/ANMa hNhzdM2p00X1ttwJLNXuGQ1FzCQSSGU0lXOHBSW22EfQBQ/ZN6qNBc+R0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD67J2fiBARAdhEnRZKb0mZV3W4+MB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvUHJzblotSUVCRUIyRVNkRmtwdlNabFhkYmo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cDzMA0G CSqGSIb3DQEBCwUAA4IBAQAXI7fxxaiZkVz1NzTJvx5go2fwCQ9dC8/JcmvI83T3 HbMRH70DTm+HGWrlOn2/fLqMR/vRDHVEzJH968RavROMA0oFPpaopNTLt1tKzWYG g/c63fc+CdJW7Z/ZBRtpShXUDn/jWATeAewrxQHZJrWOiTNhu9suqmpaRSyp++ub Ne8VRTo9F/pcBeQiLL60xvo2VABjSjQ/pMWVkA/MbLnX+tiGojCW6QOcjJLgW+UT x1U+z1j35IyS/RFzfPlo/JJRlHjOnU2MorPkIO7yYDGl3w4KUzbJ8FxDG9DhNazS ANCSdHWqzOdlTcLwlQ4G5/pu86kzEbTSkC0R1DKEp1xA -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:44 2026 by rpki-client