This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/sums97Uvm7TdFRWjmVcnOwUzGJ0.roa File: sums97Uvm7TdFRWjmVcnOwUzGJ0.roa (raw, json) Hash identifier: RYDFTe1U6hfRaniHkflaE3dJG498svgy21eDqy+x7AM= Subject key identifier: B2:E9:AC:F7:B5:2F:9B:B4:DD:15:15:A3:99:57:27:3B:05:33:18:9D Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C1183D8E35ABBEA7C4C37A31F17AC51 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/sums97Uvm7TdFRWjmVcnOwUzGJ0.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208405 IP address blocks: 213.139.212.0/23 maxlen: 23 213.139.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:83:d8:e3:5a:bb:ea:7c:4c:37:a3:1f:17:ac:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b2e9acf7b52f9bb4dd1515a39957273b0533189d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:67:09:53:6e:8b:fd:10:56:95:09:1d:6d: f4:dd:f9:3a:ba:98:27:1b:7b:d4:29:a6:48:d7:3e: 95:b6:7d:c3:3c:38:42:c2:4c:fd:cc:42:59:66:6a: 9b:58:88:4e:a0:c1:78:b0:b3:0c:0c:8c:77:15:52: 98:ca:be:a2:60:99:6c:4b:00:26:34:a7:f6:dd:cf: 4c:31:7c:78:ad:89:b4:1d:ff:3f:85:85:d3:4e:97: 02:39:20:2f:9e:a8:7c:1f:82:a6:5d:bc:16:41:3e: 53:7d:aa:6f:8b:68:11:3f:94:fb:93:55:9b:c8:33: ee:a5:5b:6b:8f:52:88:36:ec:64:44:e7:84:e3:05: 6a:09:00:8d:71:3c:b3:37:14:f6:13:df:f6:5c:80: 05:d1:f1:3c:10:6a:69:ca:96:b4:d5:f1:23:09:06: 1d:c7:48:49:0f:78:fe:0c:f3:1f:e0:53:25:65:e5: 52:9f:7f:27:2c:bc:af:5c:ef:c7:37:c4:cd:e9:7f: b1:2f:be:ff:90:50:92:4f:4a:f7:51:b0:3a:23:c3: ca:e2:fb:43:be:41:f3:fd:42:42:f2:b8:f8:cf:ab: ce:21:97:ea:13:70:b7:41:e2:8e:2a:48:d7:ac:3a: 32:12:8b:db:46:e4:19:b5:49:66:cf:7d:b2:28:54: 18:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:AC:F7:B5:2F:9B:B4:DD:15:15:A3:99:57:27:3B:05:33:18:9D X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/sums97Uvm7TdFRWjmVcnOwUzGJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.139.212.0/22 Signature Algorithm: sha256WithRSAEncryption 57:e3:e2:33:f7:7c:54:be:54:06:8d:5e:0b:29:ab:60:ab:74: c9:77:a6:b2:92:8e:1a:0b:0c:f1:fb:22:13:1e:12:db:33:97: 5d:27:dc:01:7e:fc:87:eb:56:08:dc:70:61:61:cc:b2:93:4b: 1b:b7:dd:a6:2f:93:00:a0:10:3b:2d:70:88:21:06:f7:23:3b: 25:8c:cc:a9:1e:4a:ce:25:8d:25:d3:7a:29:a4:a2:e6:f9:46: 8c:10:d6:e9:31:ac:c3:5a:a1:e2:a4:cd:b4:94:d4:e2:4e:98: ef:66:15:b6:21:78:c6:3e:9b:c3:dd:e4:17:dc:1b:ca:7e:c8: 5e:6d:e7:9c:25:c4:9f:0a:49:e2:f1:9c:0a:58:cc:a8:5f:f0: 90:e9:cc:9c:e4:ff:5d:b9:86:29:1b:fd:d0:71:df:ad:38:3a: 27:87:67:4f:28:43:ff:7f:43:ee:2c:61:03:3e:5a:89:69:30: e4:38:a6:4c:83:6f:79:99:d5:c0:99:fe:81:94:01:58:24:40: df:b6:8e:8c:e9:00:2e:46:91:d3:15:82:7e:61:8b:17:49:3c: 12:78:7c:b7:8d:13:1c:e1:0c:3c:59:e4:a0:0f:c9:7a:b0:cd: 43:2b:6e:4f:2e:66:66:6f:3a:73:c8:ff:e2:5a:df:9b:db:40: 40:cb:44:8f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYPY41q76nxMN6MfF6xRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMmU5YWNmN2I1MmY5YmI0ZGQxNTE1YTM5OTU3MjczYjA1MzMxODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8ZnCVNui/0QVpUJHW303fk6upgn G3vUKaZI1z6Vtn3DPDhCwkz9zEJZZmqbWIhOoMF4sLMMDIx3FVKYyr6iYJlsSwAm NKf23c9MMXx4rYm0Hf8/hYXTTpcCOSAvnqh8H4KmXbwWQT5Tfapvi2gRP5T7k1Wb yDPupVtrj1KINuxkROeE4wVqCQCNcTyzNxT2E9/2XIAF0fE8EGppypa01fEjCQYd x0hJD3j+DPMf4FMlZeVSn38nLLyvXO/HN8TN6X+xL77/kFCST0r3UbA6I8PK4vtD vkHz/UJC8rj4z6vOIZfqE3C3QeKOKkjXrDoyEovbRuQZtUlmz32yKFQYVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLLprPe1L5u03RUVo5lXJzsFMxidMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvc3Vtczk3VXZtN1RkRlJXam1WY25Pd1V6R0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1YvUMA0G CSqGSIb3DQEBCwUAA4IBAQBX4+Iz93xUvlQGjV4LKatgq3TJd6ayko4aCwzx+yIT HhLbM5ddJ9wBfvyH61YI3HBhYcyyk0sbt92mL5MAoBA7LXCIIQb3IzsljMypHkrO JY0l03oppKLm+UaMENbpMazDWqHipM20lNTiTpjvZhW2IXjGPpvD3eQX3BvKfshe beecJcSfCkni8ZwKWMyoX/CQ6cyc5P9duYYpG/3Qcd+tODonh2dPKEP/f0PuLGED PlqJaTDkOKZMg295mdXAmf6BlAFYJEDfto6M6QAuRpHTFYJ+YYsXSTwSeHy3jRMc 4Qw8WeSgD8l6sM1DK25PLmZmbzpzyP/iWt+b20BAy0SP -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:31 2026 by rpki-client