This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/s3L0l4qF3K7jw8TMCiB-9AN71UI.roa File: s3L0l4qF3K7jw8TMCiB-9AN71UI.roa (raw, json) Hash identifier: 0RGzdmuY2tV2GXNZ55W5LJa/3HUtCfJOAjKYME+51vw= Subject key identifier: B3:72:F4:97:8A:85:DC:AE:E3:C3:C4:CC:0A:20:7E:F4:03:7B:D5:42 Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc Certificate serial: 019B7F834F610724FF5D654476028B8A030A Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/s3L0l4qF3K7jw8TMCiB-9AN71UI.roa Signing time: Fri 02 Jan 2026 16:21:10 +0000 ROA not before: Fri 02 Jan 2026 16:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12337 IP address blocks: 212.29.11.0/24 maxlen: 24 212.29.12.0/24 maxlen: 24 212.29.13.0/24 maxlen: 24 212.29.20.0/24 maxlen: 24 212.29.30.0/24 maxlen: 24 217.19.160.0/24 maxlen: 24 217.19.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:4f:61:07:24:ff:5d:65:44:76:02:8b:8a:03:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc Validity Not Before: Jan 2 16:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b372f4978a85dcaee3c3c4cc0a207ef4037bd542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:94:1a:f8:66:d7:47:e0:f3:c8:7d:de:3b:c8: 7a:7c:6c:24:6d:41:82:8c:a6:51:2e:64:a1:fd:48: 8c:43:d2:89:bc:c5:cd:3f:99:1c:f5:91:f3:4c:4a: ef:76:ab:28:e1:af:4a:69:fc:97:22:02:f0:2d:3a: 42:ba:a0:aa:3d:1a:40:31:0d:be:cc:cf:23:f5:b6: c8:15:f8:45:e5:9c:ce:d6:70:e5:04:a0:4a:12:f2: 6f:ca:b5:3e:52:72:cc:6d:8d:18:3f:a1:87:01:8d: e0:b5:39:bd:ff:aa:4a:63:4d:11:95:3d:5d:8c:60: 38:fc:57:3d:78:76:42:3e:78:dc:ba:9d:d8:2c:2f: fb:3c:4c:29:fd:bd:6d:dc:58:4a:67:76:29:47:c1: ef:26:46:10:3d:41:fc:c7:53:07:81:1f:7d:d4:92: 97:80:d6:12:65:2d:4c:b6:88:8f:dd:89:97:ee:a6: e8:d6:ee:e9:03:cd:6d:7b:34:7a:7e:c0:5f:ff:0b: b1:9a:fe:42:4a:5f:71:2b:e4:28:9b:6f:93:a5:97: b5:94:2c:58:6f:96:cf:02:73:74:cf:13:b9:01:9f: 96:d9:a1:7d:b2:7f:d4:e2:f6:60:aa:9c:a5:09:cf: c3:96:9f:01:a1:d1:a5:28:23:f3:50:6b:24:94:47: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:72:F4:97:8A:85:DC:AE:E3:C3:C4:CC:0A:20:7E:F4:03:7B:D5:42 X509v3 Authority Key Identifier: keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/s3L0l4qF3K7jw8TMCiB-9AN71UI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.29.11.0-212.29.13.255 212.29.20.0/24 212.29.30.0/24 217.19.160.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:27:be:ba:8d:ed:d6:ba:ba:22:0d:12:9e:2b:a9:b3:b1:8c: 6e:1f:e7:8e:29:29:7c:45:1f:27:cb:37:a7:dc:40:8d:39:37: 0e:92:98:e8:76:42:70:7a:e8:05:79:77:aa:fb:68:b9:86:37: 87:cc:17:0d:ba:9e:44:03:66:cc:8c:1d:d7:c6:de:c7:46:e9: e0:59:5e:38:4a:00:09:90:62:fd:d0:c5:22:d4:e0:64:7d:e2: 1c:4e:82:85:f4:1a:e8:52:1f:98:2c:cd:0e:50:e6:f2:93:28: 58:cc:75:b1:f6:09:9f:78:19:20:84:1b:84:f6:41:c1:82:d1: 60:81:eb:ed:6c:d6:0c:11:3c:eb:a4:46:b9:5d:c6:3d:71:12: 69:64:7f:25:c5:6e:d6:74:b8:10:98:8f:c4:d0:f5:30:9e:19: b8:4a:bb:c8:35:e5:5a:b3:f5:63:0f:a1:b6:4f:27:fb:f0:2c: 96:9f:fb:9e:b6:f7:d0:1e:4a:b4:5a:be:c6:c4:4b:0c:cd:ec: 21:16:c0:89:54:f0:f9:f0:29:97:89:6a:5a:77:af:d5:d5:01: ac:0e:4b:70:29:e4:61:aa:62:47:04:2f:fc:2f:f2:cf:ce:73: b9:5b:00:3f:b1:9e:82:5d:8a:a8:fb:68:86:61:d2:b2:ee:85: a6:9e:bf:02 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/g09hByT/XWVEdgKLigMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh ZDMzZGMwHhcNMjYwMTAyMTYyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzcyZjQ5NzhhODVkY2FlZTNjM2M0Y2MwYTIwN2VmNDAzN2JkNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJQa+GbXR+DzyH3eO8h6fGwkbUGC jKZRLmSh/UiMQ9KJvMXNP5kc9ZHzTErvdqso4a9KafyXIgLwLTpCuqCqPRpAMQ2+ zM8j9bbIFfhF5ZzO1nDlBKBKEvJvyrU+UnLMbY0YP6GHAY3gtTm9/6pKY00RlT1d jGA4/Fc9eHZCPnjcup3YLC/7PEwp/b1t3FhKZ3YpR8HvJkYQPUH8x1MHgR991JKX gNYSZS1MtoiP3YmX7qbo1u7pA81tezR6fsBf/wuxmv5CSl9xK+Qom2+TpZe1lCxY b5bPAnN0zxO5AZ+W2aF9sn/U4vZgqpylCc/Dlp8BodGlKCPzUGsklEeoOQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFLNy9JeKhdyu48PEzAogfvQDe9VCMB8GA1UdIwQY MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt NjE5MjgxMzgwYmMyLzEvczNMMGw0cUYzSzdqdzhUTUNpQi05QU43MVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEtNjE5MjgxMzgwYmMy LzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBADUHQsD BAHUHQwDBADUHRQDBADUHR4DBAHZE6AwDQYJKoZIhvcNAQELBQADggEBAHsnvrqN 7da6uiINEp4rqbOxjG4f544pKXxFHyfLN6fcQI05Nw6SmOh2QnB66AV5d6r7aLmG N4fMFw26nkQDZsyMHdfG3sdG6eBZXjhKAAmQYv3QxSLU4GR94hxOgoX0GuhSH5gs zQ5Q5vKTKFjMdbH2CZ94GSCEG4T2QcGC0WCB6+1s1gwRPOukRrldxj1xEmlkfyXF btZ0uBCYj8TQ9TCeGbhKu8g15Vqz9WMPobZPJ/vwLJaf+56299AeSrRavsbESwzN 7CEWwIlU8PnwKZeJalp3r9XVAawOS3Ap5GGqYkcEL/wv8s/Oc7lbAD+xnoJdiqj7 aIZh0rLuhaaevwI= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:07 2026 by rpki-client