This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/p0AgDh6yKQcVidh5G8BlsJJI9Dc.roa File: p0AgDh6yKQcVidh5G8BlsJJI9Dc.roa (raw, json) Hash identifier: o4urzIe4Ny6+8AzMH8GzYP0G9nt64kHg01PYzA5GDfs= Subject key identifier: A7:40:20:0E:1E:B2:29:07:15:89:D8:79:1B:C0:65:B0:92:48:F4:37 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807B79148A79EC321E9BC4E0F2AC0C Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/p0AgDh6yKQcVidh5G8BlsJJI9Dc.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25261 IP address blocks: 213.192.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7b:79:14:8a:79:ec:32:1e:9b:c4:e0:f2:ac:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a740200e1eb229071589d8791bc065b09248f437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:1a:76:5a:f5:5f:df:1d:0e:51:54:77:48: 54:96:70:e1:98:e9:e5:ee:79:05:bc:35:65:fa:6f: b6:24:45:ed:56:be:7e:3e:2a:6d:8d:df:d2:ad:01: 52:ad:65:26:c4:cb:8c:6f:6b:00:cb:bf:7f:a4:53: 74:08:ef:28:0e:ba:4f:d3:8b:01:0a:ee:12:35:a7: a7:de:2f:2e:0d:33:95:49:9c:e6:97:0e:8f:89:5e: 0f:59:79:ca:67:bb:29:5f:fe:40:99:90:89:86:78: 36:79:f1:21:e7:70:fd:22:c0:1b:7c:fa:54:2a:8f: 2d:ce:91:d4:f3:cc:f1:96:96:d3:84:9a:9e:8a:25: 72:eb:ff:04:02:64:52:18:0c:b8:b1:35:42:6c:6b: c3:1c:89:fd:48:b5:5d:af:ba:f7:2c:bc:c6:d1:b4: 76:b0:64:fb:a2:ed:ab:48:9a:ce:7b:1a:34:fd:cc: 42:15:8f:d9:21:71:22:bd:21:f7:21:b4:7c:d2:97: 0a:d6:b9:33:a6:04:95:79:1f:93:d4:27:81:25:0b: 51:75:5f:78:2a:30:f7:b0:49:1d:81:1e:63:17:d4: 58:e1:2a:34:5b:74:94:d2:f9:11:ab:6f:8c:19:3f: 2c:0a:d6:96:59:90:7b:df:e0:d1:76:2b:55:c3:58: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:20:0E:1E:B2:29:07:15:89:D8:79:1B:C0:65:B0:92:48:F4:37 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/p0AgDh6yKQcVidh5G8BlsJJI9Dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.192.232.0/24 Signature Algorithm: sha256WithRSAEncryption dd:4c:12:c1:56:30:dc:15:01:de:f3:1e:79:38:d3:0e:6f:49: c6:5a:ca:51:20:1a:e7:6a:f9:29:f2:74:5b:1a:8c:fe:cc:0c: 25:34:46:d0:4b:27:f7:d1:c0:93:b4:34:c5:df:54:49:d8:98: 5e:17:7b:e9:47:d4:cc:1c:c8:08:b2:c4:37:a4:58:24:5c:9f: b2:74:2a:e4:8f:d0:3b:b8:9b:51:28:c1:52:c8:e0:9e:95:23: 5b:87:6b:20:8d:9c:42:e4:96:f8:05:f4:63:5e:66:f9:4e:12: de:a2:88:97:ba:26:36:63:c7:ee:89:89:96:46:c0:93:a3:0f: 9b:d4:33:c9:ca:5d:ce:82:12:ea:a7:e5:1d:ae:2f:82:51:3d: 87:db:78:e8:4d:1d:3a:e3:70:97:83:6f:41:c6:0c:4d:43:8e: 4c:65:72:48:72:00:5a:88:88:d4:2f:01:16:da:bf:ae:4a:24: 94:8b:90:f6:7f:15:e8:36:1e:49:ba:eb:f6:cf:05:fd:3b:50: 53:35:7e:ce:ad:56:e7:bc:8f:1a:e7:fa:51:05:c0:92:5b:ae: 25:19:87:0d:e9:be:15:53:b7:2d:fc:c9:e4:40:d2:88:b6:32: c9:8a:81:65:6f:d1:4f:a9:b3:dd:dc:13:ff:cb:52:43:63:ca: 7a:19:b8:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gHt5FIp57DIem8Tg8qwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQwMjAwZTFlYjIyOTA3MTU4OWQ4NzkxYmMwNjViMDkyNDhmNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmUadlr1X98dDlFUd0hUlnDhmOnl 7nkFvDVl+m+2JEXtVr5+Piptjd/SrQFSrWUmxMuMb2sAy79/pFN0CO8oDrpP04sB Cu4SNaen3i8uDTOVSZzmlw6PiV4PWXnKZ7spX/5AmZCJhng2efEh53D9IsAbfPpU Ko8tzpHU88zxlpbThJqeiiVy6/8EAmRSGAy4sTVCbGvDHIn9SLVdr7r3LLzG0bR2 sGT7ou2rSJrOexo0/cxCFY/ZIXEivSH3IbR80pcK1rkzpgSVeR+T1CeBJQtRdV94 KjD3sEkdgR5jF9RY4So0W3SU0vkRq2+MGT8sCtaWWZB73+DRditVw1hikQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKdAIA4esikHFYnYeRvAZbCSSPQ3MB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvcDBBZ0RoNnlLUWNWaWRoNUc4QmxzSkpJOURjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1cDoMA0G CSqGSIb3DQEBCwUAA4IBAQDdTBLBVjDcFQHe8x55ONMOb0nGWspRIBrnavkp8nRb Goz+zAwlNEbQSyf30cCTtDTF31RJ2JheF3vpR9TMHMgIssQ3pFgkXJ+ydCrkj9A7 uJtRKMFSyOCelSNbh2sgjZxC5Jb4BfRjXmb5ThLeooiXuiY2Y8fuiYmWRsCTow+b 1DPJyl3OghLqp+Udri+CUT2H23joTR0643CXg29BxgxNQ45MZXJIcgBaiIjULwEW 2r+uSiSUi5D2fxXoNh5Juuv2zwX9O1BTNX7OrVbnvI8a5/pRBcCSW64lGYcN6b4V U7ct/MnkQNKItjLJioFlb9FPqbPd3BP/y1JDY8p6Gbj/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:30 2026 by rpki-client