This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vHVpV7lX2GKKxj7QiR3dsLlUIu4.roa File: vHVpV7lX2GKKxj7QiR3dsLlUIu4.roa (raw, json) Hash identifier: aIKV0zhvlQVv5nF9GziRTFyvf1c8nY8k0u67RUA9KWc= Subject key identifier: BC:75:69:57:B9:57:D8:62:8A:C6:3E:D0:89:1D:DD:B0:B9:54:22:EE Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5ADA3BEB8318FEF5E69DF9D161DECD Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vHVpV7lX2GKKxj7QiR3dsLlUIu4.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214677 IP address blocks: 213.218.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:da:3b:eb:83:18:fe:f5:e6:9d:f9:d1:61:de:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc756957b957d8628ac63ed0891dddb0b95422ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:5d:b4:97:6f:af:05:74:ca:8a:ba:30:57: 16:75:ac:86:3c:3b:b4:24:d6:5c:18:1e:d2:5a:61: 81:e5:79:1d:8f:5b:3d:f8:99:a3:9b:3e:24:98:58: a3:3e:7f:9c:36:29:98:c2:de:c4:04:d4:99:f9:78: e5:32:16:4d:2d:7c:0c:1d:e6:e1:a5:40:5a:79:b4: 8a:04:6f:4c:d0:b0:88:cc:9f:0a:06:d0:c6:a9:7f: 16:b8:bb:dc:51:14:95:13:9e:bb:d2:4b:1b:22:bf: 26:6c:c2:80:38:37:79:00:1e:6e:96:5b:2c:fc:aa: 6c:2a:c4:69:b6:73:23:85:0e:62:7e:55:18:4a:e6: 81:cc:d6:06:0f:37:eb:33:c2:ac:6e:7e:ec:b1:ad: fc:05:0a:d1:26:df:bc:a3:1d:c9:a9:80:f8:7c:b2: 73:e7:52:c1:f6:47:a6:a8:b3:09:11:e7:f1:f8:59: 04:97:1b:9a:b0:12:1e:d2:d6:a7:12:e7:8e:e5:f1: 99:17:b6:c4:10:e1:64:85:ae:f4:ee:cc:ee:4b:5c: 1e:6b:2e:70:92:09:98:40:f9:d5:bb:36:be:0a:58: 38:0d:22:33:ca:f7:a7:6a:55:92:80:37:6c:67:fb: 5b:55:65:bf:7d:20:2d:7a:c7:12:c9:32:d1:b6:86: 4a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:75:69:57:B9:57:D8:62:8A:C6:3E:D0:89:1D:DD:B0:B9:54:22:EE X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vHVpV7lX2GKKxj7QiR3dsLlUIu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.218.210.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:01:26:4a:e4:4c:51:3e:39:dd:1a:81:c3:e8:0c:5a:b7:35: d9:24:14:d9:f8:29:2d:19:fc:8e:bb:92:38:a5:42:1d:2a:34: 79:84:f6:34:7a:22:1a:6d:66:87:95:36:fc:cf:65:4b:6f:de: 63:60:51:28:d9:73:8e:38:74:d2:f3:19:5e:20:7f:fc:ca:56: 63:f2:7f:aa:6c:82:46:66:5d:0c:43:33:61:33:a0:70:3a:60: 11:6d:d2:d8:01:c8:63:c9:74:cb:c0:08:4d:23:59:56:81:b1: 25:cf:71:fd:63:3b:4d:41:0b:35:60:73:be:08:85:c7:89:0c: 05:2c:7f:39:73:99:e5:98:0b:39:af:22:d4:8c:4d:b0:45:97: 41:c2:07:75:67:a5:ac:f4:75:71:03:2d:7a:44:97:a0:9f:29: af:4b:2e:bc:14:f0:83:d2:c1:dc:12:50:bf:58:a5:87:42:d2: 91:a7:de:5d:b3:fb:ed:c4:51:80:5d:86:29:6d:5e:d2:50:fe: 8d:a4:71:b2:ec:70:0f:b5:ec:40:ec:20:6a:fa:28:02:dd:37: 41:22:c5:40:e0:39:31:a9:88:c1:f6:f0:3b:49:ab:79:80:f9: d4:72:6a:05:6a:16:7b:b8:e3:3b:6f:32:5a:be:b8:47:40:98: e0:f5:79:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wto764MY/vXmnfnRYd7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzc1Njk1N2I5NTdkODYyOGFjNjNlZDA4OTFkZGRiMGI5NTQyMmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4FdtJdvrwV0yoq6MFcWdayGPDu0 JNZcGB7SWmGB5Xkdj1s9+Jmjmz4kmFijPn+cNimYwt7EBNSZ+XjlMhZNLXwMHebh pUBaebSKBG9M0LCIzJ8KBtDGqX8WuLvcURSVE5670ksbIr8mbMKAODd5AB5ullss /KpsKsRptnMjhQ5iflUYSuaBzNYGDzfrM8Ksbn7ssa38BQrRJt+8ox3JqYD4fLJz 51LB9kemqLMJEefx+FkElxuasBIe0tanEueO5fGZF7bEEOFkha707szuS1weay5w kgmYQPnVuza+Clg4DSIzyvenalWSgDdsZ/tbVWW/fSAtescSyTLRtoZKGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLx1aVe5V9hiisY+0Ikd3bC5VCLuMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvdkhWcFY3bFgyR0tLeGo3UWlSM2RzTGxVSXU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drSMA0G CSqGSIb3DQEBCwUAA4IBAQBqASZK5ExRPjndGoHD6AxatzXZJBTZ+CktGfyOu5I4 pUIdKjR5hPY0eiIabWaHlTb8z2VLb95jYFEo2XOOOHTS8xleIH/8ylZj8n+qbIJG Zl0MQzNhM6BwOmARbdLYAchjyXTLwAhNI1lWgbElz3H9YztNQQs1YHO+CIXHiQwF LH85c5nlmAs5ryLUjE2wRZdBwgd1Z6Ws9HVxAy16RJegnymvSy68FPCD0sHcElC/ WKWHQtKRp95ds/vtxFGAXYYpbV7SUP6NpHGy7HAPtexA7CBq+igC3TdBIsVA4Dkx qYjB9vA7Sat5gPnUcmoFahZ7uOM7bzJavrhHQJjg9Xna -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:05 2026 by rpki-client