This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/RNooxoPY3lLAM-uAghLz8fxjGqA.roa File: RNooxoPY3lLAM-uAghLz8fxjGqA.roa (raw, json) Hash identifier: UpZ11CFlKFt4PXECoPaj1SbS3l0bpqo9jOt7fVabYlM= Subject key identifier: 44:DA:28:C6:83:D8:DE:52:C0:33:EB:80:82:12:F3:F1:FC:63:1A:A0 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807805BA9066F407D62AFFEA092312 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/RNooxoPY3lLAM-uAghLz8fxjGqA.roa Signing time: Fri 02 Jan 2026 02:19:12 +0000 ROA not before: Fri 02 Jan 2026 02:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8239 IP address blocks: 212.59.192.0/19 maxlen: 19 213.192.196.0/24 maxlen: 24 2001:ac0:c800::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:78:05:ba:90:66:f4:07:d6:2a:ff:ea:09:23:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44da28c683d8de52c033eb808212f3f1fc631aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:57:ec:60:02:3c:cc:e0:6c:ed:a7:97:9a:7f: 87:1a:e1:10:69:51:e3:5c:7a:b6:0c:3f:a1:3d:79: 93:f6:97:83:85:d9:fb:0f:ed:69:58:cf:1b:4a:57: b5:15:76:c2:65:aa:d1:9d:0c:a8:31:21:ab:d6:d8: 79:69:80:a5:03:8d:7f:c7:32:0c:2b:b7:a0:98:92: fd:df:97:56:82:a2:76:54:95:0c:b3:62:7a:cc:26: 90:c7:86:bc:62:2f:a8:1e:91:9b:12:67:a9:d9:7d: 26:69:84:d9:4a:c7:79:b9:06:a0:02:31:58:d5:04: 8b:60:95:08:53:fb:02:75:9d:48:e9:db:c9:53:9b: b9:83:5c:50:18:bb:03:39:0c:0a:55:19:82:06:b2: bb:6a:26:0c:c9:5f:11:28:78:14:b8:e9:f2:b9:a6: 4f:6e:9d:fc:02:b9:0f:29:f2:7a:6a:98:e3:05:fb: 93:57:e6:ed:3e:78:d5:c2:8b:6e:89:1f:5f:cf:60: 4a:d5:3f:1a:3e:c5:3d:e9:15:71:e4:ad:8a:b0:10: 7f:4b:1e:a5:18:ac:b6:fc:7f:32:61:d2:04:0c:56: 1a:cf:5e:7c:66:4f:ff:31:85:20:f9:c9:3c:56:18: 99:a1:4b:41:2b:c3:a6:2a:53:20:bb:7d:92:3a:0c: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DA:28:C6:83:D8:DE:52:C0:33:EB:80:82:12:F3:F1:FC:63:1A:A0 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/RNooxoPY3lLAM-uAghLz8fxjGqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.59.192.0/19 213.192.196.0/24 IPv6: 2001:ac0:c800::/44 Signature Algorithm: sha256WithRSAEncryption 90:4d:3a:0a:0b:d8:db:40:8a:9c:25:da:36:2f:b7:c3:3a:0b: 81:ee:3d:aa:e2:6b:9a:ef:98:e8:93:0b:6b:07:5c:d2:8c:3c: 80:4c:0d:3a:b8:f2:ef:d8:aa:87:35:69:13:1f:e0:8a:2f:93: 57:9d:c1:8e:f6:fe:59:91:6b:19:4b:99:bf:84:73:77:de:de: 9b:36:70:79:ee:f0:40:84:12:fd:83:a9:6d:94:55:2f:c5:82: 08:71:76:6a:32:02:5b:11:71:48:d5:a4:fd:b6:1f:f0:0e:42: 3c:38:21:1a:63:9d:1f:34:18:e4:f5:49:4d:b9:aa:97:c2:c9: 1d:c0:b0:7a:d3:cf:4e:5d:c8:bd:61:cf:d4:6f:f0:4c:4d:64: 59:f8:1e:64:d1:bd:af:7d:7d:da:6c:bd:db:35:c5:ed:ca:e3: 40:6e:9e:15:b0:2f:df:c4:8d:fc:e0:21:ac:c3:66:6f:61:3e: a7:fd:f2:08:5f:1f:46:b2:f7:04:43:1b:b5:79:45:c1:b8:e0: 46:32:03:33:4b:f2:56:c5:0f:d8:68:61:01:d6:35:03:d6:d6: 9f:ca:63:8e:84:63:04:4d:fc:48:5f:ba:fc:c2:8b:08:d1:56: 09:74:5f:46:9c:4d:23:46:ca:9c:e8:0b:e3:f4:cc:94:69:ea: 0e:b7:1b:d3 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt8gHgFupBm9AfWKv/qCSMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGRhMjhjNjgzZDhkZTUyYzAzM2ViODA4MjEyZjNmMWZjNjMxYWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FfsYAI8zOBs7aeXmn+HGuEQaVHj XHq2DD+hPXmT9peDhdn7D+1pWM8bSle1FXbCZarRnQyoMSGr1th5aYClA41/xzIM K7egmJL935dWgqJ2VJUMs2J6zCaQx4a8Yi+oHpGbEmep2X0maYTZSsd5uQagAjFY 1QSLYJUIU/sCdZ1I6dvJU5u5g1xQGLsDOQwKVRmCBrK7aiYMyV8RKHgUuOnyuaZP bp38ArkPKfJ6apjjBfuTV+btPnjVwotuiR9fz2BK1T8aPsU96RVx5K2KsBB/Sx6l GKy2/H8yYdIEDFYaz158Zk//MYUg+ck8VhiZoUtBK8OmKlMgu32SOgwniQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFETaKMaD2N5SwDPrgIIS8/H8YxqgMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvUk5vb3hvUFkzbExBTS11QWdoTHo4ZnhqR3FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQF1DvAAwQA 1cDEMA8EAgACMAkDBwQgAQrAyAAwDQYJKoZIhvcNAQELBQADggEBAJBNOgoL2NtA ipwl2jYvt8M6C4HuParia5rvmOiTC2sHXNKMPIBMDTq48u/Yqoc1aRMf4Iovk1ed wY72/lmRaxlLmb+Ec3fe3ps2cHnu8ECEEv2DqW2UVS/FgghxdmoyAlsRcUjVpP22 H/AOQjw4IRpjnR80GOT1SU25qpfCyR3AsHrTz05dyL1hz9Rv8ExNZFn4HmTRva99 fdpsvds1xe3K40BunhWwL9/EjfzgIazDZm9hPqf98ghfH0ay9wRDG7V5RcG44EYy AzNL8lbFD9hoYQHWNQPW1p/KY46EYwRN/EhfuvzCiwjRVgl0X0acTSNGypzoC+P0 zJRp6g63G9M= -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:29 2026 by rpki-client